<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="25981"><package pkgid="a79991a62f223c57d67b415da1fa88e4379dd9b3856bc2bec5f12263a37703b5" name="Botan" arch="src">
    <version epoch="0" ver="1.10.5" rel="2.4.1"/>

<changelog author="pth@suse.de" date="1207569600">- No macros for package name.</changelog>
<changelog author="pth@suse.de" date="1260532800">- Update to Botan-1.8.8:
  - Alter Skein-512 to match the tweaked 1.2 specification
  - Fix use of inline asm for access to x86 bswap function
  - Allow building the library without AES enabled
  - For the complete changes since 1.6.4 see log.txt in
  /usr/share/doc/packages/Botan.</changelog>
<changelog author="pth@suse.de" date="1260964800">- Remove patches that aren't needed anymore.</changelog>
<changelog author="ro@suse.de" date="1261310400">- fix requires for devel package</changelog>
<changelog author="coolo@novell.com" date="1261396800">- do not patch arch specific Makefiles, but simply pass WARN_FLAGS</changelog>
<changelog author="jengelh@medozas.de" date="1263124800">- run configure with --cpu=%_target to have correct bitness
  selected for SPARC</changelog>
<changelog author="ro@suse.de" date="1268222400">- add patch from fedora to fix build on x86_64
  (botan-1.8.8-binutils_lea_offset.patch)</changelog>
<changelog author="aj@suse.de" date="1283256000">- Do not include build time and host in package to not trigger rebuilds.
- Add pkg-config build requires as suggested by rpmlint.</changelog>
<changelog author="pth@suse.de" date="1283342400">- Prefix last patch with Botan-.
- Enable building of the qt_mutex module. This means that from now
  on libbotan requires libQtCore.
- Fix test for thread/mutex support to also work for Qt4.
- Update to 1.8.10:
  * This release changes a number of aspects of how private keys are
    encrypted. The default encryption algorithm has changed from 3DES
    to AES-256
  * The default iteration count for PBES1 and PBES2 encryption schemes
    (which are used primarily to encrypt asymmetric keys like RSA or
    DSA) has increased from 2048 to 10000, which should make brute
    force key cracking substantially harder.
  * The first round of AES now uses a smaller set of lookup tables;
    this only reduces performance slightly but some timing and cache
    analysis attacks against AES are substantially harder when AES is
    implemented this way.
  * The class known as S2K was renamed PBKDF in 1.9, with a typedef
    for backwards compatibility. For providing an equivalent forward
    compatibility path, 1.8.10 includes a typedef for PBKDF and a new
    accessor function get_pbkdf. It also includes a new interface for
    deriving keys with a passphrase which takes both the passphrase
    and desired output length as well as the salt and iteration
    count; in many cases this call is actually significantly more
    convenient than the older API.</changelog>
<changelog author="pth@suse.de" date="1308657600">- Devel package now is versioned so multiple devel packages may
  be installed in parallel.
- Devel package renamed back to Botan-devel to keep rpmlint from
  thinking it is a library package ...
- Update to 1.10.0:
  New Features:
  * SSL (SSLv3, TLS 1.0, and TLS 1.1 are currently supported)
  * GOST 34.10-2001 signature scheme (a Russian ECC signature standard
    analogous to ECDSA)
  * The SHA-3 candidates Keccak and Blue Midnight Wish
  * Bcrypt password hashing
  * XSalsa20
  * AES key wrapping
  * Comb4P hash combinator.
  Other Changes:
  * The block cipher interface now exposes any possible parallelism
    available to the implementation, and XTS, CTR, and CBC modes have been
    changed to use them.
  * SIMD implementations of Serpent, XTEA, Noekeon, and IDEA have been
    added, as has an implementation of AES using SSSE3 which runs both in
    constant time and, on recent processors, significantly faster than the
    usual table based implementation.  There have also been numerous
    optimizations to elliptic curves.
  * The documentation, previously written in LaTeX, is now in
    reStructuredText, which is converted into HTML with Sphinx.  This new
    format is significantly easier to write, encouraging more documentation
    to be written and updated.  And, indeed, a number of features never
    before documented are now described in the manual.</changelog>
<changelog author="pth@suse.de" date="1308744000">- Fix Requires for devel package.</changelog>
<changelog author="dmueller@suse.de" date="1308830400">- rename the devel package back to libbotan-devel as the main
  package allows to build only one -devel package</changelog>
<changelog author="pth@suse.de" date="1309780800">- Make package own its docdir.</changelog>
<changelog author="jengelh@medozas.de" date="1316174400">- Implement baselibs.conf for package
- Remove obsolete/redundant tags</changelog>
<changelog author="coolo@suse.com" date="1328616000">- little spec cleanup</changelog>
<changelog author="dmueller@suse.com" date="1345118400">- don't fiddle with march settings, we want the distro defaults
  (fixes build on ARM)</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- update to 1.10.3:
  * A change in 1.10.2 accidentally broke ABI compatibility with
    1.10.1 and earlier versions, causing programs compiled against
    1.10.1 to crash if linked with 1.10.2 at runtime.
  * Recent versions of OpenSSL include extra information in ECC
    private keys, the presence of which caused an exception when such
    a key was loaded by botan. The decoding of ECC private keys has been
    changed to ignore these fields if they are set.
- remove Botan-qt_thread_support.patch no needed anymore</changelog>
<changelog author="schwab@suse.de" date="1362916800">- aarch64-support.patch: add support for aarch64</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1363435200">- Update to 1.10.5
  * A potential crash in the AES-NI implementation of the AES-192 key schedule
    (caused by misaligned loads) has been fixed.
  * A previously conditional operation in Montgomery multiplication and
    squaring is now always performed, removing a possible timing channel.</changelog>
<changelog author="tbehrens@suse.com" date="1399636800">- add patch Botan-fix_miller_rabin_test.patch
  fix for unsafe Miller Rabin primality test, details:
  http://lists.randombit.net/pipermail/botan-devel/2014-April/001920.html</changelog>

</package>
<package pkgid="85f2bb34c2133b97d08b6566cd5a41ff0b3a0e63346fd74747c32a9e6e76782a" name="DirectFB" arch="i586">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="cd2dd70f41a313fa60ee613bef47c5694bbf43dfb1088c7e8940e5c82e9031d1" name="DirectFB" arch="src">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="a22b75fd656c8d24dc51123314896b634a9aefe2afd2c0ea9a46f6c5c6ee82c9" name="DirectFB" arch="x86_64">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="1ab8b107d2139416d68497ea2ac25690a89a7c4b53fb86392e54d28da7b40914" name="DirectFB-Mesa" arch="i586">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="d60645b34018e2889765c4f1e3a135755ed72b3f9378b389e1d7294773e6f574" name="DirectFB-Mesa" arch="x86_64">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="07dea5a5cffa5b15b28aea1c7971cc3c02c194b0c8055f7a63a868d2ccf93523" name="DirectFB-devel" arch="i586">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="0d72e5531ff54b6af48f103687ccbc44189f12b31261eff3c1d419427b170df6" name="DirectFB-devel" arch="x86_64">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="d1a8ed9b31664f4a55cbc505093990513b1fee1f16dc7ed631ba8518b37e8f4d" name="DirectFB-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="cc00f836609aa94485c2e849e7f219707d57b5f6ee9f940d5cc5310a68760e23" name="DirectFB-doc" arch="i586">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="35a77381187ea970e2b3be91422a0664ae569685426835c2b536faaed4f307d0" name="DirectFB-doc" arch="x86_64">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="d2d8d6bd43a60cc1233e14df6e9f40062cf5e50cb77f4192a4e3cc832f277777" name="DirectFB-libSDL" arch="i586">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="5c7099cb0095310729dbf66e0ca2f0b254441eae9be7adf9e2105b46fab5bb83" name="DirectFB-libSDL" arch="x86_64">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="f47f8369ae96a69b5121f7616b493e9cb2ae94e5d13c3a9ca218a3e130798014" name="DirectFB-libvncclient" arch="i586">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="55343d6d782baea6e4b8a092a189befbfa2b6a588e830dc2e19c4401532dd7a7" name="DirectFB-libvncclient" arch="x86_64">
    <version epoch="0" ver="1.6.3" rel="4.3.1"/>

<changelog author="jengelh@medozas.de" date="1316174400">- Implement shlib policy and add baselibs
- Remove redundant tags/sections</changelog>
<changelog author="adrian@suse.de" date="1320321600">- reduce driver set on arm
  (TI drivers are broken atm)</changelog>
<changelog author="ro@suse.de" date="1322481600">- fix build on s390/s390x</changelog>
<changelog author="ro@suse.de" date="1322654400">- complete last change</changelog>
<changelog author="coolo@suse.de" date="1324296000">- %suse_update_libdir was a work around for very old versions</changelog>
<changelog author="pgajdos@suse.com" date="1325851200">- build also against libpng15
  * libpng15.patch</changelog>
<changelog author="jengelh@medozas.de" date="1331899200">- Restore parallel build</changelog>
<changelog author="pgajdos@suse.com" date="1346932800">- updated to 1.4.17:
  * removed libpng15.patch (DirectFB have libpng15 suport from 1.4.16)
  * removed upstreamed DirectFB-1.1.1.patch
  * upstream changes:
  - fix race condition between dfb_wm_close_all_stacks() and
    layer_context destructor
  - add function CoreDFB_CallMode() which determines whether calls
    should be direct, indirect or denied.
  - cleaner shutdown
  - Add CoreGraphicsState::ReleaseSource() to fix
    IDirectFBSurface::ReleaseSource() in secure fusion mode.
  - opimize single-app mode by forcing COREDFB_CALL_DIRECT
  - set_region: lock region buffer also on flags CLRCF_SRCKEY,
    CLRCF_DSTKEY,CLRCF_OPACITY,CLRCF_SOURCE,CLRCF_DEST
  - remove bogus asserts for optional output parameters in Core API
    and mark these parameters in .flux files
    etc. see NEWS</changelog>
<changelog author="idonmez@suse.com" date="1348747200">- Update baselibs.conf</changelog>
<changelog author="p.drouand@gmail.com" date="1350907200">- Update to 1.6.2 version :
  * IDirectFB
  - When creating a windowed primary, translate
    window-surface-policy option to DSCAPS_SYSTEMONLY/VIDEOONLY.
  * Core
  - Stub out Core_Push/Pop/GetCalling in case of single app build, thanks to Mike Nelis!
  - Temporary solution for permissions not being granted to a surface from GetSurface().
  - prevent segfault when calls are launched from non-dfb threads.
  - Reset flip counter to zero when changing buffer mode.
  - When creating a window pass through DSCAPS_GL.
  * Util
  - Add dfb_regions_unite() to calculate bounds of one or more regions.
  * Genefx
  - Avoid division by zero with rotation and formats &lt; 1 byte per pixel.
  * gfxutil
  - Avoid double premultiplication when loading an image scaled.
  * One
  - Use direct_list_foreach_safe() when iterating through receiving list.
  - In OneAppTarget_Destroy() remove from receiving list if needed.
  * fonts
  - Make x and y advances 24.8 fixed point to fix font rotation.
  * X11
  - Set max value for absolute motion events.
  * EGL
  - Support ARGB directly in fboWrite(), add fboRead().
  * Android
  - Use sawman wm.
  - Force quit by segfaulting on purpose.
  * Video Provider
  - Add WIP gstreamer video provider.
  * Tools
  - dfbg: Add option '-p' to create a surface with DSCAPS_PREMULTIPLIED.
- Update baselibs.conf</changelog>
<changelog author="joop.boonen@opensuse.org" date="1354795200">- Only apply patch DirectFB-1.6.1-mesa-libgbm-stridefix.patch on
  openSUSE &gt; 12.2</changelog>
<changelog author="mvyskocil@suse.com" date="1355832000">- remove unused files
  * 85-directfb.rules
  * DirectFB-1.5.3-lm.patch
  * DirectFB-1.6.1-fix-Wimplicit-function-declaration-cflags-error.patch
  * DirectFB-1.7.11.3-mesa-libgbm-stridefix.patch</changelog>
<changelog author="dvaleev@suse.com" date="1356091200">- Fix cyber5k and radeon drivers build on powerpc
  (DirectFB-setregion.patch)</changelog>
<changelog author="coolo@suse.com" date="1363348800">- use original tar as source url</changelog>
<changelog author="p.drouand@gmail.com" date="1371470400">- Update to version 1.6.3. There is a large list of changes
  see Changelog for details
- Remove DirectFB-1.6.1-mesa-libgbm-stridefix.patch; fixed by upstream</changelog>
<changelog author="guillaume@opensuse.org" date="1375876800">- Enable tslib support for openSUSE 13.1+</changelog>
<changelog author="guillaume@opensuse.org" date="1375876801">- Add omap support (ARM)</changelog>
<changelog author="guillaume@opensuse.org" date="1375876802">-  Enable openGL ES 2 support (Mesa only)</changelog>
<changelog author="mvyskocil@suse.com" date="1376395200">- Enable X11/vdpau</changelog>
<changelog author="pgajdos@suse.com" date="1429790400">- security update
  * CVE-2014-2977 [bnc#878345]
    + DirectFB-CVE-2014-2977.patch
  * CVE-2014-2978 [bnc#878349]
    + DirectFB-CVE-2014-2978.patch</changelog>

</package>
<package pkgid="8d91ea475a80a56947f44665a84e69dcc9bdb4a2f6bb9ea08d8e8a511d2b12b6" name="IPython" arch="noarch">
    <version epoch="0" ver="0.13.1" rel="4.4.1"/>

<changelog author="matejcik@suse.cz" date="1249473600">- update to 0.10
  * lots of bugfixes
  * improved gui and wx-based gui component
  * improved ipcluster
- split off -doc subpackage</changelog>
<changelog author="coolo@novell.com" date="1249819200">- new new python macros</changelog>
<changelog author="matejcik@suse.cz" date="1249992000">- removed useless item from filelist
- switched to noarch</changelog>
<changelog author="sbrabec@suse.cz" date="1293624000">- Updated python-wxWidgets name.</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1310817600">- updated to 0.10.2
  * This is a minor bugfix and latst release of the 0.10.x series.
  * Closing of github ticket #185, a major regression we had
    in 0.10.1 where pylab mode with GTK was not working correctly,
    hence plots were blocking with GTK.  Since this is the default matplotlib
    backend on Unix systems, this was a major annoyance for many users.  Many
    thanks to Paul Ivanov for helping resolve this issue.
  * Fix IOError bug on Windows when used with -gthread.
  * Work robustly if $HOME is missing from environment.
  * Better POSIX support in ssh scripts (remove bash-specific idioms).
  * Improved support for non-ascii characters in log files.
  * Work correctly in environments where GTK can be imported but not started
    (such as a linux text console without X11).</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1312113600">- updated to 0.11
  IPython 0.11 is a *major* overhaul of IPython, two years in the making.  Most
  of the code base has been rewritten or at least reorganized, breaking backward
  compatibility with several APIs in previous versions.
  Since the internal APIs have changed so much, projects using IPython as a
  library (as opposed to end-users of the application) are the most likely to
  encounter regressions or changes that break their existing use patterns.
  A quick summary:
  * Standalone Qt console.
  * High-level parallel computing with ZeroMQ.
  * New model for GUI/plotting support in the terminal.
  * A two-process architecture.
  * Vim integration.
  * Integration into Microsoft Visual Studio
  * Improved unicode support.
  * Python 3 support.
  * New profile model.
  * SQLite storage for history.
  * New configuration system.
  * Pasting of code with prompts.</changelog>
<changelog author="einar@heavensinferno.net" date="1328702400">- updated to 0.12
  IPython 0.12 contains several major new features, as well as a large amount
  of bug and regression fixes.
  New features:
  * An interactive browser-based Notebook with rich media support
  * Two-process terminal console
  * Tabbed QtConsole
  * Full Python 3 compatibility
  * Standalone Kernel
  * PyPy support</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1328788800">- added python3-IPython package</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335528000">- added build dependency python3-2to3
  without it files just not converted silently</changelog>
<changelog author="toddrme2178@gmail.com" date="1335528001">- Update to 0.12.1
  Bugfixes
- Comment out non-existant wxpython-related python 3 packages
- Change python 3 binary names so they don't conflict with the
  python 2 ones
- Fix removal of hidden git info in python3 package
- Small python 2 package spec file cleanups</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335614400">- added python-tornado Requires for ipython notebook mode</changelog>
<changelog author="toddrme2178@gmail.com" date="1335787200">- Fix building python 3 package on openSUSE 11.4 x86_64</changelog>
<changelog author="cfarrell@suse.com" date="1336046400">- license update: BSD-3-Clause
  See http://ipython.org/ipython-doc/dev/about/license_and_copyright.html</changelog>
<changelog author="einar@heavensinferno.net" date="1351080000">- Update to 0.13.1
  - New major upstream release
  - Major notebook improvements
  - Major improvements to the Qt console
  - Improvement of parallel tools</changelog>
<changelog author="jmatejek@suse.com" date="1407412800">- CVE-2014-3429-cross-domain.patch - RCE in IPython Notebook via
  cross-origin websocket connection
  (CVE-2014-3429, bnc#887577)</changelog>

</package>
<package pkgid="1e2c43a4d2dfea0c262e863f00afe48b1321711817129304ca08b94fe16c2ed5" name="IPython" arch="noarch">
    <version epoch="0" ver="1.0.0" rel="2.4.3"/>

<changelog author="matejcik@suse.cz" date="1249473600">- update to 0.10
  * lots of bugfixes
  * improved gui and wx-based gui component
  * improved ipcluster
- split off -doc subpackage</changelog>
<changelog author="coolo@novell.com" date="1249819200">- new new python macros</changelog>
<changelog author="matejcik@suse.cz" date="1249992000">- removed useless item from filelist
- switched to noarch</changelog>
<changelog author="sbrabec@suse.cz" date="1293624000">- Updated python-wxWidgets name.</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1310817600">- updated to 0.10.2
  * This is a minor bugfix and latst release of the 0.10.x series.
  * Closing of github ticket #185, a major regression we had
    in 0.10.1 where pylab mode with GTK was not working correctly,
    hence plots were blocking with GTK.  Since this is the default matplotlib
    backend on Unix systems, this was a major annoyance for many users.  Many
    thanks to Paul Ivanov for helping resolve this issue.
  * Fix IOError bug on Windows when used with -gthread.
  * Work robustly if $HOME is missing from environment.
  * Better POSIX support in ssh scripts (remove bash-specific idioms).
  * Improved support for non-ascii characters in log files.
  * Work correctly in environments where GTK can be imported but not started
    (such as a linux text console without X11).</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1312113600">- updated to 0.11
  IPython 0.11 is a *major* overhaul of IPython, two years in the making.  Most
  of the code base has been rewritten or at least reorganized, breaking backward
  compatibility with several APIs in previous versions.
  Since the internal APIs have changed so much, projects using IPython as a
  library (as opposed to end-users of the application) are the most likely to
  encounter regressions or changes that break their existing use patterns.
  A quick summary:
  * Standalone Qt console.
  * High-level parallel computing with ZeroMQ.
  * New model for GUI/plotting support in the terminal.
  * A two-process architecture.
  * Vim integration.
  * Integration into Microsoft Visual Studio
  * Improved unicode support.
  * Python 3 support.
  * New profile model.
  * SQLite storage for history.
  * New configuration system.
  * Pasting of code with prompts.</changelog>
<changelog author="einar@heavensinferno.net" date="1328702400">- updated to 0.12
  IPython 0.12 contains several major new features, as well as a large amount
  of bug and regression fixes.
  New features:
  * An interactive browser-based Notebook with rich media support
  * Two-process terminal console
  * Tabbed QtConsole
  * Full Python 3 compatibility
  * Standalone Kernel
  * PyPy support</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1328788800">- added python3-IPython package</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335528000">- added build dependency python3-2to3
  without it files just not converted silently</changelog>
<changelog author="toddrme2178@gmail.com" date="1335528001">- Update to 0.12.1
  Bugfixes
- Comment out non-existant wxpython-related python 3 packages
- Change python 3 binary names so they don't conflict with the
  python 2 ones
- Fix removal of hidden git info in python3 package
- Small python 2 package spec file cleanups</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335614400">- added python-tornado Requires for ipython notebook mode</changelog>
<changelog author="toddrme2178@gmail.com" date="1335787200">- Fix building python 3 package on openSUSE 11.4 x86_64</changelog>
<changelog author="cfarrell@suse.com" date="1336046400">- license update: BSD-3-Clause
  See http://ipython.org/ipython-doc/dev/about/license_and_copyright.html</changelog>
<changelog author="einar@heavensinferno.net" date="1351080000">- Update to 0.13.1
  - New major upstream release
  - Major notebook improvements
  - Major improvements to the Qt console
  - Improvement of parallel tools</changelog>
<changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
<changelog author="lbeltrame@kde.org" date="1363348800">- Add ipython-fix-loading-newer-pyqt.diff to make Qt console
  load with PyQt 4.10 (fix already upstream)</changelog>
<changelog author="jmatejek@suse.com" date="1368792000">- update to 0.13.2
  - bugfix-release, 52 bugs fixed
  - improved compatibility with new Qt versions
    (fixes bnc#819931, obsoletes ipython-fix-loading-newer-pyqt.diff)
- drop conditionals for too-old SUSE releases
- shorten summary</changelog>
<changelog author="toddrme2178@gmail.com" date="1370433600">- Install .desktop files
- Add buildrequires so there is proper detection of dependencies
  at build-time
- Add python-distribute buildrequires for proper dependency
  detection
- Build full documentation in python 2 version
  (not yet working with python 3)
- Include license file and README file
- Change suggests to recommends since suggests are not well
  supported
- Manually-specify executable and manual file names to better
  identify conflicts between python 2 and python 3 versions</changelog>
<changelog author="tzotsos@opensuse.org" date="1376049600">- update to 1.0.0
- The principal milestone is the addition of IPython.nbconvert.
- Added IPython.kernel for all kernel-related code.
- Removed the frontend subpackage, as it caused unnecessary depth.
- The IPython sphinx directives are now installed in IPython.sphinx.
- The input transformation framework has been reworked.
- Exception types can now be displayed with a custom traceback.
- A new command, ipython history trim can be used to delete everything but the last 1000 entries in the history database.
- __file__ is defined in both config files at load time, and .ipy files executed with %run.
- %logstart and %logappend are no longer broken.
- Add glob expansion for %run, e.g. %run -g script.py *.txt.
- Expand variables ($foo) in Cell Magic argument line.
- By default, iptest will exclude various slow tests. All tests can be run with iptest –all.
- SQLite history can be disabled in the various cases that it does not behave well.
- %edit works on interactively defined variables.
- editor hooks have been restored from quarantine, enabling TextMate as editor, etc.
- The env variable PYTHONSTARTUP is respected by IPython.
- The %matplotlib magic was added.
- The --matplotlib command line flag was also added.</changelog>
<changelog author="jmatejek@suse.com" date="1407412800">- CVE-2014-3429-cross-domain.patch - RCE in IPython Notebook via
  cross-origin websocket connection
  (CVE-2014-3429, bnc#887577)</changelog>

</package>
<package pkgid="dd4aa20613a3dd8366f989f5137705fd349ed1f72ea59ede5654f3a2420ee55b" name="IPython" arch="noarch">
    <version epoch="0" ver="1.0.0" rel="2.7.1"/>

<changelog author="coolo@novell.com" date="1249819200">- new new python macros</changelog>
<changelog author="matejcik@suse.cz" date="1249992000">- removed useless item from filelist
- switched to noarch</changelog>
<changelog author="sbrabec@suse.cz" date="1293624000">- Updated python-wxWidgets name.</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1310817600">- updated to 0.10.2
  * This is a minor bugfix and latst release of the 0.10.x series.
  * Closing of github ticket #185, a major regression we had
    in 0.10.1 where pylab mode with GTK was not working correctly,
    hence plots were blocking with GTK.  Since this is the default matplotlib
    backend on Unix systems, this was a major annoyance for many users.  Many
    thanks to Paul Ivanov for helping resolve this issue.
  * Fix IOError bug on Windows when used with -gthread.
  * Work robustly if $HOME is missing from environment.
  * Better POSIX support in ssh scripts (remove bash-specific idioms).
  * Improved support for non-ascii characters in log files.
  * Work correctly in environments where GTK can be imported but not started
    (such as a linux text console without X11).</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1312113600">- updated to 0.11
  IPython 0.11 is a *major* overhaul of IPython, two years in the making.  Most
  of the code base has been rewritten or at least reorganized, breaking backward
  compatibility with several APIs in previous versions.
  Since the internal APIs have changed so much, projects using IPython as a
  library (as opposed to end-users of the application) are the most likely to
  encounter regressions or changes that break their existing use patterns.
  A quick summary:
  * Standalone Qt console.
  * High-level parallel computing with ZeroMQ.
  * New model for GUI/plotting support in the terminal.
  * A two-process architecture.
  * Vim integration.
  * Integration into Microsoft Visual Studio
  * Improved unicode support.
  * Python 3 support.
  * New profile model.
  * SQLite storage for history.
  * New configuration system.
  * Pasting of code with prompts.</changelog>
<changelog author="einar@heavensinferno.net" date="1328702400">- updated to 0.12
  IPython 0.12 contains several major new features, as well as a large amount
  of bug and regression fixes.
  New features:
  * An interactive browser-based Notebook with rich media support
  * Two-process terminal console
  * Tabbed QtConsole
  * Full Python 3 compatibility
  * Standalone Kernel
  * PyPy support</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1328788800">- added python3-IPython package</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335528000">- added build dependency python3-2to3
  without it files just not converted silently</changelog>
<changelog author="toddrme2178@gmail.com" date="1335528001">- Update to 0.12.1
  Bugfixes
- Comment out non-existant wxpython-related python 3 packages
- Change python 3 binary names so they don't conflict with the
  python 2 ones
- Fix removal of hidden git info in python3 package
- Small python 2 package spec file cleanups</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335614400">- added python-tornado Requires for ipython notebook mode</changelog>
<changelog author="toddrme2178@gmail.com" date="1335787200">- Fix building python 3 package on openSUSE 11.4 x86_64</changelog>
<changelog author="cfarrell@suse.com" date="1336046400">- license update: BSD-3-Clause
  See http://ipython.org/ipython-doc/dev/about/license_and_copyright.html</changelog>
<changelog author="einar@heavensinferno.net" date="1351080000">- Update to 0.13.1
  - New major upstream release
  - Major notebook improvements
  - Major improvements to the Qt console
  - Improvement of parallel tools</changelog>
<changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
<changelog author="lbeltrame@kde.org" date="1363348800">- Add ipython-fix-loading-newer-pyqt.diff to make Qt console
  load with PyQt 4.10 (fix already upstream)</changelog>
<changelog author="jmatejek@suse.com" date="1368792000">- update to 0.13.2
  - bugfix-release, 52 bugs fixed
  - improved compatibility with new Qt versions
    (fixes bnc#819931, obsoletes ipython-fix-loading-newer-pyqt.diff)
- drop conditionals for too-old SUSE releases
- shorten summary</changelog>
<changelog author="toddrme2178@gmail.com" date="1370433600">- Install .desktop files
- Add buildrequires so there is proper detection of dependencies
  at build-time
- Add python-distribute buildrequires for proper dependency
  detection
- Build full documentation in python 2 version
  (not yet working with python 3)
- Include license file and README file
- Change suggests to recommends since suggests are not well
  supported
- Manually-specify executable and manual file names to better
  identify conflicts between python 2 and python 3 versions</changelog>
<changelog author="tzotsos@opensuse.org" date="1376049600">- update to 1.0.0
- The principal milestone is the addition of IPython.nbconvert.
- Added IPython.kernel for all kernel-related code.
- Removed the frontend subpackage, as it caused unnecessary depth.
- The IPython sphinx directives are now installed in IPython.sphinx.
- The input transformation framework has been reworked.
- Exception types can now be displayed with a custom traceback.
- A new command, ipython history trim can be used to delete everything but the last 1000 entries in the history database.
- __file__ is defined in both config files at load time, and .ipy files executed with %run.
- %logstart and %logappend are no longer broken.
- Add glob expansion for %run, e.g. %run -g script.py *.txt.
- Expand variables ($foo) in Cell Magic argument line.
- By default, iptest will exclude various slow tests. All tests can be run with iptest –all.
- SQLite history can be disabled in the various cases that it does not behave well.
- %edit works on interactively defined variables.
- editor hooks have been restored from quarantine, enabling TextMate as editor, etc.
- The env variable PYTHONSTARTUP is respected by IPython.
- The %matplotlib magic was added.
- The --matplotlib command line flag was also added.</changelog>
<changelog author="jmatejek@suse.com" date="1407412800">- CVE-2014-3429-cross-domain.patch - RCE in IPython Notebook via
  cross-origin websocket connection
  (CVE-2014-3429, bnc#887577)</changelog>
<changelog author="toddrme2178@gmail.com" date="1443441600">- Add CVE-2015-6938-xss-vulnerability.patch
  Fix for XSS security vulnerability
  CVE-2015-6938, bnc#945828</changelog>

</package>
<package pkgid="ef266dc9ddf6bce2cfa899ae532633fbc3b8b953a9b187374927e04290f50936" name="IPython" arch="src">
    <version epoch="0" ver="0.13.1" rel="4.4.1"/>

<changelog author="jmatejek@suse.cz" date="1141128000">- updated to reflect python changes due to #149809</changelog>
<changelog author="jmatejek@suse.cz" date="1161259200">- update to 0.7.2
- many new features: extension API, better persistence,
  script runner, IPipe tabular data navigator, simplified
  output capturing etc.</changelog>
<changelog author="jmatejek@suse.cz" date="1185364800">- update to 0.8.1
  * fully syntax highlighted tracebacks
  * support for Ctrl+C while multithreading
  * improved unicode support
  * various new features and bugfixes</changelog>
<changelog author="matejcik@suse.cz" date="1205496000">- update to 0.8.2
  * "shadow history" remembers every command forever
  * macros with arguments
  * various new extensions
  * various new features and bugfixes</changelog>
<changelog author="matejcik@suse.cz" date="1221048000">- update to 0.8.4
  * support for Leo
  * improved multithreading
  * better %edit
  * new extensions
  * better wx GUI</changelog>
<changelog author="matejcik@suse.cz" date="1249473600">- update to 0.10
  * lots of bugfixes
  * improved gui and wx-based gui component
  * improved ipcluster
- split off -doc subpackage</changelog>
<changelog author="coolo@novell.com" date="1249819200">- new new python macros</changelog>
<changelog author="matejcik@suse.cz" date="1249992000">- removed useless item from filelist
- switched to noarch</changelog>
<changelog author="sbrabec@suse.cz" date="1293624000">- Updated python-wxWidgets name.</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1310817600">- updated to 0.10.2
  * This is a minor bugfix and latst release of the 0.10.x series.
  * Closing of github ticket #185, a major regression we had
    in 0.10.1 where pylab mode with GTK was not working correctly,
    hence plots were blocking with GTK.  Since this is the default matplotlib
    backend on Unix systems, this was a major annoyance for many users.  Many
    thanks to Paul Ivanov for helping resolve this issue.
  * Fix IOError bug on Windows when used with -gthread.
  * Work robustly if $HOME is missing from environment.
  * Better POSIX support in ssh scripts (remove bash-specific idioms).
  * Improved support for non-ascii characters in log files.
  * Work correctly in environments where GTK can be imported but not started
    (such as a linux text console without X11).</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1312113600">- updated to 0.11
  IPython 0.11 is a *major* overhaul of IPython, two years in the making.  Most
  of the code base has been rewritten or at least reorganized, breaking backward
  compatibility with several APIs in previous versions.
  Since the internal APIs have changed so much, projects using IPython as a
  library (as opposed to end-users of the application) are the most likely to
  encounter regressions or changes that break their existing use patterns.
  A quick summary:
  * Standalone Qt console.
  * High-level parallel computing with ZeroMQ.
  * New model for GUI/plotting support in the terminal.
  * A two-process architecture.
  * Vim integration.
  * Integration into Microsoft Visual Studio
  * Improved unicode support.
  * Python 3 support.
  * New profile model.
  * SQLite storage for history.
  * New configuration system.
  * Pasting of code with prompts.</changelog>
<changelog author="einar@heavensinferno.net" date="1328702400">- updated to 0.12
  IPython 0.12 contains several major new features, as well as a large amount
  of bug and regression fixes.
  New features:
  * An interactive browser-based Notebook with rich media support
  * Two-process terminal console
  * Tabbed QtConsole
  * Full Python 3 compatibility
  * Standalone Kernel
  * PyPy support</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1328788800">- added python3-IPython package</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335528000">- added build dependency python3-2to3
  without it files just not converted silently</changelog>
<changelog author="toddrme2178@gmail.com" date="1335528001">- Update to 0.12.1
  Bugfixes
- Comment out non-existant wxpython-related python 3 packages
- Change python 3 binary names so they don't conflict with the
  python 2 ones
- Fix removal of hidden git info in python3 package
- Small python 2 package spec file cleanups</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335614400">- added python-tornado Requires for ipython notebook mode</changelog>
<changelog author="toddrme2178@gmail.com" date="1335787200">- Fix building python 3 package on openSUSE 11.4 x86_64</changelog>
<changelog author="cfarrell@suse.com" date="1336046400">- license update: BSD-3-Clause
  See http://ipython.org/ipython-doc/dev/about/license_and_copyright.html</changelog>
<changelog author="einar@heavensinferno.net" date="1351080000">- Update to 0.13.1
  - New major upstream release
  - Major notebook improvements
  - Major improvements to the Qt console
  - Improvement of parallel tools</changelog>
<changelog author="jmatejek@suse.com" date="1407412800">- CVE-2014-3429-cross-domain.patch - RCE in IPython Notebook via
  cross-origin websocket connection
  (CVE-2014-3429, bnc#887577)</changelog>

</package>
<package pkgid="64ae69626cc526e94fa1fe410f396f29384631ec4ae15e89bdd32dfb4d498aa4" name="IPython" arch="src">
    <version epoch="0" ver="1.0.0" rel="2.4.3"/>

<changelog author="matejcik@suse.cz" date="1249473600">- update to 0.10
  * lots of bugfixes
  * improved gui and wx-based gui component
  * improved ipcluster
- split off -doc subpackage</changelog>
<changelog author="coolo@novell.com" date="1249819200">- new new python macros</changelog>
<changelog author="matejcik@suse.cz" date="1249992000">- removed useless item from filelist
- switched to noarch</changelog>
<changelog author="sbrabec@suse.cz" date="1293624000">- Updated python-wxWidgets name.</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1310817600">- updated to 0.10.2
  * This is a minor bugfix and latst release of the 0.10.x series.
  * Closing of github ticket #185, a major regression we had
    in 0.10.1 where pylab mode with GTK was not working correctly,
    hence plots were blocking with GTK.  Since this is the default matplotlib
    backend on Unix systems, this was a major annoyance for many users.  Many
    thanks to Paul Ivanov for helping resolve this issue.
  * Fix IOError bug on Windows when used with -gthread.
  * Work robustly if $HOME is missing from environment.
  * Better POSIX support in ssh scripts (remove bash-specific idioms).
  * Improved support for non-ascii characters in log files.
  * Work correctly in environments where GTK can be imported but not started
    (such as a linux text console without X11).</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1312113600">- updated to 0.11
  IPython 0.11 is a *major* overhaul of IPython, two years in the making.  Most
  of the code base has been rewritten or at least reorganized, breaking backward
  compatibility with several APIs in previous versions.
  Since the internal APIs have changed so much, projects using IPython as a
  library (as opposed to end-users of the application) are the most likely to
  encounter regressions or changes that break their existing use patterns.
  A quick summary:
  * Standalone Qt console.
  * High-level parallel computing with ZeroMQ.
  * New model for GUI/plotting support in the terminal.
  * A two-process architecture.
  * Vim integration.
  * Integration into Microsoft Visual Studio
  * Improved unicode support.
  * Python 3 support.
  * New profile model.
  * SQLite storage for history.
  * New configuration system.
  * Pasting of code with prompts.</changelog>
<changelog author="einar@heavensinferno.net" date="1328702400">- updated to 0.12
  IPython 0.12 contains several major new features, as well as a large amount
  of bug and regression fixes.
  New features:
  * An interactive browser-based Notebook with rich media support
  * Two-process terminal console
  * Tabbed QtConsole
  * Full Python 3 compatibility
  * Standalone Kernel
  * PyPy support</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1328788800">- added python3-IPython package</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335528000">- added build dependency python3-2to3
  without it files just not converted silently</changelog>
<changelog author="toddrme2178@gmail.com" date="1335528001">- Update to 0.12.1
  Bugfixes
- Comment out non-existant wxpython-related python 3 packages
- Change python 3 binary names so they don't conflict with the
  python 2 ones
- Fix removal of hidden git info in python3 package
- Small python 2 package spec file cleanups</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335614400">- added python-tornado Requires for ipython notebook mode</changelog>
<changelog author="toddrme2178@gmail.com" date="1335787200">- Fix building python 3 package on openSUSE 11.4 x86_64</changelog>
<changelog author="cfarrell@suse.com" date="1336046400">- license update: BSD-3-Clause
  See http://ipython.org/ipython-doc/dev/about/license_and_copyright.html</changelog>
<changelog author="einar@heavensinferno.net" date="1351080000">- Update to 0.13.1
  - New major upstream release
  - Major notebook improvements
  - Major improvements to the Qt console
  - Improvement of parallel tools</changelog>
<changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
<changelog author="lbeltrame@kde.org" date="1363348800">- Add ipython-fix-loading-newer-pyqt.diff to make Qt console
  load with PyQt 4.10 (fix already upstream)</changelog>
<changelog author="jmatejek@suse.com" date="1368792000">- update to 0.13.2
  - bugfix-release, 52 bugs fixed
  - improved compatibility with new Qt versions
    (fixes bnc#819931, obsoletes ipython-fix-loading-newer-pyqt.diff)
- drop conditionals for too-old SUSE releases
- shorten summary</changelog>
<changelog author="toddrme2178@gmail.com" date="1370433600">- Install .desktop files
- Add buildrequires so there is proper detection of dependencies
  at build-time
- Add python-distribute buildrequires for proper dependency
  detection
- Build full documentation in python 2 version
  (not yet working with python 3)
- Include license file and README file
- Change suggests to recommends since suggests are not well
  supported
- Manually-specify executable and manual file names to better
  identify conflicts between python 2 and python 3 versions</changelog>
<changelog author="tzotsos@opensuse.org" date="1376049600">- update to 1.0.0
- The principal milestone is the addition of IPython.nbconvert.
- Added IPython.kernel for all kernel-related code.
- Removed the frontend subpackage, as it caused unnecessary depth.
- The IPython sphinx directives are now installed in IPython.sphinx.
- The input transformation framework has been reworked.
- Exception types can now be displayed with a custom traceback.
- A new command, ipython history trim can be used to delete everything but the last 1000 entries in the history database.
- __file__ is defined in both config files at load time, and .ipy files executed with %run.
- %logstart and %logappend are no longer broken.
- Add glob expansion for %run, e.g. %run -g script.py *.txt.
- Expand variables ($foo) in Cell Magic argument line.
- By default, iptest will exclude various slow tests. All tests can be run with iptest –all.
- SQLite history can be disabled in the various cases that it does not behave well.
- %edit works on interactively defined variables.
- editor hooks have been restored from quarantine, enabling TextMate as editor, etc.
- The env variable PYTHONSTARTUP is respected by IPython.
- The %matplotlib magic was added.
- The --matplotlib command line flag was also added.</changelog>
<changelog author="jmatejek@suse.com" date="1407412800">- CVE-2014-3429-cross-domain.patch - RCE in IPython Notebook via
  cross-origin websocket connection
  (CVE-2014-3429, bnc#887577)</changelog>

</package>
<package pkgid="f83c4f32bdf7ca99ea3e74f315c0a10c2dd60da3705b29baadb508fef2220f99" name="IPython" arch="src">
    <version epoch="0" ver="1.0.0" rel="2.7.1"/>

<changelog author="coolo@novell.com" date="1249819200">- new new python macros</changelog>
<changelog author="matejcik@suse.cz" date="1249992000">- removed useless item from filelist
- switched to noarch</changelog>
<changelog author="sbrabec@suse.cz" date="1293624000">- Updated python-wxWidgets name.</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1310817600">- updated to 0.10.2
  * This is a minor bugfix and latst release of the 0.10.x series.
  * Closing of github ticket #185, a major regression we had
    in 0.10.1 where pylab mode with GTK was not working correctly,
    hence plots were blocking with GTK.  Since this is the default matplotlib
    backend on Unix systems, this was a major annoyance for many users.  Many
    thanks to Paul Ivanov for helping resolve this issue.
  * Fix IOError bug on Windows when used with -gthread.
  * Work robustly if $HOME is missing from environment.
  * Better POSIX support in ssh scripts (remove bash-specific idioms).
  * Improved support for non-ascii characters in log files.
  * Work correctly in environments where GTK can be imported but not started
    (such as a linux text console without X11).</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1312113600">- updated to 0.11
  IPython 0.11 is a *major* overhaul of IPython, two years in the making.  Most
  of the code base has been rewritten or at least reorganized, breaking backward
  compatibility with several APIs in previous versions.
  Since the internal APIs have changed so much, projects using IPython as a
  library (as opposed to end-users of the application) are the most likely to
  encounter regressions or changes that break their existing use patterns.
  A quick summary:
  * Standalone Qt console.
  * High-level parallel computing with ZeroMQ.
  * New model for GUI/plotting support in the terminal.
  * A two-process architecture.
  * Vim integration.
  * Integration into Microsoft Visual Studio
  * Improved unicode support.
  * Python 3 support.
  * New profile model.
  * SQLite storage for history.
  * New configuration system.
  * Pasting of code with prompts.</changelog>
<changelog author="einar@heavensinferno.net" date="1328702400">- updated to 0.12
  IPython 0.12 contains several major new features, as well as a large amount
  of bug and regression fixes.
  New features:
  * An interactive browser-based Notebook with rich media support
  * Two-process terminal console
  * Tabbed QtConsole
  * Full Python 3 compatibility
  * Standalone Kernel
  * PyPy support</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1328788800">- added python3-IPython package</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335528000">- added build dependency python3-2to3
  without it files just not converted silently</changelog>
<changelog author="toddrme2178@gmail.com" date="1335528001">- Update to 0.12.1
  Bugfixes
- Comment out non-existant wxpython-related python 3 packages
- Change python 3 binary names so they don't conflict with the
  python 2 ones
- Fix removal of hidden git info in python3 package
- Small python 2 package spec file cleanups</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335614400">- added python-tornado Requires for ipython notebook mode</changelog>
<changelog author="toddrme2178@gmail.com" date="1335787200">- Fix building python 3 package on openSUSE 11.4 x86_64</changelog>
<changelog author="cfarrell@suse.com" date="1336046400">- license update: BSD-3-Clause
  See http://ipython.org/ipython-doc/dev/about/license_and_copyright.html</changelog>
<changelog author="einar@heavensinferno.net" date="1351080000">- Update to 0.13.1
  - New major upstream release
  - Major notebook improvements
  - Major improvements to the Qt console
  - Improvement of parallel tools</changelog>
<changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
<changelog author="lbeltrame@kde.org" date="1363348800">- Add ipython-fix-loading-newer-pyqt.diff to make Qt console
  load with PyQt 4.10 (fix already upstream)</changelog>
<changelog author="jmatejek@suse.com" date="1368792000">- update to 0.13.2
  - bugfix-release, 52 bugs fixed
  - improved compatibility with new Qt versions
    (fixes bnc#819931, obsoletes ipython-fix-loading-newer-pyqt.diff)
- drop conditionals for too-old SUSE releases
- shorten summary</changelog>
<changelog author="toddrme2178@gmail.com" date="1370433600">- Install .desktop files
- Add buildrequires so there is proper detection of dependencies
  at build-time
- Add python-distribute buildrequires for proper dependency
  detection
- Build full documentation in python 2 version
  (not yet working with python 3)
- Include license file and README file
- Change suggests to recommends since suggests are not well
  supported
- Manually-specify executable and manual file names to better
  identify conflicts between python 2 and python 3 versions</changelog>
<changelog author="tzotsos@opensuse.org" date="1376049600">- update to 1.0.0
- The principal milestone is the addition of IPython.nbconvert.
- Added IPython.kernel for all kernel-related code.
- Removed the frontend subpackage, as it caused unnecessary depth.
- The IPython sphinx directives are now installed in IPython.sphinx.
- The input transformation framework has been reworked.
- Exception types can now be displayed with a custom traceback.
- A new command, ipython history trim can be used to delete everything but the last 1000 entries in the history database.
- __file__ is defined in both config files at load time, and .ipy files executed with %run.
- %logstart and %logappend are no longer broken.
- Add glob expansion for %run, e.g. %run -g script.py *.txt.
- Expand variables ($foo) in Cell Magic argument line.
- By default, iptest will exclude various slow tests. All tests can be run with iptest –all.
- SQLite history can be disabled in the various cases that it does not behave well.
- %edit works on interactively defined variables.
- editor hooks have been restored from quarantine, enabling TextMate as editor, etc.
- The env variable PYTHONSTARTUP is respected by IPython.
- The %matplotlib magic was added.
- The --matplotlib command line flag was also added.</changelog>
<changelog author="jmatejek@suse.com" date="1407412800">- CVE-2014-3429-cross-domain.patch - RCE in IPython Notebook via
  cross-origin websocket connection
  (CVE-2014-3429, bnc#887577)</changelog>
<changelog author="toddrme2178@gmail.com" date="1443441600">- Add CVE-2015-6938-xss-vulnerability.patch
  Fix for XSS security vulnerability
  CVE-2015-6938, bnc#945828</changelog>

</package>
<package pkgid="79519230e07b3db700f3844ed97dbf8ef157f9c2e24910e7b7017d98b0b7b1ce" name="IPython-doc" arch="noarch">
    <version epoch="0" ver="0.13.1" rel="4.4.1"/>

<changelog author="matejcik@suse.cz" date="1249473600">- update to 0.10
  * lots of bugfixes
  * improved gui and wx-based gui component
  * improved ipcluster
- split off -doc subpackage</changelog>
<changelog author="coolo@novell.com" date="1249819200">- new new python macros</changelog>
<changelog author="matejcik@suse.cz" date="1249992000">- removed useless item from filelist
- switched to noarch</changelog>
<changelog author="sbrabec@suse.cz" date="1293624000">- Updated python-wxWidgets name.</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1310817600">- updated to 0.10.2
  * This is a minor bugfix and latst release of the 0.10.x series.
  * Closing of github ticket #185, a major regression we had
    in 0.10.1 where pylab mode with GTK was not working correctly,
    hence plots were blocking with GTK.  Since this is the default matplotlib
    backend on Unix systems, this was a major annoyance for many users.  Many
    thanks to Paul Ivanov for helping resolve this issue.
  * Fix IOError bug on Windows when used with -gthread.
  * Work robustly if $HOME is missing from environment.
  * Better POSIX support in ssh scripts (remove bash-specific idioms).
  * Improved support for non-ascii characters in log files.
  * Work correctly in environments where GTK can be imported but not started
    (such as a linux text console without X11).</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1312113600">- updated to 0.11
  IPython 0.11 is a *major* overhaul of IPython, two years in the making.  Most
  of the code base has been rewritten or at least reorganized, breaking backward
  compatibility with several APIs in previous versions.
  Since the internal APIs have changed so much, projects using IPython as a
  library (as opposed to end-users of the application) are the most likely to
  encounter regressions or changes that break their existing use patterns.
  A quick summary:
  * Standalone Qt console.
  * High-level parallel computing with ZeroMQ.
  * New model for GUI/plotting support in the terminal.
  * A two-process architecture.
  * Vim integration.
  * Integration into Microsoft Visual Studio
  * Improved unicode support.
  * Python 3 support.
  * New profile model.
  * SQLite storage for history.
  * New configuration system.
  * Pasting of code with prompts.</changelog>
<changelog author="einar@heavensinferno.net" date="1328702400">- updated to 0.12
  IPython 0.12 contains several major new features, as well as a large amount
  of bug and regression fixes.
  New features:
  * An interactive browser-based Notebook with rich media support
  * Two-process terminal console
  * Tabbed QtConsole
  * Full Python 3 compatibility
  * Standalone Kernel
  * PyPy support</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1328788800">- added python3-IPython package</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335528000">- added build dependency python3-2to3
  without it files just not converted silently</changelog>
<changelog author="toddrme2178@gmail.com" date="1335528001">- Update to 0.12.1
  Bugfixes
- Comment out non-existant wxpython-related python 3 packages
- Change python 3 binary names so they don't conflict with the
  python 2 ones
- Fix removal of hidden git info in python3 package
- Small python 2 package spec file cleanups</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335614400">- added python-tornado Requires for ipython notebook mode</changelog>
<changelog author="toddrme2178@gmail.com" date="1335787200">- Fix building python 3 package on openSUSE 11.4 x86_64</changelog>
<changelog author="cfarrell@suse.com" date="1336046400">- license update: BSD-3-Clause
  See http://ipython.org/ipython-doc/dev/about/license_and_copyright.html</changelog>
<changelog author="einar@heavensinferno.net" date="1351080000">- Update to 0.13.1
  - New major upstream release
  - Major notebook improvements
  - Major improvements to the Qt console
  - Improvement of parallel tools</changelog>
<changelog author="jmatejek@suse.com" date="1407412800">- CVE-2014-3429-cross-domain.patch - RCE in IPython Notebook via
  cross-origin websocket connection
  (CVE-2014-3429, bnc#887577)</changelog>

</package>
<package pkgid="54116f2aef6fce0c09461dfbb1a3f11e69492263cfb4f8ae13d0733f0dc2487c" name="IPython-doc" arch="noarch">
    <version epoch="0" ver="1.0.0" rel="2.4.3"/>

<changelog author="matejcik@suse.cz" date="1249473600">- update to 0.10
  * lots of bugfixes
  * improved gui and wx-based gui component
  * improved ipcluster
- split off -doc subpackage</changelog>
<changelog author="coolo@novell.com" date="1249819200">- new new python macros</changelog>
<changelog author="matejcik@suse.cz" date="1249992000">- removed useless item from filelist
- switched to noarch</changelog>
<changelog author="sbrabec@suse.cz" date="1293624000">- Updated python-wxWidgets name.</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1310817600">- updated to 0.10.2
  * This is a minor bugfix and latst release of the 0.10.x series.
  * Closing of github ticket #185, a major regression we had
    in 0.10.1 where pylab mode with GTK was not working correctly,
    hence plots were blocking with GTK.  Since this is the default matplotlib
    backend on Unix systems, this was a major annoyance for many users.  Many
    thanks to Paul Ivanov for helping resolve this issue.
  * Fix IOError bug on Windows when used with -gthread.
  * Work robustly if $HOME is missing from environment.
  * Better POSIX support in ssh scripts (remove bash-specific idioms).
  * Improved support for non-ascii characters in log files.
  * Work correctly in environments where GTK can be imported but not started
    (such as a linux text console without X11).</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1312113600">- updated to 0.11
  IPython 0.11 is a *major* overhaul of IPython, two years in the making.  Most
  of the code base has been rewritten or at least reorganized, breaking backward
  compatibility with several APIs in previous versions.
  Since the internal APIs have changed so much, projects using IPython as a
  library (as opposed to end-users of the application) are the most likely to
  encounter regressions or changes that break their existing use patterns.
  A quick summary:
  * Standalone Qt console.
  * High-level parallel computing with ZeroMQ.
  * New model for GUI/plotting support in the terminal.
  * A two-process architecture.
  * Vim integration.
  * Integration into Microsoft Visual Studio
  * Improved unicode support.
  * Python 3 support.
  * New profile model.
  * SQLite storage for history.
  * New configuration system.
  * Pasting of code with prompts.</changelog>
<changelog author="einar@heavensinferno.net" date="1328702400">- updated to 0.12
  IPython 0.12 contains several major new features, as well as a large amount
  of bug and regression fixes.
  New features:
  * An interactive browser-based Notebook with rich media support
  * Two-process terminal console
  * Tabbed QtConsole
  * Full Python 3 compatibility
  * Standalone Kernel
  * PyPy support</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1328788800">- added python3-IPython package</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335528000">- added build dependency python3-2to3
  without it files just not converted silently</changelog>
<changelog author="toddrme2178@gmail.com" date="1335528001">- Update to 0.12.1
  Bugfixes
- Comment out non-existant wxpython-related python 3 packages
- Change python 3 binary names so they don't conflict with the
  python 2 ones
- Fix removal of hidden git info in python3 package
- Small python 2 package spec file cleanups</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335614400">- added python-tornado Requires for ipython notebook mode</changelog>
<changelog author="toddrme2178@gmail.com" date="1335787200">- Fix building python 3 package on openSUSE 11.4 x86_64</changelog>
<changelog author="cfarrell@suse.com" date="1336046400">- license update: BSD-3-Clause
  See http://ipython.org/ipython-doc/dev/about/license_and_copyright.html</changelog>
<changelog author="einar@heavensinferno.net" date="1351080000">- Update to 0.13.1
  - New major upstream release
  - Major notebook improvements
  - Major improvements to the Qt console
  - Improvement of parallel tools</changelog>
<changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
<changelog author="lbeltrame@kde.org" date="1363348800">- Add ipython-fix-loading-newer-pyqt.diff to make Qt console
  load with PyQt 4.10 (fix already upstream)</changelog>
<changelog author="jmatejek@suse.com" date="1368792000">- update to 0.13.2
  - bugfix-release, 52 bugs fixed
  - improved compatibility with new Qt versions
    (fixes bnc#819931, obsoletes ipython-fix-loading-newer-pyqt.diff)
- drop conditionals for too-old SUSE releases
- shorten summary</changelog>
<changelog author="toddrme2178@gmail.com" date="1370433600">- Install .desktop files
- Add buildrequires so there is proper detection of dependencies
  at build-time
- Add python-distribute buildrequires for proper dependency
  detection
- Build full documentation in python 2 version
  (not yet working with python 3)
- Include license file and README file
- Change suggests to recommends since suggests are not well
  supported
- Manually-specify executable and manual file names to better
  identify conflicts between python 2 and python 3 versions</changelog>
<changelog author="tzotsos@opensuse.org" date="1376049600">- update to 1.0.0
- The principal milestone is the addition of IPython.nbconvert.
- Added IPython.kernel for all kernel-related code.
- Removed the frontend subpackage, as it caused unnecessary depth.
- The IPython sphinx directives are now installed in IPython.sphinx.
- The input transformation framework has been reworked.
- Exception types can now be displayed with a custom traceback.
- A new command, ipython history trim can be used to delete everything but the last 1000 entries in the history database.
- __file__ is defined in both config files at load time, and .ipy files executed with %run.
- %logstart and %logappend are no longer broken.
- Add glob expansion for %run, e.g. %run -g script.py *.txt.
- Expand variables ($foo) in Cell Magic argument line.
- By default, iptest will exclude various slow tests. All tests can be run with iptest –all.
- SQLite history can be disabled in the various cases that it does not behave well.
- %edit works on interactively defined variables.
- editor hooks have been restored from quarantine, enabling TextMate as editor, etc.
- The env variable PYTHONSTARTUP is respected by IPython.
- The %matplotlib magic was added.
- The --matplotlib command line flag was also added.</changelog>
<changelog author="jmatejek@suse.com" date="1407412800">- CVE-2014-3429-cross-domain.patch - RCE in IPython Notebook via
  cross-origin websocket connection
  (CVE-2014-3429, bnc#887577)</changelog>

</package>
<package pkgid="303eeb94511ec0fe90d3b315601a6af02cde58fe8ce9127776348867710641e5" name="IPython-doc" arch="noarch">
    <version epoch="0" ver="1.0.0" rel="2.7.1"/>

<changelog author="coolo@novell.com" date="1249819200">- new new python macros</changelog>
<changelog author="matejcik@suse.cz" date="1249992000">- removed useless item from filelist
- switched to noarch</changelog>
<changelog author="sbrabec@suse.cz" date="1293624000">- Updated python-wxWidgets name.</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1310817600">- updated to 0.10.2
  * This is a minor bugfix and latst release of the 0.10.x series.
  * Closing of github ticket #185, a major regression we had
    in 0.10.1 where pylab mode with GTK was not working correctly,
    hence plots were blocking with GTK.  Since this is the default matplotlib
    backend on Unix systems, this was a major annoyance for many users.  Many
    thanks to Paul Ivanov for helping resolve this issue.
  * Fix IOError bug on Windows when used with -gthread.
  * Work robustly if $HOME is missing from environment.
  * Better POSIX support in ssh scripts (remove bash-specific idioms).
  * Improved support for non-ascii characters in log files.
  * Work correctly in environments where GTK can be imported but not started
    (such as a linux text console without X11).</changelog>
<changelog author="ocefpaf@yahoo.com.br" date="1312113600">- updated to 0.11
  IPython 0.11 is a *major* overhaul of IPython, two years in the making.  Most
  of the code base has been rewritten or at least reorganized, breaking backward
  compatibility with several APIs in previous versions.
  Since the internal APIs have changed so much, projects using IPython as a
  library (as opposed to end-users of the application) are the most likely to
  encounter regressions or changes that break their existing use patterns.
  A quick summary:
  * Standalone Qt console.
  * High-level parallel computing with ZeroMQ.
  * New model for GUI/plotting support in the terminal.
  * A two-process architecture.
  * Vim integration.
  * Integration into Microsoft Visual Studio
  * Improved unicode support.
  * Python 3 support.
  * New profile model.
  * SQLite storage for history.
  * New configuration system.
  * Pasting of code with prompts.</changelog>
<changelog author="einar@heavensinferno.net" date="1328702400">- updated to 0.12
  IPython 0.12 contains several major new features, as well as a large amount
  of bug and regression fixes.
  New features:
  * An interactive browser-based Notebook with rich media support
  * Two-process terminal console
  * Tabbed QtConsole
  * Full Python 3 compatibility
  * Standalone Kernel
  * PyPy support</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1328788800">- added python3-IPython package</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335528000">- added build dependency python3-2to3
  without it files just not converted silently</changelog>
<changelog author="toddrme2178@gmail.com" date="1335528001">- Update to 0.12.1
  Bugfixes
- Comment out non-existant wxpython-related python 3 packages
- Change python 3 binary names so they don't conflict with the
  python 2 ones
- Fix removal of hidden git info in python3 package
- Small python 2 package spec file cleanups</changelog>
<changelog author="highwaystar.ru@gmail.com" date="1335614400">- added python-tornado Requires for ipython notebook mode</changelog>
<changelog author="toddrme2178@gmail.com" date="1335787200">- Fix building python 3 package on openSUSE 11.4 x86_64</changelog>
<changelog author="cfarrell@suse.com" date="1336046400">- license update: BSD-3-Clause
  See http://ipython.org/ipython-doc/dev/about/license_and_copyright.html</changelog>
<changelog author="einar@heavensinferno.net" date="1351080000">- Update to 0.13.1
  - New major upstream release
  - Major notebook improvements
  - Major improvements to the Qt console
  - Improvement of parallel tools</changelog>
<changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
<changelog author="lbeltrame@kde.org" date="1363348800">- Add ipython-fix-loading-newer-pyqt.diff to make Qt console
  load with PyQt 4.10 (fix already upstream)</changelog>
<changelog author="jmatejek@suse.com" date="1368792000">- update to 0.13.2
  - bugfix-release, 52 bugs fixed
  - improved compatibility with new Qt versions
    (fixes bnc#819931, obsoletes ipython-fix-loading-newer-pyqt.diff)
- drop conditionals for too-old SUSE releases
- shorten summary</changelog>
<changelog author="toddrme2178@gmail.com" date="1370433600">- Install .desktop files
- Add buildrequires so there is proper detection of dependencies
  at build-time
- Add python-distribute buildrequires for proper dependency
  detection
- Build full documentation in python 2 version
  (not yet working with python 3)
- Include license file and README file
- Change suggests to recommends since suggests are not well
  supported
- Manually-specify executable and manual file names to better
  identify conflicts between python 2 and python 3 versions</changelog>
<changelog author="tzotsos@opensuse.org" date="1376049600">- update to 1.0.0
- The principal milestone is the addition of IPython.nbconvert.
- Added IPython.kernel for all kernel-related code.
- Removed the frontend subpackage, as it caused unnecessary depth.
- The IPython sphinx directives are now installed in IPython.sphinx.
- The input transformation framework has been reworked.
- Exception types can now be displayed with a custom traceback.
- A new command, ipython history trim can be used to delete everything but the last 1000 entries in the history database.
- __file__ is defined in both config files at load time, and .ipy files executed with %run.
- %logstart and %logappend are no longer broken.
- Add glob expansion for %run, e.g. %run -g script.py *.txt.
- Expand variables ($foo) in Cell Magic argument line.
- By default, iptest will exclude various slow tests. All tests can be run with iptest –all.
- SQLite history can be disabled in the various cases that it does not behave well.
- %edit works on interactively defined variables.
- editor hooks have been restored from quarantine, enabling TextMate as editor, etc.
- The env variable PYTHONSTARTUP is respected by IPython.
- The %matplotlib magic was added.
- The --matplotlib command line flag was also added.</changelog>
<changelog author="jmatejek@suse.com" date="1407412800">- CVE-2014-3429-cross-domain.patch - RCE in IPython Notebook via
  cross-origin websocket connection
  (CVE-2014-3429, bnc#887577)</changelog>
<changelog author="toddrme2178@gmail.com" date="1443441600">- Add CVE-2015-6938-xss-vulnerability.patch
  Fix for XSS security vulnerability
  CVE-2015-6938, bnc#945828</changelog>

</package>
<package pkgid="62344360541c53e2ddf97a3f235c4caf41b4f97ffde1e47f3f80c874cc670291" name="ImageMagick" arch="i586">
    <version epoch="0" ver="6.8.6.9" rel="2.12.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- fix missed variable expansion</changelog>
<changelog author="vjt@openssl.it" date="1360152001">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>

</package>
<package pkgid="7619b7d691aaddbf8a027c7d0e541b349e2bae252d0729af9227365e3a659621" name="ImageMagick" arch="i586">
    <version epoch="0" ver="6.8.6.9" rel="2.16.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>

</package>
<package pkgid="2bc866395d642a7264107504c0dd3f6db9eff8d500fcf804684f07d3fed14bf9" name="ImageMagick" arch="i586">
    <version epoch="0" ver="6.8.6.9" rel="2.24.1"/>

<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>

</package>
<package pkgid="31d6ba5f4658fc83d4a49c068a898ee99738062b7eb54752de79438343109afb" name="ImageMagick" arch="i586">
    <version epoch="0" ver="6.8.6.9" rel="2.28.1"/>

<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>
<changelog author="pgajdos@suse.com" date="1415880000">- security update CVE-2014-8716 [bnc#905260]
  * ImageMagick-CVE-2014-8716.patch</changelog>

</package>
<package pkgid="9b7b09da8bc65ef34c203976f8af66645a2c8b355f37f82ef4238e23dd896752" name="ImageMagick" arch="src">
    <version epoch="0" ver="6.8.6.9" rel="2.12.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- fix missed variable expansion</changelog>
<changelog author="vjt@openssl.it" date="1360152001">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>

</package>
<package pkgid="644a83e2e903e186047b843c6ba7629090581aecdb51fe2eb5959b19273c19dd" name="ImageMagick" arch="src">
    <version epoch="0" ver="6.8.6.9" rel="2.16.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>

</package>
<package pkgid="412ca9e379ed54dc5eb33ce9dac0e59a682140fc9ca41e3f9d2d59567a0b7aa4" name="ImageMagick" arch="src">
    <version epoch="0" ver="6.8.6.9" rel="2.24.1"/>

<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>

</package>
<package pkgid="06b92252e0aae9e6fda12788c83aff4d29ffdb2957a4551dfee0b62aa582893e" name="ImageMagick" arch="src">
    <version epoch="0" ver="6.8.6.9" rel="2.28.1"/>

<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>
<changelog author="pgajdos@suse.com" date="1415880000">- security update CVE-2014-8716 [bnc#905260]
  * ImageMagick-CVE-2014-8716.patch</changelog>

</package>
<package pkgid="5606497c40d66656f6dec97ab336345c1cde5bc82a2acd6b366a1961af690c56" name="ImageMagick" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.12.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- fix missed variable expansion</changelog>
<changelog author="vjt@openssl.it" date="1360152001">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>

</package>
<package pkgid="b198954271f92a9941bb99073c53886f45d9f40b860cfac64759da852b386610" name="ImageMagick" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.16.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>

</package>
<package pkgid="dae71572cafb239fe8dbe7afee8049c51eac691bea0a047458ab409b48a6e565" name="ImageMagick" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.24.1"/>

<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>

</package>
<package pkgid="45a60454b6f40e70696568bea5ebd25f7575f08e5bb8d4e45a5105122620dcac" name="ImageMagick" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.28.1"/>

<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>
<changelog author="pgajdos@suse.com" date="1415880000">- security update CVE-2014-8716 [bnc#905260]
  * ImageMagick-CVE-2014-8716.patch</changelog>

</package>
<package pkgid="4e7e254ce566085662ad1abe9c6403a644686653e54313697dc86c8d50e71a3a" name="ImageMagick-devel" arch="i586">
    <version epoch="0" ver="6.8.6.9" rel="2.12.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- fix missed variable expansion</changelog>
<changelog author="vjt@openssl.it" date="1360152001">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>

</package>
<package pkgid="253ac68436a5faaafd7fe787ce89e4a0888d09b555f621a157717e62782d4a69" name="ImageMagick-devel" arch="i586">
    <version epoch="0" ver="6.8.6.9" rel="2.16.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>

</package>
<package pkgid="730cc54259114f9c52def97acca9407edac01233e4179275b788ef3021e1896c" name="ImageMagick-devel" arch="i586">
    <version epoch="0" ver="6.8.6.9" rel="2.24.1"/>

<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>

</package>
<package pkgid="6e7b51e9b83f217b1c97a84e03afcc56efd0c1d2354cf85cb2e61d3742128f61" name="ImageMagick-devel" arch="i586">
    <version epoch="0" ver="6.8.6.9" rel="2.28.1"/>

<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>
<changelog author="pgajdos@suse.com" date="1415880000">- security update CVE-2014-8716 [bnc#905260]
  * ImageMagick-CVE-2014-8716.patch</changelog>

</package>
<package pkgid="b78e02a1ce45a233f4463fee860faeaf16d5e0b2a73ddcfa580de32853b0cd90" name="ImageMagick-devel" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.12.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- fix missed variable expansion</changelog>
<changelog author="vjt@openssl.it" date="1360152001">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>

</package>
<package pkgid="1d491ff0701f056517bda23a027eda6e07fdbfd1b288a1b2581a829479a7a08a" name="ImageMagick-devel" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.16.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>

</package>
<package pkgid="64e2fd0b34f21f83063c3da24b6a97224c653c3ce0e9aa476901766d8b2f14a8" name="ImageMagick-devel" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.24.1"/>

<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>

</package>
<package pkgid="c964ede64aaa0e73e2504622433a3108201f636301c84f0055c22d2cacdf8067" name="ImageMagick-devel" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.28.1"/>

<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>
<changelog author="pgajdos@suse.com" date="1415880000">- security update CVE-2014-8716 [bnc#905260]
  * ImageMagick-CVE-2014-8716.patch</changelog>

</package>
<package pkgid="7b9f0e5de46dcc9b89fd747b98ec13e2784aad16489da9533ce7e7f86cb7cb11" name="ImageMagick-devel-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.12.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- fix missed variable expansion</changelog>
<changelog author="vjt@openssl.it" date="1360152001">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>

</package>
<package pkgid="d6205e6ad2566f05f95fd9001167d2f97ad3af4d32211951a0bdc98edc4c4b0c" name="ImageMagick-devel-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.16.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>

</package>
<package pkgid="034ae1b129e7edf41f8e72adc3d7c77708b90e1edbafe5bcf57288e42570f4e9" name="ImageMagick-devel-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.24.1"/>

<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>

</package>
<package pkgid="8e110c0ebdd767b3db20005690820b1ed46b479ae7a64ccde8603812ea6ce2e7" name="ImageMagick-devel-32bit" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.28.1"/>

<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>
<changelog author="pgajdos@suse.com" date="1415880000">- security update CVE-2014-8716 [bnc#905260]
  * ImageMagick-CVE-2014-8716.patch</changelog>

</package>
<package pkgid="df7329e2df941a2fba187de090720aa5f2a9b7f1bf98856292e473ef80f71882" name="ImageMagick-doc" arch="noarch">
    <version epoch="0" ver="6.8.6.9" rel="2.12.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- fix missed variable expansion</changelog>
<changelog author="vjt@openssl.it" date="1360152001">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>

</package>
<package pkgid="9855fc7600383866878afb87f5d786cdf6ad1cc937a3f7a01464860f5cd03ad0" name="ImageMagick-doc" arch="noarch">
    <version epoch="0" ver="6.8.6.9" rel="2.16.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>

</package>
<package pkgid="81af20fe79cee11481b3a9dd085f39b9845b40fa2aad840bee1932f2396f3d70" name="ImageMagick-doc" arch="noarch">
    <version epoch="0" ver="6.8.6.9" rel="2.24.1"/>

<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>

</package>
<package pkgid="b9cb5541081cca65370b92239ff165acea3effb63af78c66b8e3e68943633195" name="ImageMagick-doc" arch="noarch">
    <version epoch="0" ver="6.8.6.9" rel="2.28.1"/>

<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>
<changelog author="pgajdos@suse.com" date="1415880000">- security update CVE-2014-8716 [bnc#905260]
  * ImageMagick-CVE-2014-8716.patch</changelog>

</package>
<package pkgid="8d9c696afcc36fdca48670efb41e6c7b8f6c40a23964689bdca6f116bfff4ca5" name="ImageMagick-extra" arch="i586">
    <version epoch="0" ver="6.8.6.9" rel="2.12.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- fix missed variable expansion</changelog>
<changelog author="vjt@openssl.it" date="1360152001">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>

</package>
<package pkgid="f12b375b55943ec1de2bc56df13c6f927a28db0bfddfd34c1dd58ceb4a9c5c4d" name="ImageMagick-extra" arch="i586">
    <version epoch="0" ver="6.8.6.9" rel="2.16.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>

</package>
<package pkgid="0a0fcb1f677a68d882f465b3c04e89c9ae1b4fc1a5747019c9017db0f2809425" name="ImageMagick-extra" arch="i586">
    <version epoch="0" ver="6.8.6.9" rel="2.24.1"/>

<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>

</package>
<package pkgid="334554ba31ef3a5b8bbee3cbdaa3ac50ec4f3eb82df854e2b99c8ef0b1a93db8" name="ImageMagick-extra" arch="i586">
    <version epoch="0" ver="6.8.6.9" rel="2.28.1"/>

<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>
<changelog author="pgajdos@suse.com" date="1415880000">- security update CVE-2014-8716 [bnc#905260]
  * ImageMagick-CVE-2014-8716.patch</changelog>

</package>
<package pkgid="bb86880b86570a0869e17d63cfe566d3f9186e4eb2160773d154edca63133fe9" name="ImageMagick-extra" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.12.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- fix missed variable expansion</changelog>
<changelog author="vjt@openssl.it" date="1360152001">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>

</package>
<package pkgid="6ca21522c2611ef07256bfd179029da9c5cdd5ef072fce84b6e24ea4118920c8" name="ImageMagick-extra" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.16.1"/>

<changelog author="vjt@openssl.it" date="1360152000">- name library packages after the new -QN library names (thanks dstoecker)
- depend on newer libtiff</changelog>
<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>

</package>
<package pkgid="876a227b4daeead02c6196c5a94b61f14ac447f5a484f8926829b221476d5374" name="ImageMagick-extra" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.24.1"/>

<changelog author="pgajdos@suse.com" date="1361361600">- use versioned /etc/ImageMagick* to allow parallel installation
  of libMagickCore</changelog>
<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>

</package>
<package pkgid="02f09e8a7e0f6abdc4ba798a7ee03f0e24747a6de638a90dd89caa46fd59db13" name="ImageMagick-extra" arch="x86_64">
    <version epoch="0" ver="6.8.6.9" rel="2.28.1"/>

<changelog author="coolo@suse.com" date="1364126400">- fix baselibs.conf</changelog>
<changelog author="pgajdos@suse.com" date="1364558400">- update to 6.8.4-0:
  * dropped ImageMagick-6.8.2.4-revert-r9087-montage-signatures.patch,
    issue is almost fixed -&gt; new test-signatures.patch,
    see followups in
    http://www.imagemagick.org/discourse-server/viewtopic.php?f=2&amp;t=22479
  * created rpath.patch
  * created dont-build-in-install.patch
- upstream changes
  * Do not write zero-length TIFF tags
  * Do not split words for caption
  * The -blur, -guassian-blur, and -sharpen are now convenience methods
    for -morphology convolve.
  * etc. see ChangeLog</changelog>
<changelog author="coolo@suse.com" date="1365336000">- add ImageMagick-6.8.4.0-fix-wand.pc.patch to fix build of e.g.
  emacs and xine-lib, who rely on pkg-config --libs Wand returning
  actually MagickWand and not MagickCore (looks like a copy&amp;paste
  error of upstream)</changelog>
<changelog author="pgajdos@suse.com" date="1368446400">- update to 6.8.5-6:
  * fixed 'Sometimes an sRGB image is masquerading as grayscale'
  * fixed 'The stream utility no longer faults when exporting float pixels'
  * Labels no longer overflow
  * Change the sample JPEG quantization table xml to something that works
    really well with 2x2 Chroma subsampling around quality 75.
  * Eliminate whitespace from image properties that hold PNG chunk data.
  * etc. see ChangeLog
- remove fix-wand.pc.patch, the issue is fixed upstream
- remove test-signatures.patch, the issue is fixed upstream</changelog>
<changelog author="pgajdos@suse.com" date="1369137600">- update to 6.8.5-7:
  * fixes reading XPM</changelog>
<changelog author="pgajdos@suse.com" date="1369310400">- workaround: fix reading xpm which uses symbolic color names which
  are said to be not XPMCompliant
  * http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- mark no-XPMCompliance.patch as suse specific
  http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&amp;t=23462</changelog>
<changelog author="pgajdos@suse.com" date="1371470400">- use AllCompliance instead of X11Compliance to cover also 'None'
  [bnc#825151]
  * adjusted no-XPMCompliance.patch</changelog>
<changelog author="pgajdos@suse.com" date="1375790400">- updated to 6.8.6-7
  * Fix memory leak in CloneImageArtifacts and CloneImageProfiles.
  * JPEG ICC color profile requires null after ICC tag
  * etc.
- employ gpg-offline</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 6.8.6-9
  * Fixed infinite loop with jpeg:extent.
  * Fixed performance issue when converting jpeg to png.
  * Added "-define bmp:format=bmp2|bmp3|bmp4" option.
  * etc. see ChangeLog</changelog>
<changelog author="pgajdos@suse.com" date="1380542400">- fix build (find doesn't support -perm +mode)</changelog>
<changelog author="pgajdos@suse.com" date="1380542401">- setting quantum depth to 16 [bnc#840825]</changelog>
<changelog author="coolo@suse.com" date="1380628800">- fix baselibs.conf for previous change</changelog>
<changelog author="pgajdos@suse.com" date="1380715200">- documentation back to -doc package (bnc#841472)</changelog>
<changelog author="dvaleev@suse.com" date="1380715201">- disable mat tests for powerpc bnc#843673 (disable_mat_test.patch)</changelog>
<changelog author="pgajdos@suse.com" date="1380801600">- use fdupes -s [bnc#841472]</changelog>
<changelog author="pgajdos@suse.com" date="1392724800">- security update, fixes [bnc#863838]
- added patches:
  * ImageMagick-6.8.6.9-CVE-2014-2030.patch
  * ImageMagick-6.8.6.9-CVE-2014-1958.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405944000">- enable fft support [bnc#885334]</changelog>
<changelog author="pgajdos@suse.com" date="1415102400">- security update: CVE-2014-8354, CVE-2014-8355, CVE-2014-8562
  * ImageMagick-CVE-2014-8354.patch [bnc#903204]
  * ImageMagick-CVE-2014-8355.patch [bnc#903216]
  * ImageMagick-CVE-2014-8562.patch [bnc#903638]</changelog>
<changelog author="pgajdos@suse.com" date="1415880000">- security update CVE-2014-8716 [bnc#905260]
  * ImageMagick-CVE-2014-8716.patch</changelog>

</package>
<package pkgid="4b89d3db2e3aa67fe97c1061d728dab63f969bd834ebbbc56d6624945c47a122" name="Mesa" arch="i586">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="821ba6a3afd548fb198e3658da61e294648c4100c576cb5133b475e9d6fdccff" name="Mesa" arch="i586">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="e5badbcf63a55ddeee5c0146900ccc66679d35d5e0c85313854b88b2fedad922" name="Mesa" arch="src">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="030f593a37293016effaafc94bea43155648c550c68b679b4dc9164dd15b0a4c" name="Mesa" arch="src">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="d96f30502e6a97cff2b9f811d1d34786983a84c19eef1c8e758982f98b90a347" name="Mesa" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="9b2bf205b39148e935accce34844111b8dd5e493fbbd92101933bc0874c51637" name="Mesa" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="1639eee02306d17ae69c2a02cc1246c993ff7d14d9849fbda50bddb536bcf516" name="Mesa-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="8c6bfd2d42979347934079a1b87916e890d759e084311e48e945ed0da355ec43" name="Mesa-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="97b89a7c667bdb1fcf21fb3648a833c402663ee049447e21d74bc5574932ce4a" name="Mesa-devel" arch="i586">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="7c68f304a37ce3b99cd07893622974b70c520e988d003ddee212df7fc816fa2e" name="Mesa-devel" arch="i586">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="8a9ee8f4b8e6494e1b0fbf24913ae690b062f8836e2b74d174b68567d05a667c" name="Mesa-devel" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="b09d4060b6cf61cbac38bb6597ab098444412f857972979a54cdd3e285120b9f" name="Mesa-devel" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="c17f1a16dfd5f6e5d3996212b3719e22bfa3aec13bec8a0cc0712b302fd3e15a" name="Mesa-devel-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="cff7592300013365d4387a434ea67dd0484114af7672825af49891ddfbcb294f" name="Mesa-devel-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="f082789e284014bc2a1c579d8ffe41b2e3785454f96d684364e7fe268881cde7" name="Mesa-libEGL-devel" arch="i586">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="44548b76f740a8272c277a785c41bb332d3c52749c6125d9c39e8228555f5ff4" name="Mesa-libEGL-devel" arch="i586">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="f7f72e6e4bdd7fb904f22712f30e2bba7600c416f8fd505f38f6c7e0dd0439ef" name="Mesa-libEGL-devel" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="4956edfd8752597939feb5dfc76155f5a6c75b3879c085e2265d2083983cc461" name="Mesa-libEGL-devel" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="47c14584f09590fadf80eb952cc87a03abcd7b77ddcdced4ba5c798b3bb47d18" name="Mesa-libEGL-devel-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="208f29d19406137017134f365fe3d6142d86967df91bf23587b756b591c87632" name="Mesa-libEGL-devel-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="c789ca3bb2bf4bfe24ce870614188dab828ab1181f494bd117962129181fb123" name="Mesa-libEGL1" arch="i586">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="034125d2f9f58d61a599b52a2d5590ac87ee4ddceaf2832d8ba96d41708c0c0b" name="Mesa-libEGL1" arch="i586">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="1f665a36d7f4ef0f3cbf56fafb7daca7c7d2db30ef94a92e90a0e345f4884f1a" name="Mesa-libEGL1" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="6194266029f65ff6993406e33ad952f9436fa41192034f4b0be47c1a691e5b3a" name="Mesa-libEGL1" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="5cc08f459895d6155ca63daeafc6c935d3030f4efa3c998fd681355c37f6f63b" name="Mesa-libEGL1-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="2154b46b18eabb9367ca638954266b2532974a14981ead01e696bb37371ca004" name="Mesa-libEGL1-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="56b37d09b7822099f4c83f6c97c9f66cb01fbc2a8122477fd3afa6de2be98fb3" name="Mesa-libGL-devel" arch="i586">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="0617e1e5fbd9a3302aeaec99c65e342416fabf8c83691359ad07af8eaf7439da" name="Mesa-libGL-devel" arch="i586">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="27ee0886bb369fcadea9a5952a39f67eadfe1c29cc93f2c40486cf60b5cf9048" name="Mesa-libGL-devel" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="28d9188ed9eac2f2c37c3bcbed7ec869c4bc98d265af9f6c6d14988d3e801138" name="Mesa-libGL-devel" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="1df0d97fc0ea44266218a1e85e959b7451a97f08d971d7c67da4670df54aacc9" name="Mesa-libGL-devel-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="46ee154bf3ba64cc5b9a017d237741bb853e24d8f4c9186f6553397577f8396b" name="Mesa-libGL-devel-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="57562ebf90742eab026a8a7a50a552b5bac958b3144122cf7921f1c053aca3dd" name="Mesa-libGL1" arch="i586">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="46c144f47b49cddc1dbfaefff46121c26d8da084b11a2ccff0e4f0688b71eb42" name="Mesa-libGL1" arch="i586">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="068911cbe914c24373ecb3e7be64b1298fdd5c5727ccb5e771ce4636fc770c96" name="Mesa-libGL1" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="e310a5fb34c5676c3373c2dec32d1604a2e28e813d20ed3890614ec5fd12fa42" name="Mesa-libGL1" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="ad17a059fa383d4c81d54e003ddd00c3cbd80b51e53b1e570b5656e6d53e3cd0" name="Mesa-libGL1-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="12b9d491224046311af56faa3a21d3b1ee41b4abc265853a31618d491d58c0e3" name="Mesa-libGL1-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="982f9395431bcda75d87c2cad2923cc32130313ef33168925b477d4ca8447e29" name="Mesa-libGLESv1_CM-devel" arch="i586">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="89f46cf187a319b3ffeb0502eebc50f579520482bdf30d6c78a0f6eb41c042a6" name="Mesa-libGLESv1_CM-devel" arch="i586">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="b30ce8f835fd05426958a83101f9dc0593bb8c52c84da471762638c76033963b" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="6ba9bba095340ce64ea32d08988f19a0f60e7cf47aac6a264f5d061bf79db5f3" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="0843c46e0f6afe72909622933e978ad0121b5c77862431670c1f0ea68ae94bfb" name="Mesa-libGLESv1_CM-devel-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="cc2dc9415c883dac8119c852e42c65608ea68d965ef980b344c24ebae928bcdd" name="Mesa-libGLESv1_CM-devel-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="1b8928edce5632f58ef267b12e035c74f68d64b18212f613b0c4f1a13c52841b" name="Mesa-libGLESv1_CM1" arch="i586">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="eff7e4b3254299d5e7dd0161057915796e9e033ac5624fd392f3c6955c4ec238" name="Mesa-libGLESv1_CM1" arch="i586">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="e05de91c80b3082f087b7c77ce129fb8a8f4cc5c6b0aa52e24f577693893410b" name="Mesa-libGLESv1_CM1" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="7998b5fc8938b22bdfd0f3b4a522152147214dd1b78445dab08a65f5b003fe3c" name="Mesa-libGLESv1_CM1" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="6a0de2ff71ba0f7f429f14da5ea567b8e1fd0084a667aa6058d69e80193da6a9" name="Mesa-libGLESv1_CM1-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="a2f73721f8c98a97dc8c1491b39afb350d7235229418ad222346c6d8618ff4bb" name="Mesa-libGLESv1_CM1-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="f57bbf81ce4155a4c89740d7a0135e64d10ba7cf75c10b89131d69bdcf8e8497" name="Mesa-libGLESv2-2" arch="i586">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="1401b26a1e3baae5f77708490a11a993012cecf277e89aa94d2e9fcd649568b8" name="Mesa-libGLESv2-2" arch="i586">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="4a50a5d18cf8273eb872efbe649ea1b2835d69ab832b6436650066fb5d433092" name="Mesa-libGLESv2-2" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="02554741eb014ac743fa6ed754a68ab9fc884fc35333da7ecaa2692c1aeed6d1" name="Mesa-libGLESv2-2" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="0d456abd7d85294dcfc1ee1175758d241a723b5c9fffa34b96747934011ac8dc" name="Mesa-libGLESv2-2-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="41177edcf5cadef1b92ef1ba7a7b85edca945af196c8f6d2e84e2a45582b94e4" name="Mesa-libGLESv2-2-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="817b01efab5db81df5fa7361b8f82d784dc640e216a858d1e2e3406bc3b0b8cf" name="Mesa-libGLESv2-devel" arch="i586">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="1971900d39890f450003e7c6c3311e399fb5dc814615c755ca49b284270fa8cf" name="Mesa-libGLESv2-devel" arch="i586">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="bc5f92f9b055b94f9a15aec73ddc63ee7c789d66197d9d06a36fdd30120203e7" name="Mesa-libGLESv2-devel" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="ca3bab2bc5cf87443d07f157be95f1a480e2650ce7d02fb2b2059b0efc332860" name="Mesa-libGLESv2-devel" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="686304ccf6a9cd40609b0afcfcc8b8431345a903149d37ebaf2cd627cc58742e" name="Mesa-libGLESv2-devel-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="9d3e61c0d4dd9b3783ba369e215c47bfd55d61df48423fe1e90e98a2d8c39235" name="Mesa-libGLESv2-devel-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="afb0c042d20e97101246060ad01a6a79f3a56d2b9f9b49619dbfe9633e5cb0f8" name="Mesa-libGLESv3-devel" arch="i586">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="51453d70360ce5501f109eb475336bc521cde4daa74d76fa2f60d4f2088142f9" name="Mesa-libGLESv3-devel" arch="i586">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="8992f71e2499804029d497bf2565df4c5f2828c3c74fda622589db3156b16cb2" name="Mesa-libGLESv3-devel" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="ec87b97fe1a0bc58bee4310119ff5275fa6283ab552b9497f0b534c2fccf065e" name="Mesa-libGLESv3-devel" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="b996516be8aaf833bdb10b349f94a19b59f7d40dd0a438022496ae8a09305501" name="Mesa-libglapi-devel" arch="i586">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="e93f4ede9f62d699ae5c9a4a6530bd78f1de2ef776a8e2a1cf85bcf5dc0a0022" name="Mesa-libglapi-devel" arch="i586">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="5d055f75643c9f05962c7568fdf91cd27b941505b0bb71add6186230f9de6e7f" name="Mesa-libglapi-devel" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="594a552103b4d15b83b0e1b8bc751f2ac433549afd945dc8ec8a7a9f37959c0b" name="Mesa-libglapi-devel" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="25d7d29a8f85368450451138342a0c6fdb6045dd3e56afb343e8f70463a2006a" name="Mesa-libglapi-devel-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="2161e182b2276aeba3c6412ecd26e8d676a6fb372af966baadfc6b13e2685f1f" name="Mesa-libglapi-devel-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="d148d261833eefb3f7894b6468826e5521be55509a397038b53e91f41c99621a" name="Mesa-libglapi0" arch="i586">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="5d8b906ae03d48282e99c409f5d10927d3510aaed2a7e7058e0d1ce9ae08db88" name="Mesa-libglapi0" arch="i586">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="76b4522acfcf3464615de4a919e67468558af1e97ff0caab1a1ec2cca223d288" name="Mesa-libglapi0" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="c5eed9a83d4da52696f54372bfcec82f3ccb434ae27a879724f0bada26e6ef8c" name="Mesa-libglapi0" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="0adcfd5ba6280bc788e46665f6a2794503e0f00453dc1e3a87dfdb7d4549a371" name="Mesa-libglapi0-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.3" rel="61.9.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Update to 9.2 rc2
  * Documentation, glsl and buildsystem fixes since rc1
- baselibs.conf cleanup: adjusted to current spec</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259202">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>

</package>
<package pkgid="daa8b10ca24a295530b62310a518ac87331b4cf6ac38b03a10dbba78eff0c295" name="Mesa-libglapi0-32bit" arch="x86_64">
    <version epoch="0" ver="9.2.5" rel="61.13.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1377259200">- Fix baselibs from previous change (there is no Mesa-libEGL1-devel),
  but Mesa-libEGL-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377259201">- Stop versioning libgbm1/devel and libwayland-egl/devel by itself,
  they now follow general Mesa version</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1377604800">- Update to final version 9.2:
  Mesa 9.2 has been released! Mesa 9.2 is a feature release that includes
  many updates and enhancements.
- New features:
  + GL_ARB_shading_language_420pack in all drivers that support GLSL 1.30.
  + GL_ARB_texture_buffer_range
  + GL_ARB_texture_multisample
  + GL_ARB_texture_storage_multisample
  + GL_ARB_texture_query_lod
  + Enable GL_ARB_texture_storage on radeon, r200, and nouveau
  + GL_EXT_discard_framebuffer in all OpenGL ES (all versions) drivers
  + GL_EXT_framebuffer_multisample_blit_scaled on i965
  + Added new freedreno gallium driver
  + OSMesa interface for gallium llvmpipe/softpipe drivers
  + Gallium Heads-Up Display (HUD) feature for performance monitoring
  + Added support for UVD (2.2 and 3.0) video decoding on r600g and radeonsi
    through VDPAU (requires Kernel 3.10 or later)
- Changes:
  + Removed d3d1x state tracker (unused, unmaintained and broken)
  + Removed GL_EXT_clip_volume_hint because no driver had enabled it since 2007.
  + Removed GL_MESA_resize_buffers because it was only really implemented by the
    (unsupported) GDI driver.
  + GL_EXT_separate_shader_objects has been removed from all Gallium drivers,
    because it disallows a critical GLSL shader optimization.
    GL_ARB_separate_shader_objects doesn't have this issue.
  + i965 Gen6+ requires Kernel 3.6 or later. (92d2f5a)</changelog>
<changelog author="idonmez@suse.com" date="1377864000">- Enable llvmpipe and xa on s390x</changelog>
<changelog author="duwe@suse.com" date="1378728000">- u_wayland-egl-pc-require-wayland.patch: after finding wayland
  for egl, make sure its pkconfig is used as well.</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814400">- Drop upstreamed patches as proposed by Johannes Obermayr:
  + Patch14: u_mesa-glapi_dispatch.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=5ea43e6
  + Patch17: u_mesa-9.0-i965-Make-sure-we-do-render-between-two-hiz-flushes.patch
    Upstream: http://cgit.freedesktop.org/mesa/mesa/commit/?id=1dfea55</changelog>
<changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378814401">- Remove custom drirc, ship the upstream drirc</changelog>
<changelog author="schwab@suse.de" date="1378987200">- drirc is only installed if there are hardware DRI drivers</changelog>
<changelog author="duwe@suse.com" date="1379073600">- wayland-egl-pc-require-wayland is now mainline</changelog>
<changelog author="sndirsch@suse.com" date="1379332800">- updated to latest available version of
  * u_mesa-8.0-llvmpipe-shmget.patch
  * u_mesa-8.0.1-fix-16bpp.patch
  and applying it now in the opposite order.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379419200">- Added U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch from
  upstream -- aligns the gfx, compute, and dma IBs to 8 DW boundries.
  Additionally, r6xx hardware requires at least 4
  DW alignment to avoid a hw bug.  This also aligns the DMA
  IBs to 8 DW which is required for the DMA engine.</changelog>
<changelog author="sndirsch@suse.com" date="1379678400">- Disable u_mesa-8.0-llvmpipe-shmget.patch,
  u_mesa-8.0.1-fix-16bpp.patch since these are considered wrong by
  the author
- remove libIndirectGL (packages), since it is most likely no
  longer used by anyone ...
- use --enable-osmesa, since we no longer have this extra build
  for libIndirectGL</changelog>
<changelog author="idonmez@suse.com" date="1379937600">- Enable llvmpipe on PPC64</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380974400">- Update to version 9.2.1
  * Use of uninitialized stack variable with brw_search_cache()
  (fdo#66779)
  * Valgrind errors in mesa (fdo#68233)
  * Automatic mipmap generation with texture compression produces
  borders that fade to black (fdo#68250)
  * Unigine demo crash (fdo#68637)
  * GLSL ES: structs members can't have precision qualifiers
  anymore in 9.2 (fdo#68753)
  * Piglit tex-shadow2drect fails (fdo#69525)
- Dropped U_radeon-winsys-pad-IBs-to-a-multiple-of-8-DWs.patch,
  U_wayland-egl-pc-require-wayland.patch and
  u_gallium-egl-gbm-use-wayland-cflags.patch they are included in
  this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382184000">- Update to version 9.2.2
  * Valgrind error in program_resource_visitor::recursion, (fdo#69449)
  * glInvalidateFramebuffer fails with GL_INVALID_ENUM (fdo#70411)
  * svga: fix incorrect memcpy src in svga_buffer_upload_piecewise()
  * mesa: consolidate cube width=height error checking
  * mesa: Add missing switch break in invalidate_framebuffer_storage()
  * i965: Don't forget the cube map padding on gen5+.
  * mesa: Fix compiler warnings when ALIGN's alignment is "1 &lt;&lt; value".
  * i965: Fix 3D texture layout by more literally copying from the spec.
  * glsl: Fix usage of the wrong union member in
  program_resource_visitor::recursion.
  * radeonsi: Use 'SI' as the LLVM processor for CIK on LLVM &lt;= 3.3</changelog>
<changelog author="sndirsch@suse.com" date="1382616000">- install libvdpau_{nouveau,r300,r600,radeonsi} package on
  appropriate hardware by default (bnc#847269)</changelog>
<changelog author="sndirsch@suse.com" date="1382702400">- no longer install install libvdpau_r300 subpackage by default and
  update descriptions of libvdpau_{nouveau,r600,radeonsi,softpipe}
  subpackages (bnc#847269)</changelog>
<changelog author="schwab@suse.de" date="1384257600">- Add support for m68k</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1384603200">- Update to version 9.2.3 (bnc#852210)
  * st/mesa: move out of memory check in st_draw_vbo()
  * osmesa: fix broken triangle/line drawing when using float
  color buffer
  * Remove error when calling glGenQueries/glDeleteQueries while
  a query is active
  * Bump version to 9.2.3
  * i965: CS writes/reads should use I915_GEM_INSTRUCTION
  * i965: Fix texture buffer rendering after a whole buffer
  replacement.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_GS_SVB_INDEX.
  * i965: Emit post-sync non-zero flush before
  3DSTATE_DRAWING_RECTANGLE.
  * i965: Also guard 3DSTATE_DRAWING_RECTANGLE with a
  flush in blorp.
  * i965: Move post-sync non-zero flush for 3DSTATE_MULTISAMPLE.
  * i965: Also emit HIER_DEPTH and STENCIL packets when
  disabling depth.
  * i965: Also emit HiZ and Stencil packets when
  disabling depth on Gen6.
  * wayland: Don't rely on static variable for
  identifying wl_drm buffers
  * radeonsi: fix blitting the last 2 mipmap levels of
  compressed textures
  * meta: enable vertex attributes in the context of the
  newly created array object
  * mesa: fixes for MSVC 2013</changelog>
<changelog author="mimi.vx@gmail.com" date="1422187200">- update to version 9.2.5
  * fdo#62142 - Mesa/demo mipmap_limits upside down with running by SOFTWARE
  * fdo#64323 - Severe misrendering in Left 4 Dead 2
  * fdo#66213 - Certain Mesa Demos Rendering Inverted (vertically)
  * fdo#68838 - GLSL: struct declarations produce a "empty declaration warning" in 9.2
  * fdo#69155 - [NV50 gallium] [piglit] bin/varying-packing-simple triggers memory corruption/failures
  * fdo#72325 - [swrast] piglit glean fbo regression
  * fdo#72327 - [swrast] piglit glean pointSprite regression
  * i965/hsw: Apply non-msrt fast color clear w/a to all HSW GTs
  * i965: Add extra-alignment for non-msrt fast color clear for all hw (v2)
  * i965: Gen4-5: Don't enable hardware alpha test with MRT
  * i965: Gen4-5: Include alpha func/ref in program key
  * i965/fs: Gen4-5: Setup discard masks for MRT alpha test
  * i965/fs: Gen4-5: Implement alpha test in shader for MRT
  * st/xorg: Handle new DamageUnregister API which has only one argument
  * mesa/swrast: fix inverted front buffer rendering with old-school swrast
  * glx: don't fail out when no configs if we have visuals
  * swrast: fix readback regression since inversion fix
  * glsl: Don't emit empty declaration warning for a struct specifier
  * nv50: Fix GPU_READING/WRITING bit removal
  * nouveau: avoid leaking fences while waiting
  * nv50: wait on the buf's fence before sticking it into pushbuf
  * nv50: report 15 max inputs for fragment programs
  * r300/compiler/tests: Fix segfault
  * r300/compiler/tests: Fix line length check in test parser
  * fdo#53077 - [IVB] Output error with msaa when both of framebuffer and source color's alpha are not 1
  * st/mesa: fix GL_FEEDBACK mode inverted Y coordinate bug
  * i965: Fix vertical alignment for multisampled buffers.
  * glsl: Fix lowering of direct assignment in lower_clip_distance.
  * freedreno/a3xx: fix color inversion on mem-&gt;gmem restore
  * freedreno/a3xx: fix viewport on gmem-&gt;mem resolve
  * freedreno: add debug option to disable scissor optimization
  * freedreno: update register headers
  * freedreno/a3xx: some texture fixes
  * freedreno/a3xx/compiler: fix CMP
  * freedreno/a3xx/compiler: handle saturate on dst
  * freedreno/a3xx/compiler: use max_reg rather than file_count
  * freedreno/a3xx/compiler: cat4 cannot use const reg as src
  * freedreno: fix segfault when no color buffer bound
  * freedreno/a3xx/compiler: make compiler errors more useful
  * freedreno/a3xx/compiler: bit of re-arrange/cleanup
  * freedreno/a3xx/compiler: fix SGT/SLT/etc
  * freedreno/a3xx: don't leak so much
  * freedreno/a3xx/compiler: better const handling
  * freedreno/a3xx/compiler: handle sync flags better
  * freedreno: updates for msm drm/kms driver
  * mesa: enable GL_TEXTURE_LOD_BIAS set/get</changelog>

</package>
<package pkgid="1723387c1c7ab15cb7e304f729cbf16ad44af8298f4071e535a27a53440ef6c9" name="ModemManager" arch="i586">
    <version epoch="0" ver="1.0.0" rel="3.4.1"/>

<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="dimstar@opensuse.org" date="1321358400">- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Add ModemManager-glib-2.31.patch: fix build with glib 2.31.</changelog>
<changelog author="vuntz@opensuse.org" date="1326196800">- Update to version 0.5.1.95:
  + Better detection of registration state when connecting
  + Added support for more Ericsson modems
  + Many memory leak fixes
  + Ensure Gobi devices are driven by the gobi plugin
  + Added multi-part SMS message support
  + Better handling of requests when modem is disabled
  + USSD fixes for Huawei devices
  + Added support for Nokia Internet Sticks
  + Fixed quirky response handling on some Cinterion modems
  + Fixed CREG response handling on modems that include the RAC
  + Skip sending power-up command if modem is already powered up
  + Added support for Sierra Wireless devices using Icera chips
    (USB305, Lightning)
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Drop ModemManager-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Update to version 0.5.1.96:
  + Fixed sending SMS messages with modems that only support PDU
    mode</changelog>
<changelog author="dimstar@opensuse.org" date="1328702400">- Add ModemManager-use-deprecated.patch: do not warn about using
  deprecated methods. This allows to build against glib &gt;= 2.31.14.
- Add call to autoreconf in %%prep section, as the patch above
  touches m4 files.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Move dbus xml interface files from devel subpackage to main
  subpackage: those files might be needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330257600">- Update to version 0.5.1.97:
  + Fix reading SMS messages in text mode
  + Fix communication with some Nokia phones
- Drop ModemManager-use-deprecated.patch: fixed upstream.
- Remove libtool BuildRequires and call to autoreconf: those were
  only needed for patch above.
- Remove xz BuildRequires now that it comes for free in the build
  system.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 0.5.2.0:
  + Retry sending SMS messages in PDU mode if an error occurs in
    text mode</changelog>
<changelog author="vuntz@opensuse.org" date="1345464000">- Add ModemManager-unsupported-qmi_wwan-ports.patch: fix calls to
  pppd when using the qmi_wwan. Fix bnc#776520.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464001">- Update to version 0.5.995.0:
  + More flexible and reliable port probing and modem setup.
  + New plugin for some Cinterion modems.
  + New plugin for some Iridium satellite modems.
  + New API for modem firmware management.
  + New API for network-provided date and time.
  + New API for indicating remaining PIN/PUK unlock retries.
  + New API for indicating enabled facility locks.
  + Plugins can now suggest and IP timeout value for connection
    managers.
- Drop ModemManager-unsupported-qmi_wwan-ports.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1346241600">- Update to version 0.6.0.0:
  + Minor bugfixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1354017600">- Move udev rules file to the folder specified by udev.pc by
  passing --with-udev-base-dir to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Update to version 0.7.990:
  + More flexible D-Bus API that accounts for the capabilities of
    modern devices.
  + Native support for Gobi and QMI-based Qualcomm devices via
    libqmi.
  + Preliminary support for GPS-based Location Services with some
    devices.
  + More complete messaging API.
  + Fully-featured command-line client (mmcli).
- Add pkgconfig(qmi-glib) BuildRequires: new dependency.
- Create new subpackage libnm-glib0.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Drop rpmlintrc: the privileges are approved in Factory.</changelog>
<changelog author="denicolo@suse.com" date="1370520000">- License update: GPL-2.0+ and GPL-3.0
  Correct license is GPL-2.0+; see COPYING file.
  The cli tool is licensed GPL-3.0+.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.7.991:
  + Bug fixes and improvements on the road to 0.8.0.</changelog>
<changelog author="zaitor@opensuse.org" date="1374235200">- Update to version 1.0.0:
  + More flexible D-Bus API that accounts for the capabilities of
    modern devices.
  + Native support for Gobi and QMI-based Qualcomm devices via
    libqmi.
  + Native support for MBIM-based devices via libmbim.
  + Preliminary support for GPS-based Location Services with some
    devices.
  + More complete messaging API.
  + New libmm-glib client library.
  + New fully-featured command-line client (mmcli).
  + Systemd integration.
  + And various other changes.
- Add pkgconfig(mbim-glib) BuildRequires: new dependency (disabled
  for now).
- Stop passing --with-pppd-plugin-dir=$pppddir to configure, not
  reqcognized anymore.
- Add pkgconfig(systemd) BuildRequires, new dependency.
- Add systemd ModemManger.service to pre, preun, post and postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1378814400">- Enable the ModemManager service. In essence, it's a D-Bus
  service so enabling it in systemd only means to make it known
  and activatable (bnc#839067).</changelog>
<changelog author="oneukum@suse.com" date="1385467200">- add a udev rule to prefer NCM over MBIM in the kernel
  because NM is compiled without support for MBIM (bnc#850675)</changelog>

</package>
<package pkgid="2c9ad14ce4be4421c4e68e0459f9c28812db4ba5caca2f9fdb1fc4ab67ebca41" name="ModemManager" arch="src">
    <version epoch="0" ver="1.0.0" rel="3.4.1"/>

<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="dimstar@opensuse.org" date="1321358400">- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Add ModemManager-glib-2.31.patch: fix build with glib 2.31.</changelog>
<changelog author="vuntz@opensuse.org" date="1326196800">- Update to version 0.5.1.95:
  + Better detection of registration state when connecting
  + Added support for more Ericsson modems
  + Many memory leak fixes
  + Ensure Gobi devices are driven by the gobi plugin
  + Added multi-part SMS message support
  + Better handling of requests when modem is disabled
  + USSD fixes for Huawei devices
  + Added support for Nokia Internet Sticks
  + Fixed quirky response handling on some Cinterion modems
  + Fixed CREG response handling on modems that include the RAC
  + Skip sending power-up command if modem is already powered up
  + Added support for Sierra Wireless devices using Icera chips
    (USB305, Lightning)
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Drop ModemManager-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Update to version 0.5.1.96:
  + Fixed sending SMS messages with modems that only support PDU
    mode</changelog>
<changelog author="dimstar@opensuse.org" date="1328702400">- Add ModemManager-use-deprecated.patch: do not warn about using
  deprecated methods. This allows to build against glib &gt;= 2.31.14.
- Add call to autoreconf in %%prep section, as the patch above
  touches m4 files.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Move dbus xml interface files from devel subpackage to main
  subpackage: those files might be needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330257600">- Update to version 0.5.1.97:
  + Fix reading SMS messages in text mode
  + Fix communication with some Nokia phones
- Drop ModemManager-use-deprecated.patch: fixed upstream.
- Remove libtool BuildRequires and call to autoreconf: those were
  only needed for patch above.
- Remove xz BuildRequires now that it comes for free in the build
  system.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 0.5.2.0:
  + Retry sending SMS messages in PDU mode if an error occurs in
    text mode</changelog>
<changelog author="vuntz@opensuse.org" date="1345464000">- Add ModemManager-unsupported-qmi_wwan-ports.patch: fix calls to
  pppd when using the qmi_wwan. Fix bnc#776520.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464001">- Update to version 0.5.995.0:
  + More flexible and reliable port probing and modem setup.
  + New plugin for some Cinterion modems.
  + New plugin for some Iridium satellite modems.
  + New API for modem firmware management.
  + New API for network-provided date and time.
  + New API for indicating remaining PIN/PUK unlock retries.
  + New API for indicating enabled facility locks.
  + Plugins can now suggest and IP timeout value for connection
    managers.
- Drop ModemManager-unsupported-qmi_wwan-ports.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1346241600">- Update to version 0.6.0.0:
  + Minor bugfixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1354017600">- Move udev rules file to the folder specified by udev.pc by
  passing --with-udev-base-dir to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Update to version 0.7.990:
  + More flexible D-Bus API that accounts for the capabilities of
    modern devices.
  + Native support for Gobi and QMI-based Qualcomm devices via
    libqmi.
  + Preliminary support for GPS-based Location Services with some
    devices.
  + More complete messaging API.
  + Fully-featured command-line client (mmcli).
- Add pkgconfig(qmi-glib) BuildRequires: new dependency.
- Create new subpackage libnm-glib0.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Drop rpmlintrc: the privileges are approved in Factory.</changelog>
<changelog author="denicolo@suse.com" date="1370520000">- License update: GPL-2.0+ and GPL-3.0
  Correct license is GPL-2.0+; see COPYING file.
  The cli tool is licensed GPL-3.0+.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.7.991:
  + Bug fixes and improvements on the road to 0.8.0.</changelog>
<changelog author="zaitor@opensuse.org" date="1374235200">- Update to version 1.0.0:
  + More flexible D-Bus API that accounts for the capabilities of
    modern devices.
  + Native support for Gobi and QMI-based Qualcomm devices via
    libqmi.
  + Native support for MBIM-based devices via libmbim.
  + Preliminary support for GPS-based Location Services with some
    devices.
  + More complete messaging API.
  + New libmm-glib client library.
  + New fully-featured command-line client (mmcli).
  + Systemd integration.
  + And various other changes.
- Add pkgconfig(mbim-glib) BuildRequires: new dependency (disabled
  for now).
- Stop passing --with-pppd-plugin-dir=$pppddir to configure, not
  reqcognized anymore.
- Add pkgconfig(systemd) BuildRequires, new dependency.
- Add systemd ModemManger.service to pre, preun, post and postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1378814400">- Enable the ModemManager service. In essence, it's a D-Bus
  service so enabling it in systemd only means to make it known
  and activatable (bnc#839067).</changelog>
<changelog author="oneukum@suse.com" date="1385467200">- add a udev rule to prefer NCM over MBIM in the kernel
  because NM is compiled without support for MBIM (bnc#850675)</changelog>

</package>
<package pkgid="7c8735b57da5eead2465e3f6be081207a12911b66010a64014ee0c2aa5a234f8" name="ModemManager" arch="x86_64">
    <version epoch="0" ver="1.0.0" rel="3.4.1"/>

<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="dimstar@opensuse.org" date="1321358400">- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Add ModemManager-glib-2.31.patch: fix build with glib 2.31.</changelog>
<changelog author="vuntz@opensuse.org" date="1326196800">- Update to version 0.5.1.95:
  + Better detection of registration state when connecting
  + Added support for more Ericsson modems
  + Many memory leak fixes
  + Ensure Gobi devices are driven by the gobi plugin
  + Added multi-part SMS message support
  + Better handling of requests when modem is disabled
  + USSD fixes for Huawei devices
  + Added support for Nokia Internet Sticks
  + Fixed quirky response handling on some Cinterion modems
  + Fixed CREG response handling on modems that include the RAC
  + Skip sending power-up command if modem is already powered up
  + Added support for Sierra Wireless devices using Icera chips
    (USB305, Lightning)
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Drop ModemManager-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Update to version 0.5.1.96:
  + Fixed sending SMS messages with modems that only support PDU
    mode</changelog>
<changelog author="dimstar@opensuse.org" date="1328702400">- Add ModemManager-use-deprecated.patch: do not warn about using
  deprecated methods. This allows to build against glib &gt;= 2.31.14.
- Add call to autoreconf in %%prep section, as the patch above
  touches m4 files.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Move dbus xml interface files from devel subpackage to main
  subpackage: those files might be needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330257600">- Update to version 0.5.1.97:
  + Fix reading SMS messages in text mode
  + Fix communication with some Nokia phones
- Drop ModemManager-use-deprecated.patch: fixed upstream.
- Remove libtool BuildRequires and call to autoreconf: those were
  only needed for patch above.
- Remove xz BuildRequires now that it comes for free in the build
  system.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 0.5.2.0:
  + Retry sending SMS messages in PDU mode if an error occurs in
    text mode</changelog>
<changelog author="vuntz@opensuse.org" date="1345464000">- Add ModemManager-unsupported-qmi_wwan-ports.patch: fix calls to
  pppd when using the qmi_wwan. Fix bnc#776520.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464001">- Update to version 0.5.995.0:
  + More flexible and reliable port probing and modem setup.
  + New plugin for some Cinterion modems.
  + New plugin for some Iridium satellite modems.
  + New API for modem firmware management.
  + New API for network-provided date and time.
  + New API for indicating remaining PIN/PUK unlock retries.
  + New API for indicating enabled facility locks.
  + Plugins can now suggest and IP timeout value for connection
    managers.
- Drop ModemManager-unsupported-qmi_wwan-ports.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1346241600">- Update to version 0.6.0.0:
  + Minor bugfixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1354017600">- Move udev rules file to the folder specified by udev.pc by
  passing --with-udev-base-dir to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Update to version 0.7.990:
  + More flexible D-Bus API that accounts for the capabilities of
    modern devices.
  + Native support for Gobi and QMI-based Qualcomm devices via
    libqmi.
  + Preliminary support for GPS-based Location Services with some
    devices.
  + More complete messaging API.
  + Fully-featured command-line client (mmcli).
- Add pkgconfig(qmi-glib) BuildRequires: new dependency.
- Create new subpackage libnm-glib0.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Drop rpmlintrc: the privileges are approved in Factory.</changelog>
<changelog author="denicolo@suse.com" date="1370520000">- License update: GPL-2.0+ and GPL-3.0
  Correct license is GPL-2.0+; see COPYING file.
  The cli tool is licensed GPL-3.0+.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.7.991:
  + Bug fixes and improvements on the road to 0.8.0.</changelog>
<changelog author="zaitor@opensuse.org" date="1374235200">- Update to version 1.0.0:
  + More flexible D-Bus API that accounts for the capabilities of
    modern devices.
  + Native support for Gobi and QMI-based Qualcomm devices via
    libqmi.
  + Native support for MBIM-based devices via libmbim.
  + Preliminary support for GPS-based Location Services with some
    devices.
  + More complete messaging API.
  + New libmm-glib client library.
  + New fully-featured command-line client (mmcli).
  + Systemd integration.
  + And various other changes.
- Add pkgconfig(mbim-glib) BuildRequires: new dependency (disabled
  for now).
- Stop passing --with-pppd-plugin-dir=$pppddir to configure, not
  reqcognized anymore.
- Add pkgconfig(systemd) BuildRequires, new dependency.
- Add systemd ModemManger.service to pre, preun, post and postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1378814400">- Enable the ModemManager service. In essence, it's a D-Bus
  service so enabling it in systemd only means to make it known
  and activatable (bnc#839067).</changelog>
<changelog author="oneukum@suse.com" date="1385467200">- add a udev rule to prefer NCM over MBIM in the kernel
  because NM is compiled without support for MBIM (bnc#850675)</changelog>

</package>
<package pkgid="76d4154153e894b446176bec04b42b39dd47061b055d011d56c13d9f0c4c7dfa" name="ModemManager-devel" arch="i586">
    <version epoch="0" ver="1.0.0" rel="3.4.1"/>

<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="dimstar@opensuse.org" date="1321358400">- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Add ModemManager-glib-2.31.patch: fix build with glib 2.31.</changelog>
<changelog author="vuntz@opensuse.org" date="1326196800">- Update to version 0.5.1.95:
  + Better detection of registration state when connecting
  + Added support for more Ericsson modems
  + Many memory leak fixes
  + Ensure Gobi devices are driven by the gobi plugin
  + Added multi-part SMS message support
  + Better handling of requests when modem is disabled
  + USSD fixes for Huawei devices
  + Added support for Nokia Internet Sticks
  + Fixed quirky response handling on some Cinterion modems
  + Fixed CREG response handling on modems that include the RAC
  + Skip sending power-up command if modem is already powered up
  + Added support for Sierra Wireless devices using Icera chips
    (USB305, Lightning)
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Drop ModemManager-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Update to version 0.5.1.96:
  + Fixed sending SMS messages with modems that only support PDU
    mode</changelog>
<changelog author="dimstar@opensuse.org" date="1328702400">- Add ModemManager-use-deprecated.patch: do not warn about using
  deprecated methods. This allows to build against glib &gt;= 2.31.14.
- Add call to autoreconf in %%prep section, as the patch above
  touches m4 files.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Move dbus xml interface files from devel subpackage to main
  subpackage: those files might be needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330257600">- Update to version 0.5.1.97:
  + Fix reading SMS messages in text mode
  + Fix communication with some Nokia phones
- Drop ModemManager-use-deprecated.patch: fixed upstream.
- Remove libtool BuildRequires and call to autoreconf: those were
  only needed for patch above.
- Remove xz BuildRequires now that it comes for free in the build
  system.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 0.5.2.0:
  + Retry sending SMS messages in PDU mode if an error occurs in
    text mode</changelog>
<changelog author="vuntz@opensuse.org" date="1345464000">- Add ModemManager-unsupported-qmi_wwan-ports.patch: fix calls to
  pppd when using the qmi_wwan. Fix bnc#776520.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464001">- Update to version 0.5.995.0:
  + More flexible and reliable port probing and modem setup.
  + New plugin for some Cinterion modems.
  + New plugin for some Iridium satellite modems.
  + New API for modem firmware management.
  + New API for network-provided date and time.
  + New API for indicating remaining PIN/PUK unlock retries.
  + New API for indicating enabled facility locks.
  + Plugins can now suggest and IP timeout value for connection
    managers.
- Drop ModemManager-unsupported-qmi_wwan-ports.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1346241600">- Update to version 0.6.0.0:
  + Minor bugfixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1354017600">- Move udev rules file to the folder specified by udev.pc by
  passing --with-udev-base-dir to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Update to version 0.7.990:
  + More flexible D-Bus API that accounts for the capabilities of
    modern devices.
  + Native support for Gobi and QMI-based Qualcomm devices via
    libqmi.
  + Preliminary support for GPS-based Location Services with some
    devices.
  + More complete messaging API.
  + Fully-featured command-line client (mmcli).
- Add pkgconfig(qmi-glib) BuildRequires: new dependency.
- Create new subpackage libnm-glib0.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Drop rpmlintrc: the privileges are approved in Factory.</changelog>
<changelog author="denicolo@suse.com" date="1370520000">- License update: GPL-2.0+ and GPL-3.0
  Correct license is GPL-2.0+; see COPYING file.
  The cli tool is licensed GPL-3.0+.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.7.991:
  + Bug fixes and improvements on the road to 0.8.0.</changelog>
<changelog author="zaitor@opensuse.org" date="1374235200">- Update to version 1.0.0:
  + More flexible D-Bus API that accounts for the capabilities of
    modern devices.
  + Native support for Gobi and QMI-based Qualcomm devices via
    libqmi.
  + Native support for MBIM-based devices via libmbim.
  + Preliminary support for GPS-based Location Services with some
    devices.
  + More complete messaging API.
  + New libmm-glib client library.
  + New fully-featured command-line client (mmcli).
  + Systemd integration.
  + And various other changes.
- Add pkgconfig(mbim-glib) BuildRequires: new dependency (disabled
  for now).
- Stop passing --with-pppd-plugin-dir=$pppddir to configure, not
  reqcognized anymore.
- Add pkgconfig(systemd) BuildRequires, new dependency.
- Add systemd ModemManger.service to pre, preun, post and postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1378814400">- Enable the ModemManager service. In essence, it's a D-Bus
  service so enabling it in systemd only means to make it known
  and activatable (bnc#839067).</changelog>
<changelog author="oneukum@suse.com" date="1385467200">- add a udev rule to prefer NCM over MBIM in the kernel
  because NM is compiled without support for MBIM (bnc#850675)</changelog>

</package>
<package pkgid="622e116b902d3ae79ea9a30917db4c81f91da228e4931086d2921b97be3929b1" name="ModemManager-devel" arch="x86_64">
    <version epoch="0" ver="1.0.0" rel="3.4.1"/>

<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="dimstar@opensuse.org" date="1321358400">- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Add ModemManager-glib-2.31.patch: fix build with glib 2.31.</changelog>
<changelog author="vuntz@opensuse.org" date="1326196800">- Update to version 0.5.1.95:
  + Better detection of registration state when connecting
  + Added support for more Ericsson modems
  + Many memory leak fixes
  + Ensure Gobi devices are driven by the gobi plugin
  + Added multi-part SMS message support
  + Better handling of requests when modem is disabled
  + USSD fixes for Huawei devices
  + Added support for Nokia Internet Sticks
  + Fixed quirky response handling on some Cinterion modems
  + Fixed CREG response handling on modems that include the RAC
  + Skip sending power-up command if modem is already powered up
  + Added support for Sierra Wireless devices using Icera chips
    (USB305, Lightning)
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Drop ModemManager-glib-2.31.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Update to version 0.5.1.96:
  + Fixed sending SMS messages with modems that only support PDU
    mode</changelog>
<changelog author="dimstar@opensuse.org" date="1328702400">- Add ModemManager-use-deprecated.patch: do not warn about using
  deprecated methods. This allows to build against glib &gt;= 2.31.14.
- Add call to autoreconf in %%prep section, as the patch above
  touches m4 files.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Move dbus xml interface files from devel subpackage to main
  subpackage: those files might be needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330257600">- Update to version 0.5.1.97:
  + Fix reading SMS messages in text mode
  + Fix communication with some Nokia phones
- Drop ModemManager-use-deprecated.patch: fixed upstream.
- Remove libtool BuildRequires and call to autoreconf: those were
  only needed for patch above.
- Remove xz BuildRequires now that it comes for free in the build
  system.</changelog>
<changelog author="vuntz@opensuse.org" date="1331726400">- Update to version 0.5.2.0:
  + Retry sending SMS messages in PDU mode if an error occurs in
    text mode</changelog>
<changelog author="vuntz@opensuse.org" date="1345464000">- Add ModemManager-unsupported-qmi_wwan-ports.patch: fix calls to
  pppd when using the qmi_wwan. Fix bnc#776520.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464001">- Update to version 0.5.995.0:
  + More flexible and reliable port probing and modem setup.
  + New plugin for some Cinterion modems.
  + New plugin for some Iridium satellite modems.
  + New API for modem firmware management.
  + New API for network-provided date and time.
  + New API for indicating remaining PIN/PUK unlock retries.
  + New API for indicating enabled facility locks.
  + Plugins can now suggest and IP timeout value for connection
    managers.
- Drop ModemManager-unsupported-qmi_wwan-ports.patch: fixed
  upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1346241600">- Update to version 0.6.0.0:
  + Minor bugfixes.</changelog>
<changelog author="dimstar@opensuse.org" date="1354017600">- Move udev rules file to the folder specified by udev.pc by
  passing --with-udev-base-dir to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Update to version 0.7.990:
  + More flexible D-Bus API that accounts for the capabilities of
    modern devices.
  + Native support for Gobi and QMI-based Qualcomm devices via
    libqmi.
  + Preliminary support for GPS-based Location Services with some
    devices.
  + More complete messaging API.
  + Fully-featured command-line client (mmcli).
- Add pkgconfig(qmi-glib) BuildRequires: new dependency.
- Create new subpackage libnm-glib0.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Drop rpmlintrc: the privileges are approved in Factory.</changelog>
<changelog author="denicolo@suse.com" date="1370520000">- License update: GPL-2.0+ and GPL-3.0
  Correct license is GPL-2.0+; see COPYING file.
  The cli tool is licensed GPL-3.0+.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.7.991:
  + Bug fixes and improvements on the road to 0.8.0.</changelog>
<changelog author="zaitor@opensuse.org" date="1374235200">- Update to version 1.0.0:
  + More flexible D-Bus API that accounts for the capabilities of
    modern devices.
  + Native support for Gobi and QMI-based Qualcomm devices via
    libqmi.
  + Native support for MBIM-based devices via libmbim.
  + Preliminary support for GPS-based Location Services with some
    devices.
  + More complete messaging API.
  + New libmm-glib client library.
  + New fully-featured command-line client (mmcli).
  + Systemd integration.
  + And various other changes.
- Add pkgconfig(mbim-glib) BuildRequires: new dependency (disabled
  for now).
- Stop passing --with-pppd-plugin-dir=$pppddir to configure, not
  reqcognized anymore.
- Add pkgconfig(systemd) BuildRequires, new dependency.
- Add systemd ModemManger.service to pre, preun, post and postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1378814400">- Enable the ModemManager service. In essence, it's a D-Bus
  service so enabling it in systemd only means to make it known
  and activatable (bnc#839067).</changelog>
<changelog author="oneukum@suse.com" date="1385467200">- add a udev rule to prefer NCM over MBIM in the kernel
  because NM is compiled without support for MBIM (bnc#850675)</changelog>

</package>
<package pkgid="455a481df6748dabca09aaad1042ee0392e1e8233bbc03a7d21b4cdd22e9f11b" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="26.0" rel="4.2"/>

<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>

</package>
<package pkgid="72444a1a630abd5712abb2704c5b8bcfaf1c415bd6b8057e7c7bb9fb10937c6b" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="27.0" rel="8.1"/>

<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>

</package>
<package pkgid="f110fdf683040962aa57227c56a794f9aa9b97327fe6d920d4c5e0cb30a705ec" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="27.0.1" rel="12.1"/>

<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>

</package>
<package pkgid="efb4e2ffda9955b04f585b156c48a9a6742d4efcd81592c3e9c9c9aeda5dd1dc" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="28.0" rel="17.1"/>

<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bnc#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>

</package>
<package pkgid="41f969f9d15b3ce2ae331bf6ffe8a38f8a2460fcf57c102c2a7e6140c769ca73" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="29.0" rel="20.1"/>

<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="ab82d57a6c224316a5b6e98a5f79e143a2c6f955aae5265af1af6e49eedff8f8" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="29.0.1" rel="24.1"/>

<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>

</package>
<package pkgid="cad886e0840c6dff3c029b4fcef13d322dce38d60bdad615981310a6070b4d98" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="30.0" rel="29.1"/>

<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>

</package>
<package pkgid="d00c3c48bac80e0b3c42a0798cb37462974bb53387eaefbe2c4860bc0974de91" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="31.0" rel="33.1"/>

<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>

</package>
<package pkgid="34af36db9a6796ac264969d3f496dbd15ef16dcc3578aa55f64606890d06b276" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="31.1.0" rel="42.1"/>

<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Firefox 31.1.0esr (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- changes to support compilation on 11.4
  * explicit xz BuildRequires
  * mozilla-nullptr-gcc45.patch
  * remove unresolved makeinfo BuildRequires</changelog>

</package>
<package pkgid="209ac0edcefc325912b6465db206d580ef8d2c95d6e6715887e4213a00c5fe50" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="33.0" rel="46.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for ppc64 and ppc64le by not enabling elf-hack
  (bnc#901213)</changelog>

</package>
<package pkgid="0a7b42fccaff5f6814c47f9c0ecb66a265f6c348ccd29ad5fc7b397de1e13096" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="34.0.5" rel="50.3"/>

<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86</changelog>

</package>
<package pkgid="175a32fc63164834d4f1634c772a18ad1ec3aa82d23d3a5dec456ab876f39184" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="35.0" rel="54.2"/>

<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>

</package>
<package pkgid="e8fc0409d8366eb69279eda41c043769f69205f93193ea4517c612b6f682e341" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="36.0" rel="59.2"/>

<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>

</package>
<package pkgid="a85f27b45edb998cb0cacf50b8ca5d11c72024cebef5c62de69fa4e57f600cb7" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="36.0.4" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>

</package>
<package pkgid="116519c8c7946ba5f0325f1f016c6e7b04cdd43dcb45f2ce961355a44f2665da" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="37.0.1" rel="68.1"/>

<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>

</package>
<package pkgid="098daf97dd16c5bf127e61358d02a5ec518abc83b5aa51c408d9f8ed1def36f1" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="37.0.2" rel="71.1"/>

<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>

</package>
<package pkgid="9738bacf73049341b2e71a7081fede9dd9ac55972045330109486ce77d5374b7" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="38.0.1" rel="74.1"/>

<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>

</package>
<package pkgid="6aa2d7f97c08c360b186cbaf21eb88788e8cac2edd5360daaf021865a19c662c" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="39.0" rel="78.1"/>

<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>

</package>
<package pkgid="4c8129138c5bc8d042bf83247096a6804005f67ac67af8ced59a45b3b0b35a3b" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="40.0" rel="82.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>

</package>
<package pkgid="05a98b7d896a9bfcb3e5d031578e44080eab4ee9071ef588c0df80cad1f51545" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="40.0.3" rel="85.2"/>

<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>

</package>
<package pkgid="6bc152e9bd59b4b0fb5355ec2180833d7d026d7cd4ff42aacc9d8585e49c321a" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="41.0" rel="88.1"/>

<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>

</package>
<package pkgid="69095403ead39db7d76f10d7a86639f3aa3e7ce3fe604b871add2459fb299fb6" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="41.0.2" rel="91.1"/>

<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>

</package>
<package pkgid="1602908f8db6bdbddea8408305eb8f969ea6b57ea18cf4cb83640e69a734b3ae" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="42.0" rel="94.4"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="e577abeb7c1be8ab66fb2bc11bc1c10c2d3c7cb19461a852e6470ddc75be6ab7" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="43.0" rel="97.1"/>

<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>

</package>
<package pkgid="d4a39487bee5636a7db75a330d750be1a9ff29436c6daef73d782ca7a894e280" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="43.0.3" rel="100.1"/>

<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>

</package>
<package pkgid="f99c2d935599f4d68dfa0eef325ca8253af927eb81dec3b37b72bab67789fa5a" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="44.0" rel="103.1"/>

<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>

</package>
<package pkgid="7b2345972e0386b1dacf358e4a1fd24baacd93579c643583835d98aed3e64e85" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="44.0.2" rel="106.1"/>

<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>

</package>
<package pkgid="279253f3b57cda251cbb07185654a82abb4d0ccc7709edc5d30902636ed74564" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="45.0" rel="109.1"/>

<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="226f80194f864a7f7c43039ad98a709da5a7d2e45291bbb19f39b28d8585b80e" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="46.0" rel="113.2"/>

<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>

</package>
<package pkgid="7b21906f87dd58b6559b8914634552f90293490aa96a5e2d66f1a87a81693b07" name="MozillaFirefox" arch="i586">
    <version epoch="0" ver="47.0" rel="116.1"/>

<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>
<changelog author="wr@rosenauer.org" date="1462363200">- update to Firefox 46.0.1
  Fixed:
  * Search plugin issue for various locales
  * Add-on signing certificate expiration
  * Service worker update issue
  * Build issue when jit is disabled
  * Limit Sync registration updates
- removed now obsolete mozilla-jit_branch64.patch</changelog>
<changelog author="dsterba@suse.cz" date="1463054400">- enable build with PIE and full relro on x86_64 (boo#980384)</changelog>
<changelog author="badshah400@gmail.com" date="1464004800">- Add patches to fix building with gcc6:
  + mozilla-gcc6.patch: fix building with gcc &gt;= 6.1; patch
    taken from upstream:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
    from unified compilation because #include &lt;cmath&gt; in other
    source files causes gcc6 compilation failure; patch taken from
    upstream:
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1465300800">- update to Firefox 47.0 (boo#983549)
  * Enable VP9 video codec for users with fast machines
  * Embedded YouTube videos now play with HTML5 video if Flash is
    not installed
  * View and search open tabs from your smartphone or another
    computer in a sidebar
  * Allow no-cache on back/forward navigations for https resources
  security fixes:
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
    (boo#983638)
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
    bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
    bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
    bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
    bmo#1269729, bmo#1273202, bmo#1273701)
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
    Buffer overflow parsing HTML5 fragments
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
    Use-after-free deleting tables from a contenteditable document
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
    Addressbar spoofing though the SELECT element
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
    Out-of-bounds write with WebGL shader
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
    Partial same-origin-policy through setting location.host
    through data URI
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
    Use-after-free when textures are used in WebGL operations
    after recycle pool destruction
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
    Incorrect icon displayed on permissions notifications
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
    Entering fullscreen and persistent pointerlock without user
    permission
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
    Information disclosure of disabled plugins through CSS
    pseudo-classes
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
    Java applets bypass CSP protections
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
    bmo#1221620, bmo#1241034, bmo#1241037)
    Network Security Services (NSS) vulnerabilities
    fixed by requiring NSS 3.23
  packaging changes:
  * cleanup configure options (boo#981695):
  - notably remove GStreamer support which is gone from FF
  * remove obsolete patches
  - mozilla-libproxy.patch
  - mozilla-repo.patch</changelog>

</package>
<package pkgid="089a39d0ce7cd0a5aae9360cd3330d452a981352d558d4e4a7b5c5d7dcb3ed92" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="26.0" rel="4.2"/>

<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>

</package>
<package pkgid="ffa8f4f409958a362bf694b3a3ae87986b5fd850aee52ee4cd09dd1bf34ea12e" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="27.0" rel="8.1"/>

<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>

</package>
<package pkgid="b8f06ed1dfb9dd0cb20bc16038c0ff173d4593b444bce76ee7aaabb1dfee393d" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="27.0.1" rel="12.1"/>

<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>

</package>
<package pkgid="40e02dd9bf9ea4485dfd277376b40c49e2d794802463e026ba706931a639908e" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="28.0" rel="17.1"/>

<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bnc#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>

</package>
<package pkgid="9e6b42b5475a86f503d33826c635bc16649b1aaea6edd8b8b679621f5f55ff84" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="29.0" rel="20.1"/>

<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="4d9c750d32953fc3d382ed7fb26b25dffc9fe25604df06272f7b80ccca9bdd92" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="29.0.1" rel="24.1"/>

<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>

</package>
<package pkgid="95b834b74b001a08790b75cf3c453b4d6ff09f1325840856bba9c37af7aa344d" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="30.0" rel="29.1"/>

<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>

</package>
<package pkgid="d988b2fc22053072f4336ed0ae3e711767039cbeeed1d7c26d730fe2850d7682" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="31.0" rel="33.1"/>

<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>

</package>
<package pkgid="8dc5fcbfcd14956ed6bdadef19767b42fd86355a1b6ce5f7cccde712b4bbd7d2" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="31.1.0" rel="42.1"/>

<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Firefox 31.1.0esr (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- changes to support compilation on 11.4
  * explicit xz BuildRequires
  * mozilla-nullptr-gcc45.patch
  * remove unresolved makeinfo BuildRequires</changelog>

</package>
<package pkgid="085f534f98834f7e48d24ccfbc1e1470483fe2201890c4082031b334e12d3d43" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="33.0" rel="46.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for ppc64 and ppc64le by not enabling elf-hack
  (bnc#901213)</changelog>

</package>
<package pkgid="be7cacade1359cc96246c528d9cd36dc6ef333331487137265b137a53f541513" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="34.0.5" rel="50.3"/>

<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86</changelog>

</package>
<package pkgid="192ee679895999383c5578ab1d1888c34b992bb7a2f3c0ad9558fca5c0cf4db1" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="35.0" rel="54.2"/>

<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>

</package>
<package pkgid="1065c9e2f80022c043b675437a831f97da841bd2adc380cbd170c19404b7ced0" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="36.0" rel="59.2"/>

<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>

</package>
<package pkgid="fa7b205e05a3560bb91f45485c87f92b479cb19f1cc179c26a4dd15cf687b5d2" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="36.0.4" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>

</package>
<package pkgid="554b45c21011f5086764627ae5c37273779edb77a2e625922f4193f77a23f1e3" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="37.0.1" rel="68.1"/>

<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>

</package>
<package pkgid="0dac0d6f62cbd5c23d3cae3f33e64d33568a75e670481d525184fa5093c02d5e" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="37.0.2" rel="71.1"/>

<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>

</package>
<package pkgid="0f8c0360bc7a55ff8b5cbe74134dc8abc768b841a20a8e73e962021351136acf" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="38.0.1" rel="74.1"/>

<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>

</package>
<package pkgid="fb541526a2badf9fd5aab9bb3c2ae3253b27e2a0db2d1becc527f36377787c7f" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="39.0" rel="78.1"/>

<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>

</package>
<package pkgid="90945b1e527e7f3c8cf4f8dbc9b744f1b70ea48f52ee17d4e45545e41ac7ccbd" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="40.0" rel="82.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>

</package>
<package pkgid="b47f44188aa6c4ea60884f4d286f004f86d9351f6bbeb600587421f648ec42a0" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="40.0.3" rel="85.2"/>

<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>

</package>
<package pkgid="563b0937edf6b4f03c81f2a215087843f37e97478bf5e3529c9ee2cc066a429a" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="41.0" rel="88.1"/>

<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>

</package>
<package pkgid="61a7acdb467a4aa12b5ab7501c74d1772ec376333a2f8fa61269f6da88a83271" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="41.0.2" rel="91.1"/>

<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>

</package>
<package pkgid="901323a97529759cb78dfa95cf139abd029bba730587e5d2dae05c5963bd0c75" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="42.0" rel="94.4"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="8bee839f120a8780423205fd597f029dd7452387ce03871e52f73ef6b59c2362" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="43.0" rel="97.1"/>

<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>

</package>
<package pkgid="1446ccaf202f4ed32ac87bf87a9d76b61956fc03c329b9d4790206fb41720fca" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="43.0.3" rel="100.1"/>

<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>

</package>
<package pkgid="2314b3e2903844e2da341bbda91784eb098c3c2cfc71c45b096f4b2d2df1ff29" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="44.0" rel="103.1"/>

<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>

</package>
<package pkgid="c77708dcb6521b308e7c577494fa9ca011924e6f85aff99ea1a57a9b6caef368" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="44.0.2" rel="106.1"/>

<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>

</package>
<package pkgid="ca23cd27f5e3f9d27cf70a37656f9a0a3d1eb7dd6aec92862e63afe07ffbed78" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="45.0" rel="109.1"/>

<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="810d9bbfd3a7c1851a78fa1724972c49a8077e997cb3fe9050d2035ac817c43e" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="46.0" rel="113.2"/>

<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>

</package>
<package pkgid="3e6631954d34c07f50ed21b9392b9751b253c75065ed7c7b066ef76d400f7126" name="MozillaFirefox" arch="src">
    <version epoch="0" ver="47.0" rel="116.1"/>

<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>
<changelog author="wr@rosenauer.org" date="1462363200">- update to Firefox 46.0.1
  Fixed:
  * Search plugin issue for various locales
  * Add-on signing certificate expiration
  * Service worker update issue
  * Build issue when jit is disabled
  * Limit Sync registration updates
- removed now obsolete mozilla-jit_branch64.patch</changelog>
<changelog author="dsterba@suse.cz" date="1463054400">- enable build with PIE and full relro on x86_64 (boo#980384)</changelog>
<changelog author="badshah400@gmail.com" date="1464004800">- Add patches to fix building with gcc6:
  + mozilla-gcc6.patch: fix building with gcc &gt;= 6.1; patch
    taken from upstream:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
    from unified compilation because #include &lt;cmath&gt; in other
    source files causes gcc6 compilation failure; patch taken from
    upstream:
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1465300800">- update to Firefox 47.0 (boo#983549)
  * Enable VP9 video codec for users with fast machines
  * Embedded YouTube videos now play with HTML5 video if Flash is
    not installed
  * View and search open tabs from your smartphone or another
    computer in a sidebar
  * Allow no-cache on back/forward navigations for https resources
  security fixes:
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
    (boo#983638)
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
    bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
    bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
    bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
    bmo#1269729, bmo#1273202, bmo#1273701)
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
    Buffer overflow parsing HTML5 fragments
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
    Use-after-free deleting tables from a contenteditable document
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
    Addressbar spoofing though the SELECT element
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
    Out-of-bounds write with WebGL shader
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
    Partial same-origin-policy through setting location.host
    through data URI
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
    Use-after-free when textures are used in WebGL operations
    after recycle pool destruction
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
    Incorrect icon displayed on permissions notifications
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
    Entering fullscreen and persistent pointerlock without user
    permission
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
    Information disclosure of disabled plugins through CSS
    pseudo-classes
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
    Java applets bypass CSP protections
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
    bmo#1221620, bmo#1241034, bmo#1241037)
    Network Security Services (NSS) vulnerabilities
    fixed by requiring NSS 3.23
  packaging changes:
  * cleanup configure options (boo#981695):
  - notably remove GStreamer support which is gone from FF
  * remove obsolete patches
  - mozilla-libproxy.patch
  - mozilla-repo.patch</changelog>

</package>
<package pkgid="b8f1541a541ff873fd254d81cf3450320978e7ba5a64ea49f58a943c66d46710" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="26.0" rel="4.2"/>

<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>

</package>
<package pkgid="6fac1ee49c440d3dde6d36fc9b212cbe5967d87081b839d2857bb714c591e555" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="27.0" rel="8.1"/>

<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>

</package>
<package pkgid="69ae7bd152db2f88181d3132cc55a77582d10eaa8fa9ed14b9f3459a9e1f3ddc" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="27.0.1" rel="12.1"/>

<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>

</package>
<package pkgid="2a1b4f59df77eced3fcb81f9a3684a7534285096c483726ab14d9cf9ea8499d7" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="28.0" rel="17.1"/>

<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bnc#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>

</package>
<package pkgid="98279932e03eeff2d5856244e04cd1eebdd5ad5bfbed8ee4734cd6957bd439b2" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="29.0" rel="20.1"/>

<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="cf5f77f0efb5576921ce488113770597cbac6ddf437fe5c64815c4b28c5a717a" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="29.0.1" rel="24.1"/>

<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>

</package>
<package pkgid="c09a58f0ccc8cf3cc3faf73679cccc10fce1c772685bc269b92db2a2e919cb6e" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="30.0" rel="29.1"/>

<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>

</package>
<package pkgid="95320166d2355a07e52af8b0bfc66dba12dd9744c594cffecf18ed88ad19daa6" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="31.0" rel="33.1"/>

<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>

</package>
<package pkgid="3cd6bffe475e8e25153979cca44739fcbf1acc73cec02442031ba4e95c9d5043" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="31.1.0" rel="42.1"/>

<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Firefox 31.1.0esr (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- changes to support compilation on 11.4
  * explicit xz BuildRequires
  * mozilla-nullptr-gcc45.patch
  * remove unresolved makeinfo BuildRequires</changelog>

</package>
<package pkgid="c5f03a9fdbdaf2034abe9b85116b3c656c45e3c17a13bafcb96046729162d1b7" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="33.0" rel="46.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for ppc64 and ppc64le by not enabling elf-hack
  (bnc#901213)</changelog>

</package>
<package pkgid="a7691fca24a9b15cb44830a3e2677c8a851b2a0fac0ff1ba7e10f8eac4687442" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="34.0.5" rel="50.3"/>

<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86</changelog>

</package>
<package pkgid="9d039d0aa66ce3cb195ac3846e9f8f7ccc041a7d94442eb5b0e48b7f02a5dda7" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="35.0" rel="54.2"/>

<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>

</package>
<package pkgid="383eeaa7f0a689e9fcec014a43253618128b326b7cc1ccfce6ed4937b05f6cdc" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="36.0" rel="59.2"/>

<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>

</package>
<package pkgid="b8afd1259640bd138c506fe05488858791c374351f6093cc6ed28586e5471a97" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="36.0.4" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>

</package>
<package pkgid="776ddce031b32f7bbfb90eee4662345621e351e7c60459c4d6c1602151f48087" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="37.0.1" rel="68.1"/>

<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>

</package>
<package pkgid="9bfcb0ffb2bec2dcebbe03649cbe0e0dd693aebf35b3052d603b83bdcd8153c7" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="37.0.2" rel="71.1"/>

<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>

</package>
<package pkgid="8a7fdd5e8d4f748cd04c9a4089697c467e0cd210b822220c80aec50aed09cdb5" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="38.0.1" rel="74.1"/>

<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>

</package>
<package pkgid="2fbf69891f8ef51c19f8492b742dcc5eab9372cdd4b8f609834b7b7e4195fa05" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="39.0" rel="78.1"/>

<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>

</package>
<package pkgid="cc9e4322eefd9f71770c68fe603623235cdfd848581316a2a2b4c93c91b1d31c" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="40.0" rel="82.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>

</package>
<package pkgid="d43b2e91ddb8399a8f49f135dfad64df2d9f89b6193dfb54d3f1b1098497affe" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="40.0.3" rel="85.2"/>

<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>

</package>
<package pkgid="3feac05b7b7bb6bc94fcedbec7483bb8f12a8701e94c777a4bae2d818ab72d8f" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="41.0" rel="88.1"/>

<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>

</package>
<package pkgid="4cc8e70bdec07a417c25d38d5a69aea96cfc3ce5e93348fb2634e179361d5fd0" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="41.0.2" rel="91.1"/>

<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>

</package>
<package pkgid="a2c7d23c53217a319c41ec09b8cc20f07a5d2e0ce0937aac2977d678447c9d2a" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="42.0" rel="94.4"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="a7f475009985ead896b0b3afdbc7ea27abb2e5fcb4968949edea296edc7b3d49" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="43.0" rel="97.1"/>

<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>

</package>
<package pkgid="7ce3cf4d2a275ae5525ba3951f7d2355c63d49900a8780dc343075d82f49db39" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="43.0.3" rel="100.1"/>

<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>

</package>
<package pkgid="4b36d88ed1eaeb7c120dbf4ea6c2b93270e54cf5623b48187cc67af166efa09b" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="44.0" rel="103.1"/>

<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>

</package>
<package pkgid="b6ad7665951dac4360a2b5ca82ff695a62df3838982a030dd206886bc6637ba2" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="44.0.2" rel="106.1"/>

<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>

</package>
<package pkgid="38349ffe8fd045dc531fc5690d37f8480af320c654ea6e4df6e7fd55c1af850c" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="45.0" rel="109.1"/>

<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="a52574d152cb8947cc370ea4408f9b40e910174284b3828dbd089e6b0ed4b169" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="46.0" rel="113.2"/>

<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>

</package>
<package pkgid="6819acff3b74b4159237758bdf83ee42c2cde8db2930f2b3e25ca3a76ccdd4f8" name="MozillaFirefox" arch="x86_64">
    <version epoch="0" ver="47.0" rel="116.1"/>

<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>
<changelog author="wr@rosenauer.org" date="1462363200">- update to Firefox 46.0.1
  Fixed:
  * Search plugin issue for various locales
  * Add-on signing certificate expiration
  * Service worker update issue
  * Build issue when jit is disabled
  * Limit Sync registration updates
- removed now obsolete mozilla-jit_branch64.patch</changelog>
<changelog author="dsterba@suse.cz" date="1463054400">- enable build with PIE and full relro on x86_64 (boo#980384)</changelog>
<changelog author="badshah400@gmail.com" date="1464004800">- Add patches to fix building with gcc6:
  + mozilla-gcc6.patch: fix building with gcc &gt;= 6.1; patch
    taken from upstream:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
    from unified compilation because #include &lt;cmath&gt; in other
    source files causes gcc6 compilation failure; patch taken from
    upstream:
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1465300800">- update to Firefox 47.0 (boo#983549)
  * Enable VP9 video codec for users with fast machines
  * Embedded YouTube videos now play with HTML5 video if Flash is
    not installed
  * View and search open tabs from your smartphone or another
    computer in a sidebar
  * Allow no-cache on back/forward navigations for https resources
  security fixes:
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
    (boo#983638)
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
    bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
    bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
    bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
    bmo#1269729, bmo#1273202, bmo#1273701)
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
    Buffer overflow parsing HTML5 fragments
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
    Use-after-free deleting tables from a contenteditable document
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
    Addressbar spoofing though the SELECT element
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
    Out-of-bounds write with WebGL shader
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
    Partial same-origin-policy through setting location.host
    through data URI
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
    Use-after-free when textures are used in WebGL operations
    after recycle pool destruction
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
    Incorrect icon displayed on permissions notifications
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
    Entering fullscreen and persistent pointerlock without user
    permission
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
    Information disclosure of disabled plugins through CSS
    pseudo-classes
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
    Java applets bypass CSP protections
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
    bmo#1221620, bmo#1241034, bmo#1241037)
    Network Security Services (NSS) vulnerabilities
    fixed by requiring NSS 3.23
  packaging changes:
  * cleanup configure options (boo#981695):
  - notably remove GStreamer support which is gone from FF
  * remove obsolete patches
  - mozilla-libproxy.patch
  - mozilla-repo.patch</changelog>

</package>
<package pkgid="228b774e86d1df9d928637ff5e370f225c1b3500750a941da012983a487f7310" name="MozillaFirefox-branding-basedonopensuse" arch="i586">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="705dccfaaac86119bce361fe7a95428898a1d19f6de1d3341ccf3f096bfafc2c" name="MozillaFirefox-branding-basedonopensuse" arch="x86_64">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="16195639f2054554a9be835cddcfa144457e521762ad7c898142df9d66c9a236" name="MozillaFirefox-branding-openSUSE" arch="i586">
    <version epoch="0" ver="40" rel="2.3.1"/>

<changelog author="javier@opensuse.org" date="1275048000">- switch Planet openSUSE's feed to planet.opensuse.org</changelog>
<changelog author="wr@rosenauer.org" date="1276084800">- update susefox to snapshot 20100609
  * added HU translation</changelog>
<changelog author="wr@rosenauer.org" date="1281614400">- bumped package version to 4.0
- update susefox to snapshot 20100812
  * compatibility with Firefox 4</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build for Factory by getting the needed RPM macros
- override browser.startup.homepage reference</changelog>
<changelog author="wr@rosenauer.org" date="1288094400">- update susefox to snapshot 20101026
  * Updated link to openSUSE wiki page
  * Mistake in cs-CZ locale (bnc#637368)</changelog>
<changelog author="wr@rosenauer.org" date="1302868800">- update to version 5.0
  * supports openSUSE Firefox 5 and higher
    (compatibility with standalone Firefox)
- added all-openSUSE.js (previously in xulrunner)</changelog>
<changelog author="wr@rosenauer.org" date="1305979200">- update susefox
  * marked compatible with FF5</changelog>
<changelog author="ro@suse.de" date="1309176000">- add directory to filelist to fix build</changelog>
<changelog author="wr@rosenauer.org" date="1316001600">- update susefox
  * marked compatible up to FF7</changelog>
<changelog author="wr@rosenauer.org" date="1319112000">- make susefox compatible up to Firefox 9
- browser.startup.homepage is now a property in susefox as the
  resource:// URI is useless in omnijar setup (bnc#721421)
- no welcome and override startpages</changelog>
<changelog author="wr@rosenauer.org" date="1320753600">- update susefox to snapshot 20111108 (1.0.2)
  * removed statusbar stuff (fix bnc#707628)</changelog>
<changelog author="wr@rosenauer.org" date="1321012800">- do not disable global addons on update check</changelog>
<changelog author="wr@rosenauer.org" date="1321617600">- disable addon check completely as scopes are not working
  correctly with Firefox 8</changelog>
<changelog author="wr@rosenauer.org" date="1324468800">- make openSUSE software search version specific (bnc#737709)</changelog>
<changelog author="wr@rosenauer.org" date="1331812800">- bumped version to 6.0
- support firefox-esr RPM packages
- removed MozillaFirefox build dependency and PreReq
  * everything controlled by Supplements and Requirements from
    base package</changelog>
<changelog author="wr@rosenauer.org" date="1340712000">- update susefox to snapshot 20120626
  * add window controls for Gnome 3 (bnc#768942)</changelog>
<changelog author="wr@rosenauer.org" date="1344340800">- move Firefox specific prefs to defaults/preferences (bnc#774914)</changelog>
<changelog author="wr@rosenauer.org" date="1359633600">- added DuckDuckGo as search option (bnc#801121)</changelog>
<changelog author="wr@rosenauer.org" date="1364212800">- modified file locations for Firefox 21 and above</changelog>
<changelog author="wr@rosenauer.org" date="1437912000">- identify Leap 42.1 correctly
- searchplugins need to be placed under distribution with FF 40
- disable susefox
  * its main purpose the plugin finder service misses server
    side maintenance and NPAPI plugins are being obsoleted sooner
    or later
- homepage setting moved back from susefox to distribution
  configuration</changelog>

</package>
<package pkgid="cf26178ed5167bd6125577841ff19d177653d1306c2eaf7eb9c27bab4de1c130" name="MozillaFirefox-branding-openSUSE" arch="src">
    <version epoch="0" ver="40" rel="2.3.1"/>

<changelog author="javier@opensuse.org" date="1275048000">- switch Planet openSUSE's feed to planet.opensuse.org</changelog>
<changelog author="wr@rosenauer.org" date="1276084800">- update susefox to snapshot 20100609
  * added HU translation</changelog>
<changelog author="wr@rosenauer.org" date="1281614400">- bumped package version to 4.0
- update susefox to snapshot 20100812
  * compatibility with Firefox 4</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build for Factory by getting the needed RPM macros
- override browser.startup.homepage reference</changelog>
<changelog author="wr@rosenauer.org" date="1288094400">- update susefox to snapshot 20101026
  * Updated link to openSUSE wiki page
  * Mistake in cs-CZ locale (bnc#637368)</changelog>
<changelog author="wr@rosenauer.org" date="1302868800">- update to version 5.0
  * supports openSUSE Firefox 5 and higher
    (compatibility with standalone Firefox)
- added all-openSUSE.js (previously in xulrunner)</changelog>
<changelog author="wr@rosenauer.org" date="1305979200">- update susefox
  * marked compatible with FF5</changelog>
<changelog author="ro@suse.de" date="1309176000">- add directory to filelist to fix build</changelog>
<changelog author="wr@rosenauer.org" date="1316001600">- update susefox
  * marked compatible up to FF7</changelog>
<changelog author="wr@rosenauer.org" date="1319112000">- make susefox compatible up to Firefox 9
- browser.startup.homepage is now a property in susefox as the
  resource:// URI is useless in omnijar setup (bnc#721421)
- no welcome and override startpages</changelog>
<changelog author="wr@rosenauer.org" date="1320753600">- update susefox to snapshot 20111108 (1.0.2)
  * removed statusbar stuff (fix bnc#707628)</changelog>
<changelog author="wr@rosenauer.org" date="1321012800">- do not disable global addons on update check</changelog>
<changelog author="wr@rosenauer.org" date="1321617600">- disable addon check completely as scopes are not working
  correctly with Firefox 8</changelog>
<changelog author="wr@rosenauer.org" date="1324468800">- make openSUSE software search version specific (bnc#737709)</changelog>
<changelog author="wr@rosenauer.org" date="1331812800">- bumped version to 6.0
- support firefox-esr RPM packages
- removed MozillaFirefox build dependency and PreReq
  * everything controlled by Supplements and Requirements from
    base package</changelog>
<changelog author="wr@rosenauer.org" date="1340712000">- update susefox to snapshot 20120626
  * add window controls for Gnome 3 (bnc#768942)</changelog>
<changelog author="wr@rosenauer.org" date="1344340800">- move Firefox specific prefs to defaults/preferences (bnc#774914)</changelog>
<changelog author="wr@rosenauer.org" date="1359633600">- added DuckDuckGo as search option (bnc#801121)</changelog>
<changelog author="wr@rosenauer.org" date="1364212800">- modified file locations for Firefox 21 and above</changelog>
<changelog author="wr@rosenauer.org" date="1437912000">- identify Leap 42.1 correctly
- searchplugins need to be placed under distribution with FF 40
- disable susefox
  * its main purpose the plugin finder service misses server
    side maintenance and NPAPI plugins are being obsoleted sooner
    or later
- homepage setting moved back from susefox to distribution
  configuration</changelog>

</package>
<package pkgid="1122b5a08ff93b02041b7964f3444f766e9829184d5ef001e0dd3de28060d364" name="MozillaFirefox-branding-openSUSE" arch="x86_64">
    <version epoch="0" ver="40" rel="2.3.1"/>

<changelog author="javier@opensuse.org" date="1275048000">- switch Planet openSUSE's feed to planet.opensuse.org</changelog>
<changelog author="wr@rosenauer.org" date="1276084800">- update susefox to snapshot 20100609
  * added HU translation</changelog>
<changelog author="wr@rosenauer.org" date="1281614400">- bumped package version to 4.0
- update susefox to snapshot 20100812
  * compatibility with Firefox 4</changelog>
<changelog author="wr@rosenauer.org" date="1283169600">- fixed build for Factory by getting the needed RPM macros
- override browser.startup.homepage reference</changelog>
<changelog author="wr@rosenauer.org" date="1288094400">- update susefox to snapshot 20101026
  * Updated link to openSUSE wiki page
  * Mistake in cs-CZ locale (bnc#637368)</changelog>
<changelog author="wr@rosenauer.org" date="1302868800">- update to version 5.0
  * supports openSUSE Firefox 5 and higher
    (compatibility with standalone Firefox)
- added all-openSUSE.js (previously in xulrunner)</changelog>
<changelog author="wr@rosenauer.org" date="1305979200">- update susefox
  * marked compatible with FF5</changelog>
<changelog author="ro@suse.de" date="1309176000">- add directory to filelist to fix build</changelog>
<changelog author="wr@rosenauer.org" date="1316001600">- update susefox
  * marked compatible up to FF7</changelog>
<changelog author="wr@rosenauer.org" date="1319112000">- make susefox compatible up to Firefox 9
- browser.startup.homepage is now a property in susefox as the
  resource:// URI is useless in omnijar setup (bnc#721421)
- no welcome and override startpages</changelog>
<changelog author="wr@rosenauer.org" date="1320753600">- update susefox to snapshot 20111108 (1.0.2)
  * removed statusbar stuff (fix bnc#707628)</changelog>
<changelog author="wr@rosenauer.org" date="1321012800">- do not disable global addons on update check</changelog>
<changelog author="wr@rosenauer.org" date="1321617600">- disable addon check completely as scopes are not working
  correctly with Firefox 8</changelog>
<changelog author="wr@rosenauer.org" date="1324468800">- make openSUSE software search version specific (bnc#737709)</changelog>
<changelog author="wr@rosenauer.org" date="1331812800">- bumped version to 6.0
- support firefox-esr RPM packages
- removed MozillaFirefox build dependency and PreReq
  * everything controlled by Supplements and Requirements from
    base package</changelog>
<changelog author="wr@rosenauer.org" date="1340712000">- update susefox to snapshot 20120626
  * add window controls for Gnome 3 (bnc#768942)</changelog>
<changelog author="wr@rosenauer.org" date="1344340800">- move Firefox specific prefs to defaults/preferences (bnc#774914)</changelog>
<changelog author="wr@rosenauer.org" date="1359633600">- added DuckDuckGo as search option (bnc#801121)</changelog>
<changelog author="wr@rosenauer.org" date="1364212800">- modified file locations for Firefox 21 and above</changelog>
<changelog author="wr@rosenauer.org" date="1437912000">- identify Leap 42.1 correctly
- searchplugins need to be placed under distribution with FF 40
- disable susefox
  * its main purpose the plugin finder service misses server
    side maintenance and NPAPI plugins are being obsoleted sooner
    or later
- homepage setting moved back from susefox to distribution
  configuration</changelog>

</package>
<package pkgid="ba179c25aa4a68144f89d5173a4c231dc25d34211f318610b8ce1e0474707e7f" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="26.0" rel="4.2"/>

<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>

</package>
<package pkgid="c27f1727cb8dc8aeb72a4109952d07184ddd29c851294ff4de5494488256daa4" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="27.0" rel="8.1"/>

<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>

</package>
<package pkgid="3945d819fd91821e0853f3fb9f420b306d7918a729af78bc44adf57fa24b4061" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="27.0.1" rel="12.1"/>

<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>

</package>
<package pkgid="a54b09d76ef2a93eb732f2fca923562ef621ffc4ffb9500cbb07e7dee6fb110e" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="28.0" rel="17.1"/>

<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bnc#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>

</package>
<package pkgid="76cbcac839a0e7be6bdb55c03d31e7be8df6dcec75b2f3151ad4d61f943bcc08" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="29.0" rel="20.1"/>

<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="ec286b763bda93efdf00539fe18ffb6c9c164dbfc673321ab3bce3de6f312d78" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="29.0.1" rel="24.1"/>

<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>

</package>
<package pkgid="f958bc4eb72b402597bafe1311981f5f3fe540a223c7890e903bfb17c50a0cae" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="30.0" rel="29.1"/>

<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>

</package>
<package pkgid="b5736949dc924c986cae077f306edcfc70d65b2da52e891dea1b05dc58427652" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="31.0" rel="33.1"/>

<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>

</package>
<package pkgid="f880a40b4d72428bddefb5633d5991b10671e99cc7ed00f2b707edd1847e0a27" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="31.1.0" rel="42.1"/>

<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Firefox 31.1.0esr (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- changes to support compilation on 11.4
  * explicit xz BuildRequires
  * mozilla-nullptr-gcc45.patch
  * remove unresolved makeinfo BuildRequires</changelog>

</package>
<package pkgid="debca8323e326a43576fa706c342a623813c51f19886d6d52f5db1e141178b1e" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="33.0" rel="46.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for ppc64 and ppc64le by not enabling elf-hack
  (bnc#901213)</changelog>

</package>
<package pkgid="73871b5939a8cba47e56c0ca3970bb26e0eafcaf8cd2880f44e3a97aefc793f4" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="34.0.5" rel="50.3"/>

<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86</changelog>

</package>
<package pkgid="2cee8b3d6cb6c02f65ecbd00c140a1288a465792cd0f8f4b47eec41e192fff8b" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="35.0" rel="54.2"/>

<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>

</package>
<package pkgid="63356239e55a422ae6468f214539bb3ee176bd3a0818f720dfae02e51c03a8df" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="36.0" rel="59.2"/>

<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>

</package>
<package pkgid="e5470d369cb9174d1ca328ca8f031e0cf2697b585c00f751cd4e97b24f108e96" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="36.0.4" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>

</package>
<package pkgid="88ac01a3da04bda8ef7aa420fd93aeb9c568b52f84d46910a8c71e6f218db63d" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="37.0.1" rel="68.1"/>

<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>

</package>
<package pkgid="44accbaf5c50ab50bab6fd8e3cdd67f36855759a5542529c89a3818b4672d701" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="37.0.2" rel="71.1"/>

<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>

</package>
<package pkgid="690d85326c7c459a6a2990f8b1c2a5b4c26e9c4e0fef5578925c7c632d2b1da4" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="38.0.1" rel="74.1"/>

<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>

</package>
<package pkgid="dbd0a61bff4c28279b430a989c5195e48f87a69bf64987c2b2feeaeee3649be9" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="39.0" rel="78.1"/>

<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>

</package>
<package pkgid="6ffa6833377073af3f15e742541f3dfbee6459547c98d98980a2646ab150183b" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="40.0" rel="82.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>

</package>
<package pkgid="cdbd6ed2fcb519633ebe1960e0a909a7b2d1a6c912a8a19511373684665f2c45" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="40.0.3" rel="85.2"/>

<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>

</package>
<package pkgid="7575d39e2794e38abeab58fa95b2ff585caef0cb60f2ba04b8dff321f0bd0c3f" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="41.0" rel="88.1"/>

<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>

</package>
<package pkgid="f902f2653a5565cc014143e75f97c785b6e3f294255961697396db7a9fa4fb71" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="41.0.2" rel="91.1"/>

<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>

</package>
<package pkgid="99f07df3435344146bd7493d989ccf788267aca49b530cf6e912c6c8d2660486" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="42.0" rel="94.4"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="3700407438a112a5bbfc8dd1594e66cef39668969597ce0822111057102b28b3" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="43.0" rel="97.1"/>

<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>

</package>
<package pkgid="be2c1ee210e7f64ce4f23719c6101d793d820df13520386e980c890ebf621369" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="43.0.3" rel="100.1"/>

<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>

</package>
<package pkgid="62805e6fede6ced31210dc9e6a670d6aa63bd6255bb25241f58d957f8c2e80c7" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="44.0" rel="103.1"/>

<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>

</package>
<package pkgid="93bf372cc21c0ad192df6728199e9748fc4449e708594a58debd7748f41ba6e9" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="44.0.2" rel="106.1"/>

<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>

</package>
<package pkgid="0783fee31120c909e5b454a4fc9f0e8a73ef01384a77ccfaf6920323694bf5a6" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="45.0" rel="109.1"/>

<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="c9d58b0b32ee5fcd437f74a2ba83df0747b0c40e002a0a15c4c50b0c2bb1e6ef" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="46.0" rel="113.2"/>

<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>

</package>
<package pkgid="3549cb7f0edf7baa38207c57f84da35313b37c79e160a9495760d9645cedec22" name="MozillaFirefox-branding-upstream" arch="i586">
    <version epoch="0" ver="47.0" rel="116.1"/>

<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>
<changelog author="wr@rosenauer.org" date="1462363200">- update to Firefox 46.0.1
  Fixed:
  * Search plugin issue for various locales
  * Add-on signing certificate expiration
  * Service worker update issue
  * Build issue when jit is disabled
  * Limit Sync registration updates
- removed now obsolete mozilla-jit_branch64.patch</changelog>
<changelog author="dsterba@suse.cz" date="1463054400">- enable build with PIE and full relro on x86_64 (boo#980384)</changelog>
<changelog author="badshah400@gmail.com" date="1464004800">- Add patches to fix building with gcc6:
  + mozilla-gcc6.patch: fix building with gcc &gt;= 6.1; patch
    taken from upstream:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
    from unified compilation because #include &lt;cmath&gt; in other
    source files causes gcc6 compilation failure; patch taken from
    upstream:
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1465300800">- update to Firefox 47.0 (boo#983549)
  * Enable VP9 video codec for users with fast machines
  * Embedded YouTube videos now play with HTML5 video if Flash is
    not installed
  * View and search open tabs from your smartphone or another
    computer in a sidebar
  * Allow no-cache on back/forward navigations for https resources
  security fixes:
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
    (boo#983638)
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
    bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
    bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
    bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
    bmo#1269729, bmo#1273202, bmo#1273701)
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
    Buffer overflow parsing HTML5 fragments
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
    Use-after-free deleting tables from a contenteditable document
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
    Addressbar spoofing though the SELECT element
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
    Out-of-bounds write with WebGL shader
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
    Partial same-origin-policy through setting location.host
    through data URI
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
    Use-after-free when textures are used in WebGL operations
    after recycle pool destruction
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
    Incorrect icon displayed on permissions notifications
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
    Entering fullscreen and persistent pointerlock without user
    permission
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
    Information disclosure of disabled plugins through CSS
    pseudo-classes
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
    Java applets bypass CSP protections
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
    bmo#1221620, bmo#1241034, bmo#1241037)
    Network Security Services (NSS) vulnerabilities
    fixed by requiring NSS 3.23
  packaging changes:
  * cleanup configure options (boo#981695):
  - notably remove GStreamer support which is gone from FF
  * remove obsolete patches
  - mozilla-libproxy.patch
  - mozilla-repo.patch</changelog>

</package>
<package pkgid="2a62a90cb1d55a6374ebaff78e055fc9c53fe81d7b51b302180a65783d52454b" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="26.0" rel="4.2"/>

<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>

</package>
<package pkgid="e2362a5eac377702f2bbbd083047b1749f676ed481abdf0e05c4b62395070839" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="27.0" rel="8.1"/>

<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>

</package>
<package pkgid="aadcb26418dc54a858bf1d3c2b3b2999691e7576b252c0c2d5e2f45f20c89c7e" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="27.0.1" rel="12.1"/>

<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>

</package>
<package pkgid="83859828483065e2892a4284c0efbcfc69d8e4336ad539030565938a4fcde168" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="28.0" rel="17.1"/>

<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bnc#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>

</package>
<package pkgid="5253bbbfc96fd9f0df61b13977258bf04660273bd6693f5d8d31f879728cf45f" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="29.0" rel="20.1"/>

<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="1b4da3c22c00bc80d0e82d6fbbe425af445ab3aa4edc0fe265c5e9ddc0ee2518" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="29.0.1" rel="24.1"/>

<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>

</package>
<package pkgid="3d1e3750d4469227e27b67f0ec89803dc9d23e20a68e40188f357e2895563ea5" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="30.0" rel="29.1"/>

<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>

</package>
<package pkgid="7eeedac34aa88f06f9256c8e119b95245ab30c2a07404009a3785adde08746b7" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="31.0" rel="33.1"/>

<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>

</package>
<package pkgid="cca5b0acf6a2cfb909eb17b5dd5750a833daf99792c6b717634385e66fbb6c7d" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="31.1.0" rel="42.1"/>

<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Firefox 31.1.0esr (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- changes to support compilation on 11.4
  * explicit xz BuildRequires
  * mozilla-nullptr-gcc45.patch
  * remove unresolved makeinfo BuildRequires</changelog>

</package>
<package pkgid="9dd27a27926f61526e5934154700da0e1872f45a2cf60f6c0cea71bf0a1639c5" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="33.0" rel="46.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for ppc64 and ppc64le by not enabling elf-hack
  (bnc#901213)</changelog>

</package>
<package pkgid="8721cda580d4ba54d47bfae57a6f7785c70733b0cc7eab748397fa59b9dd7f2e" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="34.0.5" rel="50.3"/>

<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86</changelog>

</package>
<package pkgid="2f47aa9d41271ca313d8d2f70531d0027bd53bf223ad7ff898e1bf1942ae4d1a" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="35.0" rel="54.2"/>

<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>

</package>
<package pkgid="e12f35aa045cce325b24ca80d1856ff708b2a8d3b111f5c1d2f702d7d4e73fff" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="36.0" rel="59.2"/>

<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>

</package>
<package pkgid="81d79d34e64d7edf72478de9b86f0cbe28515f8136b1f879821d844422c2fb99" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="36.0.4" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>

</package>
<package pkgid="1972d98c44e7857becba06d7493e15e0a3286911bc076bdde3c6cff471b831a3" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="37.0.1" rel="68.1"/>

<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>

</package>
<package pkgid="54347ed6023d93f1bc33eefdc8cc39289644ab6bc51109c583ed3a369d530e57" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="37.0.2" rel="71.1"/>

<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>

</package>
<package pkgid="4dc5ffb8f0976c8d77481713962a04fbff901791438e1a079d6633a74f8410d6" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="38.0.1" rel="74.1"/>

<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>

</package>
<package pkgid="e229a1ace1edbe6d0a3aeb8567c9bd85bdf741b9f802743c74eded32720b152e" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="39.0" rel="78.1"/>

<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>

</package>
<package pkgid="0a01ece50d0ae271e23fc84f08edc4c7bbe64e102445c31ae433c0a7fc750c27" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="40.0" rel="82.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>

</package>
<package pkgid="dccbc62f04272b5e3797fcc318a3c8bf8e6296f3aa379e2553ac2f729d490bba" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="40.0.3" rel="85.2"/>

<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>

</package>
<package pkgid="fa44c112a3d4999ce64c45b2e9931b6df5c480496b6fed375e49d254807ba9bc" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="41.0" rel="88.1"/>

<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>

</package>
<package pkgid="fb2276a1615d0991d1f0b02a2fba583f03c5145eb13c039e62ea3658a75b6228" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="41.0.2" rel="91.1"/>

<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>

</package>
<package pkgid="991fc30f987301b7c7ab92992d58a75e428e6962b2da53ca20ee22726113c303" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="42.0" rel="94.4"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="010261388464d28c9857106cc5e742043dcf108a487d749da21aa297edde40b4" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="43.0" rel="97.1"/>

<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>

</package>
<package pkgid="fcf6e07b5d1df8735b5f747eed710b92c3a8e1d9e8f47f98bdb0f4cd987b5544" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="43.0.3" rel="100.1"/>

<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>

</package>
<package pkgid="715995ccd775e36eb14636c88a7b14ec3027a680f87cfb24c9794da4193ea517" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="44.0" rel="103.1"/>

<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>

</package>
<package pkgid="24e2eecc3b2498be6fcde13c6d2fc7fdc1c060fc1a45a3d467d9e4103f172df2" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="44.0.2" rel="106.1"/>

<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>

</package>
<package pkgid="a0ced93ad105c94ff05263398bc7017c97df19a66a48a14727558db7e6f63337" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="45.0" rel="109.1"/>

<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="0811cf18a1d2871973cdd76a15244fea0939d2418b922c1907872d10edf1b0c9" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="46.0" rel="113.2"/>

<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>

</package>
<package pkgid="8203c77ecb76de58e44d168d152167e3980285aae367722199e1c45619b9eb0a" name="MozillaFirefox-branding-upstream" arch="x86_64">
    <version epoch="0" ver="47.0" rel="116.1"/>

<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>
<changelog author="wr@rosenauer.org" date="1462363200">- update to Firefox 46.0.1
  Fixed:
  * Search plugin issue for various locales
  * Add-on signing certificate expiration
  * Service worker update issue
  * Build issue when jit is disabled
  * Limit Sync registration updates
- removed now obsolete mozilla-jit_branch64.patch</changelog>
<changelog author="dsterba@suse.cz" date="1463054400">- enable build with PIE and full relro on x86_64 (boo#980384)</changelog>
<changelog author="badshah400@gmail.com" date="1464004800">- Add patches to fix building with gcc6:
  + mozilla-gcc6.patch: fix building with gcc &gt;= 6.1; patch
    taken from upstream:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
    from unified compilation because #include &lt;cmath&gt; in other
    source files causes gcc6 compilation failure; patch taken from
    upstream:
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1465300800">- update to Firefox 47.0 (boo#983549)
  * Enable VP9 video codec for users with fast machines
  * Embedded YouTube videos now play with HTML5 video if Flash is
    not installed
  * View and search open tabs from your smartphone or another
    computer in a sidebar
  * Allow no-cache on back/forward navigations for https resources
  security fixes:
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
    (boo#983638)
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
    bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
    bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
    bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
    bmo#1269729, bmo#1273202, bmo#1273701)
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
    Buffer overflow parsing HTML5 fragments
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
    Use-after-free deleting tables from a contenteditable document
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
    Addressbar spoofing though the SELECT element
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
    Out-of-bounds write with WebGL shader
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
    Partial same-origin-policy through setting location.host
    through data URI
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
    Use-after-free when textures are used in WebGL operations
    after recycle pool destruction
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
    Incorrect icon displayed on permissions notifications
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
    Entering fullscreen and persistent pointerlock without user
    permission
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
    Information disclosure of disabled plugins through CSS
    pseudo-classes
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
    Java applets bypass CSP protections
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
    bmo#1221620, bmo#1241034, bmo#1241037)
    Network Security Services (NSS) vulnerabilities
    fixed by requiring NSS 3.23
  packaging changes:
  * cleanup configure options (boo#981695):
  - notably remove GStreamer support which is gone from FF
  * remove obsolete patches
  - mozilla-libproxy.patch
  - mozilla-repo.patch</changelog>

</package>
<package pkgid="abcf2fadde10766fa9a8bb9e1e29e756e06ead0eb2d5ca1fbf1698c20c3befa8" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="26.0" rel="4.2"/>

<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>

</package>
<package pkgid="2704f3bf395a05042c62e131ae4514e3416e00509b9e5b25de6ad68177362916" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="27.0" rel="8.1"/>

<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>

</package>
<package pkgid="27924bfae2f2ce51f0defef6c3b02fb3518ea4f020a109392063e5bb20fddb76" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="27.0.1" rel="12.1"/>

<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>

</package>
<package pkgid="b838a5c7ceb8b1718f67a9685600ea5cc4714a554a28168d8815659801326493" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="28.0" rel="17.1"/>

<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bnc#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>

</package>
<package pkgid="a78958d18dd339c814bdfaead8458015f00db30d152ca269b3acc51a2df95826" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="29.0" rel="20.1"/>

<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="2bcd126985d9b9a73c9b9285f2dcc940bad7903cb2d471930333ec06c2c3b348" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="29.0.1" rel="24.1"/>

<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>

</package>
<package pkgid="242d6ec599df4b610f67104759af8d58ce74499128ea70af0a9d42063d686931" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="30.0" rel="29.1"/>

<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>

</package>
<package pkgid="8754dc9b41feee0a31bc0d896c9408551846e8be6aca1836bb1e0a0d08422a76" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="31.0" rel="33.1"/>

<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>

</package>
<package pkgid="58789f671fac5656c3fb47ab6da6b054ff46519fe39910021066b0af27d9cc94" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="31.1.0" rel="42.1"/>

<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Firefox 31.1.0esr (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- changes to support compilation on 11.4
  * explicit xz BuildRequires
  * mozilla-nullptr-gcc45.patch
  * remove unresolved makeinfo BuildRequires</changelog>

</package>
<package pkgid="63a090857190b012b0fc1a9aec507671c66591c55ac8e8916db4c47df9db49ad" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="33.0" rel="46.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for ppc64 and ppc64le by not enabling elf-hack
  (bnc#901213)</changelog>

</package>
<package pkgid="3a7b9740e2cc4b495dd8e40f504bf519661061c1e753f67869d21d3d76d88d21" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="34.0.5" rel="50.3"/>

<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86</changelog>

</package>
<package pkgid="77802515ae4f4f16107abe1bdfdcbf167f6f0df42d15c745760a35e175c82375" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="35.0" rel="54.2"/>

<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>

</package>
<package pkgid="9ad1b620c75a887801de1ec1ca3c01426ac4fb9e2ca1372b0217b6ccb4495cdd" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="36.0" rel="59.2"/>

<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>

</package>
<package pkgid="e021b9f326c28b25f5e4cd69350e412387766eecf0fda5ef3a89145e797fb233" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="36.0.4" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>

</package>
<package pkgid="4f784c3dc25adc8a243e23d21983e1fb36d8dec7ee85e37ca509843fc677ab21" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="37.0.1" rel="68.1"/>

<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>

</package>
<package pkgid="f3efce58fe336499983fecf1f5e429fb1a650c4a7523e8770e8fb997ec7944e1" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="37.0.2" rel="71.1"/>

<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>

</package>
<package pkgid="e2a713ee398ee6003adb166f0f89091166efb9f7f435f1601c011c9b10daacda" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="38.0.1" rel="74.1"/>

<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>

</package>
<package pkgid="048672211d1f981b921f7211280c88d617199009b7cc804fff1d19757cd80bb6" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="39.0" rel="78.1"/>

<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>

</package>
<package pkgid="2932055b9ae7f6af6d2a1dfe307ea5fdc672762fc8af5904e767053bfe84700e" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="40.0" rel="82.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>

</package>
<package pkgid="74108c629ac2462821b8a99f8d90bfaeaef02edbc54cc799e4fed785de89cada" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="40.0.3" rel="85.2"/>

<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>

</package>
<package pkgid="46d911f3276245f08bf886aade06129b28f2cdbb00986e5d511bab97c144960b" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="41.0" rel="88.1"/>

<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>

</package>
<package pkgid="e8e904f4f81246fa752747b5c1a9c8be561af47159ad22ff147ec3515518ec0a" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="41.0.2" rel="91.1"/>

<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>

</package>
<package pkgid="91bd8a160621fdf07cba2dd5c331d2853b682a1ce8958c05c07ca639820f462e" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="42.0" rel="94.4"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="8fc7ce91af79e22155a06fe8d521040087ec85f75dc86c4b9ee95e2969999288" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="43.0" rel="97.1"/>

<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>

</package>
<package pkgid="18711b8b0326df8c8b3a99136943ba66816503e9abda060d17dc4771f73663c6" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="43.0.3" rel="100.1"/>

<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>

</package>
<package pkgid="cff0234a7c10d26b7030ad8942b372556366532a953b81f305d053603956d6c4" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="44.0" rel="103.1"/>

<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>

</package>
<package pkgid="f20e12dc155acf25052d5862b1fda9cd7be2815b2ecdc4d5141f5c0174028abc" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="44.0.2" rel="106.1"/>

<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>

</package>
<package pkgid="7fe6f734650b911ce9db12cdcc0bd4edc015b43fed37f78b3730a512f2d91e6e" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="45.0" rel="109.1"/>

<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="8bd5a3ef36702506e0723044edf6badaf306642190a024cc6ef9e2aa571971b1" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="46.0" rel="113.2"/>

<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>

</package>
<package pkgid="35da35bedbc7d2419868368e29952521d4b1ffc716db1110cb24db9462603516" name="MozillaFirefox-buildsymbols" arch="i586">
    <version epoch="0" ver="47.0" rel="116.1"/>

<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>
<changelog author="wr@rosenauer.org" date="1462363200">- update to Firefox 46.0.1
  Fixed:
  * Search plugin issue for various locales
  * Add-on signing certificate expiration
  * Service worker update issue
  * Build issue when jit is disabled
  * Limit Sync registration updates
- removed now obsolete mozilla-jit_branch64.patch</changelog>
<changelog author="dsterba@suse.cz" date="1463054400">- enable build with PIE and full relro on x86_64 (boo#980384)</changelog>
<changelog author="badshah400@gmail.com" date="1464004800">- Add patches to fix building with gcc6:
  + mozilla-gcc6.patch: fix building with gcc &gt;= 6.1; patch
    taken from upstream:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
    from unified compilation because #include &lt;cmath&gt; in other
    source files causes gcc6 compilation failure; patch taken from
    upstream:
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1465300800">- update to Firefox 47.0 (boo#983549)
  * Enable VP9 video codec for users with fast machines
  * Embedded YouTube videos now play with HTML5 video if Flash is
    not installed
  * View and search open tabs from your smartphone or another
    computer in a sidebar
  * Allow no-cache on back/forward navigations for https resources
  security fixes:
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
    (boo#983638)
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
    bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
    bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
    bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
    bmo#1269729, bmo#1273202, bmo#1273701)
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
    Buffer overflow parsing HTML5 fragments
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
    Use-after-free deleting tables from a contenteditable document
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
    Addressbar spoofing though the SELECT element
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
    Out-of-bounds write with WebGL shader
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
    Partial same-origin-policy through setting location.host
    through data URI
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
    Use-after-free when textures are used in WebGL operations
    after recycle pool destruction
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
    Incorrect icon displayed on permissions notifications
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
    Entering fullscreen and persistent pointerlock without user
    permission
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
    Information disclosure of disabled plugins through CSS
    pseudo-classes
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
    Java applets bypass CSP protections
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
    bmo#1221620, bmo#1241034, bmo#1241037)
    Network Security Services (NSS) vulnerabilities
    fixed by requiring NSS 3.23
  packaging changes:
  * cleanup configure options (boo#981695):
  - notably remove GStreamer support which is gone from FF
  * remove obsolete patches
  - mozilla-libproxy.patch
  - mozilla-repo.patch</changelog>

</package>
<package pkgid="a08a0d2325d09ff28393cac9a3d1802cec5aeb53b18b35c832eed19040840a58" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="26.0" rel="4.2"/>

<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>

</package>
<package pkgid="0eed832cec996fc5326998578f982075d194f774c006d5402f4db30a5753a723" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="27.0" rel="8.1"/>

<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>

</package>
<package pkgid="211890e4dc9942b0347d8276d28eef486b690d8752cdb491064736402e2bbcb9" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="27.0.1" rel="12.1"/>

<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>

</package>
<package pkgid="64c09e493a9dce19d3140e8dc7937eb3e26d0acc4be219eda916d31552e595be" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="28.0" rel="17.1"/>

<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bnc#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>

</package>
<package pkgid="a7cbea6f176dccbc7f8109a42c48a66b3e53a938702891f1ef72fa3298b541a3" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="29.0" rel="20.1"/>

<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="3a8fb41ace3b87400487003acec56ac07b933f00537010821c2410793e4c98c6" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="29.0.1" rel="24.1"/>

<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>

</package>
<package pkgid="6add29de04886214d4d0754ef58b60abf0a03fa6c3392fdacc9f3768d5cb69aa" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="30.0" rel="29.1"/>

<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>

</package>
<package pkgid="f5afc74c3e78edfbcf33b5e1975136890b26f0a1a0f34b7d52b4b34c40cf33dc" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="31.0" rel="33.1"/>

<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>

</package>
<package pkgid="a7c19ad4256a57d5410a6014805c3795e4a49b4874028dd71fbc6e23eeed1d0e" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="31.1.0" rel="42.1"/>

<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Firefox 31.1.0esr (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- changes to support compilation on 11.4
  * explicit xz BuildRequires
  * mozilla-nullptr-gcc45.patch
  * remove unresolved makeinfo BuildRequires</changelog>

</package>
<package pkgid="645aed6819be60a0006ede892a6c2b1b946cf5b1cc2477ee5b498931b1f274e3" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="33.0" rel="46.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for ppc64 and ppc64le by not enabling elf-hack
  (bnc#901213)</changelog>

</package>
<package pkgid="a60d089b31b68e2d094cd44370785994a429b9f5a3249e8328795ee06fc2e5d1" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="34.0.5" rel="50.3"/>

<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86</changelog>

</package>
<package pkgid="89d50e1c2d5d392d7e409a6baf01821b5414cea2a4ab16b44a78295cf68ca70d" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="35.0" rel="54.2"/>

<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>

</package>
<package pkgid="4b7ccd98560c616d8e1fadd5ad7494b385d2632e8f7d24dc3ea2e6de39c972f3" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="36.0" rel="59.2"/>

<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>

</package>
<package pkgid="a8dbd8098d3f156b6a66c7cd4eb5e2280423557beb3dbb83751dbdddd9c94e73" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="36.0.4" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>

</package>
<package pkgid="d39abf9e9aeab6fde440d1ec6f035288ac02df119c1096d9277c0fb4a4311e76" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="37.0.1" rel="68.1"/>

<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>

</package>
<package pkgid="15b05c1f0a1801ae2e939373208e2b988a632296bb439e87d06e5f88001c97d6" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="37.0.2" rel="71.1"/>

<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>

</package>
<package pkgid="e18b910de56c8ce0179db1d7b889bf360629510ffc466d6e9d53b56363a260cb" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="38.0.1" rel="74.1"/>

<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>

</package>
<package pkgid="d7b3cf8252a3f63d513599a383c6d85fbde3c636d4094dc6beb97297b90eec20" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="39.0" rel="78.1"/>

<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>

</package>
<package pkgid="a010d02e15d07b1b9657d5d0fbad88e439f2668bb1af10e0da7003fbdf77b038" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="40.0" rel="82.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>

</package>
<package pkgid="308829d2b585138cc89e4412cb08c8dbee8c09a365ffa23d8654076075ee0cae" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="40.0.3" rel="85.2"/>

<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>

</package>
<package pkgid="c5b81d24d5dc00ccfbf47c4c0f57c8a6645b2af7f6f949dccfc4375a2e16d454" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="41.0" rel="88.1"/>

<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>

</package>
<package pkgid="fcd6fcc4fd59efde132d5fbdb590adfd978c7a8912fbe17efd8de2dbbd3d0a15" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="41.0.2" rel="91.1"/>

<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>

</package>
<package pkgid="234584a05239193732d75d3b3db4c102069f7ce584af9fc1907fe26da50bdb06" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="42.0" rel="94.4"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="b7a64a40e46f7b51094e0ef0590aca79f2a26ac313665dcab9805252177232b1" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="43.0" rel="97.1"/>

<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>

</package>
<package pkgid="e9a1debe5bd56e714d220fbb923a58cee838866438a326d69b7ea91252cab844" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="43.0.3" rel="100.1"/>

<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>

</package>
<package pkgid="53abb7271e75e2e5f92fc75d68fa40304ab03d92459891aacf3565fa4a9f07a8" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="44.0" rel="103.1"/>

<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>

</package>
<package pkgid="29b56870f15e6bde9630217e8a21e8eeb78601eeb7acfa9cae5581a0010c87a4" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="44.0.2" rel="106.1"/>

<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>

</package>
<package pkgid="8f599351cd3491f6f6e51db0294fc8e0fa5a61eac77bfbabc774148cb800b5b3" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="45.0" rel="109.1"/>

<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="b2d43723283de09333fc281ff1c5c345b6f44b537c7eac3daf32b3c069adbf77" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="46.0" rel="113.2"/>

<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>

</package>
<package pkgid="b2ca66e58f9b14697c3da7989b910aa6eeb036ad3f15b647dbf31df710a39fee" name="MozillaFirefox-buildsymbols" arch="x86_64">
    <version epoch="0" ver="47.0" rel="116.1"/>

<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>
<changelog author="wr@rosenauer.org" date="1462363200">- update to Firefox 46.0.1
  Fixed:
  * Search plugin issue for various locales
  * Add-on signing certificate expiration
  * Service worker update issue
  * Build issue when jit is disabled
  * Limit Sync registration updates
- removed now obsolete mozilla-jit_branch64.patch</changelog>
<changelog author="dsterba@suse.cz" date="1463054400">- enable build with PIE and full relro on x86_64 (boo#980384)</changelog>
<changelog author="badshah400@gmail.com" date="1464004800">- Add patches to fix building with gcc6:
  + mozilla-gcc6.patch: fix building with gcc &gt;= 6.1; patch
    taken from upstream:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
    from unified compilation because #include &lt;cmath&gt; in other
    source files causes gcc6 compilation failure; patch taken from
    upstream:
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1465300800">- update to Firefox 47.0 (boo#983549)
  * Enable VP9 video codec for users with fast machines
  * Embedded YouTube videos now play with HTML5 video if Flash is
    not installed
  * View and search open tabs from your smartphone or another
    computer in a sidebar
  * Allow no-cache on back/forward navigations for https resources
  security fixes:
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
    (boo#983638)
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
    bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
    bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
    bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
    bmo#1269729, bmo#1273202, bmo#1273701)
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
    Buffer overflow parsing HTML5 fragments
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
    Use-after-free deleting tables from a contenteditable document
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
    Addressbar spoofing though the SELECT element
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
    Out-of-bounds write with WebGL shader
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
    Partial same-origin-policy through setting location.host
    through data URI
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
    Use-after-free when textures are used in WebGL operations
    after recycle pool destruction
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
    Incorrect icon displayed on permissions notifications
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
    Entering fullscreen and persistent pointerlock without user
    permission
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
    Information disclosure of disabled plugins through CSS
    pseudo-classes
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
    Java applets bypass CSP protections
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
    bmo#1221620, bmo#1241034, bmo#1241037)
    Network Security Services (NSS) vulnerabilities
    fixed by requiring NSS 3.23
  packaging changes:
  * cleanup configure options (boo#981695):
  - notably remove GStreamer support which is gone from FF
  * remove obsolete patches
  - mozilla-libproxy.patch
  - mozilla-repo.patch</changelog>

</package>
<package pkgid="f3b0ca67635ba379bc09864fc98c910cbc41b93c5df376224b24daafcc65117e" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="26.0" rel="4.2"/>

<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>

</package>
<package pkgid="51f158c91d6f5dcbd40c8c260b7e9768fe81e2149e01cbd98370a72d127d317d" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="27.0" rel="8.1"/>

<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>

</package>
<package pkgid="c669b176d6617a0ff882b1b2cec94a3bebbc41948b1ad447a9fa33ea1f1f4af8" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="27.0.1" rel="12.1"/>

<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>

</package>
<package pkgid="51ebcaeb567fac74c17506a947e6c16539b2a93ff37c4ea375b57ce62813913f" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="28.0" rel="17.1"/>

<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bnc#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>

</package>
<package pkgid="ec2c40670f2d0d5c6127619971962de82c8d5b9bf7946fe407c74475b08bd485" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="29.0" rel="20.1"/>

<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="ef98f1996d741a4e9b27f78076db0d8bdc0f623f27e6b226daeaeecb5a19a442" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="29.0.1" rel="24.1"/>

<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>

</package>
<package pkgid="c2402ea51e70b48961cae0ff49b0b9fa130084f67d6098ea51f738a51d0f9072" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="30.0" rel="29.1"/>

<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>

</package>
<package pkgid="4e7eef4ba89e0cb42eeaaac970c212bcc24239d7d1b6a0789c2da6f41012ad30" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="31.0" rel="33.1"/>

<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>

</package>
<package pkgid="265e481aa5edb3ec101cd54094939d88d2560089aedb197351c2e6017fc54d6a" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="31.1.0" rel="42.1"/>

<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Firefox 31.1.0esr (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- changes to support compilation on 11.4
  * explicit xz BuildRequires
  * mozilla-nullptr-gcc45.patch
  * remove unresolved makeinfo BuildRequires</changelog>

</package>
<package pkgid="53ed8bb547763317c2eecdf10ab215e1be4f799a8bc2046f48bb1c95d5613bd2" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="33.0" rel="46.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for ppc64 and ppc64le by not enabling elf-hack
  (bnc#901213)</changelog>

</package>
<package pkgid="2bb48b0b0eec0169d7178cd5c94f55b9b9508d0fce68b9a36230e4b715130331" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="34.0.5" rel="50.3"/>

<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86</changelog>

</package>
<package pkgid="102f8bb92826d0beb43554305507106fa3e8e295e8b72d5fd60b1675e225f328" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="35.0" rel="54.2"/>

<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>

</package>
<package pkgid="e92f6eb9025a535870d5e058eabd2f2ec0b433022b32dc76acf705bc41b551ff" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="36.0" rel="59.2"/>

<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>

</package>
<package pkgid="347c42c88dad5148fafd7202a5b17fd10d143a2cce28fecbace4dc49265f0b63" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="36.0.4" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>

</package>
<package pkgid="7b490c10bd69746b42d9866e0b3968bc63d003272be12b94291ec9d5251e97f3" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="37.0.1" rel="68.1"/>

<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>

</package>
<package pkgid="2ebb887d4dd93e2232cfc2f54531015f9504612d4fb5acdd8033a6ceef87e175" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="37.0.2" rel="71.1"/>

<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>

</package>
<package pkgid="907459b5016b6d45444bb56659e198746bdc15be5d792d158b98db042e221717" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="38.0.1" rel="74.1"/>

<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>

</package>
<package pkgid="452996586fe231f946d7d6934cfd855d9efa903885a907ed80fe13072ccedce7" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="39.0" rel="78.1"/>

<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>

</package>
<package pkgid="98a14bdd69e0ebf0bc8ec3e68dd647826e08f5196c2fbe906bcde9570f5097bb" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="40.0" rel="82.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>

</package>
<package pkgid="1aab88c8a1893885dfdc23402f226fafad1b3df7269ead92647ecb8e627e9b0c" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="40.0.3" rel="85.2"/>

<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>

</package>
<package pkgid="d94b8ba111c7cf1c25d625ee2fe4bf1a4d0571c0222aa4c6c3691430a77e913c" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="41.0" rel="88.1"/>

<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>

</package>
<package pkgid="f4cff1880777d340fc89c74dcd9b3131c4db30aa7189c99bc71828acd10aec75" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="41.0.2" rel="91.1"/>

<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>

</package>
<package pkgid="2961f3abc241b016b0c639006e95178fceb3835451a81ce850b91c3971bceb9c" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="42.0" rel="94.4"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="1ccccddcc766dc7e995defa1937745041bede292d07512137cb3459a5fa441e9" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="43.0" rel="97.1"/>

<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>

</package>
<package pkgid="7dbefd4199e2c91d41e561588c0122a1e005a343d04de7a732ae390ebcf3ecd6" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="43.0.3" rel="100.1"/>

<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>

</package>
<package pkgid="dc486cfaf9f81fbb8b076348f9466a52856d65c3318a5f8830b8e204f3907640" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="44.0" rel="103.1"/>

<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>

</package>
<package pkgid="4a0034aa99d32ae4daceb33dcaaeef481941743630733fbd9f58e4046fe126fa" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="44.0.2" rel="106.1"/>

<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>

</package>
<package pkgid="00eeb0bcde8cb31c2a6c808546d8022fb6800f168a6f9b3ffcf027437f869360" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="45.0" rel="109.1"/>

<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="6b1efe1198943c6073941dc125b5a7550940bbaee3c35e04c63a3ff16db17abb" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="46.0" rel="113.2"/>

<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>

</package>
<package pkgid="0ac71980f8d4b5104c328b5149272c624357aca60e49095b41b465fb355fe8cd" name="MozillaFirefox-devel" arch="i586">
    <version epoch="0" ver="47.0" rel="116.1"/>

<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>
<changelog author="wr@rosenauer.org" date="1462363200">- update to Firefox 46.0.1
  Fixed:
  * Search plugin issue for various locales
  * Add-on signing certificate expiration
  * Service worker update issue
  * Build issue when jit is disabled
  * Limit Sync registration updates
- removed now obsolete mozilla-jit_branch64.patch</changelog>
<changelog author="dsterba@suse.cz" date="1463054400">- enable build with PIE and full relro on x86_64 (boo#980384)</changelog>
<changelog author="badshah400@gmail.com" date="1464004800">- Add patches to fix building with gcc6:
  + mozilla-gcc6.patch: fix building with gcc &gt;= 6.1; patch
    taken from upstream:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
    from unified compilation because #include &lt;cmath&gt; in other
    source files causes gcc6 compilation failure; patch taken from
    upstream:
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1465300800">- update to Firefox 47.0 (boo#983549)
  * Enable VP9 video codec for users with fast machines
  * Embedded YouTube videos now play with HTML5 video if Flash is
    not installed
  * View and search open tabs from your smartphone or another
    computer in a sidebar
  * Allow no-cache on back/forward navigations for https resources
  security fixes:
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
    (boo#983638)
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
    bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
    bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
    bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
    bmo#1269729, bmo#1273202, bmo#1273701)
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
    Buffer overflow parsing HTML5 fragments
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
    Use-after-free deleting tables from a contenteditable document
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
    Addressbar spoofing though the SELECT element
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
    Out-of-bounds write with WebGL shader
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
    Partial same-origin-policy through setting location.host
    through data URI
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
    Use-after-free when textures are used in WebGL operations
    after recycle pool destruction
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
    Incorrect icon displayed on permissions notifications
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
    Entering fullscreen and persistent pointerlock without user
    permission
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
    Information disclosure of disabled plugins through CSS
    pseudo-classes
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
    Java applets bypass CSP protections
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
    bmo#1221620, bmo#1241034, bmo#1241037)
    Network Security Services (NSS) vulnerabilities
    fixed by requiring NSS 3.23
  packaging changes:
  * cleanup configure options (boo#981695):
  - notably remove GStreamer support which is gone from FF
  * remove obsolete patches
  - mozilla-libproxy.patch
  - mozilla-repo.patch</changelog>

</package>
<package pkgid="1077fe0255b197eb75117397b02b068c6869e33535aaf47f4224a5519a3be5b3" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="26.0" rel="4.2"/>

<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>

</package>
<package pkgid="3e7b33ac2d75f2f82b30a41d001a99cc8b3387ba6063d1785a2ae5209bfa1808" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="27.0" rel="8.1"/>

<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>

</package>
<package pkgid="d97dfdde1f203b138759646183578af4d4d6d4909c93693269bf5ce77ad1e414" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="27.0.1" rel="12.1"/>

<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>

</package>
<package pkgid="8e95e35882f9aeead6b77fc2e1e284385b5218fc270bba031f371026355a580b" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="28.0" rel="17.1"/>

<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bnc#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>

</package>
<package pkgid="f7bafb83913f3427f1e7212bbd3dce7403e7d23993d91637d8a9c084c4c2baf2" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="29.0" rel="20.1"/>

<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="52c947e5d46ae97b3ecfdb1f5a0da044d242cc573a0ac8d62f8a249000d6c71f" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="29.0.1" rel="24.1"/>

<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>

</package>
<package pkgid="901d4bd42c118e6bdd7dbd7f4af592a7896308e845da174c65bc8ed8804bed4e" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="30.0" rel="29.1"/>

<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>

</package>
<package pkgid="02b04cde0694125a469c5888854d6e300f72a1d9a61e219d1290f83897df81da" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="31.0" rel="33.1"/>

<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>

</package>
<package pkgid="511c1d81d0730b078c1fe48658ffbb7b11582f3db6640d0d7af2c2d647198f35" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="31.1.0" rel="42.1"/>

<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Firefox 31.1.0esr (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- changes to support compilation on 11.4
  * explicit xz BuildRequires
  * mozilla-nullptr-gcc45.patch
  * remove unresolved makeinfo BuildRequires</changelog>

</package>
<package pkgid="880ae857d16a131b6a20da92d5ad81f7e382824f032940e18ab020e34bfb43da" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="33.0" rel="46.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for ppc64 and ppc64le by not enabling elf-hack
  (bnc#901213)</changelog>

</package>
<package pkgid="1a016a386b5d9620adb47cdfb51b44d91fbd356d3bb6adc7c2b6d15a9cab8975" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="34.0.5" rel="50.3"/>

<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86</changelog>

</package>
<package pkgid="625eca4645996532e2234d81074ee47cca4c558e19951c494885a79d052d8775" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="35.0" rel="54.2"/>

<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>

</package>
<package pkgid="71502554baa2d2b3e8ef0b353bb5f7d0dbaf9602e8970abd3fc1a7af023a19fc" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="36.0" rel="59.2"/>

<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>

</package>
<package pkgid="811a75a71c1bde636f817bc2723f901dc2e634f9635f618ee14417857e9eb0b1" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="36.0.4" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>

</package>
<package pkgid="19e2c7545c775105d8ab25403ce07a0567a1e6e89fc9f15ace0b1b39ef90a9f0" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="37.0.1" rel="68.1"/>

<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>

</package>
<package pkgid="194473551f98c8abae238ddb466d8189e403d43f820f248b0cd640e022d18118" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="37.0.2" rel="71.1"/>

<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>

</package>
<package pkgid="39a3e8ec0054a156b1761f0a8c0b1be50db393140f933f5f2a5a3cb2c55c3993" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="38.0.1" rel="74.1"/>

<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>

</package>
<package pkgid="0da87cae35481669d6170e0b49f7ce071c4fd166ae47b9b3af31252a1b8ffc3b" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="39.0" rel="78.1"/>

<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>

</package>
<package pkgid="5083213de1e5c369ead6ac1279497365202036c6aa2bda4a5ff1a0981ceb5486" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="40.0" rel="82.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>

</package>
<package pkgid="4997e54dffeac36ff0ac509d5284a76f23815d7e744057e99c71afa65c1c4bfd" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="40.0.3" rel="85.2"/>

<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>

</package>
<package pkgid="638003f8b75cf16ce7ee3433c387520e488e0d9768876e4a12551714df042491" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="41.0" rel="88.1"/>

<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>

</package>
<package pkgid="7eef3a2d99c83b20a991d02bdc75523c174a24563d13d7dd3dbcc65439811833" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="41.0.2" rel="91.1"/>

<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>

</package>
<package pkgid="b9159edbe9a19a32587d9ed3905a43dadb6e8205cfe52504419a079722692030" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="42.0" rel="94.4"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="f0d15a05f2b750320936c97c9901aab118fc82f689c1a1613b7b6bd2cbfb2656" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="43.0" rel="97.1"/>

<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>

</package>
<package pkgid="55801631313e2b7e8de647811518818bbb385ba2b6266fcf1b10e587ec6a26c1" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="43.0.3" rel="100.1"/>

<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>

</package>
<package pkgid="4616c3ce1370654b5ad5541d6c421dc7d400a0029c53e416f1b3d0592d06fbb1" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="44.0" rel="103.1"/>

<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>

</package>
<package pkgid="b7ea3fd9d4ce6638d71c112a5476ee6d5829ce9d45d1a99766e16af280a8a510" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="44.0.2" rel="106.1"/>

<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>

</package>
<package pkgid="a0d1b85e574ccc211f90facec802779040f11b389f8d87cc4e6d9df6d63e294b" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="45.0" rel="109.1"/>

<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="0744b0430b36488e938fe30cecaec13b5a9988b765ff0bf4995dabbe916baebe" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="46.0" rel="113.2"/>

<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>

</package>
<package pkgid="51886bd149e52c6101da75f9b982318065ba126951a0893d83c131f55517d186" name="MozillaFirefox-devel" arch="x86_64">
    <version epoch="0" ver="47.0" rel="116.1"/>

<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>
<changelog author="wr@rosenauer.org" date="1462363200">- update to Firefox 46.0.1
  Fixed:
  * Search plugin issue for various locales
  * Add-on signing certificate expiration
  * Service worker update issue
  * Build issue when jit is disabled
  * Limit Sync registration updates
- removed now obsolete mozilla-jit_branch64.patch</changelog>
<changelog author="dsterba@suse.cz" date="1463054400">- enable build with PIE and full relro on x86_64 (boo#980384)</changelog>
<changelog author="badshah400@gmail.com" date="1464004800">- Add patches to fix building with gcc6:
  + mozilla-gcc6.patch: fix building with gcc &gt;= 6.1; patch
    taken from upstream:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
    from unified compilation because #include &lt;cmath&gt; in other
    source files causes gcc6 compilation failure; patch taken from
    upstream:
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1465300800">- update to Firefox 47.0 (boo#983549)
  * Enable VP9 video codec for users with fast machines
  * Embedded YouTube videos now play with HTML5 video if Flash is
    not installed
  * View and search open tabs from your smartphone or another
    computer in a sidebar
  * Allow no-cache on back/forward navigations for https resources
  security fixes:
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
    (boo#983638)
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
    bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
    bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
    bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
    bmo#1269729, bmo#1273202, bmo#1273701)
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
    Buffer overflow parsing HTML5 fragments
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
    Use-after-free deleting tables from a contenteditable document
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
    Addressbar spoofing though the SELECT element
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
    Out-of-bounds write with WebGL shader
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
    Partial same-origin-policy through setting location.host
    through data URI
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
    Use-after-free when textures are used in WebGL operations
    after recycle pool destruction
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
    Incorrect icon displayed on permissions notifications
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
    Entering fullscreen and persistent pointerlock without user
    permission
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
    Information disclosure of disabled plugins through CSS
    pseudo-classes
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
    Java applets bypass CSP protections
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
    bmo#1221620, bmo#1241034, bmo#1241037)
    Network Security Services (NSS) vulnerabilities
    fixed by requiring NSS 3.23
  packaging changes:
  * cleanup configure options (boo#981695):
  - notably remove GStreamer support which is gone from FF
  * remove obsolete patches
  - mozilla-libproxy.patch
  - mozilla-repo.patch</changelog>

</package>
<package pkgid="a4e4cedb75ffa63330521ff6f27aeb93d34c6f92290ee609032f0cb2dfb2235c" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="26.0" rel="4.2"/>

<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>

</package>
<package pkgid="3c61583d1d022b6a4f723309b026dec822ede6671dcdc8eaedab4035f828aed9" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="27.0" rel="8.1"/>

<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>

</package>
<package pkgid="6e57da46a19b7561ea8df1e8b365ac7af48ef08dca3abe93037b3fd9f2195118" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="27.0.1" rel="12.1"/>

<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>

</package>
<package pkgid="e35b07fbfc152ac5f6eb08346c7eeb5054ba14d18cf2ce96d09af90037caf3d8" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="28.0" rel="17.1"/>

<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bnc#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>

</package>
<package pkgid="ecd6175dfc59236e05921748af6ed6b17576e007fdc70798513a98f0c11f3362" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="29.0" rel="20.1"/>

<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="dc0b948b0c09dcb8f17098914a39ca0400be6b9f885eedad61057f4a8a61f1f1" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="29.0.1" rel="24.1"/>

<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>

</package>
<package pkgid="6555399e128001035677c9450bb5ac286a288ff7c3976e4536528b1d6a02386b" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="30.0" rel="29.1"/>

<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>

</package>
<package pkgid="cf64da0d3d5edd401b91b295fed37ab29c3fddc32976696b1153924d9176b4f4" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="31.0" rel="33.1"/>

<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>

</package>
<package pkgid="bd9dff85a9fe0b4d9f3d861a41de6e68c84309886290755a99259688acbfbd61" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="31.1.0" rel="42.1"/>

<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Firefox 31.1.0esr (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- changes to support compilation on 11.4
  * explicit xz BuildRequires
  * mozilla-nullptr-gcc45.patch
  * remove unresolved makeinfo BuildRequires</changelog>

</package>
<package pkgid="aec1532a73876dfe2a708b93bf49a5326dfdc81a548c8d701d0584d0d82005bf" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="33.0" rel="46.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for ppc64 and ppc64le by not enabling elf-hack
  (bnc#901213)</changelog>

</package>
<package pkgid="34246aec977a9cc1ee81caef623635076ea223e98bf3dfe990b123d4d4cde89c" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="34.0.5" rel="50.3"/>

<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86</changelog>

</package>
<package pkgid="66d0ba34525939e016bb426b41515cae4695b026b52f6ee32762df6bcc10f1f3" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="35.0" rel="54.2"/>

<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>

</package>
<package pkgid="a1c9a41223e8423f2ade58e20b76fb0cbd55d03bd680ca1266fc7e6aff361d16" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="36.0" rel="59.2"/>

<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>

</package>
<package pkgid="b230f507583cc49ce85fabd6f948958e04e5dab1e6be039cc20ee57ab0c274df" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="36.0.4" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>

</package>
<package pkgid="aaab016e0679a89776526402b5685c07fe93084e47f0361504f0618dbfeb9ca4" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="37.0.1" rel="68.1"/>

<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>

</package>
<package pkgid="54e9d4454024784e4aa4db4080100909774b33877bfc783367d07bdc9eb79f6d" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="37.0.2" rel="71.1"/>

<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>

</package>
<package pkgid="9c803e3681062953521b708d74eeba7ebbbf06298e08c157f8df0873b7a123d8" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="38.0.1" rel="74.1"/>

<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>

</package>
<package pkgid="b27661fefd4899ca09250d7573f02642e317f9ab11a48107a8b95664e3885026" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="39.0" rel="78.1"/>

<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>

</package>
<package pkgid="eeaef4d05353bcf08d97ce32d4a7006d6f590498eb2bd112662a0c6777b0d024" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="40.0" rel="82.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>

</package>
<package pkgid="dba1c1cbdd72761cd7805d75d2ee0eccac04dcf139c763ceab24979ca216945a" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="40.0.3" rel="85.2"/>

<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>

</package>
<package pkgid="79471a69ec2b30687b4525951a619fea6fbd539d7dc4a756f68836266995700f" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="41.0" rel="88.1"/>

<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>

</package>
<package pkgid="358e15467a455fd52a60dd3125b068ce8788b2f83d428a12414fa3665cd5d7e0" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="41.0.2" rel="91.1"/>

<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>

</package>
<package pkgid="e7f18187dc249a557ede667f6ea9446e1369141d9027212bf57ec55aacca577b" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="42.0" rel="94.4"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="c36eb4ad9a830b11e4682113aff62d835862354f3e6f1141b79db059368a6e86" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="43.0" rel="97.1"/>

<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>

</package>
<package pkgid="512dc167977f8a4e7a31057b0f094106410e14abca6beddb4bd795a4838e9fa9" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="43.0.3" rel="100.1"/>

<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>

</package>
<package pkgid="86e165e04a83be5e845d63309fd6b40ab7e7828d1bf82e60821a04fc928ca4d6" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="44.0" rel="103.1"/>

<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>

</package>
<package pkgid="45dcefb6d4f2131beb5420f15a010ab005e9ce66586d850973f31834352a3886" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="44.0.2" rel="106.1"/>

<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>

</package>
<package pkgid="a1791b6b1059ec252554d9c631e3c718a1b1f7160e35d2da2d655bd3bd4e7fe8" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="45.0" rel="109.1"/>

<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="7cebe9e51c186b3a2c02bc5ee2c22e62170bb92adee180b7e47eed6d2316c4f2" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="46.0" rel="113.2"/>

<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>

</package>
<package pkgid="dd711ca1abaad6e7dba6c28bf1c734c567a6694b7ce093f672620bb0fa21cbbb" name="MozillaFirefox-translations-common" arch="i586">
    <version epoch="0" ver="47.0" rel="116.1"/>

<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>
<changelog author="wr@rosenauer.org" date="1462363200">- update to Firefox 46.0.1
  Fixed:
  * Search plugin issue for various locales
  * Add-on signing certificate expiration
  * Service worker update issue
  * Build issue when jit is disabled
  * Limit Sync registration updates
- removed now obsolete mozilla-jit_branch64.patch</changelog>
<changelog author="dsterba@suse.cz" date="1463054400">- enable build with PIE and full relro on x86_64 (boo#980384)</changelog>
<changelog author="badshah400@gmail.com" date="1464004800">- Add patches to fix building with gcc6:
  + mozilla-gcc6.patch: fix building with gcc &gt;= 6.1; patch
    taken from upstream:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
    from unified compilation because #include &lt;cmath&gt; in other
    source files causes gcc6 compilation failure; patch taken from
    upstream:
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1465300800">- update to Firefox 47.0 (boo#983549)
  * Enable VP9 video codec for users with fast machines
  * Embedded YouTube videos now play with HTML5 video if Flash is
    not installed
  * View and search open tabs from your smartphone or another
    computer in a sidebar
  * Allow no-cache on back/forward navigations for https resources
  security fixes:
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
    (boo#983638)
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
    bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
    bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
    bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
    bmo#1269729, bmo#1273202, bmo#1273701)
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
    Buffer overflow parsing HTML5 fragments
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
    Use-after-free deleting tables from a contenteditable document
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
    Addressbar spoofing though the SELECT element
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
    Out-of-bounds write with WebGL shader
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
    Partial same-origin-policy through setting location.host
    through data URI
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
    Use-after-free when textures are used in WebGL operations
    after recycle pool destruction
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
    Incorrect icon displayed on permissions notifications
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
    Entering fullscreen and persistent pointerlock without user
    permission
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
    Information disclosure of disabled plugins through CSS
    pseudo-classes
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
    Java applets bypass CSP protections
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
    bmo#1221620, bmo#1241034, bmo#1241037)
    Network Security Services (NSS) vulnerabilities
    fixed by requiring NSS 3.23
  packaging changes:
  * cleanup configure options (boo#981695):
  - notably remove GStreamer support which is gone from FF
  * remove obsolete patches
  - mozilla-libproxy.patch
  - mozilla-repo.patch</changelog>

</package>
<package pkgid="2d83ba5c35bd10e3521ae43a38d78f0dcd776b8ade72eb8b0118c678c18eaac2" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="26.0" rel="4.2"/>

<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>

</package>
<package pkgid="a40b3a4fc8899df2eec778e2ae0c0cca79001501f203022df8f2e20e2f09130b" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="27.0" rel="8.1"/>

<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>

</package>
<package pkgid="59a8138cce340606ae3350f1d4b29412e47221554bc0fc16e5d81bc3ddc5930b" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="27.0.1" rel="12.1"/>

<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>

</package>
<package pkgid="db5e780887ab853a3412c5717bc77d757f54cc972d9658180cdf0425c12aa146" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="28.0" rel="17.1"/>

<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bnc#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>

</package>
<package pkgid="56c97b7e9eac21a43a5107612eadf4ad219c1da9abc764d95d2a8059cf41a63a" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="29.0" rel="20.1"/>

<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="dae7d3621f7913d6279552d338865f51e9b1621cfdff27785dc93b817ecc3285" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="29.0.1" rel="24.1"/>

<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>

</package>
<package pkgid="d538c74169fa7fd7a2ab3729c8da8bcd2b8793273ec0948d55065c59e30c4c5c" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="30.0" rel="29.1"/>

<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>

</package>
<package pkgid="4269c54ca1ab79ae879dddccdb37da8b769ba2b595ecf149d45f8c9afbaf124f" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="31.0" rel="33.1"/>

<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>

</package>
<package pkgid="6852b00688c6fa7efd421e787eb9cbfdd4f415eb615ba358dfcea6c0ce8a70b8" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="31.1.0" rel="42.1"/>

<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Firefox 31.1.0esr (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- changes to support compilation on 11.4
  * explicit xz BuildRequires
  * mozilla-nullptr-gcc45.patch
  * remove unresolved makeinfo BuildRequires</changelog>

</package>
<package pkgid="09be87485988c531bda9e7b9919d8a9ab7cc0c41b85d43c55a9e6fe4e418b5c3" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="33.0" rel="46.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for ppc64 and ppc64le by not enabling elf-hack
  (bnc#901213)</changelog>

</package>
<package pkgid="ae0fcc5cb380d97380a014e6d06b4c815a603ffcff812c6c51a48a997a955f6a" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="34.0.5" rel="50.3"/>

<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86</changelog>

</package>
<package pkgid="8dc4bec367ba2260b89f4ffd73c0c9796b5d330f9b4ea900f8f4b8b5bfd17e05" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="35.0" rel="54.2"/>

<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>

</package>
<package pkgid="f8322ecc38a773494be2f4b419e230164329ce4f5f3da6fff93be3f415005c71" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="36.0" rel="59.2"/>

<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>

</package>
<package pkgid="e91685e61d9c7c8320b9beea6b3a3c71711fb9d331c7a3fa4c4b2b859881b356" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="36.0.4" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>

</package>
<package pkgid="bbe71be7c6c2fccfd7aac6eb8ea8eb15acd5ae6c8cd33a53d68ee4afb810b690" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="37.0.1" rel="68.1"/>

<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>

</package>
<package pkgid="04d248be65490f27bfc63545722f1f3cee569557d87866325380936360dc82a5" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="37.0.2" rel="71.1"/>

<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>

</package>
<package pkgid="38474ee10eadb5398678d186fa4118369759642cb99e589654f2b5df8821d5a0" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="38.0.1" rel="74.1"/>

<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>

</package>
<package pkgid="ca16a24ba77fb7aa1c354311bf42f26ff47946af2c3aa7ed193da5e9e8f90285" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="39.0" rel="78.1"/>

<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>

</package>
<package pkgid="1450a11d4a0b84e08aa8c17d0db6de8a8187e40ff1103f39195670567c1698ef" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="40.0" rel="82.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>

</package>
<package pkgid="904d341f6e82700c7d921a6d83a86ddfb54ea2bfb0532fd4103cd19bcc9d8f13" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="40.0.3" rel="85.2"/>

<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>

</package>
<package pkgid="175e2edf48a7c57b29a3a1999a99218812a5dab1b8d068f957e211c9fbf3d797" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="41.0" rel="88.1"/>

<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>

</package>
<package pkgid="8a595134aaba93e0f129e8b3e45a92a032ab63de5b7bea71e1d22d55180f1c8f" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="41.0.2" rel="91.1"/>

<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>

</package>
<package pkgid="6752725458459b011640571080825efa2e4790bd11c1fbba7316b20a21ebffe0" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="42.0" rel="94.4"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="c8bdba7e887839e8f64b769873defcf1a71721082a607819feb576c4e12fc9d2" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="43.0" rel="97.1"/>

<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>

</package>
<package pkgid="3c3331ecd099d2563cfc2dbbd9ccb61b9c90619d70d71a318c0a42af672cbfb5" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="43.0.3" rel="100.1"/>

<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>

</package>
<package pkgid="787a65da36965b2345d6d208a912ad795a5c653c8ba0f75180fdbe8ac750ba2e" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="44.0" rel="103.1"/>

<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>

</package>
<package pkgid="c2dbe22abb1b6b6ce990600375d6e6524b7ce860ffc53bb7e3e5ff3b816b4be7" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="44.0.2" rel="106.1"/>

<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>

</package>
<package pkgid="9f0547e7ef5b83879b7b659011a065eae241511e21e679cff0f209a59550bc28" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="45.0" rel="109.1"/>

<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="448bb9ac6d2c72d020b6fe0ac1adcbc5b35fda3385aee4860fe1c4daf4191a10" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="46.0" rel="113.2"/>

<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>

</package>
<package pkgid="c4691053cce00da45537e15cddfbd597a1eb812fb2223b30e15ed7fa0487141b" name="MozillaFirefox-translations-common" arch="x86_64">
    <version epoch="0" ver="47.0" rel="116.1"/>

<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>
<changelog author="wr@rosenauer.org" date="1462363200">- update to Firefox 46.0.1
  Fixed:
  * Search plugin issue for various locales
  * Add-on signing certificate expiration
  * Service worker update issue
  * Build issue when jit is disabled
  * Limit Sync registration updates
- removed now obsolete mozilla-jit_branch64.patch</changelog>
<changelog author="dsterba@suse.cz" date="1463054400">- enable build with PIE and full relro on x86_64 (boo#980384)</changelog>
<changelog author="badshah400@gmail.com" date="1464004800">- Add patches to fix building with gcc6:
  + mozilla-gcc6.patch: fix building with gcc &gt;= 6.1; patch
    taken from upstream:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
    from unified compilation because #include &lt;cmath&gt; in other
    source files causes gcc6 compilation failure; patch taken from
    upstream:
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1465300800">- update to Firefox 47.0 (boo#983549)
  * Enable VP9 video codec for users with fast machines
  * Embedded YouTube videos now play with HTML5 video if Flash is
    not installed
  * View and search open tabs from your smartphone or another
    computer in a sidebar
  * Allow no-cache on back/forward navigations for https resources
  security fixes:
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
    (boo#983638)
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
    bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
    bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
    bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
    bmo#1269729, bmo#1273202, bmo#1273701)
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
    Buffer overflow parsing HTML5 fragments
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
    Use-after-free deleting tables from a contenteditable document
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
    Addressbar spoofing though the SELECT element
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
    Out-of-bounds write with WebGL shader
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
    Partial same-origin-policy through setting location.host
    through data URI
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
    Use-after-free when textures are used in WebGL operations
    after recycle pool destruction
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
    Incorrect icon displayed on permissions notifications
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
    Entering fullscreen and persistent pointerlock without user
    permission
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
    Information disclosure of disabled plugins through CSS
    pseudo-classes
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
    Java applets bypass CSP protections
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
    bmo#1221620, bmo#1241034, bmo#1241037)
    Network Security Services (NSS) vulnerabilities
    fixed by requiring NSS 3.23
  packaging changes:
  * cleanup configure options (boo#981695):
  - notably remove GStreamer support which is gone from FF
  * remove obsolete patches
  - mozilla-libproxy.patch
  - mozilla-repo.patch</changelog>

</package>
<package pkgid="69866186f00890966e608dbe75f7eb5ea231569fcfc84c165d08d318abfd2a38" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="26.0" rel="4.2"/>

<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>

</package>
<package pkgid="c5550a004c28773236bc10ad4b8cc08a97bd2375f8b7ce73f5737a2951273948" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="27.0" rel="8.1"/>

<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>

</package>
<package pkgid="0e580cae2641bde645d875bd2bce04ce7e9fdf6858d35ed7bc57aa48584e7051" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="27.0.1" rel="12.1"/>

<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>

</package>
<package pkgid="b237044a0ed43c222ee787fa5f19e226d2996fff8767989c379c5727a18d968b" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="28.0" rel="17.1"/>

<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bnc#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>

</package>
<package pkgid="41fe921a8ced0368a1a923b680a92d156bbbce876304065f29e675fcab719275" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="29.0" rel="20.1"/>

<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="723cfd6da7ca960c64d6120366a25e5c2df5f198605c87fb608a93875a52ecf8" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="29.0.1" rel="24.1"/>

<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>

</package>
<package pkgid="7335f7065cc1be15443f7fd8fe7cf44d0210182ca753f3f174e71ed43337f557" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="30.0" rel="29.1"/>

<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>

</package>
<package pkgid="dc5328712d2f394fc107027d17de01cb1107b5c211c65d4f967797225cd12fb6" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="31.0" rel="33.1"/>

<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>

</package>
<package pkgid="65b4c1d8cba530c733129b038979594a2fbcf13b6dbb86a20b125eb403b1ed97" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="31.1.0" rel="42.1"/>

<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Firefox 31.1.0esr (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- changes to support compilation on 11.4
  * explicit xz BuildRequires
  * mozilla-nullptr-gcc45.patch
  * remove unresolved makeinfo BuildRequires</changelog>

</package>
<package pkgid="49746323e863856d3f4fc4776e68a79b42c25d8ef573b27171647724335986ee" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="33.0" rel="46.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for ppc64 and ppc64le by not enabling elf-hack
  (bnc#901213)</changelog>

</package>
<package pkgid="766c26909c52c6b15316ebf8d2435117aa0be901ad3c6e6f4fbf827e297efc0d" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="34.0.5" rel="50.3"/>

<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86</changelog>

</package>
<package pkgid="0a0b39eced5110629b74d1d648a760e3c78c0190c9b6cdfadb3c2db7753ad448" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="35.0" rel="54.2"/>

<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>

</package>
<package pkgid="987cd07785e2abe1f5fe91b48da43a06fd7de6c953794fb445ae8e7c978c077e" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="36.0" rel="59.2"/>

<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>

</package>
<package pkgid="e010153bc5b86a5d05a3cbffa8ce94bef3e3218dc4c7df3e5809ad0695780ea9" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="36.0.4" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>

</package>
<package pkgid="46fae80fad935c17058aa5e037700a9270abc5744a149f1a0db995dc6dd247e4" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="37.0.1" rel="68.1"/>

<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>

</package>
<package pkgid="f56d2ba6b25c419bcbad8bec2739a857def5cd276983fef83f4f1bb169ec2120" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="37.0.2" rel="71.1"/>

<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>

</package>
<package pkgid="103139e9fea92be094f8ba654d5b94425aebf252bbbc989cb78236b678c4cd32" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="38.0.1" rel="74.1"/>

<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>

</package>
<package pkgid="e962d5fc345329b0d5d65eb0d0a83dfd47497ed4660ab93a9d42ef03bf2814d1" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="39.0" rel="78.1"/>

<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>

</package>
<package pkgid="19ea49f454dc17603f3003b21bcc478427019a8f2bbf34fbf703895031c0ce03" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="40.0" rel="82.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>

</package>
<package pkgid="8c4e1286fa644f149ce04d5af288460d7477bc196cfc4a471e6c35a6cf24d1c2" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="40.0.3" rel="85.2"/>

<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>

</package>
<package pkgid="22ac915dd7fd347dddb9c14f8201e1ee963ee5fc2af39af9e468cf19510eea95" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="41.0" rel="88.1"/>

<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>

</package>
<package pkgid="f71a5e225db7eb43b1f2ea475c15ebae7b96e937060c705b037d57abafb43e3b" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="41.0.2" rel="91.1"/>

<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>

</package>
<package pkgid="9d7b84ad76ad13b4c116368a33723c8eaf0d0e8ace4e0d23d71dfde867cfeb8d" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="42.0" rel="94.4"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="ba2896972121fbbe3c8612996600ee46e0c78ad90dd51522eb1e6c399fd6e5cb" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="43.0" rel="97.1"/>

<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>

</package>
<package pkgid="d77ccaf20a85a9e03ff5faa882373f6bc2d93c5db7ddd665000286d22e13c0af" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="43.0.3" rel="100.1"/>

<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>

</package>
<package pkgid="f3e9e98ce489bdb265da96b8ae472b3b7451ede96459506b1276384559ffcf8a" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="44.0" rel="103.1"/>

<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>

</package>
<package pkgid="33d32d27bbcb467d24d60763c7ee150ed9704d69d786c26bf4c73b089c502da8" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="44.0.2" rel="106.1"/>

<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>

</package>
<package pkgid="694864bc808a24b793f9167a0951942555750eb330e2408865977fbab58c98c5" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="45.0" rel="109.1"/>

<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="c60c0349ad8cbe65539d6498bbd1ddd147fd0d5b813866af5bcc20406b7a874c" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="46.0" rel="113.2"/>

<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>

</package>
<package pkgid="820a44eac36df319b0bcce5925b51c9d6c80afb3718b612691d4448aec936fdf" name="MozillaFirefox-translations-other" arch="i586">
    <version epoch="0" ver="47.0" rel="116.1"/>

<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>
<changelog author="wr@rosenauer.org" date="1462363200">- update to Firefox 46.0.1
  Fixed:
  * Search plugin issue for various locales
  * Add-on signing certificate expiration
  * Service worker update issue
  * Build issue when jit is disabled
  * Limit Sync registration updates
- removed now obsolete mozilla-jit_branch64.patch</changelog>
<changelog author="dsterba@suse.cz" date="1463054400">- enable build with PIE and full relro on x86_64 (boo#980384)</changelog>
<changelog author="badshah400@gmail.com" date="1464004800">- Add patches to fix building with gcc6:
  + mozilla-gcc6.patch: fix building with gcc &gt;= 6.1; patch
    taken from upstream:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
    from unified compilation because #include &lt;cmath&gt; in other
    source files causes gcc6 compilation failure; patch taken from
    upstream:
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1465300800">- update to Firefox 47.0 (boo#983549)
  * Enable VP9 video codec for users with fast machines
  * Embedded YouTube videos now play with HTML5 video if Flash is
    not installed
  * View and search open tabs from your smartphone or another
    computer in a sidebar
  * Allow no-cache on back/forward navigations for https resources
  security fixes:
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
    (boo#983638)
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
    bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
    bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
    bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
    bmo#1269729, bmo#1273202, bmo#1273701)
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
    Buffer overflow parsing HTML5 fragments
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
    Use-after-free deleting tables from a contenteditable document
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
    Addressbar spoofing though the SELECT element
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
    Out-of-bounds write with WebGL shader
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
    Partial same-origin-policy through setting location.host
    through data URI
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
    Use-after-free when textures are used in WebGL operations
    after recycle pool destruction
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
    Incorrect icon displayed on permissions notifications
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
    Entering fullscreen and persistent pointerlock without user
    permission
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
    Information disclosure of disabled plugins through CSS
    pseudo-classes
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
    Java applets bypass CSP protections
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
    bmo#1221620, bmo#1241034, bmo#1241037)
    Network Security Services (NSS) vulnerabilities
    fixed by requiring NSS 3.23
  packaging changes:
  * cleanup configure options (boo#981695):
  - notably remove GStreamer support which is gone from FF
  * remove obsolete patches
  - mozilla-libproxy.patch
  - mozilla-repo.patch</changelog>

</package>
<package pkgid="7c48dcd8c88f9abfcb8fa241372d76d7c6d72ef434834ea10c333100e6690765" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="26.0" rel="4.2"/>

<changelog author="wr@rosenauer.org" date="1358337600">- update to Firefox 18.0.1
  * blocklist updates
  * backed out bmo#677092 (removed patch)
  * fixed problems involving HTTP proxy transactions</changelog>
<changelog author="wr@rosenauer.org" date="1359806400">- update to Firefox 18.0.2
  * blocklist and CTP updates
  * fixes in JS engine</changelog>
<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>

</package>
<package pkgid="efde4e4e28610e5eb162b6f5e432c7523bb234a3d9360a42e6fd94c146745093" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="27.0" rel="8.1"/>

<changelog author="wr@rosenauer.org" date="1361016000">- update to Firefox 19.0 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783/2013-0784
    Miscellaneous memory safety hazards
  * MFSA 2013-22/CVE-2013-0772 (bmo#801366)
    Out-of-bounds read in image rendering
  * MFSA 2013-23/CVE-2013-0765 (bmo#830614)
    Wrapped WebIDL objects can be wrapped again
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782/CVE-2013-0777/
    CVE-2013-0778/CVE-2013-0779/CVE-2013-0781
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer
- removed obsolete patches
  * mozilla-webrtc.patch
  * mozilla-gstreamer-803287.patch
- added patch to fix session restore window order (bmo#712763)</changelog>
<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>

</package>
<package pkgid="6b213a01afa9c801a95c96ab2cb75bdfb10d0df1438deaf17db956ab292790d1" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="27.0.1" rel="12.1"/>

<changelog author="wr@rosenauer.org" date="1362052800">- update to Firefox 19.0.1
  * blocklist updates</changelog>
<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>

</package>
<package pkgid="d4fe60aab21c0b0c84061e7279c793f9fd703000ccba356f639dd77063698dd9" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="28.0" rel="17.1"/>

<changelog author="wr@rosenauer.org" date="1362657600">- update to Firefox 19.0.2 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="dmueller@suse.com" date="1363089600">- build fixes for armv7hl:
  * disable debug build as armv7hl does not have enough memory
  * disable webrtc on armv7hl as it is non-compiling</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Firefox 20.0 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * mozilla-webrtc-ppc.patch included upstream
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-37/CVE-2013-0794 (bmo#626775)
    Bypass of tab-modal dialog origin disclosure
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations
  * MFSA 2013-39/CVE-2013-0792 (bmo#722831)
    Memory corruption while rendering grayscale PNG images
- use GStreamer 1.0 starting with 12.3 (mozilla-gstreamer-1.patch)</changelog>
<changelog author="schwab@linux-m68k.org" date="1365163200">- Explicitly disable WebRTC support on non-x86, the configure script
  disables it only half-heartedly</changelog>
<changelog author="wr@rosenauer.org" date="1365508800">- revert to use GStreamer 0.10 on 12.3 (bnc#814101)
  (remove mozilla-gstreamer-1.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bnc#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>

</package>
<package pkgid="00f119d3e73ff15693beebcd14859da9e9bdc5da6edf345e19a1abfc84a7e2fd" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="29.0" rel="20.1"/>

<changelog author="wr@rosenauer.org" date="1368187200">- update to Firefox 21.0 (bnc#819204)
  * removed upstreamed patch firefox-712763.patch
  * removed disabled mozilla-disable-neon-option.patch
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-43/CVE-2013-1671 (bmo#842255)
    File input control has access to full path
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="908d998d2d33a27722cc868e70c6b3bf879d71ffc326945b2d7f873ef480020b" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="29.0.1" rel="24.1"/>

<changelog author="dvaleev@suse.com" date="1370952000">- Fix qcms altivec include (mozilla-qcms-ppc.patch)</changelog>
<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>

</package>
<package pkgid="c33682a12e9cb139fc3814da2ba343cc45084b18be8db13466bf53339991219e" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="30.0" rel="29.1"/>

<changelog author="wr@rosenauer.org" date="1371902400">- update to Firefox 22.0 (bnc#825935)
  * removed obsolete patches
    + mozilla-qcms-ppc.patch
    + mozilla-gstreamer-760140.patch
  * GStreamer support does not build on 12.1 anymore (build only
    on 12.2 and later)
  * MFSA 2013-49/CVE-2013-1682/CVE-2013-1683
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-52/CVE-2013-1688 (bmo#873966)
    Arbitrary code execution within Profiler
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-57/CVE-2013-1695 (bmo#849791)
    Sandbox restrictions not applied to nested frame elements
  * MFSA 2013-58/CVE-2013-1696 (bmo#761667)
    X-Frame-Options ignored when using server push with multi-part
    responses
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context
  * MFSA 2013-60/CVE-2013-1698 (bmo#876044)
    getUserMedia permission dialog incorrectly displays location
  * MFSA 2013-61/CVE-2013-1699 (bmo#840882)
    Homograph domain spoofing in .com, .net and .name</changelog>
<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>

</package>
<package pkgid="7ebb5dcd3e5ee517e463810883098a4c4266fc07b8868f991def5f6caab6629c" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="31.0" rel="33.1"/>

<changelog author="dmueller@suse.com" date="1372852800">- fix build on ARM (/-g/ matches /-grecord-switches/)</changelog>
<changelog author="wr@rosenauer.org" date="1375617600">- update to Firefox 23.0 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701/CVE-2013-1702
    Miscellaneous memory safety hazards
  * MFSA 2013-64/CVE-2013-1704 (bmo#883313)
    Use after free mutating DOM during SetBody
  * MFSA 2013-65/CVE-2013-1705 (bmo#882865)
    Buffer underflow when generating CRMF requests
  * MFSA 2013-67/CVE-2013-1708 (bmo#879924)
    Crash during WAV audio file decoding
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-70/CVE-2013-1711 (bmo#843829)
    Bypass of XrayWrappers using XBL Scopes
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system
- requires NSPR 4.10 and NSS 3.15</changelog>
<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>

</package>
<package pkgid="be48c66c540055f3d95091913c423a74c31fc26d4630f2b08d95b97f10cc67cd" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="31.1.0" rel="42.1"/>

<changelog author="wr@rosenauer.org" date="1377518400">- update to Firefox 23.0.1
  * Audio static/"burble"/breakup in Firefox to Firefox WebRTC calls
    (bmo#901527)</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Firefox 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-78/CVE-2013-1721 (bmo#890277)
    Integer overflow in ANGLE library
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- enable gstreamer explicitely via pref (gecko.js)
- require NSS 3.15.1</changelog>
<changelog author="lnussel@suse.de" date="1379332800">- move greek to the translations-common package (bnc#840551)</changelog>
<changelog author="wr@rosenauer.org" date="1380024000">- as GStreamer is not automatically required anymore but loaded
  dynamically if available, require it explicitely
- recommend optional GStreamer plugins for comprehensive media
  support</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Firefox 31.1.0esr (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- changes to support compilation on 11.4
  * explicit xz BuildRequires
  * mozilla-nullptr-gcc45.patch
  * remove unresolved makeinfo BuildRequires</changelog>

</package>
<package pkgid="d9d4d31db5751e582cb884b91951fe2cf4dac19fe22380a9e341ce430c4bd9a3" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="33.0" rel="46.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Firefox 25.0 (bnc#847708)
  * rebased patches
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-99/CVE-2013-5598 (bmo#920515)
    Security bypass of PDF.js checks using iframes
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Firefox 26.0 (bnc#854367, bnc#854370)
  * rebased patches
  * requires NSPR 4.10.2 and NSS 3.15.3.1
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-105/CVE-2013-5611 (bmo#771294)
    Application Installation doorhanger persists on navigation
  * MFSA 2013-106/CVE-2013-5612 (bmo#871161)
    Character encoding cross-origin XSS attack
  * MFSA 2013-107/CVE-2013-5614 (bmo#886262)
    Sandbox restrictions not applied to nested object elements
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-110/CVE-2013-5619 (bmo#917841)
    Potential overflow in JavaScript binary search algorithms
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-112/CVE-2013-6672 (bmo#894736)
    Linux clipboard information disclosure though selection paste
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)
- removed gecko.js preference file as GStreamer is enabled by
  default now</changelog>
<changelog author="uweigand@de.ibm.com" date="1386849600">- Add support for powerpc64le-linux.
  * mozilla-ppc64le.patch: general support
  * mozilla-libffi-ppc64le.patch: libffi backport
  * mozilla-xpcom-ppc64le.patch: port xpcom
- Add build fix from mainline.
  * mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1390910400">- update to Firefox 27.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-03/CVE-2014-1480 (bmo#916726)
    UI selection timeout missing on download prompts
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-05/CVE-2014-1483 (bmo#950427)
    Information disclosure with *FromPoint on iframes
  * MFSA 2014-06/CVE-2014-1484 (bmo#953993)
    Profile path leaks to Android system log
  * MFSA 2014-07/CVE-2014-1485 (bmo#910139)
    XSLT stylesheets treated as styles in Content Security Policy
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-10/CVE-2014-1489 (bmo#959531)
    Firefox default start page UI content invokable by script
  * MFSA 2014-11/CVE-2014-1488 (bmo#950604)
    Crash when using web workers with asm.js
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4 or higher
- rebased/reworked patches
- removed obsolete mozilla-bug929439.patch</changelog>
<changelog author="wr@rosenauer.org" date="1392638400">- update to Firefox 27.0.1
  * Fixed stability issues with Greasemonkey and other JS that used
    ClearTimeoutOrInterval
  * JS math correctness issue (bmo#941381)
- incorporate Google API key for geolocation (bnc#864170)
- updated list of "other" locales in RPM requirements</changelog>
<changelog author="wr@rosenauer.org" date="1394971200">- update to Firefox 28.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-18/CVE-2014-1498 (bmo#935618)
    crypto.generateCRMFRequest does not validate type of key
  * MFSA 2014-19/CVE-2014-1499 (bmo#961512)
    Spoofing attack on WebRTC permission prompt
  * MFSA 2014-20/CVE-2014-1500 (bmo#956524)
    onbeforeunload and Javascript navigation DOS
  * MFSA 2014-22/CVE-2014-1502 (bmo#972622)
    WebGL content injection from one domain to rendering in another
  * MFSA 2014-23/CVE-2014-1504 (bmo#911547)
    Content Security Policy for data: documents not preserved by
    session restore
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering
- requires NSPR 4.10.3 and NSS 3.15.5
- new build dependency (and recommends):
  * libpulse
- update of PowerPC 64 patches (bmo#976648) (pcerny@suse.com)
- rebased patches</changelog>
<changelog author="dvaleev@suse.com" date="1395403200">- Adapt mozilla-ppc64le-xpcom.patch to Mozilla &gt; 24.0 build system</changelog>
<changelog author="dvaleev@suse.com" date="1395662400">- Refresh mozilla-ppc64le-xpcom.patch patch</changelog>
<changelog author="dvaleev@suse.com" date="1395662401">- Add patch for bmo#973977
  * mozilla-ppc64-xpcom.patch</changelog>
<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for ppc64 and ppc64le by not enabling elf-hack
  (bnc#901213)</changelog>

</package>
<package pkgid="421a3d531d877275d823986cb93d3502b41797eaed9753bae92c07c83a0a7abb" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="34.0.5" rel="50.3"/>

<changelog author="dmueller@suse.com" date="1396872000">- add mozilla-aarch64-599882cfb998.patch,
    mozilla-aarch64-bmo-810631.patch,
    mozilla-aarch64-bmo-962488.patch,
    mozilla-aarch64-bmo-963030.patch,
    mozilla-aarch64-bmo-963027.patch,
    mozilla-aarch64-bmo-963028.patch,
    mozilla-aarch64-bmo-963029.patch,
    mozilla-aarch64-bmo-963023.patch,
    mozilla-aarch64-bmo-963024.patch,
    mozilla-aarch64-bmo-963031.patch: AArch64 porting</changelog>
<changelog author="wr@rosenauer.org" date="1398513600">- update to Firefox 29.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518/CVE-2014-1519
    Miscellaneous memory safety hazards
  * MFSA 2014-36/CVE-2014-1522 (bmo#995289)
    Web Audio memory corruption issues
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-39/CVE-2014-1525 (bmo#989210)
    Use-after-free in the Text Track Manager for HTML video
  * MFSA 2014-41/CVE-2014-1528 (bmo#963962)
    Out-of-bounds write in Cairo
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-45/CVE-2014-1492 (bmo#903885)
    Incorrect IDNA domain name matching for wildcard certificates
    (fixed by NSS 3.16)
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
  * MFSA 2014-47/CVE-2014-1526 (bmo#988106)
    Debugger can bypass XrayWrappers with JavaScript
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-599882cfb998.diff
  * mozilla-aarch64-bmo-963028.patch
  * mozilla-aarch64-bmo-963029.patch
  * mozilla-aarch64-bmo-963030.patch
  * mozilla-aarch64-bmo-963031.patch
- requires NSS 3.16
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86</changelog>

</package>
<package pkgid="a341c08a31fe5817677dce3cc743625cb4d13f45071ae788adb358aeb9f8e1d9" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="35.0" rel="54.2"/>

<changelog author="wr@rosenauer.org" date="1399723200">- update to Firefox 29.0.1
  * Seer disabled by default (bmo#1005958)
  * Session Restore failed with a corrupted sessionstore.js file
    (bmo#1001167)
  * pdf.js printing white page (bmo#1003707, bnc#876833)
- general.useragent.locale gets overwritten with en-US while it
  should be using the active langpack's setting</changelog>
<changelog author="wr@rosenauer.org" date="1402315200">- update to Firefox 30.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address
    Sanitizer
  * MFSA 2014-50/CVE-2014-1539 (bmo#995603)
    Clickjacking through cursor invisability after Flash interaction
  * MFSA 2014-51/CVE-2014-1540 (bmo#978862)
    Use-after-free in Event Listener Manager
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-53/CVE-2014-1542 (bmo#991533)
    Buffer overflow in Web Audio Speex resampler
  * MFSA 2014-54/CVE-2014-1543 (bmo#1011859)
    Buffer overflow in Gamepad API
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- rebased patches
- removed obsolete patches
  * firefox-browser-css.patch
  * mozilla-aarch64-bmo-962488.patch
  * mozilla-aarch64-bmo-963023.patch
  * mozilla-aarch64-bmo-963024.patch
  * mozilla-aarch64-bmo-963027.patch
  * mozilla-ppc64-xpcom.patch
  * mozilla-ppc64le-javascript.patch
  * mozilla-ppc64le-libffi.patch
  * mozilla-ppc64le-mfbt.patch
  * mozilla-ppc64le-webrtc.patch
  * mozilla-ppc64le-xpcom.patch
  * mozilla-ppc64le-build.patch
- requires NSPR 4.10.6
- enabled GStreamer 1.0 usage for 13.2 and above</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>

</package>
<package pkgid="a1d7af172cca550dd81a8e0856fe0211d1e1d97c974a6c3e42fa92cda9a45a8f" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="36.0" rel="59.2"/>

<changelog author="wr@rosenauer.org" date="1405857600">- update to Firefox 31.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-57/CVE-2014-1549 (bmo#1020205)
    Buffer overflow during Web Audio buffering for playback
  * MFSA 2014-58/CVE-2014-1550 (bmo#1020411)
    Use-after-free in Web Audio due to incorrect control message ordering
  * MFSA 2014-60/CVE-2014-1561 (bmo#1000514, bmo#910375)
    Toolbar dialog customization event spoofing
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
  * MFSA 2014-65/CVE-2014-1558/CVE-2014-1559/CVE-2014-1560
    (bmo#1015973, bmo#1026022, bmo#997795)
    Certificate parsing broken by non-standard character encoding
  * MFSA 2014-66/CVE-2014-1552 (bmo#985135)
    IFRAME sandbox same-origin access through redirect
- use EGL on ARM
- rebased patches
- requires NSS 3.16.2
- requires python-devel (not only python)</changelog>
<changelog author="behlert@suse.de" date="1408536000">- adapted _constraints, used more than 3900MB on s390x during
  last build</changelog>
<changelog author="wr@rosenauer.org" date="1409486400">- update to Firefox 32.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1554/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- rebased patches
- requires NSS 3.16.4
- removed upstreamed patch
  * mozilla-aarch64-bmo-810631.patch</changelog>
<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>

</package>
<package pkgid="ee4889f3dcaa82fd5b9d927e6a210b3efa84804410480002597b98657a6ef718" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="36.0.4" rel="63.1"/>

<changelog author="wr@rosenauer.org" date="1410609600">- update to Firefox 32.0.1
  * fixed stability issues for computers with multiple graphics cards
  * mixed content icon may be incorrectly displayed instead of lock
    icon for SSL sites in 32.0 (
  * WebRTC: setRemoteDescription() silently fails if no success
    callback is specified (bmo#1063971)</changelog>
<changelog author="wr@rosenauer.org" date="1411214400">- update to Firefox 32.0.2
  * just a version bump for our builds
  * fixed the in application update process for certain environments
    (in application update is not enabled in openSUSE and Linux
    is unaffected in any case)
- build with --disable-optimize for 13.1 and above for i586 to
  workaround miscompilations (bnc#896624)
- use some more build flags to align with upstream</changelog>
<changelog author="wr@rosenauer.org" date="1413028800">- update to Firefox 33.0 (bnc#900941)
  New features:
  * OpenH264 support (sandboxed)
  * Enhanced Tiles
  * Improved search experience through the location bar
  * Slimmer and faster JavaScript strings
  * New CSP (Content Security Policy) backend
  * Support for connecting to HTTP proxy over HTTPS
  * Improved reliability of the session restoration
  * Proprietary window.crypto properties/functions removed
  Security:
  * MFSA 2014-74/CVE-2014-1574/CVE-2014-1575
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-78/CVE-2014-1580 (bmo#1063733)
    Further uninitialized memory use during GIF rendering
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-80/CVE-2014-1582/CVE-2014-1584 (bmo#1049095, bmo#1066190)
    Key pinning bypasses
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
  * MFSA 2014-82/CVE-2014-1583 (bmo#1015540)
    Accessing cross-origin objects via the Alarms API
    (only relevant for installed web apps)
- requires NSPR 4.10.7
- requires NSS 3.17.1
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-libproxy-compat.patch
- added basic appdata information</changelog>
<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>

</package>
<package pkgid="a7fab0be5c2fb75b23f3d6711ed7658c095b6ad5384250fcd609abc4c50cf1c3" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="37.0.1" rel="68.1"/>

<changelog author="wr@rosenauer.org" date="1413374400">- fix build for all ppc by not enabling elf-hack
  (bnc#901213)</changelog>
<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>

</package>
<package pkgid="feb3335b13abc2c3bb3887ee801d7ae695a710b12e3d91368b541b8d194d94c5" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="37.0.2" rel="71.1"/>

<changelog author="vindex17@outlook.it" date="1413720000">- use Firefox default optimization flags instead of -Os
- specfile cleanup</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- define /usr/share/myspell as additional dictionary location
  and remove add-plugins.sh finally (bnc#900639)</changelog>
<changelog author="josua.mayer97@gmail.com" date="1414497600">- added mozilla-bmo1088588.patch to fix build with EGL (bmo#1088588)</changelog>
<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>

</package>
<package pkgid="aa4788cff37a0bd2dd126143e63149f1a324dd659ff5c555fdb28733524df0aa" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="38.0.1" rel="74.1"/>

<changelog author="wr@rosenauer.org" date="1414670400">- update to Firefox 33.0.2
  * Fix a startup crash with some combination of hardware and drivers
  33.0.1
  * Firefox displays a black screen at start-up with certain
    graphics drivers
- adjusted _constraints for ARM</changelog>
<changelog author="josua.mayer97@gmail.com" date="1415016000">- use '--disable-optimize' not only on 32-bit x86, but on 32-bit arm too
  to fix compiling.
- pass '-Wl,--no-keep-memory' to linker to reduce required memory during
  linking on arm.</changelog>
<changelog author="dmueller@suse.com" date="1415016001">- use proper macros for ARM</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Disable elf-hack for aarch64
- Enable EGL for aarch64
- Limit RAM usage during link for %arm
- Fix _constraints for ARM</changelog>
<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>

</package>
<package pkgid="655a8a1710a7a564e024dd70455730bedab756630fc0c52d393e1426e4593638" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="39.0" rel="78.1"/>

<changelog author="wr@rosenauer.org" date="1415361600">- update to Firefox 33.1
  * Adding DuckDuckGo as a search option (upstream)
  * Forget Button added
  * Enhanced Tiles
  * Privacy tour introduced
- fix typo in GStreamer Recommends</changelog>
<changelog author="wr@rosenauer.org" date="1417262400">- update to Firefox 34.0.5 (bnc#908009)
  * Default search engine changed to Yahoo! for North America
  * Default search engine changed to Yandex for Belarusian, Kazakh,
    and Russian locales
  * Improved search bar (en-US only)
  * Firefox Hello real-time communication client
  * Easily switch themes/personas directly in the Customizing mode
  * Implementation of HTTP/2 (draft14) and ALPN
  * Disabled SSLv3
  * MFSA 2014-83/CVE-2014-1587/CVE-2014-1588
    Miscellaneous memory safety hazards
  * MFSA 2014-84/CVE-2014-1589 (bmo#1043787)
    XBL bindings accessible via improper CSS declarations
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-86/CVE-2014-1591 (bmo#1069762)
    CSP leaks redirect data via violation reports
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer
- rebased patches
- limit linker memory usage for %ix86
- rebased patches</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>

</package>
<package pkgid="89bff2b7524329b1542e1919f798a9b7074b293a8365c57625baefe4cd0275bf" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="40.0" rel="82.1"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>

</package>
<package pkgid="b2368806c097853ef035d5e751fecc834e1cc0d75cfe3c2d43a1a9aee4ac956a" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="40.0.3" rel="85.2"/>

<changelog author="wr@rosenauer.org" date="1420891200">- update to Firefox 35.0 (bnc#910669)
  notable features:
  * Firefox Hello with new rooms-based conversations model
  * Implemented HTTP Public Key Pinning Extension (for enhanced
    authentication of encrypted connections)
  security fixes:
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-02/CVE-2014-8637 (bmo#1094536)
    Uninitialized memory use during bitmap rendering
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
  * MFSA 2015-05/CVE-2014-8640 (bmo#1100409)
    Read of uninitialized memory in Web Audio
  * MFSA 2015-06/CVE-2014-8641 (bmo#1108455)
    Read-after-free in WebRTC
  * MFSA 2015-07/CVE-2014-8643 (bmo#1114170) (Windows-only)
    Gecko Media Plugin sandbox escape
  * MFSA 2015-08/CVE-2014-8642 (bmo#1079658)
    Delegated OCSP responder certificates failure with
    id-pkix-ocsp-nocheck extension
  * MFSA 2015-09/CVE-2014-8636 (bmo#987794)
    XrayWrapper bypass through DOM objects
- rebased patches
- dropped explicit support for everything older than 12.3
  (including SLES11)
  * merge firefox-kde.patch and firefox-kde-114.patch
  * dropped mozilla-sle11.patch
- reworked specfile to build conditionally based on release channel
  either Firefox or Firefox Developer Edition
- added mozilla-openaes-decl.patch to fix implicit declarations
- obsolete tracker-miner-firefox &lt; 0.15 because it leads to startup
  crashes (bnc#908892)</changelog>
<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>

</package>
<package pkgid="3933dd5120fbd511adf7ef9bb1967a6f1114f0660fcb53b1e705d8f9f03d0bcf" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="41.0" rel="88.1"/>

<changelog author="wr@rosenauer.org" date="1422705600">- update to Firefox 35.0.1
  * With the Enhanced Steam extension, Firefox could crash (bmo#1123732)
  * Kerberos authentication did not work with alias (bmo#1108971)
  * SVG / CSS animation had a regression causing rendering issues on
    websites like openstreemap.org (bmo#1083079)
  * On Godaddy webmail, Firefox could crash (bmo#1113121)
  * document.baseURI did not get updated to document.location after
    base tag was removed from DOM for site with a CSP (bmo#1121857)
  * With a Right-to-left (RTL) version of Firefox, the text selection
    could be broken (bmo#1104036)
  * CSP had a change in behavior with regard to case sensitivity
    resources loading (bmo#1122445)</changelog>
<changelog author="wr@rosenauer.org" date="1424433600">- update to Firefox 36.0 (bnc#917597)
  * mozilla-xremote-client was removed
  * added libclearkey.so media plugin
  * Pinned tiles on the new tab page can be synced
  * Support for the full HTTP/2 protocol. HTTP/2 enables a faster,
    more scalable, and more responsive web.
  * Locale added: Uzbek (uz)
  security fixes:
  * MFSA 2015-11/CVE-2015-0835/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-13/CVE-2015-0832 (bmo#1065909)
    Appended period to hostnames can bypass HPKP and HSTS protections
  * MFSA 2015-14/CVE-2015-0830 (bmo#1110488)
    Malicious WebGL content crash when writing strings
  * MFSA 2015-15/CVE-2015-0834 (bmo#1098314)
    TLS TURN and STUN connections silently fail to simple TCP connections
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-17/CVE-2015-0829 (bmo#1128939)
    Buffer overflow in libstagefright during MP4 video playback
  * MFSA 2015-18/CVE-2015-0828 (bmo#1030667, bmo#988675)
    Double-free when using non-default memory allocators with a
    zero-length XHR
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-20/CVE-2015-0826 (bmo#1092363)
    Buffer overflow during CSS restyling
  * MFSA 2015-21/CVE-2015-0825 (bmo#1092370)
    Buffer underflow during MP3 playback
  * MFSA 2015-22/CVE-2015-0824 (bmo#1095925)
    Crash using DrawTarget in Cairo graphics library
  * MFSA 2015-23/CVE-2015-0823 (bmo#1098497)
    Use-after-free in Developer Console date with OpenType Sanitiser
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete
  * MFSA 2015-25/CVE-2015-0821 (bmo#1111960)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-26/CVE-2015-0819 (bmo#1079554)
    UI Tour whitelisted sites in background tab can spoof foreground
    tabs
  * MFSA 2015-27CVE-2015-0820 (bmo#1125398)
    Caja Compiler JavaScript sandbox bypass
- rebased patches
- requires NSS 3.17.4</changelog>
<changelog author="wr@rosenauer.org" date="1425729600">- update to Firefox 36.0.1
  Bugfixes:
  * Disable the usage of the ANY DNS query type (bmo#1093983)
  * Hello may become inactive until restart (bmo#1137469)
  * Print preferences may not be preserved (bmo#1136855)
  * Hello contact tabs may not be visible (bmo#1137141)
  * Accept hostnames that include an underscore character ("_")
    (bmo#1136616)
  * WebGL may use significant memory with Canvas2d (bmo#1137251)
  * Option -remote has been restored (bmo#1080319)
- added mozilla-skia-bmo1136958.patch to fix build issues for
  ARM and PPC</changelog>
<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>

</package>
<package pkgid="1cb2ba4bee265147aa883713932cbfabe06460a10a1a7c9d8232d2e357ac5c43" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="41.0.2" rel="91.1"/>

<changelog author="dimstar@opensuse.org" date="1426852800">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>

</package>
<package pkgid="9323cd46b5d2a5124c9f066bffca5e5bd1743e6866be616ff3253035d70de635" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="42.0" rel="94.4"/>

<changelog author="wr@rosenauer.org" date="1426939200">- update to Firefox 36.0.4 (bnc#923534)
  * MFSA 2015-28/CVE-2015-0818 (bmo#1144988)
    Privilege escalation through SVG navigation
  * MFSA 2015-29/CVE-2015-0817 (bmo#1145255)
    Code execution through incorrect JavaScript bounds checking
    elimination</changelog>
<changelog author="dvaleev@suse.com" date="1427198400">- Fix builds with skia on Power
  mozilla-skia-be-le.patch (patch from #bmo1136958)
  mozilla-bmo1108834.patch
  mozilla-bmo1005535.patch</changelog>
<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>

</package>
<package pkgid="cbdd603d01cf9b9ef622036304bbcbe207bb4f9c3fb92b3b08859a344845a5e5" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="43.0" rel="97.1"/>

<changelog author="wr@rosenauer.org" date="1427544000">- update to Firefox 37.0 (bnc#925368)
  * Heartbeat user rating system
  * Yandex set as default search provider for the Turkish locale
  * Bing search now uses HTTPS for secure searching
  * Improved protection against site impersonation via OneCRL
    centralized certificate revocation
  * Opportunistically encrypt HTTP traffic where the server supports
    HTTP/2 AltSvc
  * some more behaviour changes for TLS
  security fixes:
  * MFSA 2015-30/CVE-2015-0814/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-32/CVE-2015-0812 (bmo#1128126)
    Add-on lightweight theme installation approval bypassed through
    MITM attack
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-34/CVE-2015-0811 (bmo#1132468)
    Out of bounds read in QCMS library
  * MFSA-2015-35/CVE-2015-0810 (bmo#1125013)
    Cursor clickjacking with flash and images (OS X only)
  * MFSA-2015-36/CVE-2015-0808 (bmo#1109552)
    Incorrect memory management for simple-type arrays in WebRTC
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-38/CVE-2015-0805/CVE-2015-0806 (bmo#1135511, bmo#1099437)
    Memory corruption crashes in Off Main Thread Compositing
  * MFSA-2015-39/CVE-2015-0803/CVE-2015-0804 (bmo#1134560)
    Use-after-free due to type confusion flaws
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation
  * MFSA-2015-41/CVE-2015-0800/CVE-2012-2808
    PRNG weakness allows for DNS poisoning on Android (only)
  * MFSA-2015-42/CVE-2015-0802 (bmo#1124898)
    Windows can retain access to privileged content on navigation
    to unprivileged pages
- removed obsolete patches
  * mozilla-bmo1088588.patch
  * mozilla-bmo1108834.patch
- requires NSPR 4.10.8</changelog>
<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>

</package>
<package pkgid="c0fe6fa60f39a9468f3b4488e41abea4f9f33065177d656a64d41e61334a2372" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="43.0.3" rel="100.1"/>

<changelog author="wr@rosenauer.org" date="1428062400">- update to Firefox 37.0.1 (bnc#926166)
  * MFSA 2015-43/CVE-2015-0798 (bmo#1147597) (Android only)
    Loading privileged content through Reader mode
  * MFSA 2015-44/CVE-2015-0799 (bmo#1148328)
    Certificate verification bypass through the HTTP/2 Alt-Svc header</changelog>
<changelog author="wr@rosenauer.org" date="1429272000">- update to Firefox 37.0.2 (bnc#928116)
  * MFSA 2015-45/CVE-2015-2706 (bmo#1141081)
    Memory corruption during failed plugin initialization</changelog>
<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>

</package>
<package pkgid="dcfe63de2bbe14ab40416bdd24fc76153e452e48f45547626483c52cf777f434" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="44.0" rel="103.1"/>

<changelog author="wr@rosenauer.org" date="1431259200">- update to Firefox 38.0 (bnc#930622)
  * New tab-based preferences
  * Ruby annotation support
  * more info: https://www.mozilla.org/en-US/firefox/38.0/releasenotes/
  security fixes:
  * MFSA 2015-46/CVE-2015-2708/CVE-2015-2709
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-49/CVE-2015-2711 (bmo#1113431)
    Referrer policy ignored when links opened by middle-click and
    context menu
  * MFSA 2015-50/CVE-2015-2712 (bmo#1152280)
    Out-of-bounds read and write in asm.js validation
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-53/CVE-2015-2715 (bmo#988698)
    Use-after-free due to Media Decoder Thread creation during shutdown
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-55/CVE-2015-2717 (bmo#1154683)
    Buffer overflow and out-of-bounds read while parsing MP4 video
    metadata
  * MFSA 2015-56/CVE-2015-2718 (bmo#1146724)
    Untrusted site hosting trusted page can intercept webchannel
    responses
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages
- requires NSS 3.18.1
- removed obsolete patches:
  * mozilla-skia-bmo1136958.patch
- remove gnomevfs build options as it is removed from sources
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>

</package>
<package pkgid="f2e29e55083ad68211c0bdc99d370399b7d81fd478ae702b6e00eca6f56a0ab6" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="44.0.2" rel="106.1"/>

<changelog author="wr@rosenauer.org" date="1431691200">- update to Firefox 38.0.1
  stability and regression fixes
  * Systems with first generation NVidia Optimus graphics cards
    may crash on start-up
  * Users who import cookies from Google Chrome can end up with
    broken websites
  * Large animated images may fail to play and may stop other
    images from loading</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1431691201">- add mozilla-add-glibcxx_use_cxx11_abi.patch grabbed from
  https://bugzilla.mozilla.org/show_bug.cgi?id=1153109</changelog>
<changelog author="wr@rosenauer.org" date="1432382400">- update to Firefox 38.0.5
  * Keep track of articles and videos with Pocket
  * Clean formatting for articles and blog posts with Reader View
  * Share the active tab or window in a Hello conversation
- add changes file as source for SRPM (bsc#932142)</changelog>
<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>

</package>
<package pkgid="ac2f25a4a2769b0119e71aecce40fa90cbce35fc9771b9753bb19a2f0275ffbd" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="45.0" rel="109.1"/>

<changelog author="wr@rosenauer.org" date="1433678400">- update to Firefox 38.0.6
  * fixes bmo#1171730 which is not really relevant to oS builds
- fix KDE regression from 38.0.5 builds (bsc#933439)</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1435752000">- update to Firefox 39.0 (bnc#935979)
  * Share Hello URLs with social networks
  * Support for 'switch' role in ARIA 1.1 (web accessibility)
  * SafeBrowsing malware detection lookups enabled for downloads
    (Mac OS X and Linux)
  * Support for new Unicode 8.0 skin tone emoji
  * Removed support for insecure SSLv3 for network communications
  * Disable use of RC4 except for temporarily whitelisted hosts
  * NPAPI Plug-in performance improved via asynchronous initialization
  security fixes:
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725/CVE-2015-2726
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-68/CVE-2015-2742 (bmo#1138669)
    OS X crash reports may contain entered key press information
    (not relevant under Linux)
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- dropped mozilla-prefer_plugin_pref.patch as this feature is
  likely not worth maintaining further
- rebased patches
- require NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1438948800">- security update to Firefox 39.0.3 (bnc#940918)
  * MFSA 2015-78/CVE-2015-4495 (bmo#1179262, bmo#1178058)
    Same origin violation and local file stealing via PDF reader</changelog>
<changelog author="wr@rosenauer.org" date="1438948801">- update to Firefox 40.0 (bnc#940806)
  * Added protection against unwanted software downloads
  * Suggested Tiles show sites of interest, based on categories
    from your recent browsing history
  * Hello allows adding a link to conversations to provide context
    on what the conversation will be about
  * New style for add-on manager based on the in-content
    preferences style
  * Improved scrolling, graphics, and video playback performance
    with off main thread compositing (GNU/Linux only)
  * Graphic blocklist mechanism improved: Firefox version ranges
    can be specified, limiting the number of devices blocked
  security fixes:
  * MFSA 2015-79/CVE-2015-4473/CVE-2015-4474
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-86/CVE-2015-4483 (bmo#1148732)
    Feed protocol with POST bypasses mixed content protections
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-91/CVE-2015-4490 (bmo#1086999)
    Mozilla Content Security Policy allows for asterisk wildcards
    in violation of CSP specification
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers
- added mozilla-no-stdcxx-check.patch
- removed obsolete patches
  * mozilla-add-glibcxx_use_cxx11_abi.patch
  * firefox-multilocale-chrome.patch
- rebased patches
- requires version 40 of the branding package
- removed browser/searchplugins/ location as it's not valid anymore</changelog>
<changelog author="wr@rosenauer.org" date="1440676800">- update to Firefox 40.0.3 (bnc#943550)
  * Disable the asynchronous plugin initialization (bmo#1198590)
  * Fix a segmentation fault in the GStreamer support (bmo#1145230)
  * Fix a regression with some Japanese fonts used in the &lt;input&gt;
    field (bmo#1194055)
  * On some sites, the selection in a select combox box using the
    mouse could be broken (bmo#1194733)
  security fixes
  * MFSA 2015-94/CVE-2015-4497 (bmo#1164766, bmo#1175278)
    Use-after-free when resizing canvas element during restyling
  * MFSA 2015-95/CVE-2015-4498 (bmo#1042699)
    Add-on notification bypass through data URLs</changelog>
<changelog author="wr@rosenauer.org" date="1442664000">- update to Firefox 41.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500/CVE-2015-4501
    Miscellaneous memory safety hazards
  * MFSA 2015-97/CVE-2015-4503 (bmo#994337)
    Memory leak in mozTCPSocket to servers
  * MFSA 2015-98/CVE-2015-4504 (bmo#1132467)
    Out of bounds read in QCMS library with ICC V4 profile attributes
  * MFSA 2015-99/CVE-2015-4476 (bmo#1162372) (Android only)
    Site attribute spoofing on Android by pasting URL with unknown scheme
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-102/CVE-2015-4507 (bmo#1192401)
    Crash when using debugger with SavedStacks in JavaScript
  * MFSA 2015-103/CVE-2015-4508 (bmo#1195976)
    URL spoofing in reader mode
  * MFSA 2015-104/CVE-2015-4510 (bmo#1200004)
    Use-after-free with shared workers and IndexedDB
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-107/CVE-2015-4512 (bmo#1170390)
    Out-of-bounds read during 2D canvas display on Linux 16-bit
    color depth systems
  * MFSA 2015-108/CVE-2015-4502 (bmo#1105045)
    Scripted proxies can access inner window
  * MFSA 2015-109/CVE-2015-4516 (bmo#904886)
    JavaScript immutable property enforcement can be bypassed
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
  * MFSA 2015-114 (bmo#1167498, bmo#1153672) (Windows only)
    Information disclosure via the High Resolution Time API
- rebased patches
- removed obsolete patches
  * mozilla-arm64-libjpeg-turbo.patch</changelog>
<changelog author="wr@rosenauer.org" date="1443700800">- update to Firefox 41.0.1
  * Fix a startup crash related to Yandex toolbar and Adblock Plus
    (bmo#1209124)
  * Fix potential hangs with Flash plugins (bmo#1185639)
  * Fix a regression in the bookmark creation (bmo#1206376)
  * Fix a startup crash with some Intel Media Accelerator 3150
    graphic cards (bmo#1207665)
  * Fix a graphic crash, occurring occasionally on Facebook (bmo#1178601)</changelog>
<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="becd65226c3f7c1a170a4bbcfcc5d95da78c02cd199be6f444341239cc390264" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="46.0" rel="113.2"/>

<changelog author="wr@rosenauer.org" date="1443960000">- do not build with --enable-stdcxx-compat
  (this starts to fail build on various toolchain combinations
  and is not required for openSUSE builds in general</changelog>
<changelog author="wr@rosenauer.org" date="1444910400">- update to Firefox 41.0.2 (bnc#950686)
  * MFSA 2015-115/CVE-2015-7184 (bmo#1208339, bmo#1212669)
    Cross-origin restriction bypass using Fetch
- added explicit appdata provides (bnc#949983)</changelog>
<changelog author="wr@rosenauer.org" date="1446292800">- update to Firefox 42.0 (bnc#952810)
  * Private Browsing with Tracking Protection blocks certain Web
    elements that could be used to record your behavior across sites
  * Control Center that contains site security and privacy controls
  * Login Manager improvements
  * WebRTC improvements
  * Indicator added to tabs that play audio with one-click muting
  * Media Source Extension for HTML5 video available for all sites
  security fixes:
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-skia-be-le.patch
  * toolkit-download-folder.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
<changelog author="wr@rosenauer.org" date="1447588800">- Add desktop menu action for private browsing window to desktop
  file (boo#954747)
- remove obsolete patch mozilla-bmo1005535.patch completely from
  source package to avoid automatic check failures</changelog>
<changelog author="wr@rosenauer.org" date="1450008000">- update to Firefox 43.0 (bnc#959277)
  * Improved API support for m4v video playback
  * Users can opt-in to receive search suggestions from the Awesome Bar
  * WebRTC streaming on multiple monitors
  * User selectable second block list for Private Browsing's Tracking
    Protection
  security fixes:
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>

</package>
<package pkgid="829190da4f750b18f2626bdf3d9546cf60e1d3e2a87c5e5cd203f1ff12e18e8e" name="MozillaFirefox-translations-other" arch="x86_64">
    <version epoch="0" ver="47.0" rel="116.1"/>

<changelog author="wr@rosenauer.org" date="1451390400">- update to Firefox 43.0.3
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * various changes to support Windows update (SHA-1 vs. SHA-2)
  * workaround Youtube user agent detection issue (bmo#1233970)
- fix file download regression for multi user systems
  (bmo#1233434) (mozilla-bmo1233434.patch)
- explicitely requires libXcomposite-devel</changelog>
<changelog author="astieger@suse.com" date="1452513600">- Mozilla Firefox 43.0.4:
  * Re-enable SHA-1 certificates to prevent outdated
    man-in-the-middle security devices from interfering with
    properly secured SSL/TLS connections (bmo#1236975)
  * Fix for startup crash for users of a third party antivirus tool
    (bmo#1235537)
- The following change was previously in the package as a patch:
  * Multi-user GNU/Linux download folders can be created
  (bmo#1233434), removed mozilla-bmo1233434.patch</changelog>
<changelog author="wr@rosenauer.org" date="1453636800">- update to Firefox 44.0
  * MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 boo#963633
    Miscellaneous memory safety hazards
  * MFSA 2016-02/CVE-2016-1933 (bmo#1231761) boo#963634
    Out of Memory crash when parsing GIF format images
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450) boo#963635
    Buffer overflow in WebGL after out of memory allocation
  * MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423, bmo#1233784) boo#963637
    Firefox allows for control characters to be set in cookie names
  * MFSA 2016-06/CVE-2016-1937 (bmo#724353) boo#963641
    Missing delay following user click events in protocol handler dialog
  * MFSA 2016-07/CVE-2016-1938 (bmo#1190248) boo#963731
    Errors in mp_div and mp_exptmod cryptographic functions in NSS
    (fixed by requiring NSS 3.21)
  * MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082, bmo#1228590)
    Addressbar spoofing attacks boo#963643
  * MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946
    (bmo#1186621, bmo#1214782, bmo#1232096) boo#963644
    Unsafe memory manipulation found through code inspection
  * MFSA 2016-11/CVE-2016-1947 (bmo#1237103) boo#963645
    Application Reputation service disabled in Firefox 43
  * requires NSPR 4.11
  * requires NSS 3.21
- prepare mozilla-kde.patch for Gtk3 builds
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1454155200">- build fixes for arm/aarch64:
  * disable webrtc for arm/aarch64
  * switch away from openGL-ES backend to default for arm/aarch64
  since it almost never builds
  * reenable neon
- reenable webrtc for powerpc as it seems to build</changelog>
<changelog author="wr@rosenauer.org" date="1455192000">- update to Firefox 44.0.2
  * MFSA 2016-13/CVE-2016-1949 (bmo#1245724, boo#966438)
    Same-origin-policy violation using Service Workers with plugins
  * Fix issue which could lead to the removal of stored passwords
    under certain circumstances (bmo#1242176)
  * Allows spaces in cookie names (bmo#1244505)
  * Disable opus/vorbis audio with H.264 (bmo#1245696)
  * Fix for graphics startup crash (GNU/Linux) (bmo#1222171)
  * Fix a crash in cache networking (bmo#1244076)
  * Fix using WebSockets in service worker controlled pages (bmo#1243942)</changelog>
<changelog author="astieger@suse.com" date="1456488000">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch</changelog>
<changelog author="olaf@aepfle.de" date="1457179200">- Remove B_CNT from symbols.zip filename to reduce build-compare noise</changelog>
<changelog author="wr@rosenauer.org" date="1457265600">- update to Firefox 45.0 (boo#969894)
  * requires NSPR 4.12 / NSS 3.21.1
  * Instant browser tab sharing through Hello
  * Synced Tabs button in button bar
  * Tabs synced via Firefox Accounts from other devices are now shown
    in dropdown area of Awesome Bar when searching
  * Introduce a new preference (network.dns.blockDotOnion) to allow
    blocking .onion at the DNS level
  * Tab Groups (Panorama) feature removed
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-22/CVE-2016-1959 (bmo#1234949)
    Service Worker Manager out-of-bounds read in Service Worker Manager
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-26/CVE-2016-1963 (bmo#1238440)
    Memory corruption when modifying a file being read by FileReader
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-29/CVE-2016-1967 (bmo#1246956)
    Same-origin policy violation using perfomance.getEntries and
    history navigation with session restore
  * MFSA 2016-30/CVE-2016-1968 (bmo#1246742)
    Buffer overflow in Brotli decompression
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-32/CVE-2016-1970/CVE-2016-1971/CVE-2016-1975/
    CVE-2016-1976/CVE-2016-1972
    WebRTC and LibVPX vulnerabilities found through code inspection
  * MFSA 2016-33/CVE-2016-1973 (bmo#1219339)
    Use-after-free in GetStaticInstance in WebRTC
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="astieger@suse.com" date="1458302400">- Mozilla Firefox 45.0.1:
  * Fix a regression causing search engine settings to be lost in
    some context (bmo#1254694)
  * Bring back non-standard jar: URIs to fix a regression in IBM
    iNotes (bmo#1255139)
  * XSLTProcessor.importStylesheet was failing when &lt;import&gt; was
    used (bmo#1249572)
  * Fix an issue which could cause the list of search provider to
    be empty (bmo#1255605)
  * Fix a regression when using the location bar (bmo#1254503)
  * Fix some loading issues when Accept third-party cookies: was
    set to Never (bmo#1254856)
  * Disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1460376000">- Mozilla Firefox 45.0.2:
  * Fix an issue impacting the cookie header when third-party
    cookies are blocked (bmo#1257861)
  * Fix a web compatibility regression impacting the srcset
    attribute of the image tag (bmo#1259482)
  * Fix a crash impacting the video playback with Media Source
    Extension (bmo#1258562)
  * Fix a regression impacting some specific uploads (bmo#1255735)
  * Fix a regression with the copy and paste with some old versions
    of some Gecko applications like Thunderbird (bmo#1254980)</changelog>
<changelog author="badshah400@gmail.com" date="1460462400">- Compile against gtk3 depending on whether the macro
  %firefox_use_gtk3 is defined or not (e.g., at the prjconf
  level); macro is undefined by default and so gtk2 is used as the
  default toolkit.
- Add BuildRequires for additional packages needed when building
  against gtk3: pkgconfig(glib-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-3.0) &gt;= 3.4.0, pkgconfig(gtk+-unix-print-3.0).
- Add firefox-gtk3_20.patch to fix appearance with gtk3 &gt;= 3.20;
  patch taken from Fedora (bmo#1230955).</changelog>
<changelog author="badshah400@gmail.com" date="1461240000">- Update mozilla-gtk3_20.patch to fix scrollbar appearance under
  gtk &gt;= 3.20 (patch synced to Fedora's version).</changelog>
<changelog author="wr@rosenauer.org" date="1461758400">- update to Firefox 46.0 (boo#977333)
  * Improved security of the JavaScript Just In Time (JIT) Compiler
  * WebRTC fixes to improve performance and stability
  * Added support for document.elementsFromPoint
  * Added HKDF support for Web Crypto API
  * requires NSPR 4.12 and NSS 3.22.3
  * added patch to fix unchecked return value
    mozilla-check_return.patch
  * Gtk3 builds not supported at the moment
  security fixes:
  * MFSA 2016-39/CVE-2016-2804/CVE-2016-2806/CVE-2016-2807
    (boo#977373, boo#977375, boo#977376)
    Miscellaneous memory safety hazards
  * MFSA 2016-40/CVE-2016-2809 (bmo#1212939, boo#977377)
    Privilege escalation through file deletion by Maintenance Service updater
    (Windows only)
  * MFSA 2016-41/CVE-2016-2810 (bmo#1229681, boo#977378)
    Content provider permission bypass allows malicious application
    to access data (Android only)
  * MFSA 2016-42/CVE-2016-2811/CVE-2016-2812
    (bmo#1252330, bmo#1261776, boo#977379)
    Use-after-free and buffer overflow in Service Workers
  * MFSA 2016-43/CVE-2016-2813 (bmo#1197901, bmo#2714650, boo#977380)
    Disclosure of user actions through JavaScript with motion and
    orientation sensors (only affects mobile variants)
  * MFSA 2016-44/CVE-2016-2814 (bmo#1254721, boo#977381)
    Buffer overflow in libstagefright with CENC offsets
  * MFSA 2016-45/CVE-2016-2816 (bmo#1223743, boo#977382)
    CSP not applied to pages sent with multipart/x-mixed-replace
  * MFSA 2016-46/CVE-2016-2817 (bmo#1227462, boo#977384)
    Elevation of privilege with chrome.tabs.update API in web extensions
  * MFSA 2016-47/CVE-2016-2808 (bmo#1246061, boo#977386)
    Write to invalid HashMap entry through JavaScript.watch()
  * MFSA 2016-48/CVE-2016-2820 (bmo#870870, boo#977388)
    Firefox Health Reports could accept events from untrusted domains</changelog>
<changelog author="badshah400@gmail.com" date="1461758401">- Update mozilla-gtk3_20.patch for Firefox 46.0 (sync to latest
  version from Fedora).</changelog>
<changelog author="normand@linux.vnet.ibm.com" date="1462276800">- add mozilla-jit_branch64.patch to avoid PowerPC build failure
  (from bmo#1266366)</changelog>
<changelog author="wr@rosenauer.org" date="1462363200">- update to Firefox 46.0.1
  Fixed:
  * Search plugin issue for various locales
  * Add-on signing certificate expiration
  * Service worker update issue
  * Build issue when jit is disabled
  * Limit Sync registration updates
- removed now obsolete mozilla-jit_branch64.patch</changelog>
<changelog author="dsterba@suse.cz" date="1463054400">- enable build with PIE and full relro on x86_64 (boo#980384)</changelog>
<changelog author="badshah400@gmail.com" date="1464004800">- Add patches to fix building with gcc6:
  + mozilla-gcc6.patch: fix building with gcc &gt;= 6.1; patch
    taken from upstream:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-exclude-nametablecpp.patch: Exclude NameTable.cpp
    from unified compilation because #include &lt;cmath&gt; in other
    source files causes gcc6 compilation failure; patch taken from
    upstream:
    https://hg.mozilla.org/mozilla-central/rev/9c57b7cacffc.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1465300800">- update to Firefox 47.0 (boo#983549)
  * Enable VP9 video codec for users with fast machines
  * Embedded YouTube videos now play with HTML5 video if Flash is
    not installed
  * View and search open tabs from your smartphone or another
    computer in a sidebar
  * Allow no-cache on back/forward navigations for https resources
  security fixes:
  * MFSA 2016-49/CVE-2016-2815/CVE-2016-2818
    (boo#983638)
    (bmo#1241896, bmo#1242798, bmo#1243466, bmo#1245743,
    bmo#1264300, bmo#1271037, bmo#1234147, bmo#1256493,
    bmo#1256739, bmo#1256968, bmo#1261230, bmo#1261752,
    bmo#1263384, bmo#1264575, bmo#1265577, bmo#1267130,
    bmo#1269729, bmo#1273202, bmo#1273701)
    Miscellaneous memory safety hazards (rv:47.0 / rv:45.2)
  * MFSA 2016-50/CVE-2016-2819 (boo#983655) (bmo#1270381)
    Buffer overflow parsing HTML5 fragments
  * MFSA 2016-51/CVE-2016-2821 (bsc#983653) (bmo#1271460)
    Use-after-free deleting tables from a contenteditable document
  * MFSA 2016-52/CVE-2016-2822 (boo#983652) (bmo#1273129)
    Addressbar spoofing though the SELECT element
  * MFSA 2016-53/CVE-2016-2824 (boo#983651) (bmo#1248580)
    Out-of-bounds write with WebGL shader
  * MFSA 2016-54/CVE-2016-2825 (boo#983649) (bmo#1193093)
    Partial same-origin-policy through setting location.host
    through data URI
  * MFSA 2016-56/CVE-2016-2828 (boo#983646) (bmo#1223810)
    Use-after-free when textures are used in WebGL operations
    after recycle pool destruction
  * MFSA 2016-57/CVE-2016-2829 (boo#983644) (bmo#1248329)
    Incorrect icon displayed on permissions notifications
  * MFSA 2016-58/CVE-2016-2831 (boo#983643) (bmo#1261933)
    Entering fullscreen and persistent pointerlock without user
    permission
  * MFSA 2016-59/CVE-2016-2832 (boo#983632) (bmo#1025267)
    Information disclosure of disabled plugins through CSS
    pseudo-classes
  * MFSA 2016-60/CVE-2016-2833 (boo#983640) (bmo#908933)
    Java applets bypass CSP protections
  * MFSA 2016-62/CVE-2016-2834 (boo#983639) (bmo#1206283,
    bmo#1221620, bmo#1241034, bmo#1241037)
    Network Security Services (NSS) vulnerabilities
    fixed by requiring NSS 3.23
  packaging changes:
  * cleanup configure options (boo#981695):
  - notably remove GStreamer support which is gone from FF
  * remove obsolete patches
  - mozilla-libproxy.patch
  - mozilla-repo.patch</changelog>

</package>
<package pkgid="996403db84d604f88b4d3fb50097fbaac3d6528f41492edcf15be86b4d30f041" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="24.2.0" rel="70.7.2"/>

<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>

</package>
<package pkgid="0084d41a81dc4cd216784e4ce8cd5899058f5695bffb3bb7f0b554a492af5283" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="24.3.0" rel="70.11.1"/>

<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>

</package>
<package pkgid="4aab7528e6df88044d15390cfa8759d344028f54bb7f113d3771295d3e56f10a" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="24.4.0" rel="70.15.8"/>

<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>

</package>
<package pkgid="3d083d700b869886a876cf3969393c0d6aae93503dddf41d5f603bea700a684e" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="24.5.0" rel="70.19.3"/>

<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>

</package>
<package pkgid="3f91fa3ec35a02b082726c6be07d447606bb189da9da69a12818d0f47c442bb3" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="24.6.0" rel="70.23.3"/>

<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>

</package>
<package pkgid="79099bfd7b770310a3246416c123f8eeb8b4d71afb5d8c33dd2883a55a046cfa" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="24.7.0" rel="70.27.1"/>

<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>

</package>
<package pkgid="c94871eb038c66a5c8f9f7ee00e90d293a91f48bfed5cade31b4ac6ce4a31b93" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="31.1.0" rel="70.31.1"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>

</package>
<package pkgid="71b0f01ed9f443bb418dcf47cda231024276d568aa1fac08911e6a4c33140f53" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="31.2.0" rel="70.35.2"/>

<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>

</package>
<package pkgid="453cffcceb9e31b933edac104fdedffcd8679066c5c4899ccc96846699549729" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="31.3.0" rel="70.39.3"/>

<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>

</package>
<package pkgid="b1439b296b5726cafca3a94f8379976f054522cbf7720f55fed2b4964479aeb6" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="31.4.0" rel="70.43.1"/>

<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="e2c3ddf4302ceb84280ed6feb814f87d1980e4ed4b9dce9ed4edb993616c96c4" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="31.5.0" rel="70.47.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>

</package>
<package pkgid="019768af604ee01301d2a30692fbf78b1454c305249c3b67a79a7f8ce64c1a16" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="31.6.0" rel="70.50.2"/>

<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>

</package>
<package pkgid="9a69c2abc3a8bf69cf6cb0d56dc0f3b905fd64da538b0e122722e74eed241876" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="31.7.0" rel="70.53.1"/>

<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>

</package>
<package pkgid="77468f5ede1dfb0fe7a87f0598aa82af3ea1c49aa535d05fb55e118f87a1574b" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="38.1.0" rel="70.57.1"/>

<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>

</package>
<package pkgid="1124746e4708beb041c24586070b7b2dbbc2ea054ce82cfe0064d68da3cdb887" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="38.2.0" rel="70.60.2"/>

<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>

</package>
<package pkgid="0b4a66e7dd4491d637878321ab1cf9b230c3582c622ad124ec153f957b41d3a7" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="38.3.0" rel="70.65.1"/>

<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>

</package>
<package pkgid="6ef707f4080a5820b8d6931b39b6abb21c4f5db04be046154bea004fa7c26cec" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="38.4.0" rel="70.68.1"/>

<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>

</package>
<package pkgid="11673101bd7f15d59b4faea93776cff8e5cd00d3b1b091ab76f6a515dbee933b" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="38.5.0" rel="70.71.1"/>

<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>

</package>
<package pkgid="b80113806f0e1b1f637e463460a5c6b0b05d82acde014c45b4d5eccf7fea4cbb" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="38.6.0" rel="70.74.1"/>

<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>

</package>
<package pkgid="7183648bab2ab89fcdc7109a8cbed533e86adf475baf1e7d8d155754d06edfcd" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="38.6.0" rel="70.77.4"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="7694bc0f169cf60edd6547d2d44da10143d07a16a34abfd2fad18babec000fdd" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="38.7.0" rel="70.80.1"/>

<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="d8e2e30133eac1a428498773a48371e3a7345a16044150f01a8685e78f0ac1b4" name="MozillaThunderbird" arch="i586">
    <version epoch="0" ver="45.2" rel="70.83.1"/>

<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="wr@rosenauer.org" date="1458907200">- update to Thunderbird 38.7.1
  * disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1459944000">- update to Thunderbird 38.7.2
  * disable Graphite font shaping library (same upstream changelog
    as 38.7.1)</changelog>
<changelog author="wr@rosenauer.org" date="1460808000">- update to Thunderbird 45.0 (boo#969894)
  * Add a Correspondents column combining Sender and Recipient
  * Much better support for XMPP chatrooms and commands
  * Remote content exceptions: Improved options to add exceptions
  * Implement option to always use HTML formatting to prevent
    unexpected format loss when converting messages to plain text
  * Use OpenStreetmap for maps (even allow the user to choose from
    list of map services)
  * Allow spell checking and dictionary selection in the subject line
  * Allow editing of From when composing a message
  * Add dropdown in compose to allow specific setting of font size
  * Return/Enter in composer will now insert a new paragraph by
    default (shift-Enter will insert a line break)
  * Allow copying of name and email address from the message header
    of an email
  * Mail.ru supports OAuth authentication
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library
- remove obsolete patches:
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-arm64-libjpeg-turbo.patch
- added required mozilla platform patches:
  * mozilla-no-stdcxx-check.patch</changelog>
<changelog author="badshah400@gmail.com" date="1461758400">- For openSUSE &gt; 13.2, the build fails for i586 as it goes out of
  memory. Prevent this from happening by disabing parallel build
  in this particular case (i.e. do not pass
  mk_add_options MOZ_MAKE_FLAGS%{?jobs:-j%jobs}).</changelog>
<changelog author="wr@rosenauer.org" date="1462622400">- update to Thunderbird 45.1.0 (boo#977333)
  * MFSA 2016-39/CVE-2016-2806/CVE-2016-2807 (boo#977375, boo#977376)
    Miscellaneous memory safety hazards</changelog>
<changelog author="dimstar@opensuse.org" date="1463054400">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="badshah400@gmail.com" date="1464091200">- Add patches to fix building with gcc &gt;= 6:
  + mozilla-gcc6.patch: patch taken from fedora's git and is
    essentially identical to upstream firefox patch:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-flexible-array-member-in-union.patch: patch taken
    from upstream bmo#1272649.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1464350400">- update to Thunderbird 45.1.1
  * When entering members into a mailing list, the enter key
    dismissed the panel instead of just moving onto the next line
  * Email without HTML elements was sent as HTML, despite
    "Delivery Format: Auto-detect" option
  * Options applied to a template were lost when the template was used
  * Contacts could not be deleted when they were found through a search
  * Views from global searches did not respect
    "mail.threadpane.use_correspondents"</changelog>
<changelog author="agraf@suse.com" date="1465819200">- Fix running on 48bit va aarch64 (bsc#984126)
  - Add patch mozilla-aarch64-48bit-va.patch</changelog>
<changelog author="wr@rosenauer.org" date="1466683200">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#986162)</changelog>
<changelog author="wr@rosenauer.org" date="1466769600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
<changelog author="wr@rosenauer.org" date="1467288000">- update to Thunderbird 45.2 (boo#983549)
  Security fixes:
  * CVE-2016-2818, CVE-2016-2815: Memory safety bugs (MFSA2016-49)
- drop mozilla-flexible-array-member-in-union.patch, upstream</changelog>

</package>
<package pkgid="3392c2bb02d354a31e3f9676d21476b45e80d29414ef7b4917d71374cf632708" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="24.2.0" rel="70.7.2"/>

<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>

</package>
<package pkgid="0c17cc6ddf0abe2883de6dd2875136008357e711177d61560100ed20e37cf0e5" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="24.3.0" rel="70.11.1"/>

<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>

</package>
<package pkgid="63cee836daa70b5b38af162973da51a06c5d6c7ad46ce200b7a2e58f6a2aabbe" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="24.4.0" rel="70.15.8"/>

<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>

</package>
<package pkgid="50663d6620aa33270caa064f737ad1160f591de92b56d34ac0f909b2481508c3" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="24.5.0" rel="70.19.3"/>

<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>

</package>
<package pkgid="537a1276027ccf11be0dcf5a2288ddbefdb8855182b373d58db22e156272a454" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="24.6.0" rel="70.23.3"/>

<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>

</package>
<package pkgid="bd617f661c5b850d98b46645c823dabe48d4a285a2bf43495aa6bc7f10b5d51c" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="24.7.0" rel="70.27.1"/>

<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>

</package>
<package pkgid="bc3ed7e265e1bafa298f523039155966eec7dbdaab963a1a187d3101eac3a1ae" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="31.1.0" rel="70.31.1"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>

</package>
<package pkgid="bc80aaf47477710018f976e14bb2bda8f0caa4c20fd9dd2f1f6170dc2a46752d" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="31.2.0" rel="70.35.2"/>

<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>

</package>
<package pkgid="4887bb7ece36b8b8026e3627a4276d264c717c729159db5aec8c6523e78ac12d" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="31.3.0" rel="70.39.3"/>

<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>

</package>
<package pkgid="dacead3da820bcb386cd37b9b1205cb9d600febd99fe1d2f9c05c7a13a57422a" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="31.4.0" rel="70.43.1"/>

<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="784eda27f9a7c95cddb8ab59307ce23b9520fae74bfa673e4e952ee8ce58457e" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="31.5.0" rel="70.47.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>

</package>
<package pkgid="f84f73b7b400d0a8329abecb5278d18b60202c74b0a9771f19e8adb08dc2f325" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="31.6.0" rel="70.50.2"/>

<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>

</package>
<package pkgid="a9a7c14817b482475f17542b784001dc8d98d89cca826a93ab80b859e115afbb" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="31.7.0" rel="70.53.1"/>

<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>

</package>
<package pkgid="1d33fb22c64bc571c674bb8c925d0790469a960176367fe2284871ac2a2f037c" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="38.1.0" rel="70.57.1"/>

<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>

</package>
<package pkgid="299b448ba07dba0f7d4d72c686e83e0c26f9878de5c3857fa0ee06a15e721688" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="38.2.0" rel="70.60.2"/>

<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>

</package>
<package pkgid="0dd662fb76e8af9a1254f1382aad1b3f4a48aaea38053ae865bea3dcea714abb" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="38.3.0" rel="70.65.1"/>

<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>

</package>
<package pkgid="640fa55165ae15aaac08573ac7093581379d99fd2cb4d44d6dabebe68df4badf" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="38.4.0" rel="70.68.1"/>

<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>

</package>
<package pkgid="f8f86fa95f26dfd90a7a0cfa16c2765567926160dc032623ebe77a38629307c5" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="38.5.0" rel="70.71.1"/>

<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>

</package>
<package pkgid="e87457d6791ab77df32d9f8ceb45f53522684c321b5acba7e2f269265b4ab822" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="38.6.0" rel="70.74.1"/>

<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>

</package>
<package pkgid="3a2f2a2e9896630ff4dbb4f9bf074d7c299f117e3085ae8c9185b707f3f28512" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="38.6.0" rel="70.77.4"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="6f2229bdbe6a13c0e3a5f3f9e6bec38739467807e972f2185a44add5097f0d3b" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="38.7.0" rel="70.80.1"/>

<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="7ef96b2c865c8af3773b3a752935290813cec5d81593ac7a8bac044e0f169f5d" name="MozillaThunderbird" arch="src">
    <version epoch="0" ver="45.2" rel="70.83.1"/>

<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="wr@rosenauer.org" date="1458907200">- update to Thunderbird 38.7.1
  * disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1459944000">- update to Thunderbird 38.7.2
  * disable Graphite font shaping library (same upstream changelog
    as 38.7.1)</changelog>
<changelog author="wr@rosenauer.org" date="1460808000">- update to Thunderbird 45.0 (boo#969894)
  * Add a Correspondents column combining Sender and Recipient
  * Much better support for XMPP chatrooms and commands
  * Remote content exceptions: Improved options to add exceptions
  * Implement option to always use HTML formatting to prevent
    unexpected format loss when converting messages to plain text
  * Use OpenStreetmap for maps (even allow the user to choose from
    list of map services)
  * Allow spell checking and dictionary selection in the subject line
  * Allow editing of From when composing a message
  * Add dropdown in compose to allow specific setting of font size
  * Return/Enter in composer will now insert a new paragraph by
    default (shift-Enter will insert a line break)
  * Allow copying of name and email address from the message header
    of an email
  * Mail.ru supports OAuth authentication
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library
- remove obsolete patches:
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-arm64-libjpeg-turbo.patch
- added required mozilla platform patches:
  * mozilla-no-stdcxx-check.patch</changelog>
<changelog author="badshah400@gmail.com" date="1461758400">- For openSUSE &gt; 13.2, the build fails for i586 as it goes out of
  memory. Prevent this from happening by disabing parallel build
  in this particular case (i.e. do not pass
  mk_add_options MOZ_MAKE_FLAGS%{?jobs:-j%jobs}).</changelog>
<changelog author="wr@rosenauer.org" date="1462622400">- update to Thunderbird 45.1.0 (boo#977333)
  * MFSA 2016-39/CVE-2016-2806/CVE-2016-2807 (boo#977375, boo#977376)
    Miscellaneous memory safety hazards</changelog>
<changelog author="dimstar@opensuse.org" date="1463054400">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="badshah400@gmail.com" date="1464091200">- Add patches to fix building with gcc &gt;= 6:
  + mozilla-gcc6.patch: patch taken from fedora's git and is
    essentially identical to upstream firefox patch:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-flexible-array-member-in-union.patch: patch taken
    from upstream bmo#1272649.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1464350400">- update to Thunderbird 45.1.1
  * When entering members into a mailing list, the enter key
    dismissed the panel instead of just moving onto the next line
  * Email without HTML elements was sent as HTML, despite
    "Delivery Format: Auto-detect" option
  * Options applied to a template were lost when the template was used
  * Contacts could not be deleted when they were found through a search
  * Views from global searches did not respect
    "mail.threadpane.use_correspondents"</changelog>
<changelog author="agraf@suse.com" date="1465819200">- Fix running on 48bit va aarch64 (bsc#984126)
  - Add patch mozilla-aarch64-48bit-va.patch</changelog>
<changelog author="wr@rosenauer.org" date="1466683200">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#986162)</changelog>
<changelog author="wr@rosenauer.org" date="1466769600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
<changelog author="wr@rosenauer.org" date="1467288000">- update to Thunderbird 45.2 (boo#983549)
  Security fixes:
  * CVE-2016-2818, CVE-2016-2815: Memory safety bugs (MFSA2016-49)
- drop mozilla-flexible-array-member-in-union.patch, upstream</changelog>

</package>
<package pkgid="1e5c559a699737b9b10a6c6812bddf0847ede2850463e453c2017f910055e82f" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="24.2.0" rel="70.7.2"/>

<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>

</package>
<package pkgid="34ba3ee63c6f601d3d5c7b826686d60a5d8e6920c90e5be98e9349dbce3c343b" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="24.3.0" rel="70.11.1"/>

<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>

</package>
<package pkgid="f2cdaa03c7595b14696b21861657dee443c44e6434b146d99040b0009dbaa36d" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="24.4.0" rel="70.15.8"/>

<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>

</package>
<package pkgid="d4c269e4dbb2e96478cd9777d6ebb03c2472ac0600e363d656218666a1b1a5fb" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="24.5.0" rel="70.19.3"/>

<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>

</package>
<package pkgid="88f79a4c92a15abf157fc92216678ddf5209c731b56807ccadb458480501fb2f" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="24.6.0" rel="70.23.3"/>

<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>

</package>
<package pkgid="bf12e4f038b653b35a3f55d20d597a592ae4253d7572006cb87c6eff8db31c22" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="24.7.0" rel="70.27.1"/>

<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>

</package>
<package pkgid="dacc88b4c2c6344b5c4d2d16e64d426acf24a695fa724132d40a35adeeee82cb" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="31.1.0" rel="70.31.1"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>

</package>
<package pkgid="0ee0d1d3070ac3019ea067eb619aaec3121768c2d8b42a17c0c2e7d43f9d2bb1" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="31.2.0" rel="70.35.2"/>

<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>

</package>
<package pkgid="d5f94ebdf4178ae2d9845883f0185be07adcb58750bc2b7fbc223885ab86b96a" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="31.3.0" rel="70.39.3"/>

<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>

</package>
<package pkgid="6cee4ba6e407ce3463911c6370a66a348eee8af11f303bdd10ea1b832b0bc07f" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="31.4.0" rel="70.43.1"/>

<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="c7a8a78222aa3dd64ad849b0f809eab1ac0d0a9b913aecd324a66570fd475028" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="31.5.0" rel="70.47.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>

</package>
<package pkgid="02982845662821279501371da71f0756841a376cdd19dc97c0dd861bf5af88b3" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="31.6.0" rel="70.50.2"/>

<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>

</package>
<package pkgid="fff51db29e4a674608ce47265835b7b75ae8e3e106211f6a2c365138e7a1e27c" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="31.7.0" rel="70.53.1"/>

<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>

</package>
<package pkgid="396882b21864e1ec292446e3b1478dc01ec40bc1e322e50a2f643ebe0ad3aa33" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="38.1.0" rel="70.57.1"/>

<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>

</package>
<package pkgid="b7f1211e0f2cc022f694e85e57c43afbeeca76dd84ad55b3108ce8cb3dfbb02b" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="38.2.0" rel="70.60.2"/>

<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>

</package>
<package pkgid="a4656e0d703bacd7ed9a871245a057c689899945ea2181fc7150b08b0a406c6a" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="38.3.0" rel="70.65.1"/>

<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>

</package>
<package pkgid="421d29b9967d303a76c3075cd95756a7492f60f51c3559671f7a9c20a80ef55d" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="38.4.0" rel="70.68.1"/>

<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>

</package>
<package pkgid="926cc8d256eeefb7615eab14c7dd0731cdc4de8d45fe917aa99adf969945b32c" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="38.5.0" rel="70.71.1"/>

<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>

</package>
<package pkgid="e7b631f3d835c2cd7d5fbec594e7c9a607894ce78a7c74c93f28f191aae44d86" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="38.6.0" rel="70.74.1"/>

<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>

</package>
<package pkgid="d6effa3231bea18c183a64696611ee4bd48409745c2ce526e4230b85941ae695" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="38.6.0" rel="70.77.4"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="c11a08abff2b3e8600b22c700b8e26b391549eed728b0a895a356376ed8b48a3" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="38.7.0" rel="70.80.1"/>

<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="3fcb62ca963243559b59231c8474a7103ae7828dc0753e44643dff79e112a547" name="MozillaThunderbird" arch="x86_64">
    <version epoch="0" ver="45.2" rel="70.83.1"/>

<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="wr@rosenauer.org" date="1458907200">- update to Thunderbird 38.7.1
  * disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1459944000">- update to Thunderbird 38.7.2
  * disable Graphite font shaping library (same upstream changelog
    as 38.7.1)</changelog>
<changelog author="wr@rosenauer.org" date="1460808000">- update to Thunderbird 45.0 (boo#969894)
  * Add a Correspondents column combining Sender and Recipient
  * Much better support for XMPP chatrooms and commands
  * Remote content exceptions: Improved options to add exceptions
  * Implement option to always use HTML formatting to prevent
    unexpected format loss when converting messages to plain text
  * Use OpenStreetmap for maps (even allow the user to choose from
    list of map services)
  * Allow spell checking and dictionary selection in the subject line
  * Allow editing of From when composing a message
  * Add dropdown in compose to allow specific setting of font size
  * Return/Enter in composer will now insert a new paragraph by
    default (shift-Enter will insert a line break)
  * Allow copying of name and email address from the message header
    of an email
  * Mail.ru supports OAuth authentication
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library
- remove obsolete patches:
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-arm64-libjpeg-turbo.patch
- added required mozilla platform patches:
  * mozilla-no-stdcxx-check.patch</changelog>
<changelog author="badshah400@gmail.com" date="1461758400">- For openSUSE &gt; 13.2, the build fails for i586 as it goes out of
  memory. Prevent this from happening by disabing parallel build
  in this particular case (i.e. do not pass
  mk_add_options MOZ_MAKE_FLAGS%{?jobs:-j%jobs}).</changelog>
<changelog author="wr@rosenauer.org" date="1462622400">- update to Thunderbird 45.1.0 (boo#977333)
  * MFSA 2016-39/CVE-2016-2806/CVE-2016-2807 (boo#977375, boo#977376)
    Miscellaneous memory safety hazards</changelog>
<changelog author="dimstar@opensuse.org" date="1463054400">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="badshah400@gmail.com" date="1464091200">- Add patches to fix building with gcc &gt;= 6:
  + mozilla-gcc6.patch: patch taken from fedora's git and is
    essentially identical to upstream firefox patch:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-flexible-array-member-in-union.patch: patch taken
    from upstream bmo#1272649.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1464350400">- update to Thunderbird 45.1.1
  * When entering members into a mailing list, the enter key
    dismissed the panel instead of just moving onto the next line
  * Email without HTML elements was sent as HTML, despite
    "Delivery Format: Auto-detect" option
  * Options applied to a template were lost when the template was used
  * Contacts could not be deleted when they were found through a search
  * Views from global searches did not respect
    "mail.threadpane.use_correspondents"</changelog>
<changelog author="agraf@suse.com" date="1465819200">- Fix running on 48bit va aarch64 (bsc#984126)
  - Add patch mozilla-aarch64-48bit-va.patch</changelog>
<changelog author="wr@rosenauer.org" date="1466683200">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#986162)</changelog>
<changelog author="wr@rosenauer.org" date="1466769600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
<changelog author="wr@rosenauer.org" date="1467288000">- update to Thunderbird 45.2 (boo#983549)
  Security fixes:
  * CVE-2016-2818, CVE-2016-2815: Memory safety bugs (MFSA2016-49)
- drop mozilla-flexible-array-member-in-union.patch, upstream</changelog>

</package>
<package pkgid="87cbb24ede9cd31628a0365df36dccb705f0511d44f1747eb82f7b5cc371f9f1" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="24.2.0" rel="70.7.2"/>

<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>

</package>
<package pkgid="7d7df36e1ffd0031490e66a9421efd23edfa890805e9d79938b9446b1bc7c82c" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="24.3.0" rel="70.11.1"/>

<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>

</package>
<package pkgid="529afb25280c9ac2babfcc6f75b4586e6aaa30a8ed77edd8588a4ee54e50c3fb" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="24.4.0" rel="70.15.8"/>

<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>

</package>
<package pkgid="b0ef3c5be3c354d93b305c0c32300692221a2d077e7a4fadf90183fb423d2826" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="24.5.0" rel="70.19.3"/>

<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>

</package>
<package pkgid="885fad768446d8df5786019f3d86a8ab7a20bad57a5df25ce44089918f69f3c0" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="24.6.0" rel="70.23.3"/>

<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>

</package>
<package pkgid="fbf63f42c56039e9132b7b6e67ff80b9e3309a03890edecf157fad869c97e62b" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="24.7.0" rel="70.27.1"/>

<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>

</package>
<package pkgid="38eedc06bb0b201e95970fe285327cc48950534ea74378b962cb115a290cc4dd" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="31.1.0" rel="70.31.1"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>

</package>
<package pkgid="c4e778fa84a33ddc8658fe35e0f9bc348dd79b899b013f6caf5bc3eaaf0d6308" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="31.2.0" rel="70.35.2"/>

<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>

</package>
<package pkgid="9ae685db4fc507b96f3e9adbd07201e7b1f23b733e9a0a7c6291a8240fe19ac5" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="31.3.0" rel="70.39.3"/>

<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>

</package>
<package pkgid="522fdaa980316e9ba732f241d13c39be5e78494d08dbac8a6da5ef652cd6a9e2" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="31.4.0" rel="70.43.1"/>

<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="26cc5c2ccebf03c417bd2e8895fdf2d05cd4c16503c3f06620e5f76a739d4aa2" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="31.5.0" rel="70.47.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>

</package>
<package pkgid="116fb42a8eb6ba418c194931511f34e49ab1276a1d9c47950c6ffe314a750223" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="31.6.0" rel="70.50.2"/>

<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>

</package>
<package pkgid="c53699c878985efd51ca17419d810313219be1182632ef57bf7023eee9a368ba" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="31.7.0" rel="70.53.1"/>

<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>

</package>
<package pkgid="2dea6728d570f79206ca08ef8ecf1d35af1d2d37cb497a8d6becf8b57cb8576d" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="38.1.0" rel="70.57.1"/>

<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>

</package>
<package pkgid="44478a2bd21d6d2a3a3930fb8bf9f85cbcc23d43ae272e8153a3789a1ed47758" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="38.2.0" rel="70.60.2"/>

<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>

</package>
<package pkgid="3fc3a093c90c10ca218cdff58d3b2742636e17ce8531a37fae7028462fcbde8d" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="38.3.0" rel="70.65.1"/>

<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>

</package>
<package pkgid="0e5dd7d5360051b7aba65882b7efbe67a634f7cc022b51e456e1e6c44db8725e" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="38.4.0" rel="70.68.1"/>

<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>

</package>
<package pkgid="121315aa5e71efb7708ff1fd7cc11eda37c7bb0b640eb5af6f6dc0aa681b23cb" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="38.5.0" rel="70.71.1"/>

<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>

</package>
<package pkgid="4c3882dd9b61a697b97f603bc95c8c6e221dd77fd4e2e3b970e0ce45f21ed56d" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="38.6.0" rel="70.74.1"/>

<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>

</package>
<package pkgid="e75629fe847b020f9814a2176d528ade81b463c8dae923130e1cfc1178bf059b" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="38.6.0" rel="70.77.4"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="6852bd86eff8283b542fef8e497e03aa458b84706ecb462ce5dba195950e374d" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="38.7.0" rel="70.80.1"/>

<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="af69a7dae59a3a8595c6a3fec554c07e6a214d0e63dce8685263b3538dc31623" name="MozillaThunderbird-buildsymbols" arch="i586">
    <version epoch="0" ver="45.2" rel="70.83.1"/>

<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="wr@rosenauer.org" date="1458907200">- update to Thunderbird 38.7.1
  * disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1459944000">- update to Thunderbird 38.7.2
  * disable Graphite font shaping library (same upstream changelog
    as 38.7.1)</changelog>
<changelog author="wr@rosenauer.org" date="1460808000">- update to Thunderbird 45.0 (boo#969894)
  * Add a Correspondents column combining Sender and Recipient
  * Much better support for XMPP chatrooms and commands
  * Remote content exceptions: Improved options to add exceptions
  * Implement option to always use HTML formatting to prevent
    unexpected format loss when converting messages to plain text
  * Use OpenStreetmap for maps (even allow the user to choose from
    list of map services)
  * Allow spell checking and dictionary selection in the subject line
  * Allow editing of From when composing a message
  * Add dropdown in compose to allow specific setting of font size
  * Return/Enter in composer will now insert a new paragraph by
    default (shift-Enter will insert a line break)
  * Allow copying of name and email address from the message header
    of an email
  * Mail.ru supports OAuth authentication
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library
- remove obsolete patches:
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-arm64-libjpeg-turbo.patch
- added required mozilla platform patches:
  * mozilla-no-stdcxx-check.patch</changelog>
<changelog author="badshah400@gmail.com" date="1461758400">- For openSUSE &gt; 13.2, the build fails for i586 as it goes out of
  memory. Prevent this from happening by disabing parallel build
  in this particular case (i.e. do not pass
  mk_add_options MOZ_MAKE_FLAGS%{?jobs:-j%jobs}).</changelog>
<changelog author="wr@rosenauer.org" date="1462622400">- update to Thunderbird 45.1.0 (boo#977333)
  * MFSA 2016-39/CVE-2016-2806/CVE-2016-2807 (boo#977375, boo#977376)
    Miscellaneous memory safety hazards</changelog>
<changelog author="dimstar@opensuse.org" date="1463054400">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="badshah400@gmail.com" date="1464091200">- Add patches to fix building with gcc &gt;= 6:
  + mozilla-gcc6.patch: patch taken from fedora's git and is
    essentially identical to upstream firefox patch:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-flexible-array-member-in-union.patch: patch taken
    from upstream bmo#1272649.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1464350400">- update to Thunderbird 45.1.1
  * When entering members into a mailing list, the enter key
    dismissed the panel instead of just moving onto the next line
  * Email without HTML elements was sent as HTML, despite
    "Delivery Format: Auto-detect" option
  * Options applied to a template were lost when the template was used
  * Contacts could not be deleted when they were found through a search
  * Views from global searches did not respect
    "mail.threadpane.use_correspondents"</changelog>
<changelog author="agraf@suse.com" date="1465819200">- Fix running on 48bit va aarch64 (bsc#984126)
  - Add patch mozilla-aarch64-48bit-va.patch</changelog>
<changelog author="wr@rosenauer.org" date="1466683200">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#986162)</changelog>
<changelog author="wr@rosenauer.org" date="1466769600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
<changelog author="wr@rosenauer.org" date="1467288000">- update to Thunderbird 45.2 (boo#983549)
  Security fixes:
  * CVE-2016-2818, CVE-2016-2815: Memory safety bugs (MFSA2016-49)
- drop mozilla-flexible-array-member-in-union.patch, upstream</changelog>

</package>
<package pkgid="02f09f807237fe04df7e429630fba84d23e913cfa6723ae1bde666e2b653e154" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="24.2.0" rel="70.7.2"/>

<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>

</package>
<package pkgid="9626825e34bbcb991832d827a47bebffa4a58085e3f51ac04e0b56ddde6817f7" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="24.3.0" rel="70.11.1"/>

<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>

</package>
<package pkgid="e94c44815205dbeacb40c4c9f724aebfb1ea7dad69faf249cf8315f88e802616" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="24.4.0" rel="70.15.8"/>

<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>

</package>
<package pkgid="3807572e6a8bf5438f56060196944d884ed85a19ca2ebc98ad715b44c2be97a4" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="24.5.0" rel="70.19.3"/>

<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>

</package>
<package pkgid="770982a76b1a21f073ca7c4888e2242428aff9bebdd95db5ff4c93180eb2cbcb" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="24.6.0" rel="70.23.3"/>

<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>

</package>
<package pkgid="23a1114caa747d67e4a135d91a88821bffab05f9fe050feddaac58d2f32a6835" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="24.7.0" rel="70.27.1"/>

<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>

</package>
<package pkgid="d877f3e2d51dc358ed3eb2e834f025ec95bd3b607bfbcfed54cc8702e9af925d" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="31.1.0" rel="70.31.1"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>

</package>
<package pkgid="6225407e17cc0f82d3314959288dc0e09f0d12946df27f1ae809c631e62408de" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="31.2.0" rel="70.35.2"/>

<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>

</package>
<package pkgid="e8d69c59135df219a6123a1eb74d93666665a30e1980c84c0cfd563bca33ddbf" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="31.3.0" rel="70.39.3"/>

<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>

</package>
<package pkgid="1bee2a5e2ce6df2a2a968c7f1709e4b43a7e29c03bf3c90abb43a26e0024f4d5" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="31.4.0" rel="70.43.1"/>

<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="8106278554fc24a1ce9e44d090c783227ec3e1294ff0ffe89ac9b933605b3092" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="31.5.0" rel="70.47.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>

</package>
<package pkgid="af966dd87d1a31478b5a9b4e624cae62c2e2b3f87dd1c7df471e53f3afc2ea2f" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="31.6.0" rel="70.50.2"/>

<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>

</package>
<package pkgid="59a3b35eb6f7d11a3777b760d4bcf1d7538202994a302c0fae38e6110a8a1281" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="31.7.0" rel="70.53.1"/>

<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>

</package>
<package pkgid="2d2a450d20b5fb673497e465ce8d88f330df950c3e165c9c53e7f46f2866f2c8" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="38.1.0" rel="70.57.1"/>

<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>

</package>
<package pkgid="8e04107d70ff4e77289013aa5f4c2af732e844c2ce2b8abb6f2aa184d7cd4430" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="38.2.0" rel="70.60.2"/>

<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>

</package>
<package pkgid="35773b2705a40c1cf97b77d334d5dcd4c167db1fb1c8d71fee24b3ed2952d910" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="38.3.0" rel="70.65.1"/>

<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>

</package>
<package pkgid="44dd7ade1c0adb4cf1337d5d060e1d510c5518346b25c8ae5ebf6c1aec16f7a4" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="38.4.0" rel="70.68.1"/>

<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>

</package>
<package pkgid="4e16a2689117d48f4034e3e27f7b0f21b363adfff56b27e27a004bd9377c5e8c" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="38.5.0" rel="70.71.1"/>

<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>

</package>
<package pkgid="368b4ea2f29aed58e79130e75aa9d87e6f99d3274fe05214c7b1bfed8bb6cbcd" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="38.6.0" rel="70.74.1"/>

<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>

</package>
<package pkgid="917136e1d13f23d134309c2a6407569aa69fca6948de15c711ae15ac77b8cce6" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="38.6.0" rel="70.77.4"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="06200f9cb3245ae165995a504992bfbb11a434bcc1c3a9d0eac52c4236620059" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="38.7.0" rel="70.80.1"/>

<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="8ff7fcedf6c8b46731fa4e981b409b293b91937a929194cdeb9d72f33d42723e" name="MozillaThunderbird-buildsymbols" arch="x86_64">
    <version epoch="0" ver="45.2" rel="70.83.1"/>

<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="wr@rosenauer.org" date="1458907200">- update to Thunderbird 38.7.1
  * disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1459944000">- update to Thunderbird 38.7.2
  * disable Graphite font shaping library (same upstream changelog
    as 38.7.1)</changelog>
<changelog author="wr@rosenauer.org" date="1460808000">- update to Thunderbird 45.0 (boo#969894)
  * Add a Correspondents column combining Sender and Recipient
  * Much better support for XMPP chatrooms and commands
  * Remote content exceptions: Improved options to add exceptions
  * Implement option to always use HTML formatting to prevent
    unexpected format loss when converting messages to plain text
  * Use OpenStreetmap for maps (even allow the user to choose from
    list of map services)
  * Allow spell checking and dictionary selection in the subject line
  * Allow editing of From when composing a message
  * Add dropdown in compose to allow specific setting of font size
  * Return/Enter in composer will now insert a new paragraph by
    default (shift-Enter will insert a line break)
  * Allow copying of name and email address from the message header
    of an email
  * Mail.ru supports OAuth authentication
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library
- remove obsolete patches:
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-arm64-libjpeg-turbo.patch
- added required mozilla platform patches:
  * mozilla-no-stdcxx-check.patch</changelog>
<changelog author="badshah400@gmail.com" date="1461758400">- For openSUSE &gt; 13.2, the build fails for i586 as it goes out of
  memory. Prevent this from happening by disabing parallel build
  in this particular case (i.e. do not pass
  mk_add_options MOZ_MAKE_FLAGS%{?jobs:-j%jobs}).</changelog>
<changelog author="wr@rosenauer.org" date="1462622400">- update to Thunderbird 45.1.0 (boo#977333)
  * MFSA 2016-39/CVE-2016-2806/CVE-2016-2807 (boo#977375, boo#977376)
    Miscellaneous memory safety hazards</changelog>
<changelog author="dimstar@opensuse.org" date="1463054400">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="badshah400@gmail.com" date="1464091200">- Add patches to fix building with gcc &gt;= 6:
  + mozilla-gcc6.patch: patch taken from fedora's git and is
    essentially identical to upstream firefox patch:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-flexible-array-member-in-union.patch: patch taken
    from upstream bmo#1272649.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1464350400">- update to Thunderbird 45.1.1
  * When entering members into a mailing list, the enter key
    dismissed the panel instead of just moving onto the next line
  * Email without HTML elements was sent as HTML, despite
    "Delivery Format: Auto-detect" option
  * Options applied to a template were lost when the template was used
  * Contacts could not be deleted when they were found through a search
  * Views from global searches did not respect
    "mail.threadpane.use_correspondents"</changelog>
<changelog author="agraf@suse.com" date="1465819200">- Fix running on 48bit va aarch64 (bsc#984126)
  - Add patch mozilla-aarch64-48bit-va.patch</changelog>
<changelog author="wr@rosenauer.org" date="1466683200">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#986162)</changelog>
<changelog author="wr@rosenauer.org" date="1466769600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
<changelog author="wr@rosenauer.org" date="1467288000">- update to Thunderbird 45.2 (boo#983549)
  Security fixes:
  * CVE-2016-2818, CVE-2016-2815: Memory safety bugs (MFSA2016-49)
- drop mozilla-flexible-array-member-in-union.patch, upstream</changelog>

</package>
<package pkgid="8ee232873c5aa2748dcfebda3694589c5a5485f84702a3bbf405b74a9ae97a9a" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="24.2.0" rel="70.7.2"/>

<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>

</package>
<package pkgid="9f635fff76d6cf42f26459e97d310f317fff064e1f60401ab455a535a3ee353b" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="24.3.0" rel="70.11.1"/>

<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>

</package>
<package pkgid="ccd6bf74b2531cceb04c57b82c4c443c4c0d71339cce532e06860f4915b04cc7" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="24.4.0" rel="70.15.8"/>

<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>

</package>
<package pkgid="6d93001386e5004bf0fff0cd926ef9b63ec2bc0cd71198b3d947db38a16a5960" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="24.5.0" rel="70.19.3"/>

<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>

</package>
<package pkgid="592f0a7f7cfa69bdf0710be4336c878c055a4e452aef1d74414361264209a35e" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="24.6.0" rel="70.23.3"/>

<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>

</package>
<package pkgid="36f7008134d1d9636e94c5ad0db2b4f0b265e7e7dbcc312f37a279675f05e382" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="24.7.0" rel="70.27.1"/>

<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>

</package>
<package pkgid="62b21294e79f6fe8005e623097f4552b2a5c1c1b13e16a8665a5e75dfc9acf25" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="31.1.0" rel="70.31.1"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>

</package>
<package pkgid="48503356cdc8efae8d8776d87b1440fee81d4b1629710f93c9d954cca68edfce" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="31.2.0" rel="70.35.2"/>

<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>

</package>
<package pkgid="94fd585d27886b258d94c65a58e750b145e6d55656eaee194247b23bcfbba686" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="31.3.0" rel="70.39.3"/>

<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>

</package>
<package pkgid="da888065ea45e908c9f7389b57eb87feb470c7513cb15c9d78269dcd1dd2526c" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="31.4.0" rel="70.43.1"/>

<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="1b4bc61f610fdb7177171045964daff8708360d66dd25b27728bdd127ee68b35" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="31.5.0" rel="70.47.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>

</package>
<package pkgid="b4c2eac4d7a28bae63f0ddba6e083c844cbdfd896e712cf34e9b6d26807d9462" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="31.6.0" rel="70.50.2"/>

<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>

</package>
<package pkgid="e2ed36a771b84f0c576205fadd1b0c81c01e526db40f58ef3f461c3dd831794b" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="31.7.0" rel="70.53.1"/>

<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>

</package>
<package pkgid="336ccf4d1f2fc93611edf633e91277c6d972572ebb38bfa0a3d77f0e3442aba1" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="38.1.0" rel="70.57.1"/>

<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>

</package>
<package pkgid="3e89d195ebc3d3dd3d8f585ac62bdee428c024af7ac0fbce87f70ec056072191" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="38.2.0" rel="70.60.2"/>

<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>

</package>
<package pkgid="3de9e71ae15c5009f42527ce1d756a32003d00c6cb8612d4aa46a1d8464f341a" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="38.3.0" rel="70.65.1"/>

<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>

</package>
<package pkgid="75543c36882a4a13da0b3308e6617d78957a6d59df7fb9d611d192a2b599ca0e" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="38.4.0" rel="70.68.1"/>

<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>

</package>
<package pkgid="34d98352180de9c328193d63645ff9d799f98aeaf919fae329977f5707a0c9fa" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="38.5.0" rel="70.71.1"/>

<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>

</package>
<package pkgid="c1428bf3387e162dcba0bfa960b41ff63c1584255826e013c745770c80500537" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="38.6.0" rel="70.74.1"/>

<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>

</package>
<package pkgid="2281b75e68ea8b78b9fb4224a6c3a0b2915c20ef1c73373963ed3b5686204335" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="38.6.0" rel="70.77.4"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="0d1cbede54052319a9c5701c4857a5e46ca4491b2224bf99b5dc8274d0eb0072" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="38.7.0" rel="70.80.1"/>

<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="90456469e6e82b5058a0cdf5c398c431bffbadedfd110db7fc6c93b2bd12d172" name="MozillaThunderbird-devel" arch="i586">
    <version epoch="0" ver="45.2" rel="70.83.1"/>

<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="wr@rosenauer.org" date="1458907200">- update to Thunderbird 38.7.1
  * disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1459944000">- update to Thunderbird 38.7.2
  * disable Graphite font shaping library (same upstream changelog
    as 38.7.1)</changelog>
<changelog author="wr@rosenauer.org" date="1460808000">- update to Thunderbird 45.0 (boo#969894)
  * Add a Correspondents column combining Sender and Recipient
  * Much better support for XMPP chatrooms and commands
  * Remote content exceptions: Improved options to add exceptions
  * Implement option to always use HTML formatting to prevent
    unexpected format loss when converting messages to plain text
  * Use OpenStreetmap for maps (even allow the user to choose from
    list of map services)
  * Allow spell checking and dictionary selection in the subject line
  * Allow editing of From when composing a message
  * Add dropdown in compose to allow specific setting of font size
  * Return/Enter in composer will now insert a new paragraph by
    default (shift-Enter will insert a line break)
  * Allow copying of name and email address from the message header
    of an email
  * Mail.ru supports OAuth authentication
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library
- remove obsolete patches:
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-arm64-libjpeg-turbo.patch
- added required mozilla platform patches:
  * mozilla-no-stdcxx-check.patch</changelog>
<changelog author="badshah400@gmail.com" date="1461758400">- For openSUSE &gt; 13.2, the build fails for i586 as it goes out of
  memory. Prevent this from happening by disabing parallel build
  in this particular case (i.e. do not pass
  mk_add_options MOZ_MAKE_FLAGS%{?jobs:-j%jobs}).</changelog>
<changelog author="wr@rosenauer.org" date="1462622400">- update to Thunderbird 45.1.0 (boo#977333)
  * MFSA 2016-39/CVE-2016-2806/CVE-2016-2807 (boo#977375, boo#977376)
    Miscellaneous memory safety hazards</changelog>
<changelog author="dimstar@opensuse.org" date="1463054400">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="badshah400@gmail.com" date="1464091200">- Add patches to fix building with gcc &gt;= 6:
  + mozilla-gcc6.patch: patch taken from fedora's git and is
    essentially identical to upstream firefox patch:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-flexible-array-member-in-union.patch: patch taken
    from upstream bmo#1272649.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1464350400">- update to Thunderbird 45.1.1
  * When entering members into a mailing list, the enter key
    dismissed the panel instead of just moving onto the next line
  * Email without HTML elements was sent as HTML, despite
    "Delivery Format: Auto-detect" option
  * Options applied to a template were lost when the template was used
  * Contacts could not be deleted when they were found through a search
  * Views from global searches did not respect
    "mail.threadpane.use_correspondents"</changelog>
<changelog author="agraf@suse.com" date="1465819200">- Fix running on 48bit va aarch64 (bsc#984126)
  - Add patch mozilla-aarch64-48bit-va.patch</changelog>
<changelog author="wr@rosenauer.org" date="1466683200">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#986162)</changelog>
<changelog author="wr@rosenauer.org" date="1466769600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
<changelog author="wr@rosenauer.org" date="1467288000">- update to Thunderbird 45.2 (boo#983549)
  Security fixes:
  * CVE-2016-2818, CVE-2016-2815: Memory safety bugs (MFSA2016-49)
- drop mozilla-flexible-array-member-in-union.patch, upstream</changelog>

</package>
<package pkgid="f6c51764dec685695bd97f49d673b0c9c54d6b1830fccf22f1776102bfa7eb6b" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="24.2.0" rel="70.7.2"/>

<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>

</package>
<package pkgid="95a11eb337d75f78ab61d780b2420f1d71bda0862acce81e604dd0ced9155bbc" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="24.3.0" rel="70.11.1"/>

<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>

</package>
<package pkgid="9f3e3ea609285af4c89b1476e944a2e300c06e3160439c4599213fb089f1c30c" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="24.4.0" rel="70.15.8"/>

<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>

</package>
<package pkgid="65c86bf616b111937ea534c6273cd8c166faf19ed83bffb33989df61e1585a5e" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="24.5.0" rel="70.19.3"/>

<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>

</package>
<package pkgid="04981436ca63d57a9955fde87cec16ccdf4ea8b85e91def00a3352dd23fb35cb" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="24.6.0" rel="70.23.3"/>

<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>

</package>
<package pkgid="47cab48371c6726c1720486b6a64e5439191ced257cac3449a7a60f8f3d0a921" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="24.7.0" rel="70.27.1"/>

<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>

</package>
<package pkgid="239b6becc8502740701ad4cb28fd865127bd70041c4f485240a39ede3362287d" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="31.1.0" rel="70.31.1"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>

</package>
<package pkgid="08387c048e29f734c7b1d98c729d9cdff9b5fe0dce7541e09040d39f0e7587d4" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="31.2.0" rel="70.35.2"/>

<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>

</package>
<package pkgid="0b7865f46450c1b614ac3f999e366e03bd9484676c2c3ec3decfc639a14641e5" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="31.3.0" rel="70.39.3"/>

<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>

</package>
<package pkgid="c963952b617fa02fac689c198f6fd2c03a2b6736a7766a4100345f7d2ec41b56" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="31.4.0" rel="70.43.1"/>

<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="a0849a7f62be78ed13878ebd8f80a1f586d1cd41cde1fe1324b08cc257a0186d" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="31.5.0" rel="70.47.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>

</package>
<package pkgid="3e2c3e6e2ae8e00e320d698d8762447c2a76401a1105cf930bfa9ba284799581" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="31.6.0" rel="70.50.2"/>

<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>

</package>
<package pkgid="ff878b911af1fc5d3ba403b6d5a1aa7c84f7bff52143115727f5a7362182547c" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="31.7.0" rel="70.53.1"/>

<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>

</package>
<package pkgid="8abfdf25c46abbcc77df44a8ce983c506f684e1c58c969676096defb7fc8b85d" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="38.1.0" rel="70.57.1"/>

<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>

</package>
<package pkgid="02f1b1c80e32deb6b7ab67ef69524e6e51f9760081a200f63c1cdd9edc72b857" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="38.2.0" rel="70.60.2"/>

<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>

</package>
<package pkgid="46bf1bf9da15eb207ac6aae47b147e66f7c3d446cfa874d884146a9decac09db" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="38.3.0" rel="70.65.1"/>

<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>

</package>
<package pkgid="73e2c217c45a760c295afa07c1ad1d79c2d8e83158c6cc899d6520cc30703b48" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="38.4.0" rel="70.68.1"/>

<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>

</package>
<package pkgid="697694de76be826a853b2a547f7ee728d7fa4c2e970bfcb474296bf31c8bb97e" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="38.5.0" rel="70.71.1"/>

<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>

</package>
<package pkgid="6d64b24a2fab8939a18b0b00119df9bb1eb59a19885141077985ae871c0c1b87" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="38.6.0" rel="70.74.1"/>

<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>

</package>
<package pkgid="bfaa6730f79cce9235e3ac68190b5a64e148e1f7f9d0f5b2deda297dbe7fa554" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="38.6.0" rel="70.77.4"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="556af77a9f0d4950093a90916c5badfef5a0a5a233de23bc3c213b03c928acc2" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="38.7.0" rel="70.80.1"/>

<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="16b2af79b4284cb9dbca8c1646fa01b121087a93f13b99c4cafdeae532b3971c" name="MozillaThunderbird-devel" arch="x86_64">
    <version epoch="0" ver="45.2" rel="70.83.1"/>

<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="wr@rosenauer.org" date="1458907200">- update to Thunderbird 38.7.1
  * disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1459944000">- update to Thunderbird 38.7.2
  * disable Graphite font shaping library (same upstream changelog
    as 38.7.1)</changelog>
<changelog author="wr@rosenauer.org" date="1460808000">- update to Thunderbird 45.0 (boo#969894)
  * Add a Correspondents column combining Sender and Recipient
  * Much better support for XMPP chatrooms and commands
  * Remote content exceptions: Improved options to add exceptions
  * Implement option to always use HTML formatting to prevent
    unexpected format loss when converting messages to plain text
  * Use OpenStreetmap for maps (even allow the user to choose from
    list of map services)
  * Allow spell checking and dictionary selection in the subject line
  * Allow editing of From when composing a message
  * Add dropdown in compose to allow specific setting of font size
  * Return/Enter in composer will now insert a new paragraph by
    default (shift-Enter will insert a line break)
  * Allow copying of name and email address from the message header
    of an email
  * Mail.ru supports OAuth authentication
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library
- remove obsolete patches:
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-arm64-libjpeg-turbo.patch
- added required mozilla platform patches:
  * mozilla-no-stdcxx-check.patch</changelog>
<changelog author="badshah400@gmail.com" date="1461758400">- For openSUSE &gt; 13.2, the build fails for i586 as it goes out of
  memory. Prevent this from happening by disabing parallel build
  in this particular case (i.e. do not pass
  mk_add_options MOZ_MAKE_FLAGS%{?jobs:-j%jobs}).</changelog>
<changelog author="wr@rosenauer.org" date="1462622400">- update to Thunderbird 45.1.0 (boo#977333)
  * MFSA 2016-39/CVE-2016-2806/CVE-2016-2807 (boo#977375, boo#977376)
    Miscellaneous memory safety hazards</changelog>
<changelog author="dimstar@opensuse.org" date="1463054400">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="badshah400@gmail.com" date="1464091200">- Add patches to fix building with gcc &gt;= 6:
  + mozilla-gcc6.patch: patch taken from fedora's git and is
    essentially identical to upstream firefox patch:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-flexible-array-member-in-union.patch: patch taken
    from upstream bmo#1272649.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1464350400">- update to Thunderbird 45.1.1
  * When entering members into a mailing list, the enter key
    dismissed the panel instead of just moving onto the next line
  * Email without HTML elements was sent as HTML, despite
    "Delivery Format: Auto-detect" option
  * Options applied to a template were lost when the template was used
  * Contacts could not be deleted when they were found through a search
  * Views from global searches did not respect
    "mail.threadpane.use_correspondents"</changelog>
<changelog author="agraf@suse.com" date="1465819200">- Fix running on 48bit va aarch64 (bsc#984126)
  - Add patch mozilla-aarch64-48bit-va.patch</changelog>
<changelog author="wr@rosenauer.org" date="1466683200">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#986162)</changelog>
<changelog author="wr@rosenauer.org" date="1466769600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
<changelog author="wr@rosenauer.org" date="1467288000">- update to Thunderbird 45.2 (boo#983549)
  Security fixes:
  * CVE-2016-2818, CVE-2016-2815: Memory safety bugs (MFSA2016-49)
- drop mozilla-flexible-array-member-in-union.patch, upstream</changelog>

</package>
<package pkgid="a96c23944310b6f3e32c66341d387ba4f27aa9c292e1bbe3fb310fc474c3b0cf" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="24.2.0" rel="70.7.2"/>

<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>

</package>
<package pkgid="b82b0c047b84d03bd9499287e590ddaa7b70c46d437c117f73c8bfd05d2506b0" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="24.3.0" rel="70.11.1"/>

<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>

</package>
<package pkgid="4244e8e01a23a1d37a752cb55359e9c5c97e06126cba0a358ee430b302559148" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="24.4.0" rel="70.15.8"/>

<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>

</package>
<package pkgid="6d2ff6a96f4ef27d2624e6f7383a59e77dff48f395eea7acc2e780a9acf13c67" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="24.5.0" rel="70.19.3"/>

<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>

</package>
<package pkgid="6546538267bf6760200089a7963c9025dcaf0dbd95213ef6f8fe6502aaa6ab7e" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="24.6.0" rel="70.23.3"/>

<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>

</package>
<package pkgid="2f7871deb7607a1b169d0ebebdebd6876783d279253b5165d570c63ba690092e" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="24.7.0" rel="70.27.1"/>

<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>

</package>
<package pkgid="6eaf841a7fb89e9a1bd5106e25e7efd265906b05f9592561dc765468cfc21dbe" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="31.1.0" rel="70.31.1"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>

</package>
<package pkgid="d64eb8d95e0809be549510f22a97ecb4d96e0246272ba12f0cdb60273376bc37" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="31.2.0" rel="70.35.2"/>

<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>

</package>
<package pkgid="6cc845fff1dd26001b75d870cc6e11cc392618379fe6176946fa5abad7101231" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="31.3.0" rel="70.39.3"/>

<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>

</package>
<package pkgid="033a72a966887c9dcdbec00d9442e1c5a088ae4d70f83b4ef17db0bb8d585c9c" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="31.4.0" rel="70.43.1"/>

<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="1c3adb49c549fd73f63dbfa177528ddadcc04e724f915bb539b85cd935261ed6" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="31.5.0" rel="70.47.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>

</package>
<package pkgid="ddc402c19ea846b8132fc255b621635da63fe8c51b61ba757e27d72d82f7bedb" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="31.6.0" rel="70.50.2"/>

<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>

</package>
<package pkgid="e067abc012a71b27b3d375f03f5c4e0fe09d379ea957cb8a6ce467bc58fcb5be" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="31.7.0" rel="70.53.1"/>

<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>

</package>
<package pkgid="b52104f88773eeaea9b822a4aa1fced8a84a517ac1ab58f47d212a5b144b02b5" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="38.1.0" rel="70.57.1"/>

<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>

</package>
<package pkgid="7ba4b8b038be158b3f52ba3ed570ca7291ddb9688728741a39ba3c5e6255c8e7" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="38.2.0" rel="70.60.2"/>

<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>

</package>
<package pkgid="301121de0259ed58741cd2304ba534eb31dfef9c5fe882168f8ec57f22069a00" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="38.3.0" rel="70.65.1"/>

<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>

</package>
<package pkgid="17ff34cca35d609ed2c349fdd1575e957b4630bd1e6453d5d60bd97e72881104" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="38.4.0" rel="70.68.1"/>

<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>

</package>
<package pkgid="a37b6959427e8328f866ca099c21374bf71b683b61d26d6b20806e5db5e817cf" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="38.5.0" rel="70.71.1"/>

<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>

</package>
<package pkgid="09c603d104a5af97271a9a8b59fce8e6a3c3e9ec31c878e1967b4a0eb0ed0a93" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="38.6.0" rel="70.74.1"/>

<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>

</package>
<package pkgid="61a67a3074d9d4fdf7c11357aaca8a852689073771049d0006e42df10a3eb43f" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="38.6.0" rel="70.77.4"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="6eddc6ba9c194f875cebf982be884e66dc7742ee7bd8473d5667ab8148088fef" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="38.7.0" rel="70.80.1"/>

<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="6a9acfa8cf8e19f15c369109b31bfe6fa31106fbf9d0a627f1f088e95c64810d" name="MozillaThunderbird-translations-common" arch="i586">
    <version epoch="0" ver="45.2" rel="70.83.1"/>

<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="wr@rosenauer.org" date="1458907200">- update to Thunderbird 38.7.1
  * disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1459944000">- update to Thunderbird 38.7.2
  * disable Graphite font shaping library (same upstream changelog
    as 38.7.1)</changelog>
<changelog author="wr@rosenauer.org" date="1460808000">- update to Thunderbird 45.0 (boo#969894)
  * Add a Correspondents column combining Sender and Recipient
  * Much better support for XMPP chatrooms and commands
  * Remote content exceptions: Improved options to add exceptions
  * Implement option to always use HTML formatting to prevent
    unexpected format loss when converting messages to plain text
  * Use OpenStreetmap for maps (even allow the user to choose from
    list of map services)
  * Allow spell checking and dictionary selection in the subject line
  * Allow editing of From when composing a message
  * Add dropdown in compose to allow specific setting of font size
  * Return/Enter in composer will now insert a new paragraph by
    default (shift-Enter will insert a line break)
  * Allow copying of name and email address from the message header
    of an email
  * Mail.ru supports OAuth authentication
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library
- remove obsolete patches:
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-arm64-libjpeg-turbo.patch
- added required mozilla platform patches:
  * mozilla-no-stdcxx-check.patch</changelog>
<changelog author="badshah400@gmail.com" date="1461758400">- For openSUSE &gt; 13.2, the build fails for i586 as it goes out of
  memory. Prevent this from happening by disabing parallel build
  in this particular case (i.e. do not pass
  mk_add_options MOZ_MAKE_FLAGS%{?jobs:-j%jobs}).</changelog>
<changelog author="wr@rosenauer.org" date="1462622400">- update to Thunderbird 45.1.0 (boo#977333)
  * MFSA 2016-39/CVE-2016-2806/CVE-2016-2807 (boo#977375, boo#977376)
    Miscellaneous memory safety hazards</changelog>
<changelog author="dimstar@opensuse.org" date="1463054400">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="badshah400@gmail.com" date="1464091200">- Add patches to fix building with gcc &gt;= 6:
  + mozilla-gcc6.patch: patch taken from fedora's git and is
    essentially identical to upstream firefox patch:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-flexible-array-member-in-union.patch: patch taken
    from upstream bmo#1272649.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1464350400">- update to Thunderbird 45.1.1
  * When entering members into a mailing list, the enter key
    dismissed the panel instead of just moving onto the next line
  * Email without HTML elements was sent as HTML, despite
    "Delivery Format: Auto-detect" option
  * Options applied to a template were lost when the template was used
  * Contacts could not be deleted when they were found through a search
  * Views from global searches did not respect
    "mail.threadpane.use_correspondents"</changelog>
<changelog author="agraf@suse.com" date="1465819200">- Fix running on 48bit va aarch64 (bsc#984126)
  - Add patch mozilla-aarch64-48bit-va.patch</changelog>
<changelog author="wr@rosenauer.org" date="1466683200">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#986162)</changelog>
<changelog author="wr@rosenauer.org" date="1466769600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
<changelog author="wr@rosenauer.org" date="1467288000">- update to Thunderbird 45.2 (boo#983549)
  Security fixes:
  * CVE-2016-2818, CVE-2016-2815: Memory safety bugs (MFSA2016-49)
- drop mozilla-flexible-array-member-in-union.patch, upstream</changelog>

</package>
<package pkgid="6d1044c4aaf501fba97e1bc8318d8b8424af507f446bb93168e86453922139b3" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="24.2.0" rel="70.7.2"/>

<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>

</package>
<package pkgid="ce72ab7de026be6ebbec630cf1c1dc59655d0426bc6ad0c3736c6e44fa90a8fe" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="24.3.0" rel="70.11.1"/>

<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>

</package>
<package pkgid="84d7655c0b37428370257a35abe90e71aa5289bce1dcf524838e9b588131f923" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="24.4.0" rel="70.15.8"/>

<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>

</package>
<package pkgid="68f320899faf65898f4e16eacdd7541145077afb2354283ca17069aef83e1c7e" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="24.5.0" rel="70.19.3"/>

<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>

</package>
<package pkgid="4aa786b578b113bea22e56fb7a0917efb2a2d8dd1d1e70a18c76cffdc37a97b6" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="24.6.0" rel="70.23.3"/>

<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>

</package>
<package pkgid="1fa1cfe9811609a07ff26205a589fd3beeb6649f1baccf01ac4fe84fb6d3afbe" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="24.7.0" rel="70.27.1"/>

<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>

</package>
<package pkgid="51fffb381b36d9645ad8570cffb47a6d90f461eabcfad128e54c3bd45c2bdce3" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="31.1.0" rel="70.31.1"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>

</package>
<package pkgid="140d3a6676c8a9df8b2cdb4339479f6ee61b5d6d68e51d3fe650c29d5eb719dc" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="31.2.0" rel="70.35.2"/>

<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>

</package>
<package pkgid="b7f63649394611c7c99839be260c6399a78a3fbe18db9f967dac6a80bab572c1" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="31.3.0" rel="70.39.3"/>

<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>

</package>
<package pkgid="bf23de541d42c4bf050e4eb0c04f44cb8597eaa9efda94ab6eb8df86c38b9f9d" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="31.4.0" rel="70.43.1"/>

<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="1d2d8f353a16f3bb339a0d6ae758129ad4973a7151e6b2b221852c597234f3c3" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="31.5.0" rel="70.47.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>

</package>
<package pkgid="5aff4102e6acdc60e6745db31fa5cb0d0236803c4a4cc5212094330673c328a2" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="31.6.0" rel="70.50.2"/>

<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>

</package>
<package pkgid="d12d6233bf5280ae40c19e3be97bd73efaba3e1d0b4c1dce5e7a5e1a6e9a6fc2" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="31.7.0" rel="70.53.1"/>

<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>

</package>
<package pkgid="c7f53969a48ea7b60970a013387ac4c535311ddf0b19ac745ae86cd2834733b5" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="38.1.0" rel="70.57.1"/>

<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>

</package>
<package pkgid="6cd20ce02240f3782f0ed581310e136ced716c1c1cad27798208528147930e80" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="38.2.0" rel="70.60.2"/>

<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>

</package>
<package pkgid="cd1f8c816cc7242e5687b96d0f622351f3f045c531d04e1022e77ba9b56e471d" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="38.3.0" rel="70.65.1"/>

<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>

</package>
<package pkgid="392d718e8205c19b61a30267c519807d5c004e921097a0eb57a644db2e42d4f0" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="38.4.0" rel="70.68.1"/>

<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>

</package>
<package pkgid="4ee53edb6672c5e7ab16bf6cb8ec6217e870e5709f10a1397e2dec029b30d7cc" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="38.5.0" rel="70.71.1"/>

<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>

</package>
<package pkgid="1ea75486327e714db86e282119ed2b021db1d1100cfaac35089b189afcc353a7" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="38.6.0" rel="70.74.1"/>

<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>

</package>
<package pkgid="5445ed26aa8a0667e2753ff11f0563b60b92ca6671793c7606a09c4bdf48a495" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="38.6.0" rel="70.77.4"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="9c318ee623daee96669480a262d543065fb0995682135f05e267d608cf6cdfc4" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="38.7.0" rel="70.80.1"/>

<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="a6bd93500f462c6ff677c1f7232580bff675ebffde1c7008b536d39ebca9380f" name="MozillaThunderbird-translations-common" arch="x86_64">
    <version epoch="0" ver="45.2" rel="70.83.1"/>

<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="wr@rosenauer.org" date="1458907200">- update to Thunderbird 38.7.1
  * disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1459944000">- update to Thunderbird 38.7.2
  * disable Graphite font shaping library (same upstream changelog
    as 38.7.1)</changelog>
<changelog author="wr@rosenauer.org" date="1460808000">- update to Thunderbird 45.0 (boo#969894)
  * Add a Correspondents column combining Sender and Recipient
  * Much better support for XMPP chatrooms and commands
  * Remote content exceptions: Improved options to add exceptions
  * Implement option to always use HTML formatting to prevent
    unexpected format loss when converting messages to plain text
  * Use OpenStreetmap for maps (even allow the user to choose from
    list of map services)
  * Allow spell checking and dictionary selection in the subject line
  * Allow editing of From when composing a message
  * Add dropdown in compose to allow specific setting of font size
  * Return/Enter in composer will now insert a new paragraph by
    default (shift-Enter will insert a line break)
  * Allow copying of name and email address from the message header
    of an email
  * Mail.ru supports OAuth authentication
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library
- remove obsolete patches:
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-arm64-libjpeg-turbo.patch
- added required mozilla platform patches:
  * mozilla-no-stdcxx-check.patch</changelog>
<changelog author="badshah400@gmail.com" date="1461758400">- For openSUSE &gt; 13.2, the build fails for i586 as it goes out of
  memory. Prevent this from happening by disabing parallel build
  in this particular case (i.e. do not pass
  mk_add_options MOZ_MAKE_FLAGS%{?jobs:-j%jobs}).</changelog>
<changelog author="wr@rosenauer.org" date="1462622400">- update to Thunderbird 45.1.0 (boo#977333)
  * MFSA 2016-39/CVE-2016-2806/CVE-2016-2807 (boo#977375, boo#977376)
    Miscellaneous memory safety hazards</changelog>
<changelog author="dimstar@opensuse.org" date="1463054400">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="badshah400@gmail.com" date="1464091200">- Add patches to fix building with gcc &gt;= 6:
  + mozilla-gcc6.patch: patch taken from fedora's git and is
    essentially identical to upstream firefox patch:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-flexible-array-member-in-union.patch: patch taken
    from upstream bmo#1272649.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1464350400">- update to Thunderbird 45.1.1
  * When entering members into a mailing list, the enter key
    dismissed the panel instead of just moving onto the next line
  * Email without HTML elements was sent as HTML, despite
    "Delivery Format: Auto-detect" option
  * Options applied to a template were lost when the template was used
  * Contacts could not be deleted when they were found through a search
  * Views from global searches did not respect
    "mail.threadpane.use_correspondents"</changelog>
<changelog author="agraf@suse.com" date="1465819200">- Fix running on 48bit va aarch64 (bsc#984126)
  - Add patch mozilla-aarch64-48bit-va.patch</changelog>
<changelog author="wr@rosenauer.org" date="1466683200">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#986162)</changelog>
<changelog author="wr@rosenauer.org" date="1466769600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
<changelog author="wr@rosenauer.org" date="1467288000">- update to Thunderbird 45.2 (boo#983549)
  Security fixes:
  * CVE-2016-2818, CVE-2016-2815: Memory safety bugs (MFSA2016-49)
- drop mozilla-flexible-array-member-in-union.patch, upstream</changelog>

</package>
<package pkgid="8c0fccdbaea6bb643cb609f8f0792313b0c7306c278db0aa11f426868c079ce8" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="24.2.0" rel="70.7.2"/>

<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>

</package>
<package pkgid="a903491217c87a40ce652f9974d3263b160c004aa69b0ce5e87dfacea3df8266" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="24.3.0" rel="70.11.1"/>

<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>

</package>
<package pkgid="8b933159859aefb7d39c74261c56f78b10767c925fd83393c46cc6674be7d3a0" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="24.4.0" rel="70.15.8"/>

<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>

</package>
<package pkgid="da20305ca853729a720d400ac59ef706a32cb4d457c49b0ce9ae5cda707644d1" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="24.5.0" rel="70.19.3"/>

<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>

</package>
<package pkgid="812fc87a03a27bb015db923b86501111c13ff960671da573afb7504db71e9cc7" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="24.6.0" rel="70.23.3"/>

<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>

</package>
<package pkgid="a5d8c95e3061293d1ff25c07bb0d2075bf425dc260e746584e127b495240e082" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="24.7.0" rel="70.27.1"/>

<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>

</package>
<package pkgid="77b3e2007ae3de32b70df42977046005305de455610bca141fc6e4a560eb2261" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="31.1.0" rel="70.31.1"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>

</package>
<package pkgid="7cb381bc8c761e9e6f26b7a83dbb9659b0f375db4a58a14c72ec734be4d4a9bb" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="31.2.0" rel="70.35.2"/>

<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>

</package>
<package pkgid="26f10fd501ecf20ad2e14d3dbadfa9119f1e4625081052db2af4833d96f4859e" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="31.3.0" rel="70.39.3"/>

<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>

</package>
<package pkgid="a2ad7c32052d8bec91d7fe301da7e616078c341d7e8182cc59fed2171d8278b4" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="31.4.0" rel="70.43.1"/>

<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="c8d4241592731dbd0dc7b775b611db25b8c6df744371a913bfbd7b97f228408c" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="31.5.0" rel="70.47.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>

</package>
<package pkgid="cefdaee2c2459965839026f58b4a998bc71de4d75880e9b3a0bbcc93f2f0b1b4" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="31.6.0" rel="70.50.2"/>

<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>

</package>
<package pkgid="f5bb898321c7a1016a3f9844753fe221de32dd550d6d6bbbaff950c7c1fa43e1" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="31.7.0" rel="70.53.1"/>

<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>

</package>
<package pkgid="9b8e997dce1405bf8169082f11d16bdd7f79def37b4bbcc890205f1dcd79385f" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="38.1.0" rel="70.57.1"/>

<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>

</package>
<package pkgid="b59dc0a64dd6e6cf049957ed057e75d2a96a466b680162cec5ef295a5cd4f9bb" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="38.2.0" rel="70.60.2"/>

<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>

</package>
<package pkgid="f2c12a95add48d4e5b1dc4c00d0a108b1c7b4d394e7772ac762abe207d966084" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="38.3.0" rel="70.65.1"/>

<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>

</package>
<package pkgid="4c3120584cbc656daa6a48e64c2bdbdf74d4209765663504eb8ecd05f4f5202b" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="38.4.0" rel="70.68.1"/>

<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>

</package>
<package pkgid="b26165c54fce836de063d1a2362b443019d3caebe8c1a45a2e599bea370f426a" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="38.5.0" rel="70.71.1"/>

<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>

</package>
<package pkgid="49b14660f11f6f26c4ee916cf24aa6d8e22373b003a0463f20ab281463e04f72" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="38.6.0" rel="70.74.1"/>

<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>

</package>
<package pkgid="3339256341d2f4738c81fbf858b208330fc05d927bc74f7d921cddc641f754dd" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="38.6.0" rel="70.77.4"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="6de9bcd6c0b6d85bd936b0e73a2ad64f9b30e72692470b14fa48824b79ebe50f" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="38.7.0" rel="70.80.1"/>

<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="08e1606c0756f8155f4da23d1fe49d6e92f619e56df659c45006760292bcf7d5" name="MozillaThunderbird-translations-other" arch="i586">
    <version epoch="0" ver="45.2" rel="70.83.1"/>

<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="wr@rosenauer.org" date="1458907200">- update to Thunderbird 38.7.1
  * disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1459944000">- update to Thunderbird 38.7.2
  * disable Graphite font shaping library (same upstream changelog
    as 38.7.1)</changelog>
<changelog author="wr@rosenauer.org" date="1460808000">- update to Thunderbird 45.0 (boo#969894)
  * Add a Correspondents column combining Sender and Recipient
  * Much better support for XMPP chatrooms and commands
  * Remote content exceptions: Improved options to add exceptions
  * Implement option to always use HTML formatting to prevent
    unexpected format loss when converting messages to plain text
  * Use OpenStreetmap for maps (even allow the user to choose from
    list of map services)
  * Allow spell checking and dictionary selection in the subject line
  * Allow editing of From when composing a message
  * Add dropdown in compose to allow specific setting of font size
  * Return/Enter in composer will now insert a new paragraph by
    default (shift-Enter will insert a line break)
  * Allow copying of name and email address from the message header
    of an email
  * Mail.ru supports OAuth authentication
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library
- remove obsolete patches:
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-arm64-libjpeg-turbo.patch
- added required mozilla platform patches:
  * mozilla-no-stdcxx-check.patch</changelog>
<changelog author="badshah400@gmail.com" date="1461758400">- For openSUSE &gt; 13.2, the build fails for i586 as it goes out of
  memory. Prevent this from happening by disabing parallel build
  in this particular case (i.e. do not pass
  mk_add_options MOZ_MAKE_FLAGS%{?jobs:-j%jobs}).</changelog>
<changelog author="wr@rosenauer.org" date="1462622400">- update to Thunderbird 45.1.0 (boo#977333)
  * MFSA 2016-39/CVE-2016-2806/CVE-2016-2807 (boo#977375, boo#977376)
    Miscellaneous memory safety hazards</changelog>
<changelog author="dimstar@opensuse.org" date="1463054400">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="badshah400@gmail.com" date="1464091200">- Add patches to fix building with gcc &gt;= 6:
  + mozilla-gcc6.patch: patch taken from fedora's git and is
    essentially identical to upstream firefox patch:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-flexible-array-member-in-union.patch: patch taken
    from upstream bmo#1272649.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1464350400">- update to Thunderbird 45.1.1
  * When entering members into a mailing list, the enter key
    dismissed the panel instead of just moving onto the next line
  * Email without HTML elements was sent as HTML, despite
    "Delivery Format: Auto-detect" option
  * Options applied to a template were lost when the template was used
  * Contacts could not be deleted when they were found through a search
  * Views from global searches did not respect
    "mail.threadpane.use_correspondents"</changelog>
<changelog author="agraf@suse.com" date="1465819200">- Fix running on 48bit va aarch64 (bsc#984126)
  - Add patch mozilla-aarch64-48bit-va.patch</changelog>
<changelog author="wr@rosenauer.org" date="1466683200">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#986162)</changelog>
<changelog author="wr@rosenauer.org" date="1466769600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
<changelog author="wr@rosenauer.org" date="1467288000">- update to Thunderbird 45.2 (boo#983549)
  Security fixes:
  * CVE-2016-2818, CVE-2016-2815: Memory safety bugs (MFSA2016-49)
- drop mozilla-flexible-array-member-in-union.patch, upstream</changelog>

</package>
<package pkgid="6c53ffdc939cbd067d9462c55c1050a7e515c13b559da2215f6149b1ec0c04b0" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="24.2.0" rel="70.7.2"/>

<changelog author="wr@rosenauer.org" date="1349697600">- update to Thunderbird 16.0 (bnc#783533)
  * MFSA 2012-74/CVE-2012-3982/CVE-2012-3983
    Miscellaneous memory safety hazards
  * MFSA 2012-75/CVE-2012-3984 (bmo#575294)
    select element persistance allows for attacks
  * MFSA 2012-76/CVE-2012-3985 (bmo#655649)
    Continued access to initial origin after setting document.domain
  * MFSA 2012-77/CVE-2012-3986 (bmo#775868)
    Some DOMWindowUtils methods bypass security checks
  * MFSA 2012-79/CVE-2012-3988 (bmo#725770)
    DOS and crash with full screen and history navigation
  * MFSA 2012-80/CVE-2012-3989 (bmo#783867)
    Crash with invalid cast when using instanceof operator
  * MFSA 2012-81/CVE-2012-3991 (bmo#783260)
    GetProperty function can bypass security checks
  * MFSA 2012-82/CVE-2012-3994 (bmo#765527)
    top object and location property accessible by plugins
  * MFSA 2012-83/CVE-2012-3993/CVE-2012-4184 (bmo#768101, bmo#780370)
    Chrome Object Wrapper (COW) does not disallow acces to privileged
    functions or properties
  * MFSA 2012-84/CVE-2012-3992 (bmo#775009)
    Spoofing and script injection through location.hash
  * MFSA 2012-85/CVE-2012-3995/CVE-2012-4179/CVE-2012-4180/
    CVE-2012-4181/CVE-2012-4182/CVE-2012-4183
    Use-after-free, buffer overflow, and out of bounds read issues
    found using Address Sanitizer
  * MFSA 2012-86/CVE-2012-4185/CVE-2012-4186/CVE-2012-4187/
    CVE-2012-4188
    Heap memory corruption issues found using Address Sanitizer
  * MFSA 2012-87/CVE-2012-3990 (bmo#787704)
    Use-after-free in the IME State Manager
- update Enigmail to version 1.4.5</changelog>
<changelog author="wr@rosenauer.org" date="1349956800">- update to Thunderbird 16.0.1 (bnc#783533)
  * MFSA 2012-88/CVE-2012-4191 (bmo#798045)
    Miscellaneous memory safety hazards
  * MFSA 2012-89/CVE-2012-4192/CVE-2012-4193 (bmo#799952, bmo#720619)
    defaultValue security checks not applied</changelog>
<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>

</package>
<package pkgid="eb365aee18e91c53b9953755eafd8300f3781190dd1b46ed4c032be0b1e1cb3a" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="24.3.0" rel="70.11.1"/>

<changelog author="wr@rosenauer.org" date="1351339200">- update to Thunderbird 16.0.2 (bnc#786522)
  * MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196
    (bmo#800666, bmo#793121, bmo#802557)
    Fixes for Location object issues</changelog>
<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>

</package>
<package pkgid="c525125b4b05891c213dd25944b5a3569057cc62945014bd37ef11438ecefd98" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="24.4.0" rel="70.15.8"/>

<changelog author="wr@rosenauer.org" date="1353412800">- update to Thunderbird 17.0 (bnc#790140)
  * MFSA 2012-91/CVE-2012-5842/CVE-2012-5843
    Miscellaneous memory safety hazards
  * MFSA 2012-92/CVE-2012-4202 (bmo#758200)
    Buffer overflow while rendering GIF images
  * MFSA 2012-93/CVE-2012-4201 (bmo#747607)
    evalInSanbox location context incorrectly applied
  * MFSA 2012-94/CVE-2012-5836 (bmo#792857)
    Crash when combining SVG text on path with CSS
  * MFSA 2012-96/CVE-2012-4204 (bmo#778603)
    Memory corruption in str_unescape
  * MFSA 2012-97/CVE-2012-4205 (bmo#779821)
    XMLHttpRequest inherits incorrect principal within sandbox
  * MFSA 2012-99/CVE-2012-4208 (bmo#798264)
    XrayWrappers exposes chrome-only properties when not in chrome
    compartment
  * MFSA 2012-100/CVE-2012-5841 (bmo#805807)
    Improper security filtering for cross-origin wrappers
  * MFSA 2012-101/CVE-2012-4207 (bmo#801681)
    Improper character decoding in HZ-GB-2312 charset
  * MFSA 2012-102/CVE-2012-5837 (bmo#800363)
    Script entered into Developer Toolbar runs with chrome privileges
  * MFSA 2012-103/CVE-2012-4209 (bmo#792405)
    Frames can shadow top.location
  * MFSA 2012-105/CVE-2012-4214/CVE-2012-4215/CVE-2012-4216/
    CVE-2012-5829/CVE-2012-5839/CVE-2012-5840/CVE-2012-4212/
    CVE-2012-4213/CVE-2012-4217/CVE-2012-4218
    Use-after-free and buffer overflow issues found using Address
    Sanitizer
  * MFSA 2012-106/CVE-2012-5830/CVE-2012-5833/CVE-2012-5835/CVE-2012-5838
    Use-after-free, buffer overflow, and memory corruption issues
    found using Address Sanitizer
- rebased patches
- disabled WebRTC since build is broken (bmo#776877)
- update Enigmail to 1.4.6</changelog>
<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>

</package>
<package pkgid="fba4459a15dc9c5384d040e6f42619d3af54c1aeaace04b71e83a5548c42b1ed" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="24.5.0" rel="70.19.3"/>

<changelog author="wr@rosenauer.org" date="1353931200">- fix KDE integration for file dialogs
- fix some rpmlint warnings (mkdir.done files)
- build on SLE11
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch</changelog>
<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>

</package>
<package pkgid="ed4a692812e439f8471d9c012169e2305bb5d21019ec43da9fb42b8cb06821da" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="24.6.0" rel="70.23.3"/>

<changelog author="wr@rosenauer.org" date="1357387200">- update to Thunderbird 17.0.2 (bnc#796895)
  * MFSA 2013-01/CVE-2013-0749/CVE-2013-0769/CVE-2013-0770
    Miscellaneous memory safety hazards
  * MFSA 2013-02/CVE-2013-0760/CVE-2013-0762/CVE-2013-0766/CVE-2013-0767
    CVE-2013-0761/CVE-2013-0763/CVE-2013-0771/CVE-2012-5829
    Use-after-free and buffer overflow issues found using Address Sanitizer
  * MFSA 2013-03/CVE-2013-0768 (bmo#815795)
    Buffer Overflow in Canvas
  * MFSA 2013-04/CVE-2012-0759 (bmo#802026)
    URL spoofing in addressbar during page loads
  * MFSA 2013-05/CVE-2013-0744 (bmo#814713)
    Use-after-free when displaying table with many columns and column groups
  * MFSA 2013-07/CVE-2013-0764 (bmo#804237)
    Crash due to handling of SSL on threads
  * MFSA 2013-08/CVE-2013-0745 (bmo#794158)
    AutoWrapperChanger fails to keep objects alive during garbage collection
  * MFSA 2013-09/CVE-2013-0746 (bmo#816842)
    Compartment mismatch with quickstubs returned values
  * MFSA 2013-10/CVE-2013-0747 (bmo#733305)
    Event manipulation in plugin handler to bypass same-origin policy
  * MFSA 2013-11/CVE-2013-0748 (bmo#806031)
    Address space layout leaked in XBL objects
  * MFSA 2013-12/CVE-2013-0750 (bmo#805121)
    Buffer overflow in Javascript string concatenation
  * MFSA 2013-13/CVE-2013-0752 (bmo#805024)
    Memory corruption in XBL with XML bindings containing SVG
  * MFSA 2013-14/CVE-2013-0757 (bmo#813901)
    Chrome Object Wrapper (COW) bypass through changing prototype
  * MFSA 2013-15/CVE-2013-0758 (bmo#813906)
    Privilege escalation through plugin objects
  * MFSA 2013-16/CVE-2013-0753 (bmo#814001)
    Use-after-free in serializeToStream
  * MFSA 2013-17/CVE-2013-0754 (bmo#814026)
    Use-after-free in ListenerManager
  * MFSA 2013-18/CVE-2013-0755 (bmo#814027)
    Use-after-free in Vibrate
  * MFSA 2013-19/CVE-2013-0756 (bmo#814029)
    Use-after-free in Javascript Proxy objects
- requires NSS 3.14.1 (MFSA 2013-20, CVE-2013-0743)
- update Enigmail to 1.5.0</changelog>
<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>

</package>
<package pkgid="767805845489091a849ffd65c4ed750448ae4fd6646d2aea4f6724c54b2d739b" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="24.7.0" rel="70.27.1"/>

<changelog author="wr@rosenauer.org" date="1360584000">- update Enigmail to 1.5.1
  * The release fixes the regressions found in the past few
    weeks</changelog>
<changelog author="wr@rosenauer.org" date="1361102400">- update to Thunderbird 17.0.3 (bnc#804248)
  * MFSA 2013-21/CVE-2013-0783
    Miscellaneous memory safety hazards
  * MFSA 2013-24/CVE-2013-0773 (bmo#809652)
    Web content bypass of COW and SOW security wrappers
  * MFSA 2013-25/CVE-2013-0774 (bmo#827193)
    Privacy leak in JavaScript Workers
  * MFSA 2013-26/CVE-2013-0775 (bmo#831095)
    Use-after-free in nsImageLoadingContent
  * MFSA 2013-27/CVE-2013-0776 (bmo#796475)
    Phishing on HTTPS connection through malicious proxy
  * MFSA 2013-28/CVE-2013-0780/CVE-2013-0782
    Use-after-free, out of bounds read, and buffer overflow issues
    found using Address Sanitizer</changelog>
<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>

</package>
<package pkgid="04379a7480502960570923b00bd3a600e30da9b2286f065a43792d3af00b6124" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="31.1.0" rel="70.31.1"/>

<changelog author="wr@rosenauer.org" date="1362744000">- update to Thunderbird 17.0.4 (bnc#808243)
  * MFSA 2013-29/CVE-2013-0787 (bmo#848644)
    Use-after-free in HTML Editor</changelog>
<changelog author="wr@rosenauer.org" date="1364558400">- update to Thunderbird 17.0.5 (bnc#813026)
  * requires NSPR 4.9.5 and NSS 3.14.3
  * MFSA 2013-30/CVE-2013-0788/CVE-2013-0789
    Miscellaneous memory safety hazards
  * MFSA 2013-31/CVE-2013-0800 (bmo#825721)
    Out-of-bounds write in Cairo library
  * MFSA 2013-35/CVE-2013-0796 (bmo#827106)
    WebGL crash with Mesa graphics driver on Linux
  * MFSA 2013-36/CVE-2013-0795 (bmo#825697)
    Bypass of SOW protections allows cloning of protected nodes
  * MFSA 2013-38/CVE-2013-0793 (bmo#803870)
    Cross-site scripting (XSS) using timed history navigations</changelog>
<changelog author="wr@rosenauer.org" date="1368273600">- update to Thunderbird 17.0.6 (bnc#819204)
  * MFSA 2013-41/CVE-2013-0801/CVE-2013-1669
    Miscellaneous memory safety hazards
  * MFSA 2013-42/CVE-2013-1670 (bmo#853709)
    Privileged access for content level constructor
  * MFSA 2013-46/CVE-2013-1674 (bmo#860971)
    Use-after-free with video and onresize event
  * MFSA 2013-47/CVE-2013-1675 (bmo#866825)
    Uninitialized functions in DOMSVGZoomEvent
  * MFSA 2013-48/CVE-2013-1676/CVE-2013-1677/CVE-2013-1678/
    CVE-2013-1679/CVE-2013-1680/CVE-2013-1681
    Memory corruption found using Address Sanitizer</changelog>
<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>

</package>
<package pkgid="477ad63c46901849da15087dedeb67e3dafd742791cd0afb8ad3aa75097b58e0" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="31.2.0" rel="70.35.2"/>

<changelog author="dvaleev@suse.com" date="1370347200">- prevent xpc-shell crashing on powerpc
  ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1372075200">- update to Thunderbird 17.0.7 (bnc#825935)
  * MFSA 2013-49/CVE-2013-1682
    Miscellaneous memory safety hazards
  * MFSA 2013-50/CVE-2013-1684/CVE-2013-1685/CVE-2013-1686
    Memory corruption found using Address Sanitizer
  * MFSA 2013-51/CVE-2013-1687 (bmo#863933, bmo#866823)
    Privileged content access and execution via XBL
  * MFSA 2013-53/CVE-2013-1690 (bmo#857883)
    Execution of unmapped memory through onreadystatechange event
  * MFSA 2013-54/CVE-2013-1692 (bmo#866915)
    Data in the body of XHR HEAD requests leads to CSRF attacks
  * MFSA 2013-55/CVE-2013-1693 (bmo#711043)
    SVG filters can lead to information disclosure
  * MFSA 2013-56/CVE-2013-1694 (bmo#848535)
    PreserveWrapper has inconsistent behavior
  * MFSA 2013-59/CVE-2013-1697 (bmo#858101)
    XrayWrappers can be bypassed to run user defined methods in a
    privileged context</changelog>
<changelog author="wr@rosenauer.org" date="1374062400">- update Enigmail to 1.5.2
  * bugfix release</changelog>
<changelog author="wr@rosenauer.org" date="1375444800">- update to Thunderbird 17.0.8 (bnc#833389)
  * MFSA 2013-63/CVE-2013-1701
    Miscellaneous memory safety hazards
  * MFSA 2013-68/CVE-2013-1709 (bmo#838253)
    Document URI misrepresentation and masquerading
  * MFSA 2013-69/CVE-2013-1710 (bmo#871368)
    CRMF requests allow for code execution and XSS attacks
  * MFSA 2013-72/CVE-2013-1713 (bmo#887098)
    Wrong principal used for validating URI for some Javascript
    components
  * MFSA 2013-73/CVE-2013-1714 (bmo#879787)
    Same-origin bypass with web workers and XMLHttpRequest
  * MFSA 2013-75/CVE-2013-1717 (bmo#406541, bmo#738397)
    Local Java applets may read contents of local file system</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>

</package>
<package pkgid="899520a21ff262c62771660fe81f8a6838e6d1915e03c2cdf606a1c354694cf9" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="31.3.0" rel="70.39.3"/>

<changelog author="wr@rosenauer.org" date="1379160000">- update to Thunderbird 24.0 (bnc#840485)
  * MFSA 2013-76/CVE-2013-1718/CVE-2013-1719
    Miscellaneous memory safety hazards
  * MFSA 2013-77/CVE-2013-1720 (bmo#888820)
    Improper state in HTML5 Tree Builder with templates
  * MFSA 2013-79/CVE-2013-1722 (bmo#893308)
    Use-after-free in Animation Manager during stylesheet cloning
  * MFSA 2013-80/CVE-2013-1723 (bmo#891292)
    NativeKey continues handling key messages after widget is destroyed
  * MFSA 2013-81/CVE-2013-1724 (bmo#894137)
    Use-after-free with select element
  * MFSA 2013-82/CVE-2013-1725 (bmo#876762)
    Calling scope for new Javascript objects can lead to memory corruption
  * MFSA 2013-85/CVE-2013-1728 (bmo#883686)
    Uninitialized data in IonMonkey
  * MFSA 2013-88/CVE-2013-1730 (bmo#851353)
    Compartment mismatch re-attaching XBL-backed nodes
  * MFSA 2013-89/CVE-2013-1732 (bmo#883514)
    Buffer overflow with multi-column, lists, and floats
  * MFSA 2013-90/CVE-2013-1735/CVE-2013-1736 (bmo#898871, bmo#906301)
    Memory corruption involving scrolling
  * MFSA 2013-91/CVE-2013-1737 (bmo#907727)
    User-defined properties on DOM proxies get the wrong "this" object
  * MFSA 2013-92/CVE-2013-1738 (bmo#887334, bmo#882897)
    GC hazard with default compartments and frame chain restoration
- moved greek to common translation package
- require NSPR 4.10 and NSS 3.15.1
- add GStreamer build requirements for Gecko
- added enigmail-build.patch to fix TB packaging (bmo#886095)
- removed obsolete patches:
  * enigmail-old-gcc.patch
  * mozilla-gcc43-enums.patch
  * mozilla-gcc43-template_hacks.patch
  * mozilla-gcc43-templates_instantiation.patch
  * ppc-xpcshell.patch</changelog>
<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>

</package>
<package pkgid="bc9a1992ee8b757bdcb2922593b6e1bc36783f0b1e5b74380324bda66ed55390" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="31.4.0" rel="70.43.1"/>

<changelog author="wr@rosenauer.org" date="1381406400">- update to Thunderbird 24.0.1
  * fqdn for smtp server name was not accepted (bmo#913785)
  * fixed crash in PL_strncasecmp (bmo#917955)
- update Enigmail to 1.6
  * The passphrase timeout configuration in Enigmail is now read and
    written from/to gpg-agent.
  * New dialog to change the expiry date of keys
  * New function to search for the OpenPGP keys of all Address Book
    entries on a keyserver
  * removed obsolete enigmail-build.patch</changelog>
<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>

</package>
<package pkgid="714363b33ede8d10b9a32013a6f3fe3f98b9934dea51282145d19ea41f880cbe" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="31.5.0" rel="70.47.2"/>

<changelog author="wr@rosenauer.org" date="1382616000">- update to Thunderbird 24.1.0 (bnc#847708)
  * requires NSS 3.15.2 or above
  * MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592
    Miscellaneous memory safety hazards
  * MFSA 2013-94/CVE-2013-5593 (bmo#868327)
    Spoofing addressbar through SELECT element
  * MFSA 2013-95/CVE-2013-5604 (bmo#914017)
    Access violation with XSLT and uninitialized data
  * MFSA 2013-96/CVE-2013-5595 (bmo#916580)
    Improperly initialized memory and overflows in some JavaScript
    functions
  * MFSA 2013-97/CVE-2013-5596 (bmo#910881)
    Writing to cycle collected object during image decoding
  * MFSA 2013-98/CVE-2013-5597 (bmo#918864)
    Use-after-free when updating offline cache
  * MFSA 2013-100/CVE-2013-5599/CVE-2013-5600/CVE-2013-5601
    (bmo#915210, bmo#915576, bmo#916685)
    Miscellaneous use-after-free issues found through ASAN fuzzing
  * MFSA 2013-101/CVE-2013-5602 (bmo#897678)
    Memory corruption in workers
  * MFSA 2013-102/CVE-2013-5603 (bmo#916404)
    Use-after-free in HTML document templates</changelog>
<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>

</package>
<package pkgid="cd61a3008646fbee3da60550594f5a79107e0fa089ff5cd191fb8da5999646da" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="31.6.0" rel="70.50.2"/>

<changelog author="wr@rosenauer.org" date="1384862400">- update to Thunderbird 24.1.1
  * requires NSPR 4.10.2 and NSS 3.15.3 for security reasons
  * fix binary compatibility issues for patch level updates
    (bmo#927073)</changelog>
<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>

</package>
<package pkgid="1f0018f2a900409479fa7d9a8f2cea713bf093402e1c6bda4d59362f8e10a548" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="31.7.0" rel="70.53.1"/>

<changelog author="wr@rosenauer.org" date="1386504000">- update to Thunderbird 24.2.0 (bnc#854370)
  * requires NSS 3.15.3.1 or higher
  * MFSA 2013-104/CVE-2013-5609/CVE-2013-5610
    Miscellaneous memory safety hazards
  * MFSA 2013-108/CVE-2013-5616 (bmo#938341)
    Use-after-free in event listeners
  * MFSA 2013-109/CVE-2013-5618 (bmo#926361)
    Use-after-free during Table Editing
  * MFSA 2013-111/CVE-2013-6671 (bmo#930281)
    Segmentation violation when replacing ordered list elements
  * MFSA 2013-113/CVE-2013-6673 (bmo#970380)
    Trust settings for built-in roots ignored during EV certificate
    validation
  * MFSA 2013-114/CVE-2013-5613 (bmo#930381, bmo#932449)
    Use-after-free in synthetic mouse movement
  * MFSA 2013-115/CVE-2013-5615 (bmo#929261)
    GetElementIC typed array stubs can be generated outside observed
    typesets
  * MFSA 2013-116/CVE-2013-6629/CVE-2013-6630 (bmo#891693)
    JPEG information leak
  * MFSA 2013-117 (bmo#946351)
    Mis-issued ANSSI/DCSSI certificate
    (fixed via NSS 3.15.3.1)</changelog>
<changelog author="uweigand@de.ibm.com" date="1386936000">- Add support for powerpc64le-linux.
  * ppc64le-support.patch: general support
  * libffi-ppc64le.patch: libffi backport
  * xpcom-ppc64le.patch: port xpcom</changelog>
<changelog author="wr@rosenauer.org" date="1391428800">- update to Thunderbird 24.3.0 (bnc#861847)
  * MFSA 2014-01/CVE-2014-1477/CVE-2014-1478
    Miscellaneous memory safety hazards (rv:27.0 / rv:24.3)
  * MFSA 2014-02/CVE-2014-1479 (bmo#911864)
    Clone protected content with XBL scopes
  * MFSA 2014-04/CVE-2014-1482 (bmo#943803)
    Incorrect use of discarded images by RasterImage
  * MFSA 2014-08/CVE-2014-1486 (bmo#942164)
    Use-after-free with imgRequestProxy and image proccessing
  * MFSA 2014-09/CVE-2014-1487 (bmo#947592)
    Cross-origin information leak through web workers
  * MFSA 2014-12/CVE-2014-1490/CVE-2014-1491
    (bmo#934545, bmo#930874, bmo#930857)
    NSS ticket handling issues
  * MFSA 2014-13/CVE-2014-1481(bmo#936056)
    Inconsistent JavaScript handling of access to Window objects
- requires NSS 3.15.4
- renamed ppc64le patches to streamline with Firefox package</changelog>
<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>

</package>
<package pkgid="f57fde61b96b618b625344e501133a9fde9ec05c6199b9c041b3d21429dd0f39" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="38.1.0" rel="70.57.1"/>

<changelog author="wr@rosenauer.org" date="1395144000">- update to Thunderbird 24.4.0 (bnc#868603)
  * MFSA 2014-15/CVE-2014-1493/CVE-2014-1494
    Miscellaneous memory safety hazards
  * MFSA 2014-17/CVE-2014-1497 (bmo#966311)
    Out of bounds read during WAV file decoding
  * MFSA 2014-26/CVE-2014-1508 (bmo#963198)
    Information disclosure through polygon rendering in MathML
  * MFSA 2014-27/CVE-2014-1509 (bmo#966021)
    Memory corruption in Cairo during PDF font rendering
  * MFSA 2014-28/CVE-2014-1505 (bmo#941887)
    SVG filters information disclosure through feDisplacementMap
  * MFSA 2014-29/CVE-2014-1510/CVE-2014-1511 (bmo#982906, bmo#982909)
    Privilege escalation using WebIDL-implemented APIs
  * MFSA 2014-30/CVE-2014-1512 (bmo#982957)
    Use-after-free in TypeObject
  * MFSA 2014-31/CVE-2014-1513 (bmo#982974)
    Out-of-bounds read/write through neutering ArrayBuffer objects
  * MFSA 2014-32/CVE-2014-1514 (bmo#983344)
    Out-of-bounds write through TypedArrayObject after neutering</changelog>
<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>

</package>
<package pkgid="6d99b5b418074b2e765e471ea45797e91295993f02af4f474a5a6e8eb3302b34" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="38.2.0" rel="70.60.2"/>

<changelog author="wr@rosenauer.org" date="1398427200">- update to Thunderbird 24.5.0 (bnc#875378)
  * MFSA 2014-34/CVE-2014-1518
    Miscellaneous memory safety hazards
  * MFSA 2014-37/CVE-2014-1523 (bmo#969226)
    Out of bounds read while decoding JPG images
  * MFSA 2014-38/CVE-2014-1524 (bmo#989183)
    Buffer overflow when using non-XBL object as XBL
  * MFSA 2014-42/CVE-2014-1529 (bmo#987003)
    Privilege escalation through Web Notification API
  * MFSA 2014-43/CVE-2014-1530 (bmo#895557)
    Cross-site scripting (XSS) using history navigations
  * MFSA 2014-44/CVE-2014-1531 (bmo#987140)
    Use-after-free in imgLoader while resizing images
  * MFSA 2014-46/CVE-2014-1532 (bmo#966006)
    Use-after-free in nsHostResolver
- use shipped-locales as the authoritative source for supported
  locales (some unsupported locales disappear from -other package)</changelog>
<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>

</package>
<package pkgid="3d51693d026bd813fbcba5d6b12bc41316b8545ed7f2253dafd41af5f0e532d2" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="38.3.0" rel="70.65.1"/>

<changelog author="wr@rosenauer.org" date="1402142400">- update to Thunderbird 24.6.0 (bnc#881874)
  * MFSA 2014-48/CVE-2014-1533/CVE-2014-1534
    (bmo#921622, bmo#967354, bmo#969517, bmo#969549, bmo#973874,
    bmo#978652, bmo#978811, bmo#988719, bmo#990868, bmo#991981,
    bmo#992274, bmo#994907, bmo#995679, bmo#995816, bmo#995817,
    bmo#996536, bmo#996715, bmo#999651, bmo#1000598,
    bmo#1000960, bmo#1002340, bmo#1005578, bmo#1007223,
    bmo#1009952, bmo#1011007)
    Miscellaneous memory safety hazards (rv:30.0 / rv:24.6)
  * MFSA 2014-49/CVE-2014-1536/CVE-2014-1537/CVE-2014-1538
    (bmo#989994, bmo#999274, bmo#1005584)
    Use-after-free and out of bounds issues found using Address Sanitizer
  * MFSA 2014-52/CVE-2014-1541 (bmo#1000185)
    Use-after-free with SMIL Animation Controller
  * MFSA 2014-55/CVE-2014-1545 (bmo#1018783)
    Out of bounds write in NSPR
- require NSPR 4.10.6 because of MFSA 2014-55/CVE-2014-1545</changelog>
<changelog author="wr@rosenauer.org" date="1405857600">- update to Thunderbird 24.7.0 (bnc#887746)
  * MFSA 2014-56/CVE-2014-1547/CVE-2014-1548
    Miscellaneous memory safety hazards
  * MFSA 2014-61/CVE-2014-1555 (bmo#1023121)
    Use-after-free with FireOnStateChange event
  * MFSA 2014-62/CVE-2014-1556 (bmo#1028891)
    Exploitable WebGL crash with Cesium JavaScript library
  * MFSA 2014-63/CVE-2014-1544 (bmo#963150)
    Use-after-free while when manipulating certificates in the trusted cache
    (solved with NSS 3.16.2 requirement)
  * MFSA 2014-64/CVE-2014-1557 (bmo#913805)
    Crash in Skia library when scaling high quality images
- disabled enigmail build as with version 1.7 it's a standalone
  source package</changelog>
<changelog author="wr@rosenauer.org" date="1406462400">- update to Thunderbird 31.0
  * based on Gecko 31
  * Autocompleting email addresses now matches against any part of
    the name or email
  * Composing a mail to a newsgroup will now autocomplete newsgroup
    names
  * Insecure NTLM (pre-NTLMv2) authentication disabled
- rebased patches
- removed enigmail entirely from source package
- removed obsolete patches
  * libffi-ppc64le.patch
  * ppc64le-support.patch
  * xpcom-ppc64le.patch
- use GStreamer 1.0 after 13.1
- switched source archives to use xz instead of bz2</changelog>
<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>

</package>
<package pkgid="7f17e18714e7723ee0bdc80449e1c2f8079c49c803f3d3348968707493e25826" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="38.4.0" rel="70.68.1"/>

<changelog author="wr@rosenauer.org" date="1409313600">- update to Thunderbird 31.1.0 (bnc#894370)
  * MFSA 2014-67/CVE-2014-1553/CVE-2014-1562
    Miscellaneous memory safety hazards
  * MFSA 2014-68/CVE-2014-1563 (bmo#1018524)
    Use-after-free during DOM interactions with SVG
  * MFSA 2014-69/CVE-2014-1564 (bmo#1045977)
    Uninitialized memory use during GIF rendering
  * MFSA 2014-70/CVE-2014-1565 (bmo#1047831)
    Out-of-bounds read in Web Audio audio timeline
  * MFSA 2014-72/CVE-2014-1567 (bmo#1037641)
    Use-after-free setting text directionality
- added mozilla-nullptr-gcc45.patch to build on gcc 4.5 dists
  (e.g. openSUSE 11.4)</changelog>
<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>

</package>
<package pkgid="836830cd4c999e716b7e8c4184768cd0db1107f379025ba32e2b521df937e98c" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="38.5.0" rel="70.71.1"/>

<changelog author="wolfgang@rosenauer.org" date="1410264000">- update to Thunderbird 31.1.1
  * Fixed an issue where mailing lists with spaces in their names
    couldn't be autocompleted (bmo#1060901)
  * Fixed an occasional startup crash (bmo#1005336)</changelog>
<changelog author="wr@rosenauer.org" date="1411560000">- update to Thunderbird 31.1.2</changelog>
<changelog author="wr@rosenauer.org" date="1413115200">- update to Thunderbird 31.2.0 (bnc#900941)
  * MFSA 2014-74/CVE-2014-1574
    Miscellaneous memory safety hazards
  * MFSA 2014-75/CVE-2014-1576 (bmo#1041512)
    Buffer overflow during CSS manipulation
  * MFSA 2014-76/CVE-2014-1577 (bmo#1012609)
    Web Audio memory corruption issues with custom waveforms
  * MFSA 2014-77/CVE-2014-1578 (bmo#1063327)
    Out-of-bounds write with WebM video
  * MFSA 2014-79/CVE-2014-1581 (bmo#1068218)
    Use-after-free interacting with text directionality
  * MFSA 2014-81/CVE-2014-1585/CVE-2014-1586 (bmo#1062876, bmo#1062981)
    Inconsistent video sharing within iframe
- added basic appdata definition</changelog>
<changelog author="wr@rosenauer.org" date="1414238400">- remove add-plugins.sh and use /usr/share/myspell directly
  (bnc#900639)</changelog>
<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>

</package>
<package pkgid="c0c9e22cfc2b98208f53a5bedbe607237e7d981f5b08e8c6781421daa76dee8a" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="38.6.0" rel="70.74.1"/>

<changelog author="guillaume@opensuse.org" date="1415102400">- Limit RAM usage during link for ARM</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>

</package>
<package pkgid="7347a58a7e41ad8cd18b9eb3bf0da95d93090f6e2c92c76dc82d3e6afc6b4686" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="38.6.0" rel="70.77.4"/>

<changelog author="Led &lt;ledest@gmail.com&gt;" date="1416139200">- fix bashism in mozilla.sh script</changelog>
<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="eb545dddbaae313b0e63fe63883b4e01b7353eb13bda28509afff723db09bdce" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="38.7.0" rel="70.80.1"/>

<changelog author="wr@rosenauer.org" date="1417348800">- update to Thunderbird 31.3.0 (bnc#908009)
  * MFSA 2014-83/CVE-2014-1587
    Miscellaneous memory safety hazards
  * MFSA 2014-85/CVE-2014-1590 (bmo#1087633)
    XMLHttpRequest crashes with some input streams
  * MFSA 2014-87/CVE-2014-1592 (bmo#1088635)
    Use-after-free during HTML5 parsing
  * MFSA 2014-88/CVE-2014-1593 (bmo#1085175)
    Buffer overflow while parsing media content
  * MFSA 2014-89/CVE-2014-1594 (bmo#1074280)
    Bad casting from the BasicThebesLayer to BasicContainerLayer</changelog>
<changelog author="wr@rosenauer.org" date="1420891200">- update to Thunderbird 31.4.0 (bnc#910669)
  * MFSA 2015-01/CVE-2014-8634/CVE-2014-8635
    Miscellaneous memory safety hazards
  * MFSA 2015-03/CVE-2014-8638 (bmo#1080987)
    sendBeacon requests lack an Origin header
  * MFSA 2015-04/CVE-2014-8639 (bmo#1095859)
    Cookie injection through Proxy Authenticate responses
- added mozilla-icu-strncat.patch to fix post build checks</changelog>
<changelog author="wr@rosenauer.org" date="1424692800">- update to Thunderbird 31.5.0 (bnc#917597)
  * MFSA 2015-11/CVE-2015-0836
    Miscellaneous memory safety hazards
  * MFSA 2015-12/CVE-2015-0833 (bmo#945192)
    Invoking Mozilla updater will load locally stored DLL files
    (Windows only)
  * MFSA 2015-16/CVE-2015-0831 (bmo#1130514)
    Use-after-free in IndexedDB
  * MFSA 2015-19/CVE-2015-0827 (bmo#1117304)
    Out-of-bounds read and write while rendering SVG content
  * MFSA 2015-24/CVE-2015-0822 (bmo#1110557)
    Reading of local files through manipulation of form autocomplete</changelog>
<changelog author="wr@rosenauer.org" date="1427803200">- update to Thunderbird 31.6.0 (bnc#925368)
  * MFSA 2015-30/CVE-2015-0815
    Miscellaneous memory safety hazards
  * MFSA 2015-31/CVE-2015-0813 (bmo#1106596))
    Use-after-free when using the Fluendo MP3 GStreamer plugin
  * MFSA 2015-33/CVE-2015-0816 (bmo#1144991)
    resource:// documents can load privileged pages
  * MFSA-2015-37/CVE-2015-0807 (bmo#1111834)
    CORS requests should not follow 30x redirections after preflight
  * MFSA-2015-40/CVE-2015-0801 (bmo#1146339)
    Same-origin bypass through anchor navigation</changelog>
<changelog author="wr@rosenauer.org" date="1431172800">- update to Thunderbird 31.7.0 (bnc#930622)
  * MFSA 2015-46/CVE-2015-2708
    Miscellaneous memory safety hazards
  * MFSA 2015-47/VE-2015-0797 (bmo#1080995)
    Buffer overflow parsing H.264 video with Linux Gstreamer
  * MFSA 2015-48/CVE-2015-2710 (bmo#1149542)
    Buffer overflow with SVG content and CSS
  * MFSA 2015-51/CVE-2015-2713 (bmo#1153478)
    Use-after-free during text processing with vertical text enabled
  * MFSA 2015-54/CVE-2015-2716 (bmo#1140537)
    Buffer overflow when parsing compressed XML
  * MFSA 2015-57/CVE-2011-3079 (bmo#1087565)
    Privilege escalation through IPC channel messages</changelog>
<changelog author="dmueller@suse.com" date="1432814400">- add mozilla-bug1024492.patch:
  * Fixes build against GCC 5.x</changelog>
<changelog author="schwab@suse.de" date="1434628800">- mozilla-arm64-libjpeg-turbo.patch: fix libjpeg-turbo configuration</changelog>
<changelog author="wr@rosenauer.org" date="1434715200">- update to Thunderbird 38.0.1
  * includes Lightning as default extension
- rebased patches
- removed obsolete patches:
  * mozilla-ppc.patch
  * mozilla-nullptr-gcc45.patch
  * mozilla-bug1024492.patch
- dropped openSUSE specific patches
  * thunderbird-shared-nss-db.patch
  * mozilla-shared-nss-db.patch
    the provided feature seems not to be used and its maintenance
    is not worth the ongoing efforts
- tb-develdirs.patch is now mozilla-develdirs.patch as it is a
  platform configuration now</changelog>
<changelog author="wr@rosenauer.org" date="1436356800">- update to Thunderbird 38.1.0 (bnc#935979)
  * MFSA 2015-59/CVE-2015-2724/CVE-2015-2725
    Miscellaneous memory safety hazards
  * MFSA 2015-60/CVE-2015-2727 (bmo#1163422)
    Local files or privileged URLs in pages can be opened into new tabs
  * MFSA 2015-61/CVE-2015-2728 (bmo#1142210)
    Type confusion in Indexed Database Manager
  * MFSA 2015-62/CVE-2015-2729 (bmo#1122218)
    Out-of-bound read while computing an oscillator rendering range in Web Audio
  * MFSA 2015-63/CVE-2015-2731 (bmo#1149891)
    Use-after-free in Content Policy due to microtask execution error
  * MFSA 2015-64/CVE-2015-2730 (bmo#1125025)
    ECDSA signature validation fails to handle some signatures correctly
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-65/CVE-2015-2722/CVE-2015-2733 (bmo#1166924, bmo#1169867)
    Use-after-free in workers while using XMLHttpRequest
  * MFSA 2015-66/CVE-2015-2734/CVE-2015-2735/CVE-2015-2736/CVE-2015-2737
    CVE-2015-2738/CVE-2015-2739/CVE-2015-2740
    Vulnerabilities found through code inspection
  * MFSA 2015-67/CVE-2015-2741 (bmo#1147497)
    Key pinning is ignored when overridable errors are encountered
  * MFSA 2015-69/CVE-2015-2743 (bmo#1163109)
    Privilege escalation in PDF.js
  * MFSA 2015-70/CVE-2015-4000 (bmo#1138554)
    NSS accepts export-length DHE keys with regular DHE cipher suites
    (this fix is shipped by NSS 3.19.1 externally)
  * MFSA 2015-71/CVE-2015-2721 (bmo#1086145)
    NSS incorrectly permits skipping of ServerKeyExchange
    (this fix is shipped by NSS 3.19.1 externally)
- requires NSS 3.19.2</changelog>
<changelog author="wr@rosenauer.org" date="1439640000">- update to Thunderbird 38.2.0 (bnc#940806)
  * MFSA 2015-79/CVE-2015-4473
    Miscellaneous memory safety hazards
  * MFSA 2015-80/CVE-2015-4475 (bmo#1175396)
    Out-of-bounds read with malformed MP3 file
  * MFSA 2015-82/CVE-2015-4478 (bmo#1105914)
    Redefinition of non-configurable JavaScript object properties
  * MFSA 2015-83/CVE-2015-4479/CVE-2015-4480/CVE-2015-4493
    Overflow issues in libstagefright
  * MFSA 2015-84/CVE-2015-4481 (bmo1171518)
    Arbitrary file overwriting through Mozilla Maintenance Service
    with hard links (only affected Windows)
  * MFSA 2015-85/CVE-2015-4482 (bmo#1184500)
    Out-of-bounds write with Updater and malicious MAR file
    (does not affect openSUSE RPM packages which do not ship the
    updater)
  * MFSA 2015-87/CVE-2015-4484 (bmo#1171540)
    Crash when using shared memory in JavaScript
  * MFSA 2015-88/CVE-2015-4491 (bmo#1184009)
    Heap overflow in gdk-pixbuf when scaling bitmap images
  * MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948, bmo#1178148)
    Buffer overflows on Libvpx when decoding WebM video
  * MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489
    Vulnerabilities found through code inspection
  * MFSA 2015-92/CVE-2015-4492 (bmo#1185820)
    Use-after-free in XMLHttpRequest with shared workers</changelog>
<changelog author="wr@rosenauer.org" date="1443441600">- update to Thunderbird 38.3.0 (bnc#947003)
  * MFSA 2015-96/CVE-2015-4500
    Miscellaneous memory safety hazards
  * MFSA 2015-100/CVE-2015-4505 (bmo#1177861) (Windows only)
    Arbitrary file manipulation by local user through Mozilla updater
  * MFSA 2015-101/CVE-2015-4506 (bmo#1192226)
    Buffer overflow in libvpx while parsing vp9 format video
  * MFSA 2015-105/CVE-2015-4511 (bmo#1200148)
    Buffer overflow while decoding WebM video
  * MFSA 2015-106/CVE-2015-4509 (bmo#1198435)
    Use-after-free while manipulating HTML media content
  * MFSA 2015-110/CVE-2015-4519 (bmo#1189814)
    Dragging and dropping images exposes final URL after redirects
  * MFSA 2015-111/CVE-2015-4520 (bmo#1200856, bmo#1200869)
    Errors in the handling of CORS preflight request headers
  * MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522/
    CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177/
    CVE-2015-7180
    Vulnerabilities found through code inspection
  * MFSA 2015-113/CVE-2015-7178/CVE-2015-7179 (bmo#1189860,
    bmo#1190526) (Windows only)
    Memory safety errors in libGLES in the ANGLE graphics library
- rebased patches</changelog>
<changelog author="dmueller@suse.com" date="1444046400">- fix build on aarch64 by reusing the crashreporter conditional
  from MozillaFirefox</changelog>
<changelog author="wr@rosenauer.org" date="1447761600">- update to Thunderbird 38.4.0 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR 4.10.10 and NSS 3.19.2.1
- added explicit appdata provides (bnc#952325)</changelog>
<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>

</package>
<package pkgid="e59314732a6f3500dcdae37770137348fde523b09fc1931d8ab69e9596d51eeb" name="MozillaThunderbird-translations-other" arch="x86_64">
    <version epoch="0" ver="45.2" rel="70.83.1"/>

<changelog author="wr@rosenauer.org" date="1450872000">- update to Thunderbird 38.5.0 (bnc#959277)
  * MFSA 2015-134/CVE-2015-7201
    Miscellaneous memory safety hazards
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs</changelog>
<changelog author="wr@rosenauer.org" date="1451390400">- update to Thunderbird 38.5.1
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
- explicitely require libXcomposite-devel</changelog>
<changelog author="olaf@aepfle.de" date="1453118400">- Add build conditionals for valgrind and -Os
- Convert existing conditions for kde to bcond</changelog>
<changelog author="olaf@aepfle.de" date="1453723200">- Using -g for CFLAGS is controlled via project settings, it should
  not be enforced by the mozilla buildsystem.</changelog>
<changelog author="wr@rosenauer.org" date="1455364800">- update to Thunderbird 38.6.0 (boo#963520)
  * Filters ran on a different folder than selected
  * MFSA 2016-01/CVE-2016-1930
    Miscellaneous memory safety hazards
  * MFSA 2016-03/CVE-2016-1935 (bmo#1220450)
    Buffer overflow in WebGL after out of memory allocation</changelog>
<changelog author="astieger@suse.com" date="1456488000">- adjust _constraints to current peak build memory and disk usage</changelog>
<changelog author="wr@rosenauer.org" date="1457697600">- update to Thunderbird 38.7.0 (boo#969894)
  * MFSA 2015-81/CVE-2015-4477 (bmo#1179484)
    Use-after-free in MediaStream playback
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using performance.getEntries and
    history navigation
  * MFSA 2016-16/CVE-2016-1952
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-21/CVE-2016-1958 (bmo#1228754)
    Displayed page address can be overridden
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-25/CVE-2016-1962 (bmo#1240760)
    Use-after-free when using multiple WebRTC data channels
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-28/CVE-2016-1965 (bmo#1245264)
    Addressbar spoofing though history navigation and Location protocol
    property
  * MFSA 2016-31/CVE-2016-1966 (bmo#1246054)
    Memory corruption with malicious NPAPI plugin
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library</changelog>
<changelog author="wr@rosenauer.org" date="1458907200">- update to Thunderbird 38.7.1
  * disabled Graphite font shaping library</changelog>
<changelog author="astieger@suse.com" date="1459944000">- update to Thunderbird 38.7.2
  * disable Graphite font shaping library (same upstream changelog
    as 38.7.1)</changelog>
<changelog author="wr@rosenauer.org" date="1460808000">- update to Thunderbird 45.0 (boo#969894)
  * Add a Correspondents column combining Sender and Recipient
  * Much better support for XMPP chatrooms and commands
  * Remote content exceptions: Improved options to add exceptions
  * Implement option to always use HTML formatting to prevent
    unexpected format loss when converting messages to plain text
  * Use OpenStreetmap for maps (even allow the user to choose from
    list of map services)
  * Allow spell checking and dictionary selection in the subject line
  * Allow editing of From when composing a message
  * Add dropdown in compose to allow specific setting of font size
  * Return/Enter in composer will now insert a new paragraph by
    default (shift-Enter will insert a line break)
  * Allow copying of name and email address from the message header
    of an email
  * Mail.ru supports OAuth authentication
  * MFSA 2016-16/CVE-2016-1952/CVE-2016-1953
    Miscellaneous memory safety hazards
  * MFSA 2016-17/CVE-2016-1954 (bmo#1243178)
    Local file overwriting and potential privilege escalation through
    CSP reports
  * MFSA 2016-18/CVE-2016-1955 (bmo#1208946)
    CSP reports fail to strip location information for embedded iframe pages
  * MFSA 2016-19/CVE-2016-1956 (bmo#1199923)
    Linux video memory DOS with Intel drivers
  * MFSA 2016-20/CVE-2016-1957 (bmo#1227052)
    Memory leak in libstagefright when deleting an array during MP4
    processing
  * MFSA 2016-23/CVE-2016-1960/ZDI-CAN-3545 (bmo#1246014)
    Use-after-free in HTML5 string parser
  * MFSA 2016-24/CVE-2016-1961/ZDI-CAN-3574 (bmo#1249377)
    Use-after-free in SetBody
  * MFSA 2016-27/CVE-2016-1964 (bmo#1243335)
    Use-after-free during XML transformations
  * MFSA 2016-34/CVE-2016-1974 (bmo#1228103)
    Out-of-bounds read in HTML parser following a failed allocation
  * MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
    Buffer overflow during ASN.1 decoding in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
    Use-after-free during processing of DER encoded keys in NSS
    (fixed by requiring 3.21.1)
  * MFSA 2016-37/CVE-2016-1977/CVE-2016-2790/CVE-2016-2791/
    CVE-2016-2792/CVE-2016-2793/CVE-2016-2794/CVE-2016-2795/
    CVE-2016-2796/CVE-2016-2797/CVE-2016-2798/CVE-2016-2799/
    CVE-2016-2800/CVE-2016-2801/CVE-2016-2802
    Font vulnerabilities in the Graphite 2 library
- remove obsolete patches:
  * mozilla-arm-disable-edsp.patch
  * mozilla-icu-strncat.patch
  * mozilla-arm64-libjpeg-turbo.patch
- added required mozilla platform patches:
  * mozilla-no-stdcxx-check.patch</changelog>
<changelog author="badshah400@gmail.com" date="1461758400">- For openSUSE &gt; 13.2, the build fails for i586 as it goes out of
  memory. Prevent this from happening by disabing parallel build
  in this particular case (i.e. do not pass
  mk_add_options MOZ_MAKE_FLAGS%{?jobs:-j%jobs}).</changelog>
<changelog author="wr@rosenauer.org" date="1462622400">- update to Thunderbird 45.1.0 (boo#977333)
  * MFSA 2016-39/CVE-2016-2806/CVE-2016-2807 (boo#977375, boo#977376)
    Miscellaneous memory safety hazards</changelog>
<changelog author="dimstar@opensuse.org" date="1463054400">- Copy the icons to /usr/share/icons instead of symlinking them:
  in preparation for containerized apps (e.g. xdg-app) as well as
  AppStream metadata extraction, there are a couple locations that
  need to be real files for system integration (.desktop files,
  icons, mime-type info).</changelog>
<changelog author="badshah400@gmail.com" date="1464091200">- Add patches to fix building with gcc &gt;= 6:
  + mozilla-gcc6.patch: patch taken from fedora's git and is
    essentially identical to upstream firefox patch:
    https://hg.mozilla.org/mozilla-central/rev/55212130f19d.
  + mozilla-flexible-array-member-in-union.patch: patch taken
    from upstream bmo#1272649.</changelog>
<changelog author="badshah400@gmail.com" date="1464177600">- The conditional testing for gcc was failing for different
  openSUSE versions, drop it and apply patches unconditionally.</changelog>
<changelog author="wr@rosenauer.org" date="1464350400">- update to Thunderbird 45.1.1
  * When entering members into a mailing list, the enter key
    dismissed the panel instead of just moving onto the next line
  * Email without HTML elements was sent as HTML, despite
    "Delivery Format: Auto-detect" option
  * Options applied to a template were lost when the template was used
  * Contacts could not be deleted when they were found through a search
  * Views from global searches did not respect
    "mail.threadpane.use_correspondents"</changelog>
<changelog author="agraf@suse.com" date="1465819200">- Fix running on 48bit va aarch64 (bsc#984126)
  - Add patch mozilla-aarch64-48bit-va.patch</changelog>
<changelog author="wr@rosenauer.org" date="1466683200">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#986162)</changelog>
<changelog author="wr@rosenauer.org" date="1466769600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
<changelog author="wr@rosenauer.org" date="1467288000">- update to Thunderbird 45.2 (boo#983549)
  Security fixes:
  * CVE-2016-2818, CVE-2016-2815: Memory safety bugs (MFSA2016-49)
- drop mozilla-flexible-array-member-in-union.patch, upstream</changelog>

</package>
<package pkgid="847bf9106bd6824c36b0060ac1e8b7c708c9117bef7dce81e6fcb1a63908682f" name="MyODBC-unixODBC" arch="i586">
    <version epoch="0" ver="5.1.8" rel="13.3.1"/>

<changelog author="mhrusecky@suse.cz" date="1249387200">- using my_bool instead of bool (fixed compilation error)</changelog>
<changelog author="mhrusecky@suse.cz" date="1258545600">- fixed setup registration (bnc#552330)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1259582400">- use %configure to fix RPM_OPT_FLAGS usage on C++ code</changelog>
<changelog author="coolo@novell.com" date="1259755200">- update patch to fix build</changelog>
<changelog author="idonmez@novell.com" date="1306411200">- Updated to version 5.1.8,
  see /usr/share/doc/packages/MyODBC-unixODBC/ChangeLog
- Disable GUI since other distributions dropped it and its outdated
- Drop outdated patches:
  * MyODBC-3.51.26r1127.diff
  * MyODBC-unixODBC-my_bool-cleanup.patch
- Add new patches from Fedora to fix compile against MySQL 5.5
  * MyODBC-unixODBC-my_free.patch
  * MyODBC-unixODBC-add-mysys.patch
  * MyODBC-unixODBC-64bit.patch</changelog>
<changelog author="idonmez@novell.com" date="1306756800">- Fix provides/obsoletes on MyODBC-libiodbc</changelog>
<changelog author="idonmez@novell.com" date="1306929600">- Don't make libmyodbc5 a separate library, its has a wrong soname,
  and internal</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="cfarrell@suse.com" date="1340107200">- license update: SUSE-GPL-2.0-with-FLOSS-exception
  SPDX format (or use the spreadsheet linked at http://license.opensuse.org
  if there is no entry on http://www.spdx.org/licenses)</changelog>
<changelog author="mhrusecky@suse.cz" date="1359374400">- disabling building of test library as it is broken and we don't
  ship it anyway</changelog>
<changelog author="kstreitova@suse.com" date="1430308800">- add MyODBC-unixODBC-my_malloc_when_using_my_free.patch to fix
  segfault in myodbc-install when freeing pointer (allocated with
  basic malloc()) using x_free()/my_free(). my_free() accesses 8
  bytes before the pointer returned by malloc(), hence my_malloc()
  is needed [bnc#881624]</changelog>

</package>
<package pkgid="9be0d0075ed672fca86247cb6a99eaeb1dff70090562a021fff9734aadd21f71" name="MyODBC-unixODBC" arch="i586">
    <version epoch="0" ver="5.1.8" rel="13.6.1"/>

<changelog author="mhrusecky@suse.cz" date="1249387200">- using my_bool instead of bool (fixed compilation error)</changelog>
<changelog author="mhrusecky@suse.cz" date="1258545600">- fixed setup registration (bnc#552330)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1259582400">- use %configure to fix RPM_OPT_FLAGS usage on C++ code</changelog>
<changelog author="coolo@novell.com" date="1259755200">- update patch to fix build</changelog>
<changelog author="idonmez@novell.com" date="1306411200">- Updated to version 5.1.8,
  see /usr/share/doc/packages/MyODBC-unixODBC/ChangeLog
- Disable GUI since other distributions dropped it and its outdated
- Drop outdated patches:
  * MyODBC-3.51.26r1127.diff
  * MyODBC-unixODBC-my_bool-cleanup.patch
- Add new patches from Fedora to fix compile against MySQL 5.5
  * MyODBC-unixODBC-my_free.patch
  * MyODBC-unixODBC-add-mysys.patch
  * MyODBC-unixODBC-64bit.patch</changelog>
<changelog author="idonmez@novell.com" date="1306756800">- Fix provides/obsoletes on MyODBC-libiodbc</changelog>
<changelog author="idonmez@novell.com" date="1306929600">- Don't make libmyodbc5 a separate library, its has a wrong soname,
  and internal</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="cfarrell@suse.com" date="1340107200">- license update: SUSE-GPL-2.0-with-FLOSS-exception
  SPDX format (or use the spreadsheet linked at http://license.opensuse.org
  if there is no entry on http://www.spdx.org/licenses)</changelog>
<changelog author="mhrusecky@suse.cz" date="1359374400">- disabling building of test library as it is broken and we don't
  ship it anyway</changelog>
<changelog author="kstreitova@suse.com" date="1430308800">- add MyODBC-unixODBC-my_malloc_when_using_my_free.patch to fix
  segfault in myodbc-install when freeing pointer (allocated with
  basic malloc()) using x_free()/my_free(). my_free() accesses 8
  bytes before the pointer returned by malloc(), hence my_malloc()
  is needed [bnc#881624]</changelog>
<changelog author="kstreitova@suse.com" date="1439985600">- add MyODBC-unixODBC-is_minimum_version.patch to backport fix from
  v5.2.3 related to incorrect implementation of is_minimum_version()
  [bnc#921143]
- add MyODBC-unixODBC-remove_use_of_test_macro.patch to port
  changes found in v5.2 and beyond to prevent
  "isql: symbol lookup error: /usr/lib64/libmyodbc5.so: undefined"
  error caused by an undefined test() macro in libmyodbc5.so
  and also not found in libmysqlclient.</changelog>

</package>
<package pkgid="e3d5693b62653f83205f62d7a3c24ddcc1c7e27ce43e11092658b3027a9b077e" name="MyODBC-unixODBC" arch="src">
    <version epoch="0" ver="5.1.8" rel="13.3.1"/>

<changelog author="anosek@suse.cz" date="1179489600">- updated to version 3.51.15r409
  * Added auto-reconnect option because automatic reconnect is now
    disabled by default in libmysql
  * Added auto is null option (Bug #10910)
  * Added support for SQLMoreResults
  * Checking SQL_ATTR_CONNECTION_DEAD now always calls mysql_ping() to
    check for a dead connection.
  * Remove ODBC escape syntax { and } that begin and terminate statements,
    allowing {CALL (?)} for procedures that don't require OUT or INOUT
    parameters
  * Improved regression tests
  * Added --with-separate-debug-driver ./configure option
  * Lots of bugfixes
- dropped obsoleted patch (stringh.diff)</changelog>
<changelog author="anosek@suse.cz" date="1184328000">- updated to version 3.51.16r494
  * Added support for using SSL. This is not yet exposed in the setup GUI,
    but must be enabled through configuration files or the DSN. (Bug #12918)
  Bugs fixed:
  * "Out of sync error" or "MySQL Server has gone away" after executing a
    stored procedure (Bug #27544)
  * SQL_C_TYPE_DATE, SQL_C_TYPE_TIME, and SQL_C_TYPE_TIMESTAMP were formatted
    without seperators, which could cause them to get interpreted incorrectly
    in some cases due to server bugs. (Bug #15773)
  * Calls to SQLNativeSql could cause stack corruption due to an incorrect
    pointer cast. (Bug #28758)
  * SQLSetPos could update or delete the wrong rows when the original result
    set did not contain all columns of a multi-part primary key. (Bug #28255)
  * SQLTables() did not distinguish tables from views. (Bug #23031)
  * The wrong function was used for freeing the artificial result sets that
    are created by some catalog functions. (Bug #22797)
  * Accessing the results of catalog functions could cause a crash when the
    "Don't cache results" option was set and a forward-only cursor was
    being used. (Bug #4657)
  * SQL_WVARCHAR and SQL_WLONGVARCHAR parameters were not properly quoted
    and escaped. (Bug #16235)
  * SQLForeignKeys() did not properly escape wildcard characters in its
    table name parameters when retrieving information. (Bug #27723)
  * Calls to SQLSetPos() could cause the driver to incorrectly calculate the
    length of some fields. (Bug #16917)</changelog>
<changelog author="anosek@suse.cz" date="1185451200">- updated to version 3.51.17r581
  Functionality added or changed:
  * Added an option (CHARSET) for specifying the default character
    set for a connection. This must be used instead of a "SET NAMES"
    statement. Also available from the GUI setup dialog. (Related
    to Bug #6667 and Bug #9498.)
  * Dis-allow NULL ptr for null indicator when calling SQLGetData()
    if value is null. Now returns SQL_ERROR w/state 22002.
  * Fixed calling convention ptr and wrong free in myodbc3i, and fixed
    the null terminating (was only one, not two) when writing DSN to string.
  Bugs fixed:
  * myodbc3i did not correctly format driver info, which could cause the
    installation to fail. (Bug #29709)
  * Multiple result sets were not correctly flushed when a statement
    handle was closed. (Bug #16817)
  * SQLProcedures() did not handle NULL parameters, which could lead to
    crashes (Bug #28316)
  * SQLColumns() did not handle many of its parameters correctly, which
    could lead to incorrect results. The table name argument was not handled
    as a pattern value, and most arguments were not escaped correctly when
    they contained non-alphanumeric characters. (Bug #8860)
  * If there was more than one unique key on a table, the correct fields
    were not used in handling SQLSetPos(). (Bug #10563)
  * SQLColAttribute() returned the wrong value for SQL_DESC_BASE_COLUMN_NAME
    and SQL_DESC_BASE_TABLE_NAME for aliased fields. (Bug #6197)
  * Calling SQLGetDiagField with RecNumber 0,DiagIdentifier
    NOT 0 returns SQL_ERROR (Bug #16224)
  * Correctly return error if SQLBindCol is called with an invalid column
  * Fixed error handling of OOM and bad connections in catalog functions.
    This might raise errors in code paths that had ignored them in the past.
    Gathered the logic for internal result sets into one place. (Bug #26934)
  * Fixed bad use of memory related to setup/util/GUI. (Bug #27315)
  * Added a new DSN "OPTION" (FLAG_ZERO_DATE_TO_MIN) to retrieve XXXX-00-00
    dates as the minimum allowed ODBC date (XXXX-01-01). Added another
    option (FLAG_MIN_DATE_TO_ZERO) to mirror this but for bound parameters.
    FLAG_MIN_DATE_TO_ZERO only changes 0000-01-01 to 0000-00-00. (Bug #13766)
  * Fixed possible crash if SQLBindCol() was not called before SQLSetPos().
    Fixed use of MYSQL structure pertaining to updating large blobs in
    cursors. (Bug #10562)</changelog>
<changelog author="anosek@suse.cz" date="1195041600">- updated to version 3.51.21r807
  Functionality added or changed:
  * Because of Bug #10491 in the server, character string results were
    sometimes incorrectly identified as SQL_VARBINARY. Until this server
    bug is corrected, the driver will identify all variable-length
    strings as SQL_VARCHAR.
  * An experimental binary package, without an installer, is available
    for Microsoft Windows x64 Edition.
  * Binary packages as disk images with installers are now available
    for Mac OS X.
  * Binary packages for Sun Solaris are available as PKG packages.
  * Added FLAG_MULTI_STATEMENTS to allow issuing queries that contain
    multiple statements. Also added to the setup GUI. (Bug #7445)
  * Removed support for the TRACE and TRACEFILE DSN options. The standard
    ODBC logging should be used.
  * Added support for SQL_ATTR_ROW_BIND_OFFSET_PTR in normal cursors.
    (Bug #6741)
  * Added SSL options to the GUI setup dialog.
  Lots of bugfixes</changelog>
<changelog author="anosek@suse.cz" date="1204113600">- updated to version 3.51.23r998
  Functionality added or changed:
  * Removed workaround for bug #10491 in the server, which has now been
    fixed in MySQL Server 5.0.48 and 5.1.21.
  * Added FLAG_COLUMN_SIZE_S32 to limit the reported column size to a
    signed 32-bit integer. This option is automatically enabled for ADO
    applications, in order to work around a bug in ADO. (Bug #13776)
  Bugs fixed:
  * Allowed connections to be enlisted in distributed transactions, even
    though the driver doesn't support them. (Bug #32727)
  * Cleaning up environment handles in multithread environments could result
    in a five (or more) second delay. (Bug #32366)
  * SQLAllocStmt() and SQLFreeStmt() did not synchronize access to the
    list of statements associated with a connection. (Bug #32857)
  * SQLGetInfo() returned the wrong value for SQL_DATABASE_NAME when no
    database was selected. (Bug #3780)
  * Changing the DSN name when editing a DSN left behind the DSN
    under the old name in addition to creating the new entry. (Bug #31165)
  * SQLGetInfo() reported that UNION was not supported. (Bug #32253)
  * The non-portable "English" locale was used for handling of decimal
    and floating-point values instead of "C". (Bug #32294)
  * Unsigned integer values greater than the maximum value of a signed
    integer were handled incorrectly. (Bug #32171)
  * The wrong result was returned by SQLGetData() when the data was an
    empty string and a zero-sized buffer was specified. (Bug #30958)
- dropped obsoleted patch (setlocale.patch)
- added patch (compile.patch)</changelog>
<changelog author="anosek@suse.cz" date="1212667200">- updated to version 3.51.25r1093
  Bugs fixed:
  * SQL_DESC_FIXED_PREC_SCALE was possibly being reported as true, but it's
    never supported. (Bug #35581)
  * ADO failed to retrieve the length of LONGBLOB columns. (Bug #12805)
  * ConfigDSN() returned FALSE when the dialog was cancelled by the user.
  * Static cursor was unable to be used through ADO when dynamic cursors
    were enabled. (Bug #27351)
  * Driver would crash when requesting the current catalog before connecting.
    (Bug #16653)
  * Catalog data was truncated due to NAME_LEN only allocating a single byte
    for characters. (Bug #32864)
  * SSL connections could not be established properly. Added the server
    certificate verification flag. (Bug #29955)
  * Added deprecated SQLSetParam function. (Bug #29871)
  * Recordset-based update fails if blob field is queried. (Bug #19065)
  * Allows dirty reading with SQL_TXN_READ_COMMITTED isolation through ODBC
    (Bug #31959)
  * Don't cache results and SQLExtendedFetch work badly together.
    (Bug #32420)
  * SQLFetch or SQLFetchScroll returns negative data length using SQL_C_WCHAR.
    (Bug #31220)
  * An SQLSTATE of HY000 was returned when a stored procedure was not found,
    instead of 42000. This caused problems with ADO's adCmdUnknown option.
    (Bug #27158)
  * Identifiers were quoted incorrectly by SQLColumns(). (Bug #32989)
  * Worked around bug in iODBC installer library that made it impossible
    to create a system DSN, particularly on Mac OS X, where the installer
    created the /Library/ODBC/*.ini files with insufficient permissions.
    (Bug #31495)
  * Unresolved symbols "min" and "max" in libmyodbc3.so w/gcc 4.2.
    (Bug #34256)
  * Fixed some incorrect information returned by SQLGetTypeInfo().
    (Bug #30918)
  * Values bound using the SQL_C_CHAR value type but with numeric
    parameter type were not correctly escaped. (Bug #34575)
  * The driver reported that it does not support SQLProcedureColumns(),
    which causes problems for ADO. (Bug #33298)
- fixed ODBC setup library for mysql is missing in distribution (bnc#336135)
  - added --enable-gui parameter to configure
  - added build dependency qt3-devel
- dropped obsoleted patch (compile.patch)</changelog>
<changelog author="anosek@suse.cz" date="1216123200">- updated to version 3.51.26r1127
  Bugs fixed:
  * Access Violation in myodbc3.dll (Bug #30770)
  * Truncation of "SHOW CREATE TABLE" result (Bug #24131)
  * Added a new connection option FLAG_NO_BINARY_RESULT. Fixed
    field type charset 63 problem. (Bug #29402)
- fixed Database Can Not Connect to a MySQL due to missing files (bnc#144602)
  - added Supplements: packageand(unixODBC:mysql-shared) into spec file</changelog>
<changelog author="mhrusecky@suse.cz" date="1233662400">- updated to version 3.51.27r695
  Bugs fixed:
  * Cannot use ssl (Bug #29955)
  * Enable auto reconnect doesn't work (Bug #37179)
  * Add read and write timeouts on the connection (Bug #40407)
- automatic installation and deinstallation (bnc#420817)
- using current version number in sample files</changelog>
<changelog author="mhrusecky@suse.cz" date="1249387200">- using my_bool instead of bool (fixed compilation error)</changelog>
<changelog author="mhrusecky@suse.cz" date="1258545600">- fixed setup registration (bnc#552330)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1259582400">- use %configure to fix RPM_OPT_FLAGS usage on C++ code</changelog>
<changelog author="coolo@novell.com" date="1259755200">- update patch to fix build</changelog>
<changelog author="idonmez@novell.com" date="1306411200">- Updated to version 5.1.8,
  see /usr/share/doc/packages/MyODBC-unixODBC/ChangeLog
- Disable GUI since other distributions dropped it and its outdated
- Drop outdated patches:
  * MyODBC-3.51.26r1127.diff
  * MyODBC-unixODBC-my_bool-cleanup.patch
- Add new patches from Fedora to fix compile against MySQL 5.5
  * MyODBC-unixODBC-my_free.patch
  * MyODBC-unixODBC-add-mysys.patch
  * MyODBC-unixODBC-64bit.patch</changelog>
<changelog author="idonmez@novell.com" date="1306756800">- Fix provides/obsoletes on MyODBC-libiodbc</changelog>
<changelog author="idonmez@novell.com" date="1306929600">- Don't make libmyodbc5 a separate library, its has a wrong soname,
  and internal</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="cfarrell@suse.com" date="1340107200">- license update: SUSE-GPL-2.0-with-FLOSS-exception
  SPDX format (or use the spreadsheet linked at http://license.opensuse.org
  if there is no entry on http://www.spdx.org/licenses)</changelog>
<changelog author="mhrusecky@suse.cz" date="1359374400">- disabling building of test library as it is broken and we don't
  ship it anyway</changelog>
<changelog author="kstreitova@suse.com" date="1430308800">- add MyODBC-unixODBC-my_malloc_when_using_my_free.patch to fix
  segfault in myodbc-install when freeing pointer (allocated with
  basic malloc()) using x_free()/my_free(). my_free() accesses 8
  bytes before the pointer returned by malloc(), hence my_malloc()
  is needed [bnc#881624]</changelog>

</package>
<package pkgid="9509899a63ca79e771ff6507968ca6ec64ed8e8cb46f52094ac68cfe9c16376e" name="MyODBC-unixODBC" arch="src">
    <version epoch="0" ver="5.1.8" rel="13.6.1"/>

<changelog author="anosek@suse.cz" date="1184328000">- updated to version 3.51.16r494
  * Added support for using SSL. This is not yet exposed in the setup GUI,
    but must be enabled through configuration files or the DSN. (Bug #12918)
  Bugs fixed:
  * "Out of sync error" or "MySQL Server has gone away" after executing a
    stored procedure (Bug #27544)
  * SQL_C_TYPE_DATE, SQL_C_TYPE_TIME, and SQL_C_TYPE_TIMESTAMP were formatted
    without seperators, which could cause them to get interpreted incorrectly
    in some cases due to server bugs. (Bug #15773)
  * Calls to SQLNativeSql could cause stack corruption due to an incorrect
    pointer cast. (Bug #28758)
  * SQLSetPos could update or delete the wrong rows when the original result
    set did not contain all columns of a multi-part primary key. (Bug #28255)
  * SQLTables() did not distinguish tables from views. (Bug #23031)
  * The wrong function was used for freeing the artificial result sets that
    are created by some catalog functions. (Bug #22797)
  * Accessing the results of catalog functions could cause a crash when the
    "Don't cache results" option was set and a forward-only cursor was
    being used. (Bug #4657)
  * SQL_WVARCHAR and SQL_WLONGVARCHAR parameters were not properly quoted
    and escaped. (Bug #16235)
  * SQLForeignKeys() did not properly escape wildcard characters in its
    table name parameters when retrieving information. (Bug #27723)
  * Calls to SQLSetPos() could cause the driver to incorrectly calculate the
    length of some fields. (Bug #16917)</changelog>
<changelog author="anosek@suse.cz" date="1185451200">- updated to version 3.51.17r581
  Functionality added or changed:
  * Added an option (CHARSET) for specifying the default character
    set for a connection. This must be used instead of a "SET NAMES"
    statement. Also available from the GUI setup dialog. (Related
    to Bug #6667 and Bug #9498.)
  * Dis-allow NULL ptr for null indicator when calling SQLGetData()
    if value is null. Now returns SQL_ERROR w/state 22002.
  * Fixed calling convention ptr and wrong free in myodbc3i, and fixed
    the null terminating (was only one, not two) when writing DSN to string.
  Bugs fixed:
  * myodbc3i did not correctly format driver info, which could cause the
    installation to fail. (Bug #29709)
  * Multiple result sets were not correctly flushed when a statement
    handle was closed. (Bug #16817)
  * SQLProcedures() did not handle NULL parameters, which could lead to
    crashes (Bug #28316)
  * SQLColumns() did not handle many of its parameters correctly, which
    could lead to incorrect results. The table name argument was not handled
    as a pattern value, and most arguments were not escaped correctly when
    they contained non-alphanumeric characters. (Bug #8860)
  * If there was more than one unique key on a table, the correct fields
    were not used in handling SQLSetPos(). (Bug #10563)
  * SQLColAttribute() returned the wrong value for SQL_DESC_BASE_COLUMN_NAME
    and SQL_DESC_BASE_TABLE_NAME for aliased fields. (Bug #6197)
  * Calling SQLGetDiagField with RecNumber 0,DiagIdentifier
    NOT 0 returns SQL_ERROR (Bug #16224)
  * Correctly return error if SQLBindCol is called with an invalid column
  * Fixed error handling of OOM and bad connections in catalog functions.
    This might raise errors in code paths that had ignored them in the past.
    Gathered the logic for internal result sets into one place. (Bug #26934)
  * Fixed bad use of memory related to setup/util/GUI. (Bug #27315)
  * Added a new DSN "OPTION" (FLAG_ZERO_DATE_TO_MIN) to retrieve XXXX-00-00
    dates as the minimum allowed ODBC date (XXXX-01-01). Added another
    option (FLAG_MIN_DATE_TO_ZERO) to mirror this but for bound parameters.
    FLAG_MIN_DATE_TO_ZERO only changes 0000-01-01 to 0000-00-00. (Bug #13766)
  * Fixed possible crash if SQLBindCol() was not called before SQLSetPos().
    Fixed use of MYSQL structure pertaining to updating large blobs in
    cursors. (Bug #10562)</changelog>
<changelog author="anosek@suse.cz" date="1195041600">- updated to version 3.51.21r807
  Functionality added or changed:
  * Because of Bug #10491 in the server, character string results were
    sometimes incorrectly identified as SQL_VARBINARY. Until this server
    bug is corrected, the driver will identify all variable-length
    strings as SQL_VARCHAR.
  * An experimental binary package, without an installer, is available
    for Microsoft Windows x64 Edition.
  * Binary packages as disk images with installers are now available
    for Mac OS X.
  * Binary packages for Sun Solaris are available as PKG packages.
  * Added FLAG_MULTI_STATEMENTS to allow issuing queries that contain
    multiple statements. Also added to the setup GUI. (Bug #7445)
  * Removed support for the TRACE and TRACEFILE DSN options. The standard
    ODBC logging should be used.
  * Added support for SQL_ATTR_ROW_BIND_OFFSET_PTR in normal cursors.
    (Bug #6741)
  * Added SSL options to the GUI setup dialog.
  Lots of bugfixes</changelog>
<changelog author="anosek@suse.cz" date="1204113600">- updated to version 3.51.23r998
  Functionality added or changed:
  * Removed workaround for bug #10491 in the server, which has now been
    fixed in MySQL Server 5.0.48 and 5.1.21.
  * Added FLAG_COLUMN_SIZE_S32 to limit the reported column size to a
    signed 32-bit integer. This option is automatically enabled for ADO
    applications, in order to work around a bug in ADO. (Bug #13776)
  Bugs fixed:
  * Allowed connections to be enlisted in distributed transactions, even
    though the driver doesn't support them. (Bug #32727)
  * Cleaning up environment handles in multithread environments could result
    in a five (or more) second delay. (Bug #32366)
  * SQLAllocStmt() and SQLFreeStmt() did not synchronize access to the
    list of statements associated with a connection. (Bug #32857)
  * SQLGetInfo() returned the wrong value for SQL_DATABASE_NAME when no
    database was selected. (Bug #3780)
  * Changing the DSN name when editing a DSN left behind the DSN
    under the old name in addition to creating the new entry. (Bug #31165)
  * SQLGetInfo() reported that UNION was not supported. (Bug #32253)
  * The non-portable "English" locale was used for handling of decimal
    and floating-point values instead of "C". (Bug #32294)
  * Unsigned integer values greater than the maximum value of a signed
    integer were handled incorrectly. (Bug #32171)
  * The wrong result was returned by SQLGetData() when the data was an
    empty string and a zero-sized buffer was specified. (Bug #30958)
- dropped obsoleted patch (setlocale.patch)
- added patch (compile.patch)</changelog>
<changelog author="anosek@suse.cz" date="1212667200">- updated to version 3.51.25r1093
  Bugs fixed:
  * SQL_DESC_FIXED_PREC_SCALE was possibly being reported as true, but it's
    never supported. (Bug #35581)
  * ADO failed to retrieve the length of LONGBLOB columns. (Bug #12805)
  * ConfigDSN() returned FALSE when the dialog was cancelled by the user.
  * Static cursor was unable to be used through ADO when dynamic cursors
    were enabled. (Bug #27351)
  * Driver would crash when requesting the current catalog before connecting.
    (Bug #16653)
  * Catalog data was truncated due to NAME_LEN only allocating a single byte
    for characters. (Bug #32864)
  * SSL connections could not be established properly. Added the server
    certificate verification flag. (Bug #29955)
  * Added deprecated SQLSetParam function. (Bug #29871)
  * Recordset-based update fails if blob field is queried. (Bug #19065)
  * Allows dirty reading with SQL_TXN_READ_COMMITTED isolation through ODBC
    (Bug #31959)
  * Don't cache results and SQLExtendedFetch work badly together.
    (Bug #32420)
  * SQLFetch or SQLFetchScroll returns negative data length using SQL_C_WCHAR.
    (Bug #31220)
  * An SQLSTATE of HY000 was returned when a stored procedure was not found,
    instead of 42000. This caused problems with ADO's adCmdUnknown option.
    (Bug #27158)
  * Identifiers were quoted incorrectly by SQLColumns(). (Bug #32989)
  * Worked around bug in iODBC installer library that made it impossible
    to create a system DSN, particularly on Mac OS X, where the installer
    created the /Library/ODBC/*.ini files with insufficient permissions.
    (Bug #31495)
  * Unresolved symbols "min" and "max" in libmyodbc3.so w/gcc 4.2.
    (Bug #34256)
  * Fixed some incorrect information returned by SQLGetTypeInfo().
    (Bug #30918)
  * Values bound using the SQL_C_CHAR value type but with numeric
    parameter type were not correctly escaped. (Bug #34575)
  * The driver reported that it does not support SQLProcedureColumns(),
    which causes problems for ADO. (Bug #33298)
- fixed ODBC setup library for mysql is missing in distribution (bnc#336135)
  - added --enable-gui parameter to configure
  - added build dependency qt3-devel
- dropped obsoleted patch (compile.patch)</changelog>
<changelog author="anosek@suse.cz" date="1216123200">- updated to version 3.51.26r1127
  Bugs fixed:
  * Access Violation in myodbc3.dll (Bug #30770)
  * Truncation of "SHOW CREATE TABLE" result (Bug #24131)
  * Added a new connection option FLAG_NO_BINARY_RESULT. Fixed
    field type charset 63 problem. (Bug #29402)
- fixed Database Can Not Connect to a MySQL due to missing files (bnc#144602)
  - added Supplements: packageand(unixODBC:mysql-shared) into spec file</changelog>
<changelog author="mhrusecky@suse.cz" date="1233662400">- updated to version 3.51.27r695
  Bugs fixed:
  * Cannot use ssl (Bug #29955)
  * Enable auto reconnect doesn't work (Bug #37179)
  * Add read and write timeouts on the connection (Bug #40407)
- automatic installation and deinstallation (bnc#420817)
- using current version number in sample files</changelog>
<changelog author="mhrusecky@suse.cz" date="1249387200">- using my_bool instead of bool (fixed compilation error)</changelog>
<changelog author="mhrusecky@suse.cz" date="1258545600">- fixed setup registration (bnc#552330)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1259582400">- use %configure to fix RPM_OPT_FLAGS usage on C++ code</changelog>
<changelog author="coolo@novell.com" date="1259755200">- update patch to fix build</changelog>
<changelog author="idonmez@novell.com" date="1306411200">- Updated to version 5.1.8,
  see /usr/share/doc/packages/MyODBC-unixODBC/ChangeLog
- Disable GUI since other distributions dropped it and its outdated
- Drop outdated patches:
  * MyODBC-3.51.26r1127.diff
  * MyODBC-unixODBC-my_bool-cleanup.patch
- Add new patches from Fedora to fix compile against MySQL 5.5
  * MyODBC-unixODBC-my_free.patch
  * MyODBC-unixODBC-add-mysys.patch
  * MyODBC-unixODBC-64bit.patch</changelog>
<changelog author="idonmez@novell.com" date="1306756800">- Fix provides/obsoletes on MyODBC-libiodbc</changelog>
<changelog author="idonmez@novell.com" date="1306929600">- Don't make libmyodbc5 a separate library, its has a wrong soname,
  and internal</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="cfarrell@suse.com" date="1340107200">- license update: SUSE-GPL-2.0-with-FLOSS-exception
  SPDX format (or use the spreadsheet linked at http://license.opensuse.org
  if there is no entry on http://www.spdx.org/licenses)</changelog>
<changelog author="mhrusecky@suse.cz" date="1359374400">- disabling building of test library as it is broken and we don't
  ship it anyway</changelog>
<changelog author="kstreitova@suse.com" date="1430308800">- add MyODBC-unixODBC-my_malloc_when_using_my_free.patch to fix
  segfault in myodbc-install when freeing pointer (allocated with
  basic malloc()) using x_free()/my_free(). my_free() accesses 8
  bytes before the pointer returned by malloc(), hence my_malloc()
  is needed [bnc#881624]</changelog>
<changelog author="kstreitova@suse.com" date="1439985600">- add MyODBC-unixODBC-is_minimum_version.patch to backport fix from
  v5.2.3 related to incorrect implementation of is_minimum_version()
  [bnc#921143]
- add MyODBC-unixODBC-remove_use_of_test_macro.patch to port
  changes found in v5.2 and beyond to prevent
  "isql: symbol lookup error: /usr/lib64/libmyodbc5.so: undefined"
  error caused by an undefined test() macro in libmyodbc5.so
  and also not found in libmysqlclient.</changelog>

</package>
<package pkgid="6ae30df9eaaad2be2411e6f9770446b73cb8de140576720650988d9ac90973f4" name="MyODBC-unixODBC" arch="x86_64">
    <version epoch="0" ver="5.1.8" rel="13.3.1"/>

<changelog author="mhrusecky@suse.cz" date="1249387200">- using my_bool instead of bool (fixed compilation error)</changelog>
<changelog author="mhrusecky@suse.cz" date="1258545600">- fixed setup registration (bnc#552330)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1259582400">- use %configure to fix RPM_OPT_FLAGS usage on C++ code</changelog>
<changelog author="coolo@novell.com" date="1259755200">- update patch to fix build</changelog>
<changelog author="idonmez@novell.com" date="1306411200">- Updated to version 5.1.8,
  see /usr/share/doc/packages/MyODBC-unixODBC/ChangeLog
- Disable GUI since other distributions dropped it and its outdated
- Drop outdated patches:
  * MyODBC-3.51.26r1127.diff
  * MyODBC-unixODBC-my_bool-cleanup.patch
- Add new patches from Fedora to fix compile against MySQL 5.5
  * MyODBC-unixODBC-my_free.patch
  * MyODBC-unixODBC-add-mysys.patch
  * MyODBC-unixODBC-64bit.patch</changelog>
<changelog author="idonmez@novell.com" date="1306756800">- Fix provides/obsoletes on MyODBC-libiodbc</changelog>
<changelog author="idonmez@novell.com" date="1306929600">- Don't make libmyodbc5 a separate library, its has a wrong soname,
  and internal</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="cfarrell@suse.com" date="1340107200">- license update: SUSE-GPL-2.0-with-FLOSS-exception
  SPDX format (or use the spreadsheet linked at http://license.opensuse.org
  if there is no entry on http://www.spdx.org/licenses)</changelog>
<changelog author="mhrusecky@suse.cz" date="1359374400">- disabling building of test library as it is broken and we don't
  ship it anyway</changelog>
<changelog author="kstreitova@suse.com" date="1430308800">- add MyODBC-unixODBC-my_malloc_when_using_my_free.patch to fix
  segfault in myodbc-install when freeing pointer (allocated with
  basic malloc()) using x_free()/my_free(). my_free() accesses 8
  bytes before the pointer returned by malloc(), hence my_malloc()
  is needed [bnc#881624]</changelog>

</package>
<package pkgid="6f0ee58b5b9e1813432eb06911a7e17773515a5dc6e3dc4d080b49078dcc98b4" name="MyODBC-unixODBC" arch="x86_64">
    <version epoch="0" ver="5.1.8" rel="13.6.1"/>

<changelog author="mhrusecky@suse.cz" date="1249387200">- using my_bool instead of bool (fixed compilation error)</changelog>
<changelog author="mhrusecky@suse.cz" date="1258545600">- fixed setup registration (bnc#552330)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1259582400">- use %configure to fix RPM_OPT_FLAGS usage on C++ code</changelog>
<changelog author="coolo@novell.com" date="1259755200">- update patch to fix build</changelog>
<changelog author="idonmez@novell.com" date="1306411200">- Updated to version 5.1.8,
  see /usr/share/doc/packages/MyODBC-unixODBC/ChangeLog
- Disable GUI since other distributions dropped it and its outdated
- Drop outdated patches:
  * MyODBC-3.51.26r1127.diff
  * MyODBC-unixODBC-my_bool-cleanup.patch
- Add new patches from Fedora to fix compile against MySQL 5.5
  * MyODBC-unixODBC-my_free.patch
  * MyODBC-unixODBC-add-mysys.patch
  * MyODBC-unixODBC-64bit.patch</changelog>
<changelog author="idonmez@novell.com" date="1306756800">- Fix provides/obsoletes on MyODBC-libiodbc</changelog>
<changelog author="idonmez@novell.com" date="1306929600">- Don't make libmyodbc5 a separate library, its has a wrong soname,
  and internal</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="cfarrell@suse.com" date="1340107200">- license update: SUSE-GPL-2.0-with-FLOSS-exception
  SPDX format (or use the spreadsheet linked at http://license.opensuse.org
  if there is no entry on http://www.spdx.org/licenses)</changelog>
<changelog author="mhrusecky@suse.cz" date="1359374400">- disabling building of test library as it is broken and we don't
  ship it anyway</changelog>
<changelog author="kstreitova@suse.com" date="1430308800">- add MyODBC-unixODBC-my_malloc_when_using_my_free.patch to fix
  segfault in myodbc-install when freeing pointer (allocated with
  basic malloc()) using x_free()/my_free(). my_free() accesses 8
  bytes before the pointer returned by malloc(), hence my_malloc()
  is needed [bnc#881624]</changelog>
<changelog author="kstreitova@suse.com" date="1439985600">- add MyODBC-unixODBC-is_minimum_version.patch to backport fix from
  v5.2.3 related to incorrect implementation of is_minimum_version()
  [bnc#921143]
- add MyODBC-unixODBC-remove_use_of_test_macro.patch to port
  changes found in v5.2 and beyond to prevent
  "isql: symbol lookup error: /usr/lib64/libmyodbc5.so: undefined"
  error caused by an undefined test() macro in libmyodbc5.so
  and also not found in libmysqlclient.</changelog>

</package>
<package pkgid="e279d1b445c482bf7745693744eb86acef25e85364f9a4c8d666052875dcb705" name="NetworkManager" arch="i586">
    <version epoch="0" ver="0.9.8.8" rel="10.1"/>

<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>

</package>
<package pkgid="cd015ea046ec6caf038dbab2fb71803a55b16a6dd7b267d72d11299e13568c7c" name="NetworkManager" arch="i586">
    <version epoch="0" ver="0.9.8.8" rel="13.1"/>

<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>
<changelog author="meissner@suse.com" date="1448884800">- Rebuild against ppp updated to 2.4.7. bsc#957014</changelog>

</package>
<package pkgid="9938abf24dc8e4eb17ae5819a084e19490aad850ead94d823d9cfca67a0cc952" name="NetworkManager" arch="i586">
    <version epoch="0" ver="0.9.8.8" rel="4.1"/>

<changelog author="fcrozat@suse.com" date="1354795200">- Update systemd-network-config.patch: ensure
  NetworkManager.service is Before network.target (bnc#789421).</changelog>
<changelog author="mt@suse.com" date="1358164800">- Install network.service alias, that points to the enabled service
  and obsoletes the use of NETWORKMANAGER=yes/no sysconfig variable
  in /etc/sysconfig/network/config (bnc#764055,bnc#764336,bnc#798348).
- Requires sysconfig-0.80.0</changelog>
<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>

</package>
<package pkgid="395a1b08a1f250743e03672b5326945a3cc41eee5c7553d1243444ffcc433935" name="NetworkManager" arch="src">
    <version epoch="0" ver="0.9.8.8" rel="10.1"/>

<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>

</package>
<package pkgid="0a197e00bc860e0a03020f13d4edc8cf611e91c81d3656ff14aa9cd0744bddfd" name="NetworkManager" arch="src">
    <version epoch="0" ver="0.9.8.8" rel="13.1"/>

<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>
<changelog author="meissner@suse.com" date="1448884800">- Rebuild against ppp updated to 2.4.7. bsc#957014</changelog>

</package>
<package pkgid="b55414a2dc36cdc8d9fc3f05856b27017454dd35ff95f8d7d2af2eb18d39f5d9" name="NetworkManager" arch="src">
    <version epoch="0" ver="0.9.8.8" rel="4.1"/>

<changelog author="fcrozat@suse.com" date="1354795200">- Update systemd-network-config.patch: ensure
  NetworkManager.service is Before network.target (bnc#789421).</changelog>
<changelog author="mt@suse.com" date="1358164800">- Install network.service alias, that points to the enabled service
  and obsoletes the use of NETWORKMANAGER=yes/no sysconfig variable
  in /etc/sysconfig/network/config (bnc#764055,bnc#764336,bnc#798348).
- Requires sysconfig-0.80.0</changelog>
<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>

</package>
<package pkgid="9d0f5557140b432af734a25facf136ea5716ec4d2926686099f120f18a8bd972" name="NetworkManager" arch="x86_64">
    <version epoch="0" ver="0.9.8.8" rel="10.1"/>

<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>

</package>
<package pkgid="20e639bc1eaccacfb0ba4ad043ecbfcde7fe1528f96c38fb212f5a9478269b93" name="NetworkManager" arch="x86_64">
    <version epoch="0" ver="0.9.8.8" rel="13.1"/>

<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>
<changelog author="meissner@suse.com" date="1448884800">- Rebuild against ppp updated to 2.4.7. bsc#957014</changelog>

</package>
<package pkgid="96b85e2f8c2e9156c19aeed65c6d5704f77846e17e5dac2d24ec737c6b851f4f" name="NetworkManager" arch="x86_64">
    <version epoch="0" ver="0.9.8.8" rel="4.1"/>

<changelog author="fcrozat@suse.com" date="1354795200">- Update systemd-network-config.patch: ensure
  NetworkManager.service is Before network.target (bnc#789421).</changelog>
<changelog author="mt@suse.com" date="1358164800">- Install network.service alias, that points to the enabled service
  and obsoletes the use of NETWORKMANAGER=yes/no sysconfig variable
  in /etc/sysconfig/network/config (bnc#764055,bnc#764336,bnc#798348).
- Requires sysconfig-0.80.0</changelog>
<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>

</package>
<package pkgid="e36578d623519449c8775f329eaf8f36683d3d4c5bd8ee784ec66ec6e8928136" name="NetworkManager-devel" arch="i586">
    <version epoch="0" ver="0.9.8.8" rel="10.1"/>

<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>

</package>
<package pkgid="f44f2b1fe41b365ae09c9f7913df64ac794216e88d155c9f0ead0da3e01b83f3" name="NetworkManager-devel" arch="i586">
    <version epoch="0" ver="0.9.8.8" rel="13.1"/>

<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>
<changelog author="meissner@suse.com" date="1448884800">- Rebuild against ppp updated to 2.4.7. bsc#957014</changelog>

</package>
<package pkgid="3845efef1f148998fbff6722eb07307e82cf82642bf75cc93955bffe15d32968" name="NetworkManager-devel" arch="i586">
    <version epoch="0" ver="0.9.8.8" rel="4.1"/>

<changelog author="fcrozat@suse.com" date="1354795200">- Update systemd-network-config.patch: ensure
  NetworkManager.service is Before network.target (bnc#789421).</changelog>
<changelog author="mt@suse.com" date="1358164800">- Install network.service alias, that points to the enabled service
  and obsoletes the use of NETWORKMANAGER=yes/no sysconfig variable
  in /etc/sysconfig/network/config (bnc#764055,bnc#764336,bnc#798348).
- Requires sysconfig-0.80.0</changelog>
<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>

</package>
<package pkgid="635a6d7cd904798b20538e600ed1517c88ff7a6fec5da58d3d065ad52b61976e" name="NetworkManager-devel" arch="x86_64">
    <version epoch="0" ver="0.9.8.8" rel="10.1"/>

<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>

</package>
<package pkgid="4e51f397e891e56c072a5aac006c5a2672c87c3acc23337141c07d0a75e45370" name="NetworkManager-devel" arch="x86_64">
    <version epoch="0" ver="0.9.8.8" rel="13.1"/>

<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>
<changelog author="meissner@suse.com" date="1448884800">- Rebuild against ppp updated to 2.4.7. bsc#957014</changelog>

</package>
<package pkgid="3832448eb0939de52750aec471b43265dc2dfe25ae39222b400bc19dfdff7aa9" name="NetworkManager-devel" arch="x86_64">
    <version epoch="0" ver="0.9.8.8" rel="4.1"/>

<changelog author="fcrozat@suse.com" date="1354795200">- Update systemd-network-config.patch: ensure
  NetworkManager.service is Before network.target (bnc#789421).</changelog>
<changelog author="mt@suse.com" date="1358164800">- Install network.service alias, that points to the enabled service
  and obsoletes the use of NETWORKMANAGER=yes/no sysconfig variable
  in /etc/sysconfig/network/config (bnc#764055,bnc#764336,bnc#798348).
- Requires sysconfig-0.80.0</changelog>
<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>

</package>
<package pkgid="30036bed8c3aa2ebe6bd8cf4774492a5782968a6247e1524a81ea2064cde5cca" name="NetworkManager-devel-32bit" arch="x86_64">
    <version epoch="0" ver="0.9.8.8" rel="10.1"/>

<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>

</package>
<package pkgid="1f3b11a3c583ad7825686e2e3803cec8e7ddbe576edafaf5ea19dd7eb9962222" name="NetworkManager-devel-32bit" arch="x86_64">
    <version epoch="0" ver="0.9.8.8" rel="13.1"/>

<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>
<changelog author="meissner@suse.com" date="1448884800">- Rebuild against ppp updated to 2.4.7. bsc#957014</changelog>

</package>
<package pkgid="dbfd70c6946f42695cff60da45858780006d3050f43f6a698f2197b5876f660a" name="NetworkManager-devel-32bit" arch="x86_64">
    <version epoch="0" ver="0.9.8.8" rel="4.1"/>

<changelog author="fcrozat@suse.com" date="1354795200">- Update systemd-network-config.patch: ensure
  NetworkManager.service is Before network.target (bnc#789421).</changelog>
<changelog author="mt@suse.com" date="1358164800">- Install network.service alias, that points to the enabled service
  and obsoletes the use of NETWORKMANAGER=yes/no sysconfig variable
  in /etc/sysconfig/network/config (bnc#764055,bnc#764336,bnc#798348).
- Requires sysconfig-0.80.0</changelog>
<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>

</package>
<package pkgid="906ab33472ad977eeaf79ef95143c2da7e68dfec7228c45c5add285116f9fe78" name="NetworkManager-gnome" arch="i586">
    <version epoch="0" ver="0.9.8.4" rel="20.3"/>

<changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="dimstar@opensuse.org" date="1328702400">- Add NetworkManager-gnome-link-gkr.patch: Fix linking with
  gnome-keyring in a gconf-helpers test program.
- Add call to autoreconf in %prep, as above patch touches the build
  system.</changelog>
<changelog author="dimstar@opensuse.org" date="1329566400">- Update to version 0.9.3.990:
  + Fix interaction of single-connection edit mode with PolicyKit
  + Add EAP-FAST support
  + Make editor connection list sortable
  + Ensure mobile broadband provider list is sensitized correctly
- Drop NetworkManager-gnome-link-gkr.patch: fixed upstream.
- Remove call to autoreconf: it was only needed for above patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332244800">- Update to version 0.9.3.997:
  + More flexible build-time warnings with
  - -enable-more-warnings=[yes|no|error]
  + Removed unused PolicyKit configure check
  + Lazily initialize the notification service for faster startup
  + Fix various memory leaks
  + Warn user if CA certificate is left blank in the editor for
    802.1x
  + Disabled creation of WPA-protected Ad-Hoc WiFi networks due to
    kernel bugs
- Remove polkit-devel BuildRequires: removed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.1:
  + No change compared to 0.9.4.1.
- Changes from version 0.9.4.0:
  + Do not run our own secret agent when GNOME Shell is running.
  + Several bug fixes.
  + Updated translations.
- Drop NetworkManager-gnome-OnlyShowIn.patch: this was implemented
  with NotShowIn upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Add nm-applet-private-connection.patch: Create private
  connections if the user is not authorized.
  Some distributions do not allow the normal user to create a
  system connection without the polkit authentication. This commit
  checks the polkit policy and creates private connections if the
  user is not authorized. [bnc#751211].
- Add polkit-devel BuildRequires, as the above patch makes use
  of it.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Fixed UI mnemonics.
  + Various crash and stability fixes.
  + Allow appending DNS servers and domains in automatic addressing
    mode.
  + Fix defaults for PPP echo values.
  + Show IPv6 addressing page for VPN plugins that support it.
  + Port to GSettings and split out 0.8 -&gt; 0.9 migration code into
    standalone tool.
- Pass --disable-migration to configure: no supported openSUSE
  version has NetworkManager &lt;= 0.8 anymore, so we do not need the
  migration tool.
- Replace gconf schema handling macros with glib variants.
- Drop gconf2-devel BuildRequires: without the migration tool,
  there is no need to access gconf anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1343131200">- Update to version 0.9.5.96:
  + Recognize PKCS#12 certificates imported from Firefox
  + Pre-fill CDMA username/password in the mobile broadband wizard.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Only handle VPN secrets for GNOME Shell 3.3 and lower.</changelog>
<changelog author="dimstar@opensuse.org" date="1344859200">- Update to version 0.9.6.2:
  + Fix GNOME Bluetooth plugin DUN modem detection and setup.</changelog>
<changelog author="dimstar@opensuse.org" date="1351339200">- Update to version 0.9.6.4:
  + Better cooperation with GNOME Shell
  + Fix connection editing from external tools when the editor is
    already open
  + Backport new libnm-gtk API to work with recent GNOME Control
    Center versions
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Fix nm-applet-private-connection.patch: Allow to select a BT
  paired devices a PAN/NAP device. Without this fix,
  gnome-control-center crashes at that moment.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979201">- Update to version 0.9.7.995:
  + Rework connection editor main UI to better support different
    connection types
  + Add connection editor support for WiMAX, Infiniband, Bond, and
    VLAN connections
  + Suggest "seen BSSIDs" for WiFi BSSID entry
  + Add connection editor support for autoconnect VPN connections
  + Add a "General" page to the connection editor and move general
    options to it
  + Fix GNOME Bluetooth plugin for recent versions of GNOME
    Bluetooth and the GNOME Control Center
  + Add LTE and HSPA+ icons to the applet
  + Fix connection editor command-line passing to already-running
    instance
  + Suppress nm-applet notifications when GNOME Shell is running
  + Ensure 802.1x passwords default to "agent owned" and not
    system-wide
  + Default to using system CA certificates for new connections
  + Add support for ModemManager 0.7/0.8
  + Fix a crash when editing IP addresses with the XIM input
    framework
  + Fix handling of connection Zone when firewalld is active
  + Fix saving a connection when ignoring a missing CA certificate
- Add pkgconfig(mm-glib) BuildRequires: dependency for ModemManager
  support.
- Add pkgconfig(gudev-1.0) BuildRequires: new depdendency.
- Add gobject-introspection-devel BuildRequires: new dependency.
- Split new subpackage typelib-1_0-NMGtk-1_0.</changelog>
<changelog author="dimstar@opensuse.org" date="1360411200">- Update to version 0.9.7.997:
  + Ensure AP mode connections are treated as Hotspot too.
  + Build fixes.
  + Editor fixes.
  + Editor: hide widgets that aren't supported for VPNs on the
    general page.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Add manpages for nm-applet and nm-connection-editor.
- Stop passing --disable-more-warnings to configure, it builds fine
  without it now.
- Exchange NetworkManager-devel BuildRequires for
  pkgconfig(NetworkManager), pkgconfig(libnm-glib),
  pkgconfig(libnm-glib-vpn) and pkgconfig(libnm-util)
  BuildRequires, following what configure checks for.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Conversion from gnome-keyring to libsecret; libsecret is now
    required to build.
  + Editor no longer overwrites master interface name with the
    master UUID.
  + Fix crashes when using ModemManager 0.7/0.8.
  + Fix allowed values for VLAN ID and MTU in the editor.
  + Preserve existing PPP LCP echo failure and interval values.
  + Ensure Bridge STP checkbox values are saved.
  + Hide BSSID for Wi-Fi Ad-Hoc connections (it's autocreated by
    the kernel).
  + Ensure IPv6 next-hop/gateway values are sane.
  + Fix problems with the MAC address combo box on various pages.
  + Only request secrets from the user when allowed to.
  + Fix running with GTK+ 2.x.
  + Fix signal icons to work with newer libpng.
  + Don't show Wi-Fi Security combo when not required.
  + Improve applet icon size handling.
  + Show more helpful errors when VPN plugins are not installed.
  + Updated translations.
- Replace gnome-keyring-devel BuildRequires with
  pkgconfig(libsecret-unstable), following upstreams port to
  libsecret.</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) Requires (bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Fix handling of bonding mode and VLAN parent fields in editor.
  + Fix crash when failing to read secrets from the keyring.
  + nm-applet is no longer autostarted under GNOME.
  + Updated translations.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Rebase nm-applet-private-connection.patch for 0.9.8.4
  (bnc#751211)
- Add nm-applet-probe-radius-server-cert.patch to probe the
  certificate the RADIUS server (bnc#574266)</changelog>

</package>
<package pkgid="599e5f6ef8bd9847143cd9112a70b549069eb69d51d803c88cc0aa92a80bd573" name="NetworkManager-gnome" arch="src">
    <version epoch="0" ver="0.9.8.4" rel="20.3"/>

<changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="dimstar@opensuse.org" date="1328702400">- Add NetworkManager-gnome-link-gkr.patch: Fix linking with
  gnome-keyring in a gconf-helpers test program.
- Add call to autoreconf in %prep, as above patch touches the build
  system.</changelog>
<changelog author="dimstar@opensuse.org" date="1329566400">- Update to version 0.9.3.990:
  + Fix interaction of single-connection edit mode with PolicyKit
  + Add EAP-FAST support
  + Make editor connection list sortable
  + Ensure mobile broadband provider list is sensitized correctly
- Drop NetworkManager-gnome-link-gkr.patch: fixed upstream.
- Remove call to autoreconf: it was only needed for above patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332244800">- Update to version 0.9.3.997:
  + More flexible build-time warnings with
  - -enable-more-warnings=[yes|no|error]
  + Removed unused PolicyKit configure check
  + Lazily initialize the notification service for faster startup
  + Fix various memory leaks
  + Warn user if CA certificate is left blank in the editor for
    802.1x
  + Disabled creation of WPA-protected Ad-Hoc WiFi networks due to
    kernel bugs
- Remove polkit-devel BuildRequires: removed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.1:
  + No change compared to 0.9.4.1.
- Changes from version 0.9.4.0:
  + Do not run our own secret agent when GNOME Shell is running.
  + Several bug fixes.
  + Updated translations.
- Drop NetworkManager-gnome-OnlyShowIn.patch: this was implemented
  with NotShowIn upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Add nm-applet-private-connection.patch: Create private
  connections if the user is not authorized.
  Some distributions do not allow the normal user to create a
  system connection without the polkit authentication. This commit
  checks the polkit policy and creates private connections if the
  user is not authorized. [bnc#751211].
- Add polkit-devel BuildRequires, as the above patch makes use
  of it.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Fixed UI mnemonics.
  + Various crash and stability fixes.
  + Allow appending DNS servers and domains in automatic addressing
    mode.
  + Fix defaults for PPP echo values.
  + Show IPv6 addressing page for VPN plugins that support it.
  + Port to GSettings and split out 0.8 -&gt; 0.9 migration code into
    standalone tool.
- Pass --disable-migration to configure: no supported openSUSE
  version has NetworkManager &lt;= 0.8 anymore, so we do not need the
  migration tool.
- Replace gconf schema handling macros with glib variants.
- Drop gconf2-devel BuildRequires: without the migration tool,
  there is no need to access gconf anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1343131200">- Update to version 0.9.5.96:
  + Recognize PKCS#12 certificates imported from Firefox
  + Pre-fill CDMA username/password in the mobile broadband wizard.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Only handle VPN secrets for GNOME Shell 3.3 and lower.</changelog>
<changelog author="dimstar@opensuse.org" date="1344859200">- Update to version 0.9.6.2:
  + Fix GNOME Bluetooth plugin DUN modem detection and setup.</changelog>
<changelog author="dimstar@opensuse.org" date="1351339200">- Update to version 0.9.6.4:
  + Better cooperation with GNOME Shell
  + Fix connection editing from external tools when the editor is
    already open
  + Backport new libnm-gtk API to work with recent GNOME Control
    Center versions
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Fix nm-applet-private-connection.patch: Allow to select a BT
  paired devices a PAN/NAP device. Without this fix,
  gnome-control-center crashes at that moment.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979201">- Update to version 0.9.7.995:
  + Rework connection editor main UI to better support different
    connection types
  + Add connection editor support for WiMAX, Infiniband, Bond, and
    VLAN connections
  + Suggest "seen BSSIDs" for WiFi BSSID entry
  + Add connection editor support for autoconnect VPN connections
  + Add a "General" page to the connection editor and move general
    options to it
  + Fix GNOME Bluetooth plugin for recent versions of GNOME
    Bluetooth and the GNOME Control Center
  + Add LTE and HSPA+ icons to the applet
  + Fix connection editor command-line passing to already-running
    instance
  + Suppress nm-applet notifications when GNOME Shell is running
  + Ensure 802.1x passwords default to "agent owned" and not
    system-wide
  + Default to using system CA certificates for new connections
  + Add support for ModemManager 0.7/0.8
  + Fix a crash when editing IP addresses with the XIM input
    framework
  + Fix handling of connection Zone when firewalld is active
  + Fix saving a connection when ignoring a missing CA certificate
- Add pkgconfig(mm-glib) BuildRequires: dependency for ModemManager
  support.
- Add pkgconfig(gudev-1.0) BuildRequires: new depdendency.
- Add gobject-introspection-devel BuildRequires: new dependency.
- Split new subpackage typelib-1_0-NMGtk-1_0.</changelog>
<changelog author="dimstar@opensuse.org" date="1360411200">- Update to version 0.9.7.997:
  + Ensure AP mode connections are treated as Hotspot too.
  + Build fixes.
  + Editor fixes.
  + Editor: hide widgets that aren't supported for VPNs on the
    general page.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Add manpages for nm-applet and nm-connection-editor.
- Stop passing --disable-more-warnings to configure, it builds fine
  without it now.
- Exchange NetworkManager-devel BuildRequires for
  pkgconfig(NetworkManager), pkgconfig(libnm-glib),
  pkgconfig(libnm-glib-vpn) and pkgconfig(libnm-util)
  BuildRequires, following what configure checks for.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Conversion from gnome-keyring to libsecret; libsecret is now
    required to build.
  + Editor no longer overwrites master interface name with the
    master UUID.
  + Fix crashes when using ModemManager 0.7/0.8.
  + Fix allowed values for VLAN ID and MTU in the editor.
  + Preserve existing PPP LCP echo failure and interval values.
  + Ensure Bridge STP checkbox values are saved.
  + Hide BSSID for Wi-Fi Ad-Hoc connections (it's autocreated by
    the kernel).
  + Ensure IPv6 next-hop/gateway values are sane.
  + Fix problems with the MAC address combo box on various pages.
  + Only request secrets from the user when allowed to.
  + Fix running with GTK+ 2.x.
  + Fix signal icons to work with newer libpng.
  + Don't show Wi-Fi Security combo when not required.
  + Improve applet icon size handling.
  + Show more helpful errors when VPN plugins are not installed.
  + Updated translations.
- Replace gnome-keyring-devel BuildRequires with
  pkgconfig(libsecret-unstable), following upstreams port to
  libsecret.</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) Requires (bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Fix handling of bonding mode and VLAN parent fields in editor.
  + Fix crash when failing to read secrets from the keyring.
  + nm-applet is no longer autostarted under GNOME.
  + Updated translations.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Rebase nm-applet-private-connection.patch for 0.9.8.4
  (bnc#751211)
- Add nm-applet-probe-radius-server-cert.patch to probe the
  certificate the RADIUS server (bnc#574266)</changelog>

</package>
<package pkgid="810697ae1f7d442f184a4d1101e7acd61b5508d197475485cb6604fab1112205" name="NetworkManager-gnome" arch="x86_64">
    <version epoch="0" ver="0.9.8.4" rel="20.3"/>

<changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="dimstar@opensuse.org" date="1328702400">- Add NetworkManager-gnome-link-gkr.patch: Fix linking with
  gnome-keyring in a gconf-helpers test program.
- Add call to autoreconf in %prep, as above patch touches the build
  system.</changelog>
<changelog author="dimstar@opensuse.org" date="1329566400">- Update to version 0.9.3.990:
  + Fix interaction of single-connection edit mode with PolicyKit
  + Add EAP-FAST support
  + Make editor connection list sortable
  + Ensure mobile broadband provider list is sensitized correctly
- Drop NetworkManager-gnome-link-gkr.patch: fixed upstream.
- Remove call to autoreconf: it was only needed for above patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332244800">- Update to version 0.9.3.997:
  + More flexible build-time warnings with
  - -enable-more-warnings=[yes|no|error]
  + Removed unused PolicyKit configure check
  + Lazily initialize the notification service for faster startup
  + Fix various memory leaks
  + Warn user if CA certificate is left blank in the editor for
    802.1x
  + Disabled creation of WPA-protected Ad-Hoc WiFi networks due to
    kernel bugs
- Remove polkit-devel BuildRequires: removed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.1:
  + No change compared to 0.9.4.1.
- Changes from version 0.9.4.0:
  + Do not run our own secret agent when GNOME Shell is running.
  + Several bug fixes.
  + Updated translations.
- Drop NetworkManager-gnome-OnlyShowIn.patch: this was implemented
  with NotShowIn upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Add nm-applet-private-connection.patch: Create private
  connections if the user is not authorized.
  Some distributions do not allow the normal user to create a
  system connection without the polkit authentication. This commit
  checks the polkit policy and creates private connections if the
  user is not authorized. [bnc#751211].
- Add polkit-devel BuildRequires, as the above patch makes use
  of it.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Fixed UI mnemonics.
  + Various crash and stability fixes.
  + Allow appending DNS servers and domains in automatic addressing
    mode.
  + Fix defaults for PPP echo values.
  + Show IPv6 addressing page for VPN plugins that support it.
  + Port to GSettings and split out 0.8 -&gt; 0.9 migration code into
    standalone tool.
- Pass --disable-migration to configure: no supported openSUSE
  version has NetworkManager &lt;= 0.8 anymore, so we do not need the
  migration tool.
- Replace gconf schema handling macros with glib variants.
- Drop gconf2-devel BuildRequires: without the migration tool,
  there is no need to access gconf anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1343131200">- Update to version 0.9.5.96:
  + Recognize PKCS#12 certificates imported from Firefox
  + Pre-fill CDMA username/password in the mobile broadband wizard.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Only handle VPN secrets for GNOME Shell 3.3 and lower.</changelog>
<changelog author="dimstar@opensuse.org" date="1344859200">- Update to version 0.9.6.2:
  + Fix GNOME Bluetooth plugin DUN modem detection and setup.</changelog>
<changelog author="dimstar@opensuse.org" date="1351339200">- Update to version 0.9.6.4:
  + Better cooperation with GNOME Shell
  + Fix connection editing from external tools when the editor is
    already open
  + Backport new libnm-gtk API to work with recent GNOME Control
    Center versions
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Fix nm-applet-private-connection.patch: Allow to select a BT
  paired devices a PAN/NAP device. Without this fix,
  gnome-control-center crashes at that moment.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979201">- Update to version 0.9.7.995:
  + Rework connection editor main UI to better support different
    connection types
  + Add connection editor support for WiMAX, Infiniband, Bond, and
    VLAN connections
  + Suggest "seen BSSIDs" for WiFi BSSID entry
  + Add connection editor support for autoconnect VPN connections
  + Add a "General" page to the connection editor and move general
    options to it
  + Fix GNOME Bluetooth plugin for recent versions of GNOME
    Bluetooth and the GNOME Control Center
  + Add LTE and HSPA+ icons to the applet
  + Fix connection editor command-line passing to already-running
    instance
  + Suppress nm-applet notifications when GNOME Shell is running
  + Ensure 802.1x passwords default to "agent owned" and not
    system-wide
  + Default to using system CA certificates for new connections
  + Add support for ModemManager 0.7/0.8
  + Fix a crash when editing IP addresses with the XIM input
    framework
  + Fix handling of connection Zone when firewalld is active
  + Fix saving a connection when ignoring a missing CA certificate
- Add pkgconfig(mm-glib) BuildRequires: dependency for ModemManager
  support.
- Add pkgconfig(gudev-1.0) BuildRequires: new depdendency.
- Add gobject-introspection-devel BuildRequires: new dependency.
- Split new subpackage typelib-1_0-NMGtk-1_0.</changelog>
<changelog author="dimstar@opensuse.org" date="1360411200">- Update to version 0.9.7.997:
  + Ensure AP mode connections are treated as Hotspot too.
  + Build fixes.
  + Editor fixes.
  + Editor: hide widgets that aren't supported for VPNs on the
    general page.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Add manpages for nm-applet and nm-connection-editor.
- Stop passing --disable-more-warnings to configure, it builds fine
  without it now.
- Exchange NetworkManager-devel BuildRequires for
  pkgconfig(NetworkManager), pkgconfig(libnm-glib),
  pkgconfig(libnm-glib-vpn) and pkgconfig(libnm-util)
  BuildRequires, following what configure checks for.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Conversion from gnome-keyring to libsecret; libsecret is now
    required to build.
  + Editor no longer overwrites master interface name with the
    master UUID.
  + Fix crashes when using ModemManager 0.7/0.8.
  + Fix allowed values for VLAN ID and MTU in the editor.
  + Preserve existing PPP LCP echo failure and interval values.
  + Ensure Bridge STP checkbox values are saved.
  + Hide BSSID for Wi-Fi Ad-Hoc connections (it's autocreated by
    the kernel).
  + Ensure IPv6 next-hop/gateway values are sane.
  + Fix problems with the MAC address combo box on various pages.
  + Only request secrets from the user when allowed to.
  + Fix running with GTK+ 2.x.
  + Fix signal icons to work with newer libpng.
  + Don't show Wi-Fi Security combo when not required.
  + Improve applet icon size handling.
  + Show more helpful errors when VPN plugins are not installed.
  + Updated translations.
- Replace gnome-keyring-devel BuildRequires with
  pkgconfig(libsecret-unstable), following upstreams port to
  libsecret.</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) Requires (bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Fix handling of bonding mode and VLAN parent fields in editor.
  + Fix crash when failing to read secrets from the keyring.
  + nm-applet is no longer autostarted under GNOME.
  + Updated translations.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Rebase nm-applet-private-connection.patch for 0.9.8.4
  (bnc#751211)
- Add nm-applet-probe-radius-server-cert.patch to probe the
  certificate the RADIUS server (bnc#574266)</changelog>

</package>
<package pkgid="4465a8333356021a61990f9e41fd283e9f4d6102b313404a7d6c82a017caba63" name="NetworkManager-gnome-lang" arch="noarch">
    <version epoch="0" ver="0.9.8.4" rel="20.3"/>

<changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="dimstar@opensuse.org" date="1328702400">- Add NetworkManager-gnome-link-gkr.patch: Fix linking with
  gnome-keyring in a gconf-helpers test program.
- Add call to autoreconf in %prep, as above patch touches the build
  system.</changelog>
<changelog author="dimstar@opensuse.org" date="1329566400">- Update to version 0.9.3.990:
  + Fix interaction of single-connection edit mode with PolicyKit
  + Add EAP-FAST support
  + Make editor connection list sortable
  + Ensure mobile broadband provider list is sensitized correctly
- Drop NetworkManager-gnome-link-gkr.patch: fixed upstream.
- Remove call to autoreconf: it was only needed for above patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332244800">- Update to version 0.9.3.997:
  + More flexible build-time warnings with
  - -enable-more-warnings=[yes|no|error]
  + Removed unused PolicyKit configure check
  + Lazily initialize the notification service for faster startup
  + Fix various memory leaks
  + Warn user if CA certificate is left blank in the editor for
    802.1x
  + Disabled creation of WPA-protected Ad-Hoc WiFi networks due to
    kernel bugs
- Remove polkit-devel BuildRequires: removed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.1:
  + No change compared to 0.9.4.1.
- Changes from version 0.9.4.0:
  + Do not run our own secret agent when GNOME Shell is running.
  + Several bug fixes.
  + Updated translations.
- Drop NetworkManager-gnome-OnlyShowIn.patch: this was implemented
  with NotShowIn upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Add nm-applet-private-connection.patch: Create private
  connections if the user is not authorized.
  Some distributions do not allow the normal user to create a
  system connection without the polkit authentication. This commit
  checks the polkit policy and creates private connections if the
  user is not authorized. [bnc#751211].
- Add polkit-devel BuildRequires, as the above patch makes use
  of it.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Fixed UI mnemonics.
  + Various crash and stability fixes.
  + Allow appending DNS servers and domains in automatic addressing
    mode.
  + Fix defaults for PPP echo values.
  + Show IPv6 addressing page for VPN plugins that support it.
  + Port to GSettings and split out 0.8 -&gt; 0.9 migration code into
    standalone tool.
- Pass --disable-migration to configure: no supported openSUSE
  version has NetworkManager &lt;= 0.8 anymore, so we do not need the
  migration tool.
- Replace gconf schema handling macros with glib variants.
- Drop gconf2-devel BuildRequires: without the migration tool,
  there is no need to access gconf anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1343131200">- Update to version 0.9.5.96:
  + Recognize PKCS#12 certificates imported from Firefox
  + Pre-fill CDMA username/password in the mobile broadband wizard.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Only handle VPN secrets for GNOME Shell 3.3 and lower.</changelog>
<changelog author="dimstar@opensuse.org" date="1344859200">- Update to version 0.9.6.2:
  + Fix GNOME Bluetooth plugin DUN modem detection and setup.</changelog>
<changelog author="dimstar@opensuse.org" date="1351339200">- Update to version 0.9.6.4:
  + Better cooperation with GNOME Shell
  + Fix connection editing from external tools when the editor is
    already open
  + Backport new libnm-gtk API to work with recent GNOME Control
    Center versions
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Fix nm-applet-private-connection.patch: Allow to select a BT
  paired devices a PAN/NAP device. Without this fix,
  gnome-control-center crashes at that moment.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979201">- Update to version 0.9.7.995:
  + Rework connection editor main UI to better support different
    connection types
  + Add connection editor support for WiMAX, Infiniband, Bond, and
    VLAN connections
  + Suggest "seen BSSIDs" for WiFi BSSID entry
  + Add connection editor support for autoconnect VPN connections
  + Add a "General" page to the connection editor and move general
    options to it
  + Fix GNOME Bluetooth plugin for recent versions of GNOME
    Bluetooth and the GNOME Control Center
  + Add LTE and HSPA+ icons to the applet
  + Fix connection editor command-line passing to already-running
    instance
  + Suppress nm-applet notifications when GNOME Shell is running
  + Ensure 802.1x passwords default to "agent owned" and not
    system-wide
  + Default to using system CA certificates for new connections
  + Add support for ModemManager 0.7/0.8
  + Fix a crash when editing IP addresses with the XIM input
    framework
  + Fix handling of connection Zone when firewalld is active
  + Fix saving a connection when ignoring a missing CA certificate
- Add pkgconfig(mm-glib) BuildRequires: dependency for ModemManager
  support.
- Add pkgconfig(gudev-1.0) BuildRequires: new depdendency.
- Add gobject-introspection-devel BuildRequires: new dependency.
- Split new subpackage typelib-1_0-NMGtk-1_0.</changelog>
<changelog author="dimstar@opensuse.org" date="1360411200">- Update to version 0.9.7.997:
  + Ensure AP mode connections are treated as Hotspot too.
  + Build fixes.
  + Editor fixes.
  + Editor: hide widgets that aren't supported for VPNs on the
    general page.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Add manpages for nm-applet and nm-connection-editor.
- Stop passing --disable-more-warnings to configure, it builds fine
  without it now.
- Exchange NetworkManager-devel BuildRequires for
  pkgconfig(NetworkManager), pkgconfig(libnm-glib),
  pkgconfig(libnm-glib-vpn) and pkgconfig(libnm-util)
  BuildRequires, following what configure checks for.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Conversion from gnome-keyring to libsecret; libsecret is now
    required to build.
  + Editor no longer overwrites master interface name with the
    master UUID.
  + Fix crashes when using ModemManager 0.7/0.8.
  + Fix allowed values for VLAN ID and MTU in the editor.
  + Preserve existing PPP LCP echo failure and interval values.
  + Ensure Bridge STP checkbox values are saved.
  + Hide BSSID for Wi-Fi Ad-Hoc connections (it's autocreated by
    the kernel).
  + Ensure IPv6 next-hop/gateway values are sane.
  + Fix problems with the MAC address combo box on various pages.
  + Only request secrets from the user when allowed to.
  + Fix running with GTK+ 2.x.
  + Fix signal icons to work with newer libpng.
  + Don't show Wi-Fi Security combo when not required.
  + Improve applet icon size handling.
  + Show more helpful errors when VPN plugins are not installed.
  + Updated translations.
- Replace gnome-keyring-devel BuildRequires with
  pkgconfig(libsecret-unstable), following upstreams port to
  libsecret.</changelog>
<changelog author="dimstar@opensuse.org" date="1378900800">- Add dbus(org.freedesktop.secrets) Requires (bnc#828387).</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Fix handling of bonding mode and VLAN parent fields in editor.
  + Fix crash when failing to read secrets from the keyring.
  + nm-applet is no longer autostarted under GNOME.
  + Updated translations.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Rebase nm-applet-private-connection.patch for 0.9.8.4
  (bnc#751211)
- Add nm-applet-probe-radius-server-cert.patch to probe the
  certificate the RADIUS server (bnc#574266)</changelog>

</package>
<package pkgid="da7c1d8c9d9c3f369b64ac0905c415c00a2f5a857849d7d740a528ad63d5daf2" name="NetworkManager-kde4" arch="src">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="061842dbcd1b9e3679e1a27b5d256a883c6addf41f2c767923076d54eacef994" name="NetworkManager-kde4" arch="src">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="0e23f40d57e5a26028f3988b1e676532b4931ba459a2b8287a0a187009f3573c" name="NetworkManager-kde4-devel" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="318e4150a0390945c69961c3e99c49248430267dcf79ddda5c674f6d9b8a93bf" name="NetworkManager-kde4-devel" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="da048aad615684f8fdb8ab95e988c199bd57c8f061e38ca1f5fdc6822fc7a84e" name="NetworkManager-kde4-devel" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="4b957a49323103270723ce877a3cfb15c68340fc00d86f3f50f36506f065f9ea" name="NetworkManager-kde4-devel" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="7ae993556e54c6001fd14b9cc5386ae755d7b53e9573bf097739904af61b3520" name="NetworkManager-kde4-libs" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="b2b821d52c160c2bac7d3cc49aa7cec7a03abbb4edd6f6c5e08fec7dc2bd47f7" name="NetworkManager-kde4-libs" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="e785ea4b3185cf51e605166f4ec550eacadf413111e5c72bbac432e7b7701385" name="NetworkManager-kde4-libs" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="6ded3fd2e94e73536186338b1b668fec63cccda0abc73c414129e582d97a1e26" name="NetworkManager-kde4-libs" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="9012f50bc31863fdda945229282bcb73f9e88c335091f4d4ac4b1bf670555256" name="NetworkManager-kde4-libs-lang" arch="noarch">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="293caa16425bcb0933d1cdc86a5f26a86deed7e528ec39f11d6603cc7513ff69" name="NetworkManager-kde4-libs-lang" arch="noarch">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="ceae81c411d97829aacfbb9e6592a5523a45ad7cf3ab5df70a1d54f9307b3f44" name="NetworkManager-lang" arch="noarch">
    <version epoch="0" ver="0.9.8.8" rel="10.1"/>

<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>

</package>
<package pkgid="a81176eb94ac0af0024f43d7de42b1b10db17143e53a6e5da061e070e9ea0df3" name="NetworkManager-lang" arch="noarch">
    <version epoch="0" ver="0.9.8.8" rel="13.1"/>

<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>
<changelog author="dimstar@opensuse.org" date="1406030400">- Change ppp requires to %requires_eq ppp: the plugin is installed
  in a versioned directory, and as such we do require the exact
  version of ppp (bnc#888442).</changelog>
<changelog author="dimstar@opensuse.org" date="1407758400">- Add NetworkManager-dhcpv6.patch: dhcp: let dhclient handle
  requesting the 'server-id' option (bnc#888787).</changelog>
<changelog author="meissner@suse.com" date="1448884800">- Rebuild against ppp updated to 2.4.7. bsc#957014</changelog>

</package>
<package pkgid="25027c8d00e2e6ff5f2c6c3d69b1e75b74c6108454ef1eadb4bec7470aad8ab5" name="NetworkManager-lang" arch="noarch">
    <version epoch="0" ver="0.9.8.8" rel="4.1"/>

<changelog author="fcrozat@suse.com" date="1354795200">- Update systemd-network-config.patch: ensure
  NetworkManager.service is Before network.target (bnc#789421).</changelog>
<changelog author="mt@suse.com" date="1358164800">- Install network.service alias, that points to the enabled service
  and obsoletes the use of NETWORKMANAGER=yes/no sysconfig variable
  in /etc/sysconfig/network/config (bnc#764055,bnc#764336,bnc#798348).
- Requires sysconfig-0.80.0</changelog>
<changelog author="mt@suse.com" date="1361448000">- Added migration hook enabling NetworkManager.service on update
  from openSUSE &lt; 12.3 and NETWORKMANAGER=yes setting (bnc#803058).</changelog>
<changelog author="dimstar@opensuse.org" date="1361534400">- Update to version 0.9.7.995:
  + New AvailableConnections property for Device objects.
  + Better handling of various rfkill/Airplane Mode switches
  + Fixed handling of DNS servers for some mobile broadband devices
  + Don't duplicate various IPv6 routes added by the kernel
  + Ensure buggy ethernet driver carrier indications are handled
    correctly
  + Fix crash in dnsmasq plugin when no nameservers were presen
  + Add support for 4G LTE network modes
  + Fix signal handling when daemonizing at startup
  + Don't autoconnect to WiFi networks that have never successfully
    connected
  + Only request new WiFi secrets during the initial association or
    when the secrets are known to be wrong, not every time the
    connection randomly fails
  + Add capability to autoconnect VPN connections when a parent
    connection succeeds
  + Add configure-time option for "permissive" system connection
    editing policy
  + Various libnm-glib fixes for asynchronous usage
  + Fix gateway handling when given with secondary IP addresses
  + Optionally listen to systemd for suspend/resume events instead
    of UPower
  + Fix 'seen-bssids' property when retrieving WiFi connections via
    D-Bus
  + Add support for AP-mode WiFi hotspots (instead of just Ad-Hoc)
  + Add a "slaves" property to Bond devices
  + Add support for ModemManager 0.7/0.8
  + Allow more human-readable formatting of IP address in keyfile
    connections
  + Drop support for dhclient v3
  + Add support for DHCPv6 server-side Dynamic DNS
  + Add support for bridge master devices and bridge ports
  + Fix canceling secrets requests in GUI agents
  + Always enable Proactive Key Caching (PKC, also called OKC) for
    WPA Enterprise WiFi configurations
- Replace --with-distro=suse configure parameter with
  - -enable-ifcfg-suse, following upstreams changes, which allow for
  granular configuration.
- Drop NetworkManager-systemd-suspend.patch and
  NetworkManager-upower-out.patch: fixed upstream.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1361620800">- Update to version 0.9.7.997:
  + libnl 3.2.7 or later is required.
  + The internal crashdump handling has been removed.
  + A DHCPv6 DUID is now generated from /etc/machine-id and sent to
    the DHCPv6 server, if not overridden by an
    administrator-defined DUID.
  + Bond interfaces now wait for a ready slave before starting
    automatic IP configuration.
  + The kernel WiFi rfkill state is now synced to the
    user-requested WirelessEnabled state at startup.</changelog>
<changelog author="zaitor@opensuse.org" date="1361707200">- Update to version 0.9.8.0:
  + Fix issue with duplicate ActiveConnection objects if a
    connection was reactivated on a device.
  + Fix race when looking up hostname and concurrently updating
    DNS.
  + Always load the 'keyfile' settings plugin, even if no plugins
    are specified.
  + Add a new WiFi device ADHOC capability; not all devices/drivers
    support IBSS mode.
  + Fix an issue with quick wpa_supplicant restarts not being
    noticed.
  + Expose the AvailableConnections property through libnm-glib.
  + Fix usage of libnm-glib's NMRemoteConnection from GObject
    introspection.</changelog>
<changelog author="sbrabec@suse.cz" date="1362657600">- Recommend avahi-autoipd used for IPv4LL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1363262400">- Re-enabled translation-update-upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1366718400">- Pass --with-modem-manager-1 to configure: we already have a new
  enough ModemManager to make use of this.
- Add pkgconfig(mm-gib) BuildRequires: needed for above switch to
  take effect.</changelog>
<changelog author="jslaby@suse.com" date="1367323200">- Add sysconfig and suse-release BuildRequires to properly
  configure for suse (bnc#817592).
- Add --with-netconfig=yes to configure call.
- Add additional test in build section to ensure netconfig is
  detected. This is needed as specifying --with-netconfig=yes does
  not fail configure if not found.</changelog>
<changelog author="wstephenson@suse.com" date="1368187200">- Readd nm-probe-radius-server-cert.patch, as it is not yet merged
  upstream (bnc#574266, bnc#771185).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Memory leak fixes.
  + Ensure the ifcfg-rh plugin saves the bridging STP setting
    correctly.
  + Also request static routes from DHCP servers.
  + Fix crash when dbus-daemon restarts.
  + Look harder for the machine ID and don't crash if we don't have
    one.
  + Copy DHCP leasefiles from the previous location if necessary.
  + Wait up to 120 seconds for modems to connect.
  + Don't crash for PPPoE connections with no wired setting.
  + Fix AvailableConnections for some WiFi connections.
  + Ensure new available connections generate the PropertiesChanged
    signal.
  + Ensure the keyfile plugin reads all-default VLAN connections
    correctly.
  + Suppress the kernel's automatic creation of bond0.
  + Make the SecretAgent API introspectable for bindings.
  + Ensure ActiveConnections get torn down when device is
    unavailable.
  + Ensure ifupdown plugin rechecks unmanaged devices on interface
    changes.
  + Don't prematurely think IPv6 has succeeded due to left-over
    addresses.
  + Fix various systemd issues and add service file for the
    dispatcher.
  + Updates for new ModemManager API changes.
  + Fix crash on Wi-Fi when IP configuration times out.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid suse-release, it moves NM behind java in bootstrap and
  all features that configure.ac enabled for suse-release are
  enabled with --with anyway</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Removed some spurious warnings.
  + Root clients running outside a login session now have the right
    permissions.
  + WiFi AP mode and EAP-FAST support are now detected correctly.
  + Bonding config removes inappropriate options when switching
    modes.
  + Fix reading of bond connections with keyfile plugin.
  + Fix hang when dbus-daemon restarts.
  + Fix crash when VPN disconnection fails.
  + The dispatcher now exposes IPv6 VPN info, and IPv4/IPv6 DNS
    search domains.
  + Build fix to support dhcpcd 6.x.
  + Fix crash on startup when no dhcp client is available.
  + Fix device descriptions when using the latest udev.
  + Fix some possible obscure problems at startup.
  + Always clear the default route correctly when disconnecting
    mobile broadband.
  + Keyfile plugin now ignores more emacs temporary files.
  + When using dnsmasq, pass all nameservers to it, not just the
    first.
  + Kill dhclient if nm-dhcp-client-action encounters a fatal
    error.
  + Fix dispatcher systemd unit install.
  + Make ifcfg-rh VLAN parsing match initscripts better.
  + Change threshold for WiFi background scanning under WPA
    Enterprise.
  + Fix crash when deleting a currently-active connection.
  + Fix ifcfg-rh's handling of IPV6_DEFAULTGW.
  + Fix manager State transitions when connectivity checking is
    enabled.
  + Add Connectivity property to distinguish portals from "limited
    connectivity".
  + Add PrimaryConnection and ActivatingConnection properties to
    simplify UI code.
  + Old connection files containing UUIDs without hyphens work
    again.
- Rebase systemd-network-config.patch.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379073601">- Pass nmrundir="/run/%{name}" to make and makeinstall:
  + Use /run/NetworkManager instead of /var/run/NetworkManager as
    runtime directory.</changelog>
<changelog author="dimstar@opensuse.org" date="1380542400">- Update to version 0.9.8.6:
  + Now supports BlueZ 5. If you are still using BlueZ 4, configure
    with --enable-bluez4 to disable BlueZ 5 support and enable
    BlueZ 4 support.</changelog>
<changelog author="glin@suse.com" date="1380628800">- Update nm-probe-radius-server-cert.patch to probe the server with
  the user credential (bnc#817585)</changelog>
<changelog author="rmilasan@suse.com" date="1381406400">- Switch to systemd check for the nfs script if enabled or not.
  Also do not exit with error code if nfs script is not enabled.</changelog>
<changelog author="dimstar@opensuse.org" date="1381492800">- Update to version 0.9.8.8 (bnc#845542):
  + Fixes to the BlueZ code.
  + A few memory leak fixes.
  + Minor docs fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1405944000">- Add nm-netlink-simplify-netlink-msg-validation.patch, fixes
  bnc#888210.</changelog>

</package>
<package pkgid="3747613b8ed3ea72bb7c4ffc1a1268ae3504130cd230b18d87cad0ba1cca136b" name="NetworkManager-novellvpn-kde4" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="28c139a09aa619050674b27a920fa503af7e66ad5af4aa218aaa187f3a4a2879" name="NetworkManager-novellvpn-kde4" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="b838e4322d63daaab87eb29f1ffdfdc94687f49e88a957af390c9e899c646542" name="NetworkManager-novellvpn-kde4" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="910514d7f825da5b4da5b2f96bf2cfae91fb4e3ee4f558dc7ca510c02817579e" name="NetworkManager-novellvpn-kde4" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="d76f7350d9ffcf12d8313b1ee4be249d6f4208892a0b165a4c3dcdf65f3211eb" name="NetworkManager-openconnect-kde4" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="673b446105daec914b56466c1ab1b425b00673cccea8d05b5cb0f68558a1c0d1" name="NetworkManager-openconnect-kde4" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="e845135d27651df20a1b845c40bb2bc01d3137071ff2cb095aad73c61a125e35" name="NetworkManager-openconnect-kde4" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="7134ecb023205b1cc5eb25bf802d11fbe6515ed966d62579668774b3d5ebb6b9" name="NetworkManager-openconnect-kde4" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="63b6a30e8ba5cfb30b6a462885d546e93c0e5b84d89ee687498637565cb8d73e" name="NetworkManager-openvpn-kde4" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="d556bc4fe791b23b049d5bb1a7d65a2b4e3be2eaade03fb24eeeae39b478369d" name="NetworkManager-openvpn-kde4" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="2e34d850c10ba0f522b1bff82439810523ff74044126075b240da216ee7299c3" name="NetworkManager-openvpn-kde4" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="b270571b86a7ab77b5912ee9305a0c6b8e0c6a637f8f4d1fbf7bc20d326a3583" name="NetworkManager-openvpn-kde4" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="3dd432e8eee277f5382570a88af94d516f37c3573fb4648860f8bba498a3e2f3" name="NetworkManager-pptp" arch="i586">
    <version epoch="0" ver="0.9.8.4" rel="3.1"/>

<changelog author="vuntz@opensuse.org" date="1297598400">- Call relevant macros in %post/%postun:
  + %icon_theme_cache_post/postun because the package ships themed
    icons.
- Remove ldconfig from %post/%postun: there is no library there.
- Pass %{?no_lang_C} to %find_lang so that english documentation
  can be packaged with the program, and not in the lang subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1300276800">- Update to version 0.8.995 (0.9.0-beta1):
  + simpler, easier, more flexible, and cooler applets.
  + Fast User Switching.
  + WiMAX support.
  + System connections by default.
  + More flexible system administration.
  + Scales down to smaller devices.
- Add pkgconfig(gtk+-3.0) BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1302004800">- Update to version 0.8.998 (0.9.0-rc1):
  + Bugs fixed: bgo#645909, lp#681739.
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1303387200">- Drop unneeded libglade2-devel, libgnomeui-devel,
  libgudev-1_0-devel, perl-XML-Parser, update-desktop-files
  BuildRequires.
- Move to pkgconfig()-style BuildRequires:
  + Old ones: NetworkManager-devel, NetworkManager-gnome.
  + New ones: NetworkManager, dbus-glib-1, libnm-glib, libnm-util,
    gnome-keyring-1.
- Stop owning /etc/NetworkManager/VPN as it's owned by
  NetworkManager now.</changelog>
<changelog author="dimstar@opensuse.org" date="1304510400">- Update to version 0.8.999:
  + Default to agent-owned secrets for new connections.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1308657600">- Add NetworkManager-pptp-gtk_box_new.patch: Fix build with GTK+
  3.1.6, which has gtk_{h|v}box_new deprecated. Patch taken from
  upstream git, commit id 81b8afb2.</changelog>
<changelog author="dimstar@opensuse.org" date="1314100800">- Update to version 0.9.0:
  + Preserve secret flags.
  + Simplify keyring access and don't save secrets.
  + Use a simplified password request dialog.
  + Use gtk_box_new() instead of gtk_(h/v)box_new() (bgo#652801)
- Drop NetworkManager-pptp-gtk_box_new.patch: fixed upstream.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile and strange
  ExcludeArch</changelog>
<changelog author="dimstar@opensuse.org" date="1320148800">- Update to version 0.9.1.95:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Support for "external UI mode" for DE-native dialogs (ie, GNOME
    Shell and others)
  + Fix issues with password dialog width on recent GTK+ versions
  + Config dialog tooltips now refer to corresponding ppp/pptp
    config options
  + Updated translations.
- Add explicit pkgconfig(libnm-glib-vpn) BuildRequires: it's a long
  standing requirement which currently comes implicit with
  libnm-glib, as it's part of the same package at this moment.</changelog>
<changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.0:
  + Fix auth failure in some cases.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Fix sensitivity of auth methods when checking/unchecking MPPE
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Update FSF Address.</changelog>
<changelog author="dimstar@opensuse.org" date="1360929600">- Add nm-pptp-deprecated-gtk.patch: Do not disable deprecated GTK
  symbols for now (bgo#693866).
- Add libtool BuildRequires and call to autorecnf, as above patch
  touches the build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Builds against the GNOME 3.8 versions of GLib and Gtk+.
  + nm-pptp-service now returns translated error messages.
  + Updated translations.
- Drop nm-pptp-deprecated-gtk.patch, fix upstream in a slightly
  different way.
- Drop libtool BuildRequires and call auto autoreconf, as we don't
  carry any patch touching the build system anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Use full paths for auth dialog and properties plugin.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Fixed paths in VPN service file.
  + Fixed localization in non-UTF-8 locales.
  + Updated translations.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- this is a rebuild against ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="bb51648b2066fdde94533505c470f2c370c838f8cc21362c1abb35db30aae316" name="NetworkManager-pptp" arch="src">
    <version epoch="0" ver="0.9.8.4" rel="3.1"/>

<changelog author="vuntz@opensuse.org" date="1297598400">- Call relevant macros in %post/%postun:
  + %icon_theme_cache_post/postun because the package ships themed
    icons.
- Remove ldconfig from %post/%postun: there is no library there.
- Pass %{?no_lang_C} to %find_lang so that english documentation
  can be packaged with the program, and not in the lang subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1300276800">- Update to version 0.8.995 (0.9.0-beta1):
  + simpler, easier, more flexible, and cooler applets.
  + Fast User Switching.
  + WiMAX support.
  + System connections by default.
  + More flexible system administration.
  + Scales down to smaller devices.
- Add pkgconfig(gtk+-3.0) BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1302004800">- Update to version 0.8.998 (0.9.0-rc1):
  + Bugs fixed: bgo#645909, lp#681739.
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1303387200">- Drop unneeded libglade2-devel, libgnomeui-devel,
  libgudev-1_0-devel, perl-XML-Parser, update-desktop-files
  BuildRequires.
- Move to pkgconfig()-style BuildRequires:
  + Old ones: NetworkManager-devel, NetworkManager-gnome.
  + New ones: NetworkManager, dbus-glib-1, libnm-glib, libnm-util,
    gnome-keyring-1.
- Stop owning /etc/NetworkManager/VPN as it's owned by
  NetworkManager now.</changelog>
<changelog author="dimstar@opensuse.org" date="1304510400">- Update to version 0.8.999:
  + Default to agent-owned secrets for new connections.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1308657600">- Add NetworkManager-pptp-gtk_box_new.patch: Fix build with GTK+
  3.1.6, which has gtk_{h|v}box_new deprecated. Patch taken from
  upstream git, commit id 81b8afb2.</changelog>
<changelog author="dimstar@opensuse.org" date="1314100800">- Update to version 0.9.0:
  + Preserve secret flags.
  + Simplify keyring access and don't save secrets.
  + Use a simplified password request dialog.
  + Use gtk_box_new() instead of gtk_(h/v)box_new() (bgo#652801)
- Drop NetworkManager-pptp-gtk_box_new.patch: fixed upstream.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile and strange
  ExcludeArch</changelog>
<changelog author="dimstar@opensuse.org" date="1320148800">- Update to version 0.9.1.95:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Support for "external UI mode" for DE-native dialogs (ie, GNOME
    Shell and others)
  + Fix issues with password dialog width on recent GTK+ versions
  + Config dialog tooltips now refer to corresponding ppp/pptp
    config options
  + Updated translations.
- Add explicit pkgconfig(libnm-glib-vpn) BuildRequires: it's a long
  standing requirement which currently comes implicit with
  libnm-glib, as it's part of the same package at this moment.</changelog>
<changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.0:
  + Fix auth failure in some cases.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Fix sensitivity of auth methods when checking/unchecking MPPE
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Update FSF Address.</changelog>
<changelog author="dimstar@opensuse.org" date="1360929600">- Add nm-pptp-deprecated-gtk.patch: Do not disable deprecated GTK
  symbols for now (bgo#693866).
- Add libtool BuildRequires and call to autorecnf, as above patch
  touches the build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Builds against the GNOME 3.8 versions of GLib and Gtk+.
  + nm-pptp-service now returns translated error messages.
  + Updated translations.
- Drop nm-pptp-deprecated-gtk.patch, fix upstream in a slightly
  different way.
- Drop libtool BuildRequires and call auto autoreconf, as we don't
  carry any patch touching the build system anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Use full paths for auth dialog and properties plugin.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Fixed paths in VPN service file.
  + Fixed localization in non-UTF-8 locales.
  + Updated translations.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- this is a rebuild against ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="b63f7a88f2d84493805a9ace85abd9c946b0e3f3449ab78892e51ea27add9211" name="NetworkManager-pptp" arch="x86_64">
    <version epoch="0" ver="0.9.8.4" rel="3.1"/>

<changelog author="vuntz@opensuse.org" date="1297598400">- Call relevant macros in %post/%postun:
  + %icon_theme_cache_post/postun because the package ships themed
    icons.
- Remove ldconfig from %post/%postun: there is no library there.
- Pass %{?no_lang_C} to %find_lang so that english documentation
  can be packaged with the program, and not in the lang subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1300276800">- Update to version 0.8.995 (0.9.0-beta1):
  + simpler, easier, more flexible, and cooler applets.
  + Fast User Switching.
  + WiMAX support.
  + System connections by default.
  + More flexible system administration.
  + Scales down to smaller devices.
- Add pkgconfig(gtk+-3.0) BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1302004800">- Update to version 0.8.998 (0.9.0-rc1):
  + Bugs fixed: bgo#645909, lp#681739.
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1303387200">- Drop unneeded libglade2-devel, libgnomeui-devel,
  libgudev-1_0-devel, perl-XML-Parser, update-desktop-files
  BuildRequires.
- Move to pkgconfig()-style BuildRequires:
  + Old ones: NetworkManager-devel, NetworkManager-gnome.
  + New ones: NetworkManager, dbus-glib-1, libnm-glib, libnm-util,
    gnome-keyring-1.
- Stop owning /etc/NetworkManager/VPN as it's owned by
  NetworkManager now.</changelog>
<changelog author="dimstar@opensuse.org" date="1304510400">- Update to version 0.8.999:
  + Default to agent-owned secrets for new connections.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1308657600">- Add NetworkManager-pptp-gtk_box_new.patch: Fix build with GTK+
  3.1.6, which has gtk_{h|v}box_new deprecated. Patch taken from
  upstream git, commit id 81b8afb2.</changelog>
<changelog author="dimstar@opensuse.org" date="1314100800">- Update to version 0.9.0:
  + Preserve secret flags.
  + Simplify keyring access and don't save secrets.
  + Use a simplified password request dialog.
  + Use gtk_box_new() instead of gtk_(h/v)box_new() (bgo#652801)
- Drop NetworkManager-pptp-gtk_box_new.patch: fixed upstream.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile and strange
  ExcludeArch</changelog>
<changelog author="dimstar@opensuse.org" date="1320148800">- Update to version 0.9.1.95:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Support for "external UI mode" for DE-native dialogs (ie, GNOME
    Shell and others)
  + Fix issues with password dialog width on recent GTK+ versions
  + Config dialog tooltips now refer to corresponding ppp/pptp
    config options
  + Updated translations.
- Add explicit pkgconfig(libnm-glib-vpn) BuildRequires: it's a long
  standing requirement which currently comes implicit with
  libnm-glib, as it's part of the same package at this moment.</changelog>
<changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.0:
  + Fix auth failure in some cases.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Fix sensitivity of auth methods when checking/unchecking MPPE
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Update FSF Address.</changelog>
<changelog author="dimstar@opensuse.org" date="1360929600">- Add nm-pptp-deprecated-gtk.patch: Do not disable deprecated GTK
  symbols for now (bgo#693866).
- Add libtool BuildRequires and call to autorecnf, as above patch
  touches the build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Builds against the GNOME 3.8 versions of GLib and Gtk+.
  + nm-pptp-service now returns translated error messages.
  + Updated translations.
- Drop nm-pptp-deprecated-gtk.patch, fix upstream in a slightly
  different way.
- Drop libtool BuildRequires and call auto autoreconf, as we don't
  carry any patch touching the build system anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Use full paths for auth dialog and properties plugin.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Fixed paths in VPN service file.
  + Fixed localization in non-UTF-8 locales.
  + Updated translations.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- this is a rebuild against ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="610e869ecc94307b1aef5ab772e0519c7550d8602896c147be92f88b86d12de6" name="NetworkManager-pptp-gnome" arch="i586">
    <version epoch="0" ver="0.9.8.4" rel="3.1"/>

<changelog author="vuntz@opensuse.org" date="1297598400">- Call relevant macros in %post/%postun:
  + %icon_theme_cache_post/postun because the package ships themed
    icons.
- Remove ldconfig from %post/%postun: there is no library there.
- Pass %{?no_lang_C} to %find_lang so that english documentation
  can be packaged with the program, and not in the lang subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1300276800">- Update to version 0.8.995 (0.9.0-beta1):
  + simpler, easier, more flexible, and cooler applets.
  + Fast User Switching.
  + WiMAX support.
  + System connections by default.
  + More flexible system administration.
  + Scales down to smaller devices.
- Add pkgconfig(gtk+-3.0) BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1302004800">- Update to version 0.8.998 (0.9.0-rc1):
  + Bugs fixed: bgo#645909, lp#681739.
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1303387200">- Drop unneeded libglade2-devel, libgnomeui-devel,
  libgudev-1_0-devel, perl-XML-Parser, update-desktop-files
  BuildRequires.
- Move to pkgconfig()-style BuildRequires:
  + Old ones: NetworkManager-devel, NetworkManager-gnome.
  + New ones: NetworkManager, dbus-glib-1, libnm-glib, libnm-util,
    gnome-keyring-1.
- Stop owning /etc/NetworkManager/VPN as it's owned by
  NetworkManager now.</changelog>
<changelog author="dimstar@opensuse.org" date="1304510400">- Update to version 0.8.999:
  + Default to agent-owned secrets for new connections.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1308657600">- Add NetworkManager-pptp-gtk_box_new.patch: Fix build with GTK+
  3.1.6, which has gtk_{h|v}box_new deprecated. Patch taken from
  upstream git, commit id 81b8afb2.</changelog>
<changelog author="dimstar@opensuse.org" date="1314100800">- Update to version 0.9.0:
  + Preserve secret flags.
  + Simplify keyring access and don't save secrets.
  + Use a simplified password request dialog.
  + Use gtk_box_new() instead of gtk_(h/v)box_new() (bgo#652801)
- Drop NetworkManager-pptp-gtk_box_new.patch: fixed upstream.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile and strange
  ExcludeArch</changelog>
<changelog author="dimstar@opensuse.org" date="1320148800">- Update to version 0.9.1.95:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Support for "external UI mode" for DE-native dialogs (ie, GNOME
    Shell and others)
  + Fix issues with password dialog width on recent GTK+ versions
  + Config dialog tooltips now refer to corresponding ppp/pptp
    config options
  + Updated translations.
- Add explicit pkgconfig(libnm-glib-vpn) BuildRequires: it's a long
  standing requirement which currently comes implicit with
  libnm-glib, as it's part of the same package at this moment.</changelog>
<changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.0:
  + Fix auth failure in some cases.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Fix sensitivity of auth methods when checking/unchecking MPPE
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Update FSF Address.</changelog>
<changelog author="dimstar@opensuse.org" date="1360929600">- Add nm-pptp-deprecated-gtk.patch: Do not disable deprecated GTK
  symbols for now (bgo#693866).
- Add libtool BuildRequires and call to autorecnf, as above patch
  touches the build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Builds against the GNOME 3.8 versions of GLib and Gtk+.
  + nm-pptp-service now returns translated error messages.
  + Updated translations.
- Drop nm-pptp-deprecated-gtk.patch, fix upstream in a slightly
  different way.
- Drop libtool BuildRequires and call auto autoreconf, as we don't
  carry any patch touching the build system anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Use full paths for auth dialog and properties plugin.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Fixed paths in VPN service file.
  + Fixed localization in non-UTF-8 locales.
  + Updated translations.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- this is a rebuild against ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="b4b58b6cbf40ce56d3ac70ce4d45986af4600dc0bd33368a884f60a8b91cdf6f" name="NetworkManager-pptp-gnome" arch="x86_64">
    <version epoch="0" ver="0.9.8.4" rel="3.1"/>

<changelog author="vuntz@opensuse.org" date="1297598400">- Call relevant macros in %post/%postun:
  + %icon_theme_cache_post/postun because the package ships themed
    icons.
- Remove ldconfig from %post/%postun: there is no library there.
- Pass %{?no_lang_C} to %find_lang so that english documentation
  can be packaged with the program, and not in the lang subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1300276800">- Update to version 0.8.995 (0.9.0-beta1):
  + simpler, easier, more flexible, and cooler applets.
  + Fast User Switching.
  + WiMAX support.
  + System connections by default.
  + More flexible system administration.
  + Scales down to smaller devices.
- Add pkgconfig(gtk+-3.0) BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1302004800">- Update to version 0.8.998 (0.9.0-rc1):
  + Bugs fixed: bgo#645909, lp#681739.
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1303387200">- Drop unneeded libglade2-devel, libgnomeui-devel,
  libgudev-1_0-devel, perl-XML-Parser, update-desktop-files
  BuildRequires.
- Move to pkgconfig()-style BuildRequires:
  + Old ones: NetworkManager-devel, NetworkManager-gnome.
  + New ones: NetworkManager, dbus-glib-1, libnm-glib, libnm-util,
    gnome-keyring-1.
- Stop owning /etc/NetworkManager/VPN as it's owned by
  NetworkManager now.</changelog>
<changelog author="dimstar@opensuse.org" date="1304510400">- Update to version 0.8.999:
  + Default to agent-owned secrets for new connections.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1308657600">- Add NetworkManager-pptp-gtk_box_new.patch: Fix build with GTK+
  3.1.6, which has gtk_{h|v}box_new deprecated. Patch taken from
  upstream git, commit id 81b8afb2.</changelog>
<changelog author="dimstar@opensuse.org" date="1314100800">- Update to version 0.9.0:
  + Preserve secret flags.
  + Simplify keyring access and don't save secrets.
  + Use a simplified password request dialog.
  + Use gtk_box_new() instead of gtk_(h/v)box_new() (bgo#652801)
- Drop NetworkManager-pptp-gtk_box_new.patch: fixed upstream.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile and strange
  ExcludeArch</changelog>
<changelog author="dimstar@opensuse.org" date="1320148800">- Update to version 0.9.1.95:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Support for "external UI mode" for DE-native dialogs (ie, GNOME
    Shell and others)
  + Fix issues with password dialog width on recent GTK+ versions
  + Config dialog tooltips now refer to corresponding ppp/pptp
    config options
  + Updated translations.
- Add explicit pkgconfig(libnm-glib-vpn) BuildRequires: it's a long
  standing requirement which currently comes implicit with
  libnm-glib, as it's part of the same package at this moment.</changelog>
<changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.0:
  + Fix auth failure in some cases.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Fix sensitivity of auth methods when checking/unchecking MPPE
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Update FSF Address.</changelog>
<changelog author="dimstar@opensuse.org" date="1360929600">- Add nm-pptp-deprecated-gtk.patch: Do not disable deprecated GTK
  symbols for now (bgo#693866).
- Add libtool BuildRequires and call to autorecnf, as above patch
  touches the build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Builds against the GNOME 3.8 versions of GLib and Gtk+.
  + nm-pptp-service now returns translated error messages.
  + Updated translations.
- Drop nm-pptp-deprecated-gtk.patch, fix upstream in a slightly
  different way.
- Drop libtool BuildRequires and call auto autoreconf, as we don't
  carry any patch touching the build system anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Use full paths for auth dialog and properties plugin.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Fixed paths in VPN service file.
  + Fixed localization in non-UTF-8 locales.
  + Updated translations.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- this is a rebuild against ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="92a45758a3fb26f319ade7522917b1182e166418f6f2988748cd9d3c7c254d81" name="NetworkManager-pptp-kde4" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="e4f27f379c795469fd29baadaf4d7cab2539ba1bd876848c0306b5f4084cce20" name="NetworkManager-pptp-kde4" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="74c8f4033e174c3240d771b968c689eeb6c0e9e425cc0962274474be2fa23ff4" name="NetworkManager-pptp-kde4" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="7f8bd437787eba01c7e7963056f3c818253185e498a44bdb15b3aba986af9c8c" name="NetworkManager-pptp-kde4" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="497dffe4004cf1ec8b7016d4b4ec21c05c9049b415c2550f9232e4d686bdf95b" name="NetworkManager-pptp-lang" arch="noarch">
    <version epoch="0" ver="0.9.8.4" rel="3.1"/>

<changelog author="vuntz@opensuse.org" date="1297598400">- Call relevant macros in %post/%postun:
  + %icon_theme_cache_post/postun because the package ships themed
    icons.
- Remove ldconfig from %post/%postun: there is no library there.
- Pass %{?no_lang_C} to %find_lang so that english documentation
  can be packaged with the program, and not in the lang subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1300276800">- Update to version 0.8.995 (0.9.0-beta1):
  + simpler, easier, more flexible, and cooler applets.
  + Fast User Switching.
  + WiMAX support.
  + System connections by default.
  + More flexible system administration.
  + Scales down to smaller devices.
- Add pkgconfig(gtk+-3.0) BuildRequires.</changelog>
<changelog author="dimstar@opensuse.org" date="1302004800">- Update to version 0.8.998 (0.9.0-rc1):
  + Bugs fixed: bgo#645909, lp#681739.
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1303387200">- Drop unneeded libglade2-devel, libgnomeui-devel,
  libgudev-1_0-devel, perl-XML-Parser, update-desktop-files
  BuildRequires.
- Move to pkgconfig()-style BuildRequires:
  + Old ones: NetworkManager-devel, NetworkManager-gnome.
  + New ones: NetworkManager, dbus-glib-1, libnm-glib, libnm-util,
    gnome-keyring-1.
- Stop owning /etc/NetworkManager/VPN as it's owned by
  NetworkManager now.</changelog>
<changelog author="dimstar@opensuse.org" date="1304510400">- Update to version 0.8.999:
  + Default to agent-owned secrets for new connections.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1308657600">- Add NetworkManager-pptp-gtk_box_new.patch: Fix build with GTK+
  3.1.6, which has gtk_{h|v}box_new deprecated. Patch taken from
  upstream git, commit id 81b8afb2.</changelog>
<changelog author="dimstar@opensuse.org" date="1314100800">- Update to version 0.9.0:
  + Preserve secret flags.
  + Simplify keyring access and don't save secrets.
  + Use a simplified password request dialog.
  + Use gtk_box_new() instead of gtk_(h/v)box_new() (bgo#652801)
- Drop NetworkManager-pptp-gtk_box_new.patch: fixed upstream.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile and strange
  ExcludeArch</changelog>
<changelog author="dimstar@opensuse.org" date="1320148800">- Update to version 0.9.1.95:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1321099200">- Update to version 0.9.2.0:
  + Updated translations.
- Pass --disable-more-warnings to configure to allow building with
  gtk+ 3.3.
- Really enable parallel build: fix typo smp_flags =&gt; smp_mflags.</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dimstar@opensuse.org" date="1330689600">- Update to version 0.9.3.995:
  + Support for "external UI mode" for DE-native dialogs (ie, GNOME
    Shell and others)
  + Fix issues with password dialog width on recent GTK+ versions
  + Config dialog tooltips now refer to corresponding ppp/pptp
    config options
  + Updated translations.
- Add explicit pkgconfig(libnm-glib-vpn) BuildRequires: it's a long
  standing requirement which currently comes implicit with
  libnm-glib, as it's part of the same package at this moment.</changelog>
<changelog author="vuntz@opensuse.org" date="1332590400">- Update to version 0.9.4.0:
  + Fix auth failure in some cases.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1340971200">- Update to version 0.9.5.95:
  + Fix sensitivity of auth methods when checking/unchecking MPPE
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.9.6.0:
  + Update FSF Address.</changelog>
<changelog author="dimstar@opensuse.org" date="1360929600">- Add nm-pptp-deprecated-gtk.patch: Do not disable deprecated GTK
  symbols for now (bgo#693866).
- Add libtool BuildRequires and call to autorecnf, as above patch
  touches the build system.</changelog>
<changelog author="zaitor@opensuse.org" date="1361534400">- Update to version 0.9.8.0:
  + Builds against the GNOME 3.8 versions of GLib and Gtk+.
  + nm-pptp-service now returns translated error messages.
  + Updated translations.
- Drop nm-pptp-deprecated-gtk.patch, fix upstream in a slightly
  different way.
- Drop libtool BuildRequires and call auto autoreconf, as we don't
  carry any patch touching the build system anymore.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.9.8.2:
  + Use full paths for auth dialog and properties plugin.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379073600">- Update to version 0.9.8.4:
  + Fixed paths in VPN service file.
  + Fixed localization in non-UTF-8 locales.
  + Updated translations.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- this is a rebuild against ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="5f20317e1f452b6c077eb5b66bf85d3d71214437dc6632b89b9f87edc050c5d1" name="NetworkManager-strongswan-kde4" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="dda39000202846093c9ae1289dad0d7bad98d2c2df9e24576eebddc3748fe006" name="NetworkManager-strongswan-kde4" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="148f9f191086a205481d72430247ec9af22a3a3ba014cee01e0e5a306a63458d" name="NetworkManager-strongswan-kde4" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="1ee947115ade5f84023ee5cc199fc68821bb71ccad8fad2d9c143831602bb33e" name="NetworkManager-strongswan-kde4" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="f7a6082603b5509a7a0f5fa41174efc8f97661395f993e595f67b09e9928fbe5" name="NetworkManager-vpnc-kde4" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="954954431aebc16644f2c6508e79ec7bcc6daad044496580a7b75a4a14b3218f" name="NetworkManager-vpnc-kde4" arch="i586">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="e52487b658ea670d3389ebaa7de20cc1b43941acde455f606a339d60c9d79e32" name="NetworkManager-vpnc-kde4" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.4.1"/>

<changelog author="idonmez@suse.com" date="1315828800">- Update to git snapshot 20110911
  * Fix saving secrets for system connections
  * Fix crash on resume
  * Support connecting to hidden SSID networks (NM 0.9 only)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>

</package>
<package pkgid="e58b9ac4d9f4ab762dea36b63ba2123ef672c9a4550478abcf346348c8ebbc32" name="NetworkManager-vpnc-kde4" arch="x86_64">
    <version epoch="0" ver="0.9.0.10" rel="2.8.1"/>

<changelog author="tittiatcoke@gmail.com" date="1317038400">- Update to git snapshot 20110925
  * Prevent two crashes because of dangling points (kde#254070)
  * Add wifi's band and channel info to interface details (NM 0.9 only)
  * Enable hover effects on system tray icon (NM 0.9 only)
    (kde#190342)
  * Improve NM's wrong version error message (NM 0.9 only)
    (kde#281962,#282085)
  * Mark some OpenConnect secrets as NotSaved, since they are changing
    (NM 0.9 only) (kde#282282)
  * Fix networkmanager plasmoid icons too small when in panel
    (NM 0.9 only) (kde#249319)
  * Rework VPN status overlay icon (NM 0.9 only)
  * Fix crash in OpenConnect when trying to connect to an
    empty/unset host
  * Fix overlay not shown when adding plasmoid (NM 0.9 only)
    (kde#271766)
  * Use the interface with default route to update system tray's icon
    (NM 0.9 only)</changelog>
<changelog author="coolo@suse.com" date="1318507200">- just set some environment variable in case there is no NM configured
  in sysconfig</changelog>
<changelog author="tittiatcoke@gmail.com" date="1319457600">- Update to git snapshot 20111024
  * Prevent crash when stopping NM
  * Make signal strength show in system tray also for Mobile
    broadband connections
  * Enable autoconnect by default for WIFI connections
  * Several bugfixes
- Updated translations</changelog>
<changelog author="idonmez@suse.com" date="1319716800">- Update to git snapshot 20111027
  * Fix kde#283017</changelog>
<changelog author="idonmez@suse.com" date="1319889600">- Update to git snapshot 20111029
  * Fix crash after resume from disk (kde#285255)</changelog>
<changelog author="idonmez@suse.com" date="1319976000">- Refresh git snapshot again to fix second part of kde#285255</changelog>
<changelog author="coolo@suse.com" date="1322308800">- fix file list for files packaged twice</changelog>
<changelog author="idonmez@suse.com" date="1323691200">- Update to git snapshot 20111209
  * Fix wifi WPA2 edit dialog
  * Fix setting focus on the first empty input field
    in vpnc auth dialog
  * Add some checks to prevent crash when PolicyKit
    denies connection editing
  * Fix icons for bluetooth interface item and system tray
  * Fix tethering with iPhone 3GS via PAN</changelog>
<changelog author="idonmez@suse.com" date="1332504000">- Update to git snapshot 20120319
  * Import/Export Routes for VPN connections
  * Fix "Last Used label resets to Never after a minute".
  * Use localized provider's name and plan in Mobile Connection Wizard
  * Fix wifi hidden network support (kde#209464)
  * Allow creating cdma connections when no cdma device is plugged
    (kde#293068)
  * Don't show Access technology in tray icon while connecting
    (kde#103828)
  * Fix and workaround graphical artifacts (kde#290964)
  * Use asynchronous DBus API in plasmoid and kded module
    communication
  * Hide non-Internet APNs in Mobile Connection Wizard (kde#291122)
  * Fix security type identification for wifi shared connections
  * Fix wifi security type icon in connection list
  * Correctly detect adhoc WPA access points
  * Do not crash if no security type has been detected</changelog>
<changelog author="toddrme2178@gmail.com" date="1338033600">- Update nm9 version to official 0.9.0.2 release</changelog>
<changelog author="toddrme2178@gmail.com" date="1340020800">- Update to 0.9.0.3
  * fix the crash when opening kwallet bug in all known cases
  * other bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1343908800">- Update to 0.9.0.4
  * fix crash loading VPNC config file (kde#302006)
  * show correct icon when wired is plugged/unplugged (kde#303155)
  * Show ad-hoc connections in connection list
    when "Show More" is active (kde#302790)
  * Fix issue with OpenVPN config files (kde#302451)
  * Fix asking for WPA2 password dialogs (kde#299868)
  * Some icon and tooltip fixes</changelog>
<changelog author="mlin@suse.com" date="1349179200">- Update to 0.9.0.5
  * Read/Save EAP configuration in PPP tab for mobile broadband and
    bluetooth connections. (kde#304873)
  * Escape ampersands since Plasma::IconWidget::setText() removes
    accelerators (ampersands) automatically.(kde#305077)
  * Test if wallet has been sucessfully opened before using it.
    (kde#303524)
  * Fix insertion of new connections (such as VPN) in wrong position
    when no wireless interface is enabled.
  * Fix problem with system tray icon not showing status overlay or
    more precisely cleaning the status overlay when it should not.
  * Fix a bug in which the wireless password prompt dialog would be
    shown at an incorrect size. (kde#306902)
  * Allow empty string in 'Subject Match' and 'Alternative Subject
    Matches' fields in wifi WPA2 enterprise dialog. (kde#307496)
  * Add storage type combobox for GSM password field in GsmWidget.
    (kde#306132)
  * SECRET_TAG and TLS_AUTH_TAG should contain 2 parameters, second
    one being the direction (in/out) assuming values 0 or 1 respectively.
    Added another check to ensure that the 2nd parameter is present before
    accessing that index. (kde#307517)
  * with many improvements</changelog>
<changelog author="mailaender@opensuse.org" date="1355313600">- Update to 0.9.0.6
  * Add warning when storage mode is kwallet and kwallet is not enabled. The
  warning will be printed in ~/.xsession-errors.
  * Add warning about things that must not go to the log file.
  * Pre-fill secrets in password dialog for wifi connections.
  * Fix crash when deleting connection.
  * Fix another potential case of qDeleteAll() crash.
  * Fix crash on kded4 startup
  * Make version text selectable by mouse.
  * Update systray icon even when not in a panel containment. This is
  usefull when using systray widget outside a panel.
  * Go passive if there is no network interface available.
  * guard QWaitCondtion::wakeAll() call with mutex lock/unlock to prevent
  deadlock
  * CISCO vpn pcf files can have string keys either as "&lt;key&gt;" or
  "!&lt;key&gt;". If &lt;key&gt; is not found, look for !&lt;key&gt; too.
  * Knm::Setting does not need to inherit from QObject. This may be the
  cause of the crash when deleting Knm::WirelessSecuritySetting:
  * Add MD5 and GTC options to WPA2 Enterprise's TTLS setting dialog.
  * Set configuration dialog size when opening it via systray icon's right menu.
  * Use correct default password mode.
  * Correctly detect if 802-1x security setting is enabled or not.
  * Add mechanism to validate EAP methods' settings. The first one implemented is
  for TLS, which requires the identify field to be filled or it will crash the
  edit dialog. Now the Ok button in edit dialog will be disabled if the identify
  field is empty.
  * Print error message if loading vpn plugin fails.
  * Fix ConnectionSecretsJob::doAskUser() for vpn connections.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1359374400">- Update to 0.9.0.7
  * fix Metric edit box in VPN's routes window (kde#311837)
  * add workaround to prevent crash when disabling wireless
    also disconnects the wifi card from motherboard (kde#304466)
  * fix Ok button when adding/editing connections (kde#313291)
  * add support to IPv6 Privacy Extension (kde#312305)
  * quote file names when exporting openvpn configuration
    file in case they contain white spaces in their names (kde#312656)
  * improve vpn import/export error handling.
  * ignore "ghost" connections (kde#311032)
  * workaround visual glitch in Back button in interface
    details window (kde#311348)
  * fix disabling IPv4 configuration (usefull if you only
    use IPv6) (kde#311894)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363435200">- Update to 0.9.0.8
  * Show icon in systray when mobile's access technology and signal
    quality are unknown.
  * Don't erase the input for the WEP key when it's not correct.
  * Add support to wireless ap-mode. (kde#311705)
  * Handle new states of active connection due to some changes in the
    new version of NetworkManager (&gt;= 0.9.7). (kde#316672)
  * Fix missing password field in wpa2 password dialog. (kde#299868)
  * Use correct interface name in InterfaceDetails.
  * Fix crash when parsing IPv6 configuration from dbus and
    accept upper case hexadecimal digits in
    SimpleIpV6AddressValidator. (kde#314811)
  * Relay NetworkManager's secret request even when using plain text
    storage. (kde#312964)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Added import-modemmanager-backend-from-kde-workspace.patch, from
  upstream, needed for KDE 4.11
- Dropped checks for obsolete versions
- Remove unused tarball
- Change BuildRequires to current reality</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371816000">- Update to 0.9.0.9
  * Bugfix release
  * Fix connection failed notification triggered despite successful
    connection. (kde#320533)
  * Attempt to prevent crash when restarting NetworkManager.
    (kde#317700)
  * Fix updating gsm access technology and allowed mode. (kde#319257)
  * Add missing icons for kde-workspace &gt;= 4.10.60 (future kde-workspace
    4.11). (kde#320153)
  * Show IPv4 gateway in interface details.
  * Use UTF-8 for wifi SSIDs.
- Dropped import-modemmanager-backend-from-kde-workspace.patch, it's
  included in this release
- Raised minimal required NetworkManager version to 0.9.0.8, as per
  upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385726400">- Update to 0.9.0.10
  * Bugfix release
  * Fixed crash when adding WPA2 Enterprise connections
    (kde#299863,bnc#845783)
  * Re-add support to NetworkManager 0.9.6.x.
  * Add IPv6 information into connection details.
  * Fix signal quality and access technology updating for 3G connections.
    (kde#324880)
  * Small optimization: disable updating traffic plotter if popup is closed.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1386676800">- Make openconnect plugin explicitly require NetworkManager-openconnect
  (bnc#845909)</changelog>

</package>
<package pkgid="0e7bb57a7bb1157df4ca9e18b3e70805fb4f52ffb84e3f3dbe7c4a75083be646" name="OpenLP" arch="noarch">
    <version epoch="0" ver="2.0.4" rel="4.1"/>

<changelog author="alexandre@exatati.com.br" date="1322481600">- License on SPDX format;
- Fix Group in spec file.</changelog>
<changelog author="jdmulloy@gmail.com" date="1322654400">- Removed unessecary dependencies
  * Removed libreoffice-graphicfilter and libreoffice-headless which
  are part of libreoffice in OpenSuse
  * Removed python-openoffice as it is not actually used by OpenLP
- Corrected dependency names
  * Corrected capitalization for python-beautifulsoup
  * Changed python-migrate to python-sqlalchemy-migrate
- Added libreoffice-pyuno to dependency list</changelog>
<changelog author="jdmulloy@gmail.com" date="1322654401">- Changed Release: tag to use %mkrel</changelog>
<changelog author="jdmulloy@gmail.com" date="1323086400">- Added uno-path.patch to make 'import uno' work
  * This patch, patches the two files that call 'import uno'.
  It appends the appropriate path to sys.path so that python can
  find the uno module.
- Added %fdupes to %install section to resolve RPMLINT warnings</changelog>
<changelog author="jdmulloy@gmail.com" date="1324814400">- Bumped OpenLP version from 1.9.7 to 1.9.8
- Cleaned up spec file</changelog>
<changelog author="jdmulloy@gmail.com" date="1329739200">- Cleaned up spec file to make it more readable
- Added conditional to prevent application of uno-path patch on
  openSUSE &gt; 12.1
  * Bug in libreoffice-pyuno is fixed in Factory (12.2)</changelog>
<changelog author="jdmulloy@gmail.com" date="1329912000">- Removed download service and manually uploaded tarball for
  submission to Factory</changelog>
<changelog author="saschpe@suse.de" date="1329998400">- Actually add a tarball ;-)
- Spec file cleanup:
  * Adjust dependency names to what we currently have in d:l:p / Factory
  * Simplified macro usage</changelog>
<changelog author="jdmulloy@gmail.com" date="1330948800">- Added openlp-1.9.8-impress-segfault-backport.patch which
  backports fix from upstream to bnc#748241.
  Patch can be removed in the next release from upstream</changelog>
<changelog author="jdmulloy@gmail.com" date="1331380800">- Changed download_files service mode to localonly to comply with
  Factory rules</changelog>
<changelog author="jdmulloy@gmail.com" date="1332072000">- Added python-xdg as a dependency so that data files are always
  stored in ~/.local/share/openlp</changelog>
<changelog author="jdmulloy@gmail.com" date="1332590400">- Bumped version from 1.9.8 to 1.9.9
- Removed openlp-1.9.8-impress-segfault-backport.patch because the
  upstream release incorporates the fix</changelog>
<changelog author="jdmulloy@gmail.com" date="1341748800">- Bumped version from 1.9.9 to 1.9.10
- Removed uno-path.patch as libreoffice-pyuno has been fixed
- Fixed missing translations bug (lp#1007148)
- Fixed error in %suse_update_desktop_file argument order</changelog>
<changelog author="jdmulloy@gmail.com" date="1344340800">- Bumped version from 1.9.10 (2.0 RC1) to 1.9.11 (2.0 RC2)
- Includes various bugfixes</changelog>
<changelog author="jdmulloy@gmail.com" date="1348488000">- Updated from version 1.9.11 (2.0 RC1) to version 1.9.12 (2.0 RC2)
  * Includes various bugfixes
- Added rpmlintrc to suppress spurious RPMLINT warnings
- Deleted obsolete patch file uno-path.patch</changelog>
<changelog author="jdmulloy@gmail.com" date="1354795200">- Updated to OpenLP 2.0
  * Stable release of OpenLP 2.0</changelog>
<changelog author="alexandre@exatati.com.br" date="1357560000">- Update to 2.0.1:
  * Song export and import now works correctly
  * Transparent themes are once again transparent
  * PowerPoint/Impress files with unicode characters in the filename
    can be imported
  * OpenLP is now more usable with the XFCE desktop on Linux</changelog>
<changelog author="jdmulloy@gmail.com" date="1377777600">- Update to 2.0.2 (bnc#837706):
  * Upstream bugfix/stabilization release
  * Improvements/Bugfixes for UI, Song Importers and more</changelog>
<changelog author="jdmulloy@gmail.com" date="1379592000">- Update to 2.0.3 (bnc#841394)
  * Fixes regression introduced in 2.0.2 that prevents saving
    service files with notes in them (lp#1216785)</changelog>
<changelog author="joseph@mulloy.me" date="1392465600">- Updated to 2.0.4 (bnc#864175)
  * Upstream bugfix/stabilization release
- Bugs fixed in this release
  * lp#1154467: Web download bible db's getting locked
  * lp#1173749: Songs with mismatching formatting tags still throw
    an exception
  * lp#1252477: Changing theme on bible settings tab causes an
    error when saving service
  * lp#1012110: pptviewlib does not accept unicode filename
  * lp#1199639: Formatting tags opened and closed in different
    verses throw an exception
  * lp#1206886: HTTP Server gets deleted
  * lp#1222534: KeyError when "Allow presentation application to be
    overridden" and Spanish language is selected
  * lp#1223841: Transition does not work if texts are the same
  * lp#1225763: Replacing background with video unblank screen even
    if "Blanked to Theme"
  * lp#1251437: BibleGateway importer crashes on non unicode urls
  * lp#1258634: TypeError when saving service from previous versions
    with notes
  * lp#1259606: Clicking Verse Button doesn't alter live slide
  * lp#1266271: Output display returns after pressing esc when
    looping slides
  * lp#1157938: "Alt + Tab" = some pixelated icons and missing icons
  * lp#1211049: Can no long download bible verses
  * lp#1216234: Layout style has not effect when using a second bible
  * lp#1240942: Troubleshooting guide is outdated
  * lp#1265368: [regression] Traceback in web remote
  * lp#1163874: Add Slovak bible to First Run Wizard</changelog>

</package>
<package pkgid="7d017c01fec63f9f670f8dbd9e306dd7f21e65fbdeca706852af3fa71df89a5f" name="OpenLP" arch="noarch">
    <version epoch="0" ver="2.0.5" rel="8.1"/>

<changelog author="jdmulloy@gmail.com" date="1322654400">- Removed unessecary dependencies
  * Removed libreoffice-graphicfilter and libreoffice-headless which
  are part of libreoffice in OpenSuse
  * Removed python-openoffice as it is not actually used by OpenLP
- Corrected dependency names
  * Corrected capitalization for python-beautifulsoup
  * Changed python-migrate to python-sqlalchemy-migrate
- Added libreoffice-pyuno to dependency list</changelog>
<changelog author="jdmulloy@gmail.com" date="1322654401">- Changed Release: tag to use %mkrel</changelog>
<changelog author="jdmulloy@gmail.com" date="1323086400">- Added uno-path.patch to make 'import uno' work
  * This patch, patches the two files that call 'import uno'.
  It appends the appropriate path to sys.path so that python can
  find the uno module.
- Added %fdupes to %install section to resolve RPMLINT warnings</changelog>
<changelog author="jdmulloy@gmail.com" date="1324814400">- Bumped OpenLP version from 1.9.7 to 1.9.8
- Cleaned up spec file</changelog>
<changelog author="jdmulloy@gmail.com" date="1329739200">- Cleaned up spec file to make it more readable
- Added conditional to prevent application of uno-path patch on
  openSUSE &gt; 12.1
  * Bug in libreoffice-pyuno is fixed in Factory (12.2)</changelog>
<changelog author="jdmulloy@gmail.com" date="1329912000">- Removed download service and manually uploaded tarball for
  submission to Factory</changelog>
<changelog author="saschpe@suse.de" date="1329998400">- Actually add a tarball ;-)
- Spec file cleanup:
  * Adjust dependency names to what we currently have in d:l:p / Factory
  * Simplified macro usage</changelog>
<changelog author="jdmulloy@gmail.com" date="1330948800">- Added openlp-1.9.8-impress-segfault-backport.patch which
  backports fix from upstream to bnc#748241.
  Patch can be removed in the next release from upstream</changelog>
<changelog author="jdmulloy@gmail.com" date="1331380800">- Changed download_files service mode to localonly to comply with
  Factory rules</changelog>
<changelog author="jdmulloy@gmail.com" date="1332072000">- Added python-xdg as a dependency so that data files are always
  stored in ~/.local/share/openlp</changelog>
<changelog author="jdmulloy@gmail.com" date="1332590400">- Bumped version from 1.9.8 to 1.9.9
- Removed openlp-1.9.8-impress-segfault-backport.patch because the
  upstream release incorporates the fix</changelog>
<changelog author="jdmulloy@gmail.com" date="1341748800">- Bumped version from 1.9.9 to 1.9.10
- Removed uno-path.patch as libreoffice-pyuno has been fixed
- Fixed missing translations bug (lp#1007148)
- Fixed error in %suse_update_desktop_file argument order</changelog>
<changelog author="jdmulloy@gmail.com" date="1344340800">- Bumped version from 1.9.10 (2.0 RC1) to 1.9.11 (2.0 RC2)
- Includes various bugfixes</changelog>
<changelog author="jdmulloy@gmail.com" date="1348488000">- Updated from version 1.9.11 (2.0 RC1) to version 1.9.12 (2.0 RC2)
  * Includes various bugfixes
- Added rpmlintrc to suppress spurious RPMLINT warnings
- Deleted obsolete patch file uno-path.patch</changelog>
<changelog author="jdmulloy@gmail.com" date="1354795200">- Updated to OpenLP 2.0
  * Stable release of OpenLP 2.0</changelog>
<changelog author="alexandre@exatati.com.br" date="1357560000">- Update to 2.0.1:
  * Song export and import now works correctly
  * Transparent themes are once again transparent
  * PowerPoint/Impress files with unicode characters in the filename
    can be imported
  * OpenLP is now more usable with the XFCE desktop on Linux</changelog>
<changelog author="jdmulloy@gmail.com" date="1377777600">- Update to 2.0.2 (bnc#837706):
  * Upstream bugfix/stabilization release
  * Improvements/Bugfixes for UI, Song Importers and more</changelog>
<changelog author="jdmulloy@gmail.com" date="1379592000">- Update to 2.0.3 (bnc#841394)
  * Fixes regression introduced in 2.0.2 that prevents saving
    service files with notes in them (lp#1216785)</changelog>
<changelog author="joseph@mulloy.me" date="1392465600">- Updated to 2.0.4 (bnc#864175)
  * Upstream bugfix/stabilization release
- Bugs fixed in this release
  * lp#1154467: Web download bible db's getting locked
  * lp#1173749: Songs with mismatching formatting tags still throw
    an exception
  * lp#1252477: Changing theme on bible settings tab causes an
    error when saving service
  * lp#1012110: pptviewlib does not accept unicode filename
  * lp#1199639: Formatting tags opened and closed in different
    verses throw an exception
  * lp#1206886: HTTP Server gets deleted
  * lp#1222534: KeyError when "Allow presentation application to be
    overridden" and Spanish language is selected
  * lp#1223841: Transition does not work if texts are the same
  * lp#1225763: Replacing background with video unblank screen even
    if "Blanked to Theme"
  * lp#1251437: BibleGateway importer crashes on non unicode urls
  * lp#1258634: TypeError when saving service from previous versions
    with notes
  * lp#1259606: Clicking Verse Button doesn't alter live slide
  * lp#1266271: Output display returns after pressing esc when
    looping slides
  * lp#1157938: "Alt + Tab" = some pixelated icons and missing icons
  * lp#1211049: Can no long download bible verses
  * lp#1216234: Layout style has not effect when using a second bible
  * lp#1240942: Troubleshooting guide is outdated
  * lp#1265368: [regression] Traceback in web remote
  * lp#1163874: Add Slovak bible to First Run Wizard</changelog>
<changelog author="joseph@mulloy.me" date="1404129600">- Updated to 2.0.5 (bnc#884901)
  * Upstream bugfix/stabilization release
  * Final release in the 2.0 branch
  * Change to BibleGateway URL to use legacy web interface
  * Issues with Themes when comparing theme files (lp#719514)
  * Improved error messages with Easy Worship Song Imports (lp#1326664)
  * Allow more than 26 equal verses within a Song (lp#1310523)
  * Handle songs where two optional breaks follow each other (lp#1296104)
  * Improve Database update error handling (lp#1136278)</changelog>

</package>
<package pkgid="7f58796d31547246d847ea4dbf52f97ac83549dec98890f67ca1ca3a72885135" name="OpenLP" arch="src">
    <version epoch="0" ver="2.0.4" rel="4.1"/>

<changelog author="alexandre@exatati.com.br" date="1322481600">- License on SPDX format;
- Fix Group in spec file.</changelog>
<changelog author="jdmulloy@gmail.com" date="1322654400">- Removed unessecary dependencies
  * Removed libreoffice-graphicfilter and libreoffice-headless which
  are part of libreoffice in OpenSuse
  * Removed python-openoffice as it is not actually used by OpenLP
- Corrected dependency names
  * Corrected capitalization for python-beautifulsoup
  * Changed python-migrate to python-sqlalchemy-migrate
- Added libreoffice-pyuno to dependency list</changelog>
<changelog author="jdmulloy@gmail.com" date="1322654401">- Changed Release: tag to use %mkrel</changelog>
<changelog author="jdmulloy@gmail.com" date="1323086400">- Added uno-path.patch to make 'import uno' work
  * This patch, patches the two files that call 'import uno'.
  It appends the appropriate path to sys.path so that python can
  find the uno module.
- Added %fdupes to %install section to resolve RPMLINT warnings</changelog>
<changelog author="jdmulloy@gmail.com" date="1324814400">- Bumped OpenLP version from 1.9.7 to 1.9.8
- Cleaned up spec file</changelog>
<changelog author="jdmulloy@gmail.com" date="1329739200">- Cleaned up spec file to make it more readable
- Added conditional to prevent application of uno-path patch on
  openSUSE &gt; 12.1
  * Bug in libreoffice-pyuno is fixed in Factory (12.2)</changelog>
<changelog author="jdmulloy@gmail.com" date="1329912000">- Removed download service and manually uploaded tarball for
  submission to Factory</changelog>
<changelog author="saschpe@suse.de" date="1329998400">- Actually add a tarball ;-)
- Spec file cleanup:
  * Adjust dependency names to what we currently have in d:l:p / Factory
  * Simplified macro usage</changelog>
<changelog author="jdmulloy@gmail.com" date="1330948800">- Added openlp-1.9.8-impress-segfault-backport.patch which
  backports fix from upstream to bnc#748241.
  Patch can be removed in the next release from upstream</changelog>
<changelog author="jdmulloy@gmail.com" date="1331380800">- Changed download_files service mode to localonly to comply with
  Factory rules</changelog>
<changelog author="jdmulloy@gmail.com" date="1332072000">- Added python-xdg as a dependency so that data files are always
  stored in ~/.local/share/openlp</changelog>
<changelog author="jdmulloy@gmail.com" date="1332590400">- Bumped version from 1.9.8 to 1.9.9
- Removed openlp-1.9.8-impress-segfault-backport.patch because the
  upstream release incorporates the fix</changelog>
<changelog author="jdmulloy@gmail.com" date="1341748800">- Bumped version from 1.9.9 to 1.9.10
- Removed uno-path.patch as libreoffice-pyuno has been fixed
- Fixed missing translations bug (lp#1007148)
- Fixed error in %suse_update_desktop_file argument order</changelog>
<changelog author="jdmulloy@gmail.com" date="1344340800">- Bumped version from 1.9.10 (2.0 RC1) to 1.9.11 (2.0 RC2)
- Includes various bugfixes</changelog>
<changelog author="jdmulloy@gmail.com" date="1348488000">- Updated from version 1.9.11 (2.0 RC1) to version 1.9.12 (2.0 RC2)
  * Includes various bugfixes
- Added rpmlintrc to suppress spurious RPMLINT warnings
- Deleted obsolete patch file uno-path.patch</changelog>
<changelog author="jdmulloy@gmail.com" date="1354795200">- Updated to OpenLP 2.0
  * Stable release of OpenLP 2.0</changelog>
<changelog author="alexandre@exatati.com.br" date="1357560000">- Update to 2.0.1:
  * Song export and import now works correctly
  * Transparent themes are once again transparent
  * PowerPoint/Impress files with unicode characters in the filename
    can be imported
  * OpenLP is now more usable with the XFCE desktop on Linux</changelog>
<changelog author="jdmulloy@gmail.com" date="1377777600">- Update to 2.0.2 (bnc#837706):
  * Upstream bugfix/stabilization release
  * Improvements/Bugfixes for UI, Song Importers and more</changelog>
<changelog author="jdmulloy@gmail.com" date="1379592000">- Update to 2.0.3 (bnc#841394)
  * Fixes regression introduced in 2.0.2 that prevents saving
    service files with notes in them (lp#1216785)</changelog>
<changelog author="joseph@mulloy.me" date="1392465600">- Updated to 2.0.4 (bnc#864175)
  * Upstream bugfix/stabilization release
- Bugs fixed in this release
  * lp#1154467: Web download bible db's getting locked
  * lp#1173749: Songs with mismatching formatting tags still throw
    an exception
  * lp#1252477: Changing theme on bible settings tab causes an
    error when saving service
  * lp#1012110: pptviewlib does not accept unicode filename
  * lp#1199639: Formatting tags opened and closed in different
    verses throw an exception
  * lp#1206886: HTTP Server gets deleted
  * lp#1222534: KeyError when "Allow presentation application to be
    overridden" and Spanish language is selected
  * lp#1223841: Transition does not work if texts are the same
  * lp#1225763: Replacing background with video unblank screen even
    if "Blanked to Theme"
  * lp#1251437: BibleGateway importer crashes on non unicode urls
  * lp#1258634: TypeError when saving service from previous versions
    with notes
  * lp#1259606: Clicking Verse Button doesn't alter live slide
  * lp#1266271: Output display returns after pressing esc when
    looping slides
  * lp#1157938: "Alt + Tab" = some pixelated icons and missing icons
  * lp#1211049: Can no long download bible verses
  * lp#1216234: Layout style has not effect when using a second bible
  * lp#1240942: Troubleshooting guide is outdated
  * lp#1265368: [regression] Traceback in web remote
  * lp#1163874: Add Slovak bible to First Run Wizard</changelog>

</package>
<package pkgid="8716eff3c27ef5a508a8d147bbd8e7bb99a7381bb7bf4586b022284cae218238" name="OpenLP" arch="src">
    <version epoch="0" ver="2.0.5" rel="8.1"/>

<changelog author="jdmulloy@gmail.com" date="1322654400">- Removed unessecary dependencies
  * Removed libreoffice-graphicfilter and libreoffice-headless which
  are part of libreoffice in OpenSuse
  * Removed python-openoffice as it is not actually used by OpenLP
- Corrected dependency names
  * Corrected capitalization for python-beautifulsoup
  * Changed python-migrate to python-sqlalchemy-migrate
- Added libreoffice-pyuno to dependency list</changelog>
<changelog author="jdmulloy@gmail.com" date="1322654401">- Changed Release: tag to use %mkrel</changelog>
<changelog author="jdmulloy@gmail.com" date="1323086400">- Added uno-path.patch to make 'import uno' work
  * This patch, patches the two files that call 'import uno'.
  It appends the appropriate path to sys.path so that python can
  find the uno module.
- Added %fdupes to %install section to resolve RPMLINT warnings</changelog>
<changelog author="jdmulloy@gmail.com" date="1324814400">- Bumped OpenLP version from 1.9.7 to 1.9.8
- Cleaned up spec file</changelog>
<changelog author="jdmulloy@gmail.com" date="1329739200">- Cleaned up spec file to make it more readable
- Added conditional to prevent application of uno-path patch on
  openSUSE &gt; 12.1
  * Bug in libreoffice-pyuno is fixed in Factory (12.2)</changelog>
<changelog author="jdmulloy@gmail.com" date="1329912000">- Removed download service and manually uploaded tarball for
  submission to Factory</changelog>
<changelog author="saschpe@suse.de" date="1329998400">- Actually add a tarball ;-)
- Spec file cleanup:
  * Adjust dependency names to what we currently have in d:l:p / Factory
  * Simplified macro usage</changelog>
<changelog author="jdmulloy@gmail.com" date="1330948800">- Added openlp-1.9.8-impress-segfault-backport.patch which
  backports fix from upstream to bnc#748241.
  Patch can be removed in the next release from upstream</changelog>
<changelog author="jdmulloy@gmail.com" date="1331380800">- Changed download_files service mode to localonly to comply with
  Factory rules</changelog>
<changelog author="jdmulloy@gmail.com" date="1332072000">- Added python-xdg as a dependency so that data files are always
  stored in ~/.local/share/openlp</changelog>
<changelog author="jdmulloy@gmail.com" date="1332590400">- Bumped version from 1.9.8 to 1.9.9
- Removed openlp-1.9.8-impress-segfault-backport.patch because the
  upstream release incorporates the fix</changelog>
<changelog author="jdmulloy@gmail.com" date="1341748800">- Bumped version from 1.9.9 to 1.9.10
- Removed uno-path.patch as libreoffice-pyuno has been fixed
- Fixed missing translations bug (lp#1007148)
- Fixed error in %suse_update_desktop_file argument order</changelog>
<changelog author="jdmulloy@gmail.com" date="1344340800">- Bumped version from 1.9.10 (2.0 RC1) to 1.9.11 (2.0 RC2)
- Includes various bugfixes</changelog>
<changelog author="jdmulloy@gmail.com" date="1348488000">- Updated from version 1.9.11 (2.0 RC1) to version 1.9.12 (2.0 RC2)
  * Includes various bugfixes
- Added rpmlintrc to suppress spurious RPMLINT warnings
- Deleted obsolete patch file uno-path.patch</changelog>
<changelog author="jdmulloy@gmail.com" date="1354795200">- Updated to OpenLP 2.0
  * Stable release of OpenLP 2.0</changelog>
<changelog author="alexandre@exatati.com.br" date="1357560000">- Update to 2.0.1:
  * Song export and import now works correctly
  * Transparent themes are once again transparent
  * PowerPoint/Impress files with unicode characters in the filename
    can be imported
  * OpenLP is now more usable with the XFCE desktop on Linux</changelog>
<changelog author="jdmulloy@gmail.com" date="1377777600">- Update to 2.0.2 (bnc#837706):
  * Upstream bugfix/stabilization release
  * Improvements/Bugfixes for UI, Song Importers and more</changelog>
<changelog author="jdmulloy@gmail.com" date="1379592000">- Update to 2.0.3 (bnc#841394)
  * Fixes regression introduced in 2.0.2 that prevents saving
    service files with notes in them (lp#1216785)</changelog>
<changelog author="joseph@mulloy.me" date="1392465600">- Updated to 2.0.4 (bnc#864175)
  * Upstream bugfix/stabilization release
- Bugs fixed in this release
  * lp#1154467: Web download bible db's getting locked
  * lp#1173749: Songs with mismatching formatting tags still throw
    an exception
  * lp#1252477: Changing theme on bible settings tab causes an
    error when saving service
  * lp#1012110: pptviewlib does not accept unicode filename
  * lp#1199639: Formatting tags opened and closed in different
    verses throw an exception
  * lp#1206886: HTTP Server gets deleted
  * lp#1222534: KeyError when "Allow presentation application to be
    overridden" and Spanish language is selected
  * lp#1223841: Transition does not work if texts are the same
  * lp#1225763: Replacing background with video unblank screen even
    if "Blanked to Theme"
  * lp#1251437: BibleGateway importer crashes on non unicode urls
  * lp#1258634: TypeError when saving service from previous versions
    with notes
  * lp#1259606: Clicking Verse Button doesn't alter live slide
  * lp#1266271: Output display returns after pressing esc when
    looping slides
  * lp#1157938: "Alt + Tab" = some pixelated icons and missing icons
  * lp#1211049: Can no long download bible verses
  * lp#1216234: Layout style has not effect when using a second bible
  * lp#1240942: Troubleshooting guide is outdated
  * lp#1265368: [regression] Traceback in web remote
  * lp#1163874: Add Slovak bible to First Run Wizard</changelog>
<changelog author="joseph@mulloy.me" date="1404129600">- Updated to 2.0.5 (bnc#884901)
  * Upstream bugfix/stabilization release
  * Final release in the 2.0 branch
  * Change to BibleGateway URL to use legacy web interface
  * Issues with Themes when comparing theme files (lp#719514)
  * Improved error messages with Easy Worship Song Imports (lp#1326664)
  * Allow more than 26 equal verses within a Song (lp#1310523)
  * Handle songs where two optional breaks follow each other (lp#1296104)
  * Improve Database update error handling (lp#1136278)</changelog>

</package>
<package pkgid="67b86cc6ae5af6829af24a1254252814d3a1953ae8929b4bfca50d7ce36b1cc8" name="PackageKit-branding-basedonopensuse" arch="i586">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="e5d9109c386df578ee53a6beb4bdab49507e5191b0a954c798471457fed931ed" name="PackageKit-branding-basedonopensuse" arch="x86_64">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="da16dac3c86db305f381c00ca47246610434e127067c3f9dc8be28b8124841d6" name="SDL" arch="src">
    <version epoch="0" ver="1.2.15" rel="10.4.1"/>

<changelog author="coolo@novell.com" date="1245153600">- readd implicit dependencies of arts</changelog>
<changelog author="coolo@novell.com" date="1253102400">- we need to obsolete all old versions of SDL (bnc#539543)</changelog>
<changelog author="prusnak@suse.cz" date="1254916800">- fix provides and obsoletes [bnc#544957]</changelog>
<changelog author="coolo@novell.com" date="1255435200">- fix requires of 32bit package</changelog>
<changelog author="lnussel@suse.de" date="1256817600">- new version 1.2.14
  * Fixed flicker when resizing the SDL window
  * Fixed crash in SDL_SetGammaRamp()
  * Fixed freeze in SDL_memset() with 0 length when assembly code is
    disabled.
  * Added SDL_DISABLE_LOCK_KEYS environment variable to enable
    normal up/down events for Caps-Lock and Num-Lock keys.
  * Fixed audio quality problem when converting between 22050 Hz and
    44100 Hz.
  * Fixed a threading crash when a few threads are rapidly created
    and complete.
  * Increased accuracy of alpha blending routines.
  * Fixed crash loading BMP files saved with the scanlines inverted.
  * Fixed mouse coordinate clamping if SDL_SetVideoMode() isn't
    called in response to SDL_VIDEORESIZE event.
  * Added doxygen documentation for the SDL API headers.
  * Fixed potential memory corruption due to assembly bug with SDL_revcpy()
  * Fixed crashes trying to detect SSE features on x86_64 architecture.
  * Fixed assembly for GCC optimized 50% alpha blending blits.
  * Added configure option --enable-screensaver, to allow enabling
    the screensaver by default.
  * Use XResetScreenSaver() instead of disabling screensaver
    entirely.
  * Removed the maximum window size limitation on X11.
  * Fixed SDL_GL_SWAP_CONTROL on X11.
  * Fixed setting the X11 window input hint.
  * Fixed distorted X11 window icon for some visuals.
  * Fixed detecting X11 libraries for dynamic loading on 64-bit Linux.
  * SDL_GL_GetAttribute(SDL_GL_SWAP_CONTROL) returns the correct
    value with GLX_SGI_swap_control.
  * Added SDL_VIDEO_FULLSCREEN_DISPLAY as a preferred synonym for
    SDL_VIDEO_FULLSCREEN_HEAD on X11.
  * The SDL_VIDEO_FULLSCREEN_DISPLAY environment variable can be set
    to 0 to place fullscreen SDL windows on the first Xinerama
    screen.
  * Added the SDL_VIDEO_FBCON_ROTATION environment variable to
    control output orientation on the framebuffer console.
  * Fixed DirectFB detection on some Linux distributions.
  * Added code to use the PS3 SPE processors for YUV conversion on Linux.
  * Updated ALSA support to the latest stable API
  * ALSA is now preferred over OSS audio. (SDL_AUDIODRIVER=dsp will
    restore the previous behavior.)
  * Improved support for PulseAudio
  * The Network Audio System support is now dynamically loaded at
    runtime.
  * Fixed crash with the MP-8866 Dual USB Joypad on newer Linux
    kernels.
  * Fixed crash in SDL_Quit() when a joystick has been unplugged.
- most patches obsolete
- enum patch removed without replacement:
  http://bugzilla.libsdl.org/show_bug.cgi?id=854
- dynamically link ALSA instead of dlopen</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="meissner@novell.com" date="1263297600">- buildrequire libspe2-devel on ppc</changelog>
<changelog author="meissner@suse.de" date="1272888000">- disable video for ps3</changelog>
<changelog author="reddwarf@opensuse.org" date="1281355200">- take patch from upstream to fix Battle for Wesnoth</changelog>
<changelog author="PVince81@yahoo.fr" date="1291550400">- applied patch from upstream for joystick related crash [bnc#632271]</changelog>
<changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
<changelog author="coolo@suse.com" date="1316174400">- remove _service, too fragile</changelog>
<changelog author="coolo@suse.com" date="1324382400">- own aclocal directory, there is no other reason to buildrequire
  automake</changelog>
<changelog author="coolo@suse.com" date="1325073600">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="joop.boonen@opensuse.org" date="1335441600">- build version 1.2.15
  * SDL-1.2.14-wesnoth_clicks.patch is now included in the source code
  * SDL-1.2.14-joystick-crash.patch is now included in the source code</changelog>
<changelog author="coolo@suse.com" date="1347969600">- 12.3's Mesa doesn't bundle libGLU anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357214400">- USe OS byteswapping macros that are optimized for all platforms
  directly by GCC.
  - DO not use dlopen to load libraries that otherwise can be linked
  at build-time, this is a _very_ bad idea, starting with the fact
  that rpm dependencies do not take account of dlopen and will
  break profiling/debugging etc..
- SDL-devel now has strict requires, so it will only pull what
  it really requires, as it no longer requires metapackages, it is
  very likely that some packages dont the chain will fail to build
  those must be fixed in the respective spec files (not here)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370692800">- sdl-lfs.patch: Ensure library is built with large file
  support/ 64bit off_t in 32bit systems</changelog>
<changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list, more robust make install call
- Optional signature verification in local builds</changelog>
<changelog author="jengelh@inai.de" date="1387281600">- Add libsdl-1.2.15-resizing.patch: resolve an issue whereby window
  frame corner resizing emitted no resize events to applications
  (bnc#855639)</changelog>

</package>
<package pkgid="d3c403bc1a9826ba718a3561a0ff68624c35fb371671a3da21a090c2ca4626ca" name="SDL_mixer" arch="src">
    <version epoch="0" ver="1.2.12" rel="2.4.1"/>

<changelog author="prusnak@suse.cz" date="1185364800">- updated to 1.2.8
  * improved detection of Ogg Vorbis and Tremor libraries
  * fixed memory leaks in Effects API
  * added support for MP3 playback with libmad (for GPL projects only!)
  * fixed the final loop of audio samples of a certain size
  * added support for Ogg Vorbis playback with Tremor (an integer decoder)
  * fixed memory corruption in timidity resampling code
  * fixed building SDL_mixer with SDL 1.3 pre-release
  * fixed compiling both timidity and native midi in the same build
  * added volume control to playmus
  * fixed linking with system libmikmod
  * corrected no-op conditions in SetDistance(), SetPanning() and SetPosition()
  * fixed copy/paste errors in channel amplitudes
- dropped obsoleted patch:
  * timidity-crash.patch (included in update)
  * warn.patch (included in update)
  * libmikmod.patch (included in update)</changelog>
<changelog author="sndirsch@suse.de" date="1197806400">- fixed BuildRequires for SUSE &lt; 10.2</changelog>
<changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
<changelog author="crrodriguez@suse.de" date="1215259200">- remove unusable static libraries
- cleanup BuildRequires and -devel package dependencies</changelog>
<changelog author="olh@suse.de" date="1225368000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="olh@suse.de" date="1228910400">- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
  (bnc#437293)</changelog>
<changelog author="prusnak@suse.cz" date="1242820800">- follow Shared Library Policy</changelog>
<changelog author="prusnak@suse.cz" date="1243598400">- removed VisualC.zip, Watcom-OS2.zip, Xcode.tar.gz from upstream
  tarball [bnc#508180]</changelog>
<changelog author="prusnak@suse.cz" date="1254916800">- fix provides and obsoletes [bnc#544957]</changelog>
<changelog author="jengelh@medozas.de" date="1261224000">- add baselibs.conf as a source</changelog>
<changelog author="prusnak@suse.cz" date="1261396800">- updated to 1.2.11
  * Fixed initialization error and crashes if MikMod library isn't available
  * Fixed bug loading multiple music files
  * Added Mix_Init()/Mix_Quit() to prevent constantly loading and unloading DLLs
  * Check for fork/vfork on any platform, don't just assume it on UNIX
  * Fixed export of Mix_GetNumChunkDecoders() and Mix_GetNumMusicDecoders()
  * Reset channel volumes after a fade out interrupts a fade in.
  * Fixed crash race condition with position audio functions
  * Fixed stereo panning in 8-bit mode
  * Added /usr/share/timidity to the default timidity.cfg locations
  * MOD support uses libmikmod and is dynamically loaded by default
  * Added TIMIDITY_CFG environment variable to fully locate timidity.cfg
  * Implemented seamless looping for music playback
  * ID3 files are now recognized as MP3 format
  * Added decoder enumeration API:
    Mix_GetNumChunkDecoders(), Mix_GetChunkDecoder(),
    Mix_GetNumMusicDecoders(), Mix_GetMusicDecoder()
  * Added support for FLAC audio both as chunks and streaming
  * Added support for streaming WAV files with Mix_LoadMUS_RW()
  * Fixed crash caused by not resetting position_channels
- drop no longer needed 64bit-fix.patch and timidity_cfg.patch</changelog>
<changelog author="coolo@novell.com" date="1263297600">- fix file list</changelog>
<changelog author="reddwarf@opensuse.org" date="1279972800">- Add FLAC support
- Recommend the libraries that are dlopened</changelog>
<changelog author="jengelh@medozas.de" date="1309608000">- Use %_smp_mflags for parallel building
- Strip %clean section (not needed on BS)</changelog>
<changelog author="jengelh@medozas.de" date="1312200000">- Update baselibs.conf to also ship libSDL_mixer-devel-32bit</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357214400">- Do not use dlopened libraries _ever_.</changelog>
<changelog author="mailaender@opensuse.org" date="1361707200">- Update to 1.2.12
  * SDL_mixer is now under the zlib license
  * Fixed seek offset with SMPEG (was relative, should be absolute)
  * Added Mix_LoadMUSType_RW() so you can tell SDL_mixer what type the music is
  * Added /usr/local/share/timidity to the timidity data path
  * Fixed timidity loading of some MIDI files
  * Fixed dropping audio in the FLAC audio decoding
  * Fixed memory leak in SDL_LoadMUS()
  * Removed GPL native MIDI code for new licensing
  * Fixed drums playing on MIDI channel 16 with timidity
  * The music-finished hook can start a track immediately
  * Added support for FluidSynth
  * Added support for libmodplug (disabled by default)</changelog>
<changelog author="jengelh@inai.de" date="1376395200">- Some metadata spruce-up: add current URLs, softer wildcarding
  in the files list</changelog>
<changelog author="bwiedemann@suse.com" date="1385208000">- import patches from https://projects.archlinux.org/svntogit/packages.git/tree/trunk?h=packages/sdl_mixer
  to fix mixer / mikmod free corruption (bnc#851996)
  Add double-free-crash.patch, mikmod1.patch and mikmod2.patch</changelog>

</package>
<package pkgid="1d2b26cf4808dcfcafd64fabaff0497e39f3ff4fce223815a30a6ed7c9810151" name="SuSEfirewall2" arch="noarch">
    <version epoch="0" ver="3.6.305" rel="2.4.1"/>

<changelog author="lnussel@suse.de" date="1317729600">- fix typo (bnc#721845)
- atomic zone status writing</changelog>
<changelog author="lnussel@suse.de" date="1318593600">- fix manual rcSuSEfirewall2 stop with sytemd (bnc#717583)</changelog>
<changelog author="lnussel@suse.de" date="1320235200">- set SYSTEMD_NO_WRAP for status (bnc#727445)</changelog>
<changelog author="lnussel@suse.de" date="1320667200">- use /sbin/rpcinfo as /usr/sbin/rpcinfo is gone (bnc#727438)</changelog>
<changelog author="lnussel@suse.de" date="1323864000">- fix forward masquerading (bnc#736205)
- compat syntax for negated options no longer works (bnc#660156, bnc#731088)
- enhance debug mode</changelog>
<changelog author="lnussel@suse.de" date="1326888000">- assume all interface names are correct (bnc#739084)</changelog>
<changelog author="lnussel@suse.de" date="1338292800">- fix typo spotted by Frederic</changelog>
<changelog author="lnussel@suse.de" date="1340020800">- allow ICMPv6 Multicast Listener Query (bnc#767392)</changelog>
<changelog author="lnussel@suse.de" date="1340020801">- allow icmpv6 in FW_SERVICES_*_*</changelog>
<changelog author="lnussel@suse.de" date="1340107200">- fix logging in test mode</changelog>
<changelog author="lnussel@suse.de" date="1342180800">- honor FW_IPv6 setting also in debug mode (bnc#769411)</changelog>
<changelog author="lnussel@suse.de" date="1347364800">- getdevinfo is gone as per commit 0c5ac93 (bnc#777271)</changelog>
<changelog author="lnussel@suse.de" date="1355313600">- adjust for starting via systemd service files
- move lock files to /run
- just CT instead of NOTRACK (bnc#793459)</changelog>
<changelog author="lnussel@suse.de" date="1355400000">- move to /usr, remove init scripts</changelog>
<changelog author="lnussel@suse.de" date="1358424000">- fix defaultl value docu for FW_PROTECT_FROM_INT (bnc#798834)</changelog>
<changelog author="lnussel@suse.de" date="1359460800">- do not add dependency information about YaST2 Second Stage (bnc#800365)</changelog>
<changelog author="meissner@suse.com" date="1367582400">- clarify what the default is in FW_MASQ_NETS (bnc#817233)
- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719)</changelog>
<changelog author="cfarrell@suse.com" date="1367841600">- license update: GPL-2.0
  Various GPL-2.0 (only) licensed files</changelog>
<changelog author="lnussel@suse.de" date="1377086400">- adjust service files so manual starts work better (bnc#819499)</changelog>
<changelog author="meissner@suse.com" date="1401192000">- susefirewall2-allow-dhcpv6.patch: allow dhcpv6 incoming to allow
  better function in a DHCPv6 driven network (bnc#783002)</changelog>

</package>
<package pkgid="0ee24a5d76ce3210a86aa661b381fc1468141572da87c077ae8d42929cb98a29" name="SuSEfirewall2" arch="src">
    <version epoch="0" ver="3.6.305" rel="2.4.1"/>

<changelog author="lnussel@suse.de" date="1317729600">- fix typo (bnc#721845)
- atomic zone status writing</changelog>
<changelog author="lnussel@suse.de" date="1318593600">- fix manual rcSuSEfirewall2 stop with sytemd (bnc#717583)</changelog>
<changelog author="lnussel@suse.de" date="1320235200">- set SYSTEMD_NO_WRAP for status (bnc#727445)</changelog>
<changelog author="lnussel@suse.de" date="1320667200">- use /sbin/rpcinfo as /usr/sbin/rpcinfo is gone (bnc#727438)</changelog>
<changelog author="lnussel@suse.de" date="1323864000">- fix forward masquerading (bnc#736205)
- compat syntax for negated options no longer works (bnc#660156, bnc#731088)
- enhance debug mode</changelog>
<changelog author="lnussel@suse.de" date="1326888000">- assume all interface names are correct (bnc#739084)</changelog>
<changelog author="lnussel@suse.de" date="1338292800">- fix typo spotted by Frederic</changelog>
<changelog author="lnussel@suse.de" date="1340020800">- allow ICMPv6 Multicast Listener Query (bnc#767392)</changelog>
<changelog author="lnussel@suse.de" date="1340020801">- allow icmpv6 in FW_SERVICES_*_*</changelog>
<changelog author="lnussel@suse.de" date="1340107200">- fix logging in test mode</changelog>
<changelog author="lnussel@suse.de" date="1342180800">- honor FW_IPv6 setting also in debug mode (bnc#769411)</changelog>
<changelog author="lnussel@suse.de" date="1347364800">- getdevinfo is gone as per commit 0c5ac93 (bnc#777271)</changelog>
<changelog author="lnussel@suse.de" date="1355313600">- adjust for starting via systemd service files
- move lock files to /run
- just CT instead of NOTRACK (bnc#793459)</changelog>
<changelog author="lnussel@suse.de" date="1355400000">- move to /usr, remove init scripts</changelog>
<changelog author="lnussel@suse.de" date="1358424000">- fix defaultl value docu for FW_PROTECT_FROM_INT (bnc#798834)</changelog>
<changelog author="lnussel@suse.de" date="1359460800">- do not add dependency information about YaST2 Second Stage (bnc#800365)</changelog>
<changelog author="meissner@suse.com" date="1367582400">- clarify what the default is in FW_MASQ_NETS (bnc#817233)
- removed the --rttl option in recent matches, as this could also be used by attackers (bnc#800719)</changelog>
<changelog author="cfarrell@suse.com" date="1367841600">- license update: GPL-2.0
  Various GPL-2.0 (only) licensed files</changelog>
<changelog author="lnussel@suse.de" date="1377086400">- adjust service files so manual starts work better (bnc#819499)</changelog>
<changelog author="meissner@suse.com" date="1401192000">- susefirewall2-allow-dhcpv6.patch: allow dhcpv6 incoming to allow
  better function in a DHCPv6 driven network (bnc#783002)</changelog>

</package>
<package pkgid="8c1a0df5d7997e36b1564300497e12d4565455b3370e8fc258bb998cba69e38e" name="SuSEfirewall2-fail2ban" arch="noarch">
    <version epoch="0" ver="0.8.14" rel="2.17.1"/>

<changelog author="meissner@suse.com" date="1349265600">- use Source URL pointing to github</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1354536000">- Fixed initscript as discussed in bnc#790557</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1354795200">One of the important changes is escaping of the &lt;matches&gt; content -- so if you
  crafted some custom action which uses it -- you must upgrade, or you
  would be at a significant security risk.
- Fixes:
  Alan Jenkins
  * [8c38907] Removed 'POSSIBLE BREAK-IN ATTEMPT' from sshd filter to avoid
    banning due to misconfigured DNS. Close gh#fail2ban/fail2ban#64
  Yaroslav Halchenko
  * [83109bc] IMPORTANT: escape the content of &lt;matches&gt; (if used in
    custom action files) since its value could contain arbitrary
    symbols.  Thanks for discovery go to the NBS System security
    team
  * [0935566,5becaf8] Various python 2.4 and 2.5 compatibility fixes.
    Close gh#fail2ban/fail2ban#83
  * [b159eab] do not enable pyinotify backend if pyinotify &lt; 0.8.3
  * [37a2e59] store IP as a base, non-unicode str to avoid spurious messages
    in the console. Close gh#fail2ban/fail2ban#91
- New features:
  David Engeset
  * [2d672d1,6288ec2] 'unbanip' command for the client + avoidance of touching
    the log file to take 'banip' or 'unbanip' in effect.
    Close gh#fail2ban/fail2ban#81, gh#fail2ban/fail2ban#86
- Enhancements:
  * [2d66f31] replaced uninformative "Invalid command" message with warning log
    exception why command actually failed
  * [958a1b0] improved failregex to "support" auth.backend = "htdigest"
  * [9e7a3b7] until we make it proper module -- adjusted sys.path only if
    system-wide run
  * [f52ba99] downgraded "already banned" from WARN to INFO level.
    Closes gh#fail2ban/fail2ban#79
  * [f105379] added hints into the log on some failure return codes (e.g. 0x7f00
    for this gh#fail2ban/fail2ban#87)
  * Various others: travis-ci integration, script to run tests
    against all available Python versions, etc</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1368532800">- Init-Script does no longer require $syslog to be started as file-base logging
  is the default. Synced with Debian script.
- Upgrade to version 0.8.9
- Fixes: Yaroslav Halchenko
  * [6f4dad46] python-2.4 is the minimal version.
  * [1eb23cf8] do not rely on scripts being under /usr -- might differ e.g.
    on Fedora. Closes gh#fail2ban/fail2ban#112. Thanks to Camusensei for the
    bug report.
  * [bf4d4af1] Changes for atomic writes. Thanks to Steven Hiscocks for
    insight. Closes gh#fail2ban/fail2ban#103.
  * [ab044b75] delay check for the existence of config directory until read.
  * [3b4084d4] fixing up for handling of TAI64N timestamps.
  * [154aa38e] do not shutdown logging until all jails stop.
  * [f2156604] pyinotify -- monitor IN_MOVED_TO events. Closes
    gh#fail2ban/fail2ban#184. Thanks to Jon Foster for report and
    troubleshooting.  Orion Poplawski
  * [e4aedfdc00] pyinotify - use bitwise op on masks and do not try tracking
    newly created directories.
  Nicolas Collignon
  * [39667ff6] Avoid leaking file descriptors. Closes gh#fail2ban/fail2ban#167.
  Sergey Brester
  * [b6bb2f88 and d17b4153] invalid date recognition, irregular because of
    sorting template list.
  Steven Hiscocks
  * [7a442f07] When changing log target with python2.{4,5} handle KeyError.
    Closes gh#fail2ban/fail2ban#147, gh#fail2ban/fail2ban#148.
  * [b6a68f51] Fix delaction on server side. Closes gh#fail2ban/fail2ban#124.
  Daniel Black
  * [f0610c01] Allow more that a one word command when changing and Action via
    the fail2ban-client. Closes gh#fail2ban/fail2ban#134.
  * [945ad3d9] Fix dates on email actions to work in different locals. Closes
    gh#fail2ban/fail2ban#70. Thanks to iGeorgeX for the idea.
  blotus
  * [96eb8986] ' and " should also be escaped in action tags Closes
    gh#fail2ban/fail2ban#109
  Christoph Theis, Nick Hilliard, Daniel Black
  * [b3bd877d,cde71080] Make syslog -v and syslog -vv formats work on FreeBSD
- New features:
  Yaroslav Halchenko
  * [9ba27353] Add support for jail.d/{confilefile} and fail2ban.d/{configfile}
    to provide additional flexibility to system adminstrators. Thanks to
    beilber for the idea. Closes gh#fail2ban/fail2ban#114.
  * [3ce53e87] Add exim filter.
  Erwan Ben Souiden
  * [d7d5228] add nagios integration documentation and script to ensure
    fail2ban is running. Closes gh#fail2ban/fail2ban#166.
  Artur Penttinen
  * [29d0df5] Add mysqld filter. Closes gh#fail2ban/fail2ban#152.
  ArndRaphael Brandes
  * [bba3fd8] Add Sogo filter. Closes gh#fail2ban/fail2ban#117.
  Michael Gebetsriother
  * [f9b78ba] Add action route to block at routing level.
  Teodor Micu &amp; Yaroslav Halchenko
  * [5f2d383] Add roundcube auth filter. Closes Debian bug #699442.
  Daniel Black
  * [be06b1b] Add action for iptables-ipsets. Closes gh#fail2ban/fail2ban#102.
  Nick Munger, Ken Menzel, Daniel Black, Christoph Theis &amp; Fabian Wenk
  * [b6d0e8a] Add and enhance the bsd-ipfw action from
    FreeBSD ports.
  Soulard Morgan
  * [f336d9f] Add filter for webmin. Closes gh#fail2ban/fail2ban#99.
  Steven Hiscocks
  * [..746c7d9] bash interactive shell completions for fail2ban-*'s
  Nick Hilliard
  * [0c5a9c5] Add pf action.
- Enhancements:
  Enrico Labedzki
  * [24a8d07] Added new date format for ASSP SMTP Proxy.
  Steven Hiscocks
  * [3d6791f] Ensure restart of Actions after a check fails occurs
    consistently. Closes gh#fail2ban/fail2ban#172.
  * [MANY] Improvements to test cases, travis, and code coverage (coveralls).
  * [b36835f] Add get cinfo to fail2ban-client. Closes gh#fail2ban/fail2ban#124.
  * [ce3ab34] Added ability to specify PID file.
  Orion Poplawski
  * [ddebcab] Enhance fail2ban.service definition dependencies and Pidfile.
    Closes gh#fail2ban/fail2ban#142.
  Yaroslav Halchenko
  * [MANY] Lots of improvements to log messages, man pages and test cases.
  * [91d5736] Postfix filter improvements - empty helo, from and rcpt to.
    Closes gh#fail2ban/fail2ban#126. Bug report by Michael Heuberger.
  * [40c5a2d] adding more of diagnostic messages into -client while starting
    the daemon.
  * [8e63d4c] Compare against None with 'is' instead of '=='.
  * [6fef85f] Strip CR and LF while analyzing the log line
  Daniel Black
  * [3aeb1a9] Add jail.conf manual page. Closes gh#fail2ban/fail2ban#143.
  * [MANY] man page edits.
  * [7cd6dab] Added help command to fail2ban-client.
  * [c8c7b0b,23bbc60] Better logging of log file read errors.
  * [3665e6d] Added code coverage to development process.
  * [41b9f7b,32d10e9,39750b8] More complete ssh filter rules to match openssh
    source. Also include BSD changes.
  * [1d9abd1] Action files can have tags in definition that refer to other
    tags.
  * [10886e7,cec5da2,adb991a] Change actions to response with ICMP port
    unreachable rather than just a drop of the packet.
  Pascal Borreli
  * [a2b29b4] Fixed lots of typos in config files and documentation.
  hamilton5
  * [7ede1e8] Update dovecot filter config.
  Romain Riviere
  * [0ac8746] Enhance named-refused filter for views.
  James Stout
  * [..2143cdf] Solaris support enhancements:
  - README.Solaris
  - failregex'es tune ups (sshd.conf)
  - hostsdeny: do not rely on support of '-i' in sed</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1369742400">- Included logrotate configuration for fail2ban</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1371124800">- Update to version 0.8.10 Primarily bugfix and enhancements release, triggered
  by "bugs" in apache- filters.  If you are relying on listed below apache-
  filters, upgrade asap and seek your distributions to patch their fail2ban
  distribution with [6ccd5781]. The bug's decription can be found in
  https://vndh.net/note:fail2ban-089-denial-service
- Fixes
  * [6ccd5781] filter.d/apache-{auth,nohome,noscript,overflows} - anchor
    failregex at the beginning (and where applicable at the end).
    Addresses a possible DoS. Closes gh#fail2ban/fail2ban#248, bnc#824710
  * action.d/{route,shorewall}.conf - blocktype must be defined
    within [Init].  Closes gh#fail2ban/fail2ban#232
- Enhancements
  * jail.conf -- assure all jails have actions and remove unused
    ports specifications
  * config/filter.d/roundcube-auth.conf -- support roundcube 0.9+
  * files/suse-initd -- update to the copy from stock SUSE
  * Updates to asterisk filter. Closes gh#fail2ban/fail2ban#227,
    gh#fail2ban/fail2ban#230.
  * Updates to asterisk to include AUTH_UNKNOWN_DOMAIN. Closes
    gh#fail2ban/fail2ban#244.</changelog>
<changelog author="schuetzm@gmx.net" date="1379764800">- Added systemd service file and systemd-tmpfiles configuration</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1384430400">- Update to version 0.8.11
- In light of CVE-2013-2178 that triggered our last release we have put a
  significant effort into tightening all of the regexs of our filters to avoid
  another similar vulnerability. We haven't examined all of these for a potential
  DoS scenario however it is possible that another DoS vulnerability exists that
  is fixed by this release. A large number of filters have been updated to
  include more failure regexs supporting previously unbanned failures and support
  newer application versions too. We have test cases for most of these now
  however if you have other examples that demonstrate that a filter is
  insufficient we welcome your feedback. During the tightening of the regexs to
  avoid DoS vulnerabilities there is the possibility that we have inadvertently,
  despite our best intentions, incorrectly allowed a failure to continue.</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390392000">- Update to version 0.8.12
  * Log rotation can now occur with the command "flushlogs" rather than
    reloading fail2ban or keeping the logtarget settings consistent in
    jail.conf/local and /etc/logrotate.d/fail2ban. (dep#697333, rh#891798).
  * Added ignorecommand option for allowing dynamic determination as to ignore
    and IP or not.
  * Remove indentation of name and loglevel while logging to SYSLOG to resolve
    syslog(-ng) parsing problems. (dep#730202). Log lines now also
    report "[PID]" after the name portion too.
  * Epoch dates can now be enclosed within []
  * New actions: badips, firewallcmd-ipset, ufw, blocklist_de
  * New filters: solid-pop3d, nsd, openwebmail, horde, freeswitch, squid,
    ejabberd, openwebmail, groupoffice
  * Filter improvements:
  - apache-noscript now includes php cgi scripts
  - exim-spam filter to match spamassassin log entry for option SAdevnull.
  - Added to sshd filter expression for
    "Received disconnect from : 3: Auth fail"
  - Improved ACL-handling for Asterisk
  - Added improper command pipelining to postfix filter.
  * General fixes:
  - Added lots of jail.conf entries for missing filters that creaped in
    over the last year.
  - synchat changed to use push method which verifies whether all data was
    send. This ensures that all data is sent before closing the connection.
  - Fixed python 2.4 compatibility (as sub-second in date patterns weren't
    2.4 compatible)
  - Complain/email actions fixed to only include relevant IPs to reporting
  * Filter fixes:
  - Added HTTP referrer bit of the apache access log to the apache filters.
  - Apache 2.4 perfork regexes fixed
  - Kernel syslog expression can have leading spaces
  - allow for ",milliseconds" in the custom date format of proftpd.log
  - recidive jail to block all protocols
  - smtps not a IANA standard so may be missing from /etc/services. Due to
    (still) common use 465 has been used as the explicit port number
  - Filter dovecot reordered session and TLS items in regex with wider scope
    for session characters
  * Ugly Fixes (Potentially incompatible changes):
  - Unfortunately at the end of last release when the action
    firewall-cmd-direct-new was added it was too long and had a broken action
    check. The action was renamed to firewallcmd-new to fit within jail name
    name length. (gh#fail2ban/fail2ban#395).
  - Last release added mysqld-syslog-iptables as a jail configuration. This
    jailname was too long and it has been renamed to mysqld-syslog.
- Fixed formating of github references in changelog
- reformatted spec-file</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390392001">- Use new flushlogs syntax after logrotate</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390478400">- Reviewed and fixed github references in the changelog</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390478401">- action firewallcmd-ipset had non-working actioncheck. Removed. rh#1046816
- lsof was required for fail2ban's SysVinit scripts only. Not longer used for
  newer versions of openSUSE</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390996800">Security note: The update to version 0.8.11 has fixed two additional security
  issues: A remote unauthenticated attacker may cause arbitrary IP addresses to
  be blocked by Fail2ban causing legitimate users to be blocked from accessing
  services protected by Fail2ban. CVE-2013-7177 (cyrus-imap) and CVE-2013-7176
  (postfix)</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1391515200">- Upgraded version to 0.8.12 to fix bnc#861504 (CVE-2013-7177) and
  bnc#861503 (CVE-2013-7176)</changelog>
<changelog author="jengelh@inai.de" date="1392724800">- Add a new subpackage to install systemd drop-ins that couple
  SuSEfirewall2 and fail2ban. Added sfw-fail2ban.conf,
  f2b-restart.conf.</changelog>
<changelog author="lars@linux-schulserver.de" date="1403697600">- update to 0.8.13:
  + Fixes:
  - action firewallcmd-ipset had non-working actioncheck. Removed.
    redhat bug #1046816.
  - filter pureftpd - added _daemon which got removed. Added
  + New Features:
  - filter nagios - detects unauthorized access to the nrpe daemon (Ivo Truxa)
  - filter sendmail-{auth,reject} (jserrachinha and cepheid666 and fab23).
  + Enhancements:
  - filter asterisk now supports syslog format
  - filter pureftpd - added all translations of "Authentication failed for
    user"
  - filter dovecot - lip= was optional and extended TLS errors can occur.
    Thanks Noel Butler.
- removed fix-for-upstream-firewallcmd-ipset.conf.patch : fixed
  upstream
- split out nagios-plugins-fail2ban package</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1408536000">- update to 0.8.14
  * minor fixes for claimed Python 2.4 and 2.5 compatibility
  * Handle case when inotify watch is auto deleted on file deletion to stop
    error messages
  * tests - fixed few "leaky" file descriptors when files were not closed while
    being removed physically
  * grep in mail*-whois-lines.conf now also matches end of line to work with
    the recidive filter
- add fail2ban-opensuse-locations.patch to fix default locations as suggested
  in bnc#878028</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1408622400">- Fixed check for %_unitdir to make fail2ban build under older systems, too.
- Changed /usr to %{_prefix} in the spec file</changelog>
<changelog author="jengelh@inai.de" date="1413547200">- Recommend installation of the ordering package when all
  constituing parts are installed</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1416916800">- Added syslog to requirements, as this version of fail2ban does not
  work with systemd-logging: bnc#905733</changelog>

</package>
<package pkgid="1847e95e7396ef09343b2ce95c49dc258cbc73b69c8a090db6034d5bb697edee" name="SuSEfirewall2-fail2ban" arch="noarch">
    <version epoch="0" ver="0.8.14" rel="2.21.1"/>

<changelog author="jweberhofer@weberhofer.at" date="1354536000">- Fixed initscript as discussed in bnc#790557</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1354795200">One of the important changes is escaping of the &lt;matches&gt; content -- so if you
  crafted some custom action which uses it -- you must upgrade, or you
  would be at a significant security risk.
- Fixes:
  Alan Jenkins
  * [8c38907] Removed 'POSSIBLE BREAK-IN ATTEMPT' from sshd filter to avoid
    banning due to misconfigured DNS. Close gh#fail2ban/fail2ban#64
  Yaroslav Halchenko
  * [83109bc] IMPORTANT: escape the content of &lt;matches&gt; (if used in
    custom action files) since its value could contain arbitrary
    symbols.  Thanks for discovery go to the NBS System security
    team
  * [0935566,5becaf8] Various python 2.4 and 2.5 compatibility fixes.
    Close gh#fail2ban/fail2ban#83
  * [b159eab] do not enable pyinotify backend if pyinotify &lt; 0.8.3
  * [37a2e59] store IP as a base, non-unicode str to avoid spurious messages
    in the console. Close gh#fail2ban/fail2ban#91
- New features:
  David Engeset
  * [2d672d1,6288ec2] 'unbanip' command for the client + avoidance of touching
    the log file to take 'banip' or 'unbanip' in effect.
    Close gh#fail2ban/fail2ban#81, gh#fail2ban/fail2ban#86
- Enhancements:
  * [2d66f31] replaced uninformative "Invalid command" message with warning log
    exception why command actually failed
  * [958a1b0] improved failregex to "support" auth.backend = "htdigest"
  * [9e7a3b7] until we make it proper module -- adjusted sys.path only if
    system-wide run
  * [f52ba99] downgraded "already banned" from WARN to INFO level.
    Closes gh#fail2ban/fail2ban#79
  * [f105379] added hints into the log on some failure return codes (e.g. 0x7f00
    for this gh#fail2ban/fail2ban#87)
  * Various others: travis-ci integration, script to run tests
    against all available Python versions, etc</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1368532800">- Init-Script does no longer require $syslog to be started as file-base logging
  is the default. Synced with Debian script.
- Upgrade to version 0.8.9
- Fixes: Yaroslav Halchenko
  * [6f4dad46] python-2.4 is the minimal version.
  * [1eb23cf8] do not rely on scripts being under /usr -- might differ e.g.
    on Fedora. Closes gh#fail2ban/fail2ban#112. Thanks to Camusensei for the
    bug report.
  * [bf4d4af1] Changes for atomic writes. Thanks to Steven Hiscocks for
    insight. Closes gh#fail2ban/fail2ban#103.
  * [ab044b75] delay check for the existence of config directory until read.
  * [3b4084d4] fixing up for handling of TAI64N timestamps.
  * [154aa38e] do not shutdown logging until all jails stop.
  * [f2156604] pyinotify -- monitor IN_MOVED_TO events. Closes
    gh#fail2ban/fail2ban#184. Thanks to Jon Foster for report and
    troubleshooting.  Orion Poplawski
  * [e4aedfdc00] pyinotify - use bitwise op on masks and do not try tracking
    newly created directories.
  Nicolas Collignon
  * [39667ff6] Avoid leaking file descriptors. Closes gh#fail2ban/fail2ban#167.
  Sergey Brester
  * [b6bb2f88 and d17b4153] invalid date recognition, irregular because of
    sorting template list.
  Steven Hiscocks
  * [7a442f07] When changing log target with python2.{4,5} handle KeyError.
    Closes gh#fail2ban/fail2ban#147, gh#fail2ban/fail2ban#148.
  * [b6a68f51] Fix delaction on server side. Closes gh#fail2ban/fail2ban#124.
  Daniel Black
  * [f0610c01] Allow more that a one word command when changing and Action via
    the fail2ban-client. Closes gh#fail2ban/fail2ban#134.
  * [945ad3d9] Fix dates on email actions to work in different locals. Closes
    gh#fail2ban/fail2ban#70. Thanks to iGeorgeX for the idea.
  blotus
  * [96eb8986] ' and " should also be escaped in action tags Closes
    gh#fail2ban/fail2ban#109
  Christoph Theis, Nick Hilliard, Daniel Black
  * [b3bd877d,cde71080] Make syslog -v and syslog -vv formats work on FreeBSD
- New features:
  Yaroslav Halchenko
  * [9ba27353] Add support for jail.d/{confilefile} and fail2ban.d/{configfile}
    to provide additional flexibility to system adminstrators. Thanks to
    beilber for the idea. Closes gh#fail2ban/fail2ban#114.
  * [3ce53e87] Add exim filter.
  Erwan Ben Souiden
  * [d7d5228] add nagios integration documentation and script to ensure
    fail2ban is running. Closes gh#fail2ban/fail2ban#166.
  Artur Penttinen
  * [29d0df5] Add mysqld filter. Closes gh#fail2ban/fail2ban#152.
  ArndRaphael Brandes
  * [bba3fd8] Add Sogo filter. Closes gh#fail2ban/fail2ban#117.
  Michael Gebetsriother
  * [f9b78ba] Add action route to block at routing level.
  Teodor Micu &amp; Yaroslav Halchenko
  * [5f2d383] Add roundcube auth filter. Closes Debian bug #699442.
  Daniel Black
  * [be06b1b] Add action for iptables-ipsets. Closes gh#fail2ban/fail2ban#102.
  Nick Munger, Ken Menzel, Daniel Black, Christoph Theis &amp; Fabian Wenk
  * [b6d0e8a] Add and enhance the bsd-ipfw action from
    FreeBSD ports.
  Soulard Morgan
  * [f336d9f] Add filter for webmin. Closes gh#fail2ban/fail2ban#99.
  Steven Hiscocks
  * [..746c7d9] bash interactive shell completions for fail2ban-*'s
  Nick Hilliard
  * [0c5a9c5] Add pf action.
- Enhancements:
  Enrico Labedzki
  * [24a8d07] Added new date format for ASSP SMTP Proxy.
  Steven Hiscocks
  * [3d6791f] Ensure restart of Actions after a check fails occurs
    consistently. Closes gh#fail2ban/fail2ban#172.
  * [MANY] Improvements to test cases, travis, and code coverage (coveralls).
  * [b36835f] Add get cinfo to fail2ban-client. Closes gh#fail2ban/fail2ban#124.
  * [ce3ab34] Added ability to specify PID file.
  Orion Poplawski
  * [ddebcab] Enhance fail2ban.service definition dependencies and Pidfile.
    Closes gh#fail2ban/fail2ban#142.
  Yaroslav Halchenko
  * [MANY] Lots of improvements to log messages, man pages and test cases.
  * [91d5736] Postfix filter improvements - empty helo, from and rcpt to.
    Closes gh#fail2ban/fail2ban#126. Bug report by Michael Heuberger.
  * [40c5a2d] adding more of diagnostic messages into -client while starting
    the daemon.
  * [8e63d4c] Compare against None with 'is' instead of '=='.
  * [6fef85f] Strip CR and LF while analyzing the log line
  Daniel Black
  * [3aeb1a9] Add jail.conf manual page. Closes gh#fail2ban/fail2ban#143.
  * [MANY] man page edits.
  * [7cd6dab] Added help command to fail2ban-client.
  * [c8c7b0b,23bbc60] Better logging of log file read errors.
  * [3665e6d] Added code coverage to development process.
  * [41b9f7b,32d10e9,39750b8] More complete ssh filter rules to match openssh
    source. Also include BSD changes.
  * [1d9abd1] Action files can have tags in definition that refer to other
    tags.
  * [10886e7,cec5da2,adb991a] Change actions to response with ICMP port
    unreachable rather than just a drop of the packet.
  Pascal Borreli
  * [a2b29b4] Fixed lots of typos in config files and documentation.
  hamilton5
  * [7ede1e8] Update dovecot filter config.
  Romain Riviere
  * [0ac8746] Enhance named-refused filter for views.
  James Stout
  * [..2143cdf] Solaris support enhancements:
  - README.Solaris
  - failregex'es tune ups (sshd.conf)
  - hostsdeny: do not rely on support of '-i' in sed</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1369742400">- Included logrotate configuration for fail2ban</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1371124800">- Update to version 0.8.10 Primarily bugfix and enhancements release, triggered
  by "bugs" in apache- filters.  If you are relying on listed below apache-
  filters, upgrade asap and seek your distributions to patch their fail2ban
  distribution with [6ccd5781]. The bug's decription can be found in
  https://vndh.net/note:fail2ban-089-denial-service
- Fixes
  * [6ccd5781] filter.d/apache-{auth,nohome,noscript,overflows} - anchor
    failregex at the beginning (and where applicable at the end).
    Addresses a possible DoS. Closes gh#fail2ban/fail2ban#248, bnc#824710
  * action.d/{route,shorewall}.conf - blocktype must be defined
    within [Init].  Closes gh#fail2ban/fail2ban#232
- Enhancements
  * jail.conf -- assure all jails have actions and remove unused
    ports specifications
  * config/filter.d/roundcube-auth.conf -- support roundcube 0.9+
  * files/suse-initd -- update to the copy from stock SUSE
  * Updates to asterisk filter. Closes gh#fail2ban/fail2ban#227,
    gh#fail2ban/fail2ban#230.
  * Updates to asterisk to include AUTH_UNKNOWN_DOMAIN. Closes
    gh#fail2ban/fail2ban#244.</changelog>
<changelog author="schuetzm@gmx.net" date="1379764800">- Added systemd service file and systemd-tmpfiles configuration</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1384430400">- Update to version 0.8.11
- In light of CVE-2013-2178 that triggered our last release we have put a
  significant effort into tightening all of the regexs of our filters to avoid
  another similar vulnerability. We haven't examined all of these for a potential
  DoS scenario however it is possible that another DoS vulnerability exists that
  is fixed by this release. A large number of filters have been updated to
  include more failure regexs supporting previously unbanned failures and support
  newer application versions too. We have test cases for most of these now
  however if you have other examples that demonstrate that a filter is
  insufficient we welcome your feedback. During the tightening of the regexs to
  avoid DoS vulnerabilities there is the possibility that we have inadvertently,
  despite our best intentions, incorrectly allowed a failure to continue.</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390392000">- Update to version 0.8.12
  * Log rotation can now occur with the command "flushlogs" rather than
    reloading fail2ban or keeping the logtarget settings consistent in
    jail.conf/local and /etc/logrotate.d/fail2ban. (dep#697333, rh#891798).
  * Added ignorecommand option for allowing dynamic determination as to ignore
    and IP or not.
  * Remove indentation of name and loglevel while logging to SYSLOG to resolve
    syslog(-ng) parsing problems. (dep#730202). Log lines now also
    report "[PID]" after the name portion too.
  * Epoch dates can now be enclosed within []
  * New actions: badips, firewallcmd-ipset, ufw, blocklist_de
  * New filters: solid-pop3d, nsd, openwebmail, horde, freeswitch, squid,
    ejabberd, openwebmail, groupoffice
  * Filter improvements:
  - apache-noscript now includes php cgi scripts
  - exim-spam filter to match spamassassin log entry for option SAdevnull.
  - Added to sshd filter expression for
    "Received disconnect from : 3: Auth fail"
  - Improved ACL-handling for Asterisk
  - Added improper command pipelining to postfix filter.
  * General fixes:
  - Added lots of jail.conf entries for missing filters that creaped in
    over the last year.
  - synchat changed to use push method which verifies whether all data was
    send. This ensures that all data is sent before closing the connection.
  - Fixed python 2.4 compatibility (as sub-second in date patterns weren't
    2.4 compatible)
  - Complain/email actions fixed to only include relevant IPs to reporting
  * Filter fixes:
  - Added HTTP referrer bit of the apache access log to the apache filters.
  - Apache 2.4 perfork regexes fixed
  - Kernel syslog expression can have leading spaces
  - allow for ",milliseconds" in the custom date format of proftpd.log
  - recidive jail to block all protocols
  - smtps not a IANA standard so may be missing from /etc/services. Due to
    (still) common use 465 has been used as the explicit port number
  - Filter dovecot reordered session and TLS items in regex with wider scope
    for session characters
  * Ugly Fixes (Potentially incompatible changes):
  - Unfortunately at the end of last release when the action
    firewall-cmd-direct-new was added it was too long and had a broken action
    check. The action was renamed to firewallcmd-new to fit within jail name
    name length. (gh#fail2ban/fail2ban#395).
  - Last release added mysqld-syslog-iptables as a jail configuration. This
    jailname was too long and it has been renamed to mysqld-syslog.
- Fixed formating of github references in changelog
- reformatted spec-file</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390392001">- Use new flushlogs syntax after logrotate</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390478400">- Reviewed and fixed github references in the changelog</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390478401">- action firewallcmd-ipset had non-working actioncheck. Removed. rh#1046816
- lsof was required for fail2ban's SysVinit scripts only. Not longer used for
  newer versions of openSUSE</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390996800">Security note: The update to version 0.8.11 has fixed two additional security
  issues: A remote unauthenticated attacker may cause arbitrary IP addresses to
  be blocked by Fail2ban causing legitimate users to be blocked from accessing
  services protected by Fail2ban. CVE-2013-7177 (cyrus-imap) and CVE-2013-7176
  (postfix)</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1391515200">- Upgraded version to 0.8.12 to fix bnc#861504 (CVE-2013-7177) and
  bnc#861503 (CVE-2013-7176)</changelog>
<changelog author="jengelh@inai.de" date="1392724800">- Add a new subpackage to install systemd drop-ins that couple
  SuSEfirewall2 and fail2ban. Added sfw-fail2ban.conf,
  f2b-restart.conf.</changelog>
<changelog author="lars@linux-schulserver.de" date="1403697600">- update to 0.8.13:
  + Fixes:
  - action firewallcmd-ipset had non-working actioncheck. Removed.
    redhat bug #1046816.
  - filter pureftpd - added _daemon which got removed. Added
  + New Features:
  - filter nagios - detects unauthorized access to the nrpe daemon (Ivo Truxa)
  - filter sendmail-{auth,reject} (jserrachinha and cepheid666 and fab23).
  + Enhancements:
  - filter asterisk now supports syslog format
  - filter pureftpd - added all translations of "Authentication failed for
    user"
  - filter dovecot - lip= was optional and extended TLS errors can occur.
    Thanks Noel Butler.
- removed fix-for-upstream-firewallcmd-ipset.conf.patch : fixed
  upstream
- split out nagios-plugins-fail2ban package</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1408536000">- update to 0.8.14
  * minor fixes for claimed Python 2.4 and 2.5 compatibility
  * Handle case when inotify watch is auto deleted on file deletion to stop
    error messages
  * tests - fixed few "leaky" file descriptors when files were not closed while
    being removed physically
  * grep in mail*-whois-lines.conf now also matches end of line to work with
    the recidive filter
- add fail2ban-opensuse-locations.patch to fix default locations as suggested
  in bnc#878028</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1408622400">- Fixed check for %_unitdir to make fail2ban build under older systems, too.
- Changed /usr to %{_prefix} in the spec file</changelog>
<changelog author="jengelh@inai.de" date="1413547200">- Recommend installation of the ordering package when all
  constituing parts are installed</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1416916800">- Added syslog to requirements, as this version of fail2ban does not
  work with systemd-logging: bnc#905733</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1421841600">- Fixed strptime thread safety issue.
  fail2ban-issue_906-strptime.patch (bnc#914075 gh#fail2ban/fail2ban#906)</changelog>

</package>
<package pkgid="dd56546459bedda57c88223a569646611a2ad1632478940bf77c6906690bea27" name="SuSEfirewall2-fail2ban" arch="noarch">
    <version epoch="0" ver="0.8.14" rel="2.24.1"/>

<changelog author="jweberhofer@weberhofer.at" date="1354795200">One of the important changes is escaping of the &lt;matches&gt; content -- so if you
  crafted some custom action which uses it -- you must upgrade, or you
  would be at a significant security risk.
- Fixes:
  Alan Jenkins
  * [8c38907] Removed 'POSSIBLE BREAK-IN ATTEMPT' from sshd filter to avoid
    banning due to misconfigured DNS. Close gh#fail2ban/fail2ban#64
  Yaroslav Halchenko
  * [83109bc] IMPORTANT: escape the content of &lt;matches&gt; (if used in
    custom action files) since its value could contain arbitrary
    symbols.  Thanks for discovery go to the NBS System security
    team
  * [0935566,5becaf8] Various python 2.4 and 2.5 compatibility fixes.
    Close gh#fail2ban/fail2ban#83
  * [b159eab] do not enable pyinotify backend if pyinotify &lt; 0.8.3
  * [37a2e59] store IP as a base, non-unicode str to avoid spurious messages
    in the console. Close gh#fail2ban/fail2ban#91
- New features:
  David Engeset
  * [2d672d1,6288ec2] 'unbanip' command for the client + avoidance of touching
    the log file to take 'banip' or 'unbanip' in effect.
    Close gh#fail2ban/fail2ban#81, gh#fail2ban/fail2ban#86
- Enhancements:
  * [2d66f31] replaced uninformative "Invalid command" message with warning log
    exception why command actually failed
  * [958a1b0] improved failregex to "support" auth.backend = "htdigest"
  * [9e7a3b7] until we make it proper module -- adjusted sys.path only if
    system-wide run
  * [f52ba99] downgraded "already banned" from WARN to INFO level.
    Closes gh#fail2ban/fail2ban#79
  * [f105379] added hints into the log on some failure return codes (e.g. 0x7f00
    for this gh#fail2ban/fail2ban#87)
  * Various others: travis-ci integration, script to run tests
    against all available Python versions, etc</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1368532800">- Init-Script does no longer require $syslog to be started as file-base logging
  is the default. Synced with Debian script.
- Upgrade to version 0.8.9
- Fixes: Yaroslav Halchenko
  * [6f4dad46] python-2.4 is the minimal version.
  * [1eb23cf8] do not rely on scripts being under /usr -- might differ e.g.
    on Fedora. Closes gh#fail2ban/fail2ban#112. Thanks to Camusensei for the
    bug report.
  * [bf4d4af1] Changes for atomic writes. Thanks to Steven Hiscocks for
    insight. Closes gh#fail2ban/fail2ban#103.
  * [ab044b75] delay check for the existence of config directory until read.
  * [3b4084d4] fixing up for handling of TAI64N timestamps.
  * [154aa38e] do not shutdown logging until all jails stop.
  * [f2156604] pyinotify -- monitor IN_MOVED_TO events. Closes
    gh#fail2ban/fail2ban#184. Thanks to Jon Foster for report and
    troubleshooting.  Orion Poplawski
  * [e4aedfdc00] pyinotify - use bitwise op on masks and do not try tracking
    newly created directories.
  Nicolas Collignon
  * [39667ff6] Avoid leaking file descriptors. Closes gh#fail2ban/fail2ban#167.
  Sergey Brester
  * [b6bb2f88 and d17b4153] invalid date recognition, irregular because of
    sorting template list.
  Steven Hiscocks
  * [7a442f07] When changing log target with python2.{4,5} handle KeyError.
    Closes gh#fail2ban/fail2ban#147, gh#fail2ban/fail2ban#148.
  * [b6a68f51] Fix delaction on server side. Closes gh#fail2ban/fail2ban#124.
  Daniel Black
  * [f0610c01] Allow more that a one word command when changing and Action via
    the fail2ban-client. Closes gh#fail2ban/fail2ban#134.
  * [945ad3d9] Fix dates on email actions to work in different locals. Closes
    gh#fail2ban/fail2ban#70. Thanks to iGeorgeX for the idea.
  blotus
  * [96eb8986] ' and " should also be escaped in action tags Closes
    gh#fail2ban/fail2ban#109
  Christoph Theis, Nick Hilliard, Daniel Black
  * [b3bd877d,cde71080] Make syslog -v and syslog -vv formats work on FreeBSD
- New features:
  Yaroslav Halchenko
  * [9ba27353] Add support for jail.d/{confilefile} and fail2ban.d/{configfile}
    to provide additional flexibility to system adminstrators. Thanks to
    beilber for the idea. Closes gh#fail2ban/fail2ban#114.
  * [3ce53e87] Add exim filter.
  Erwan Ben Souiden
  * [d7d5228] add nagios integration documentation and script to ensure
    fail2ban is running. Closes gh#fail2ban/fail2ban#166.
  Artur Penttinen
  * [29d0df5] Add mysqld filter. Closes gh#fail2ban/fail2ban#152.
  ArndRaphael Brandes
  * [bba3fd8] Add Sogo filter. Closes gh#fail2ban/fail2ban#117.
  Michael Gebetsriother
  * [f9b78ba] Add action route to block at routing level.
  Teodor Micu &amp; Yaroslav Halchenko
  * [5f2d383] Add roundcube auth filter. Closes Debian bug #699442.
  Daniel Black
  * [be06b1b] Add action for iptables-ipsets. Closes gh#fail2ban/fail2ban#102.
  Nick Munger, Ken Menzel, Daniel Black, Christoph Theis &amp; Fabian Wenk
  * [b6d0e8a] Add and enhance the bsd-ipfw action from
    FreeBSD ports.
  Soulard Morgan
  * [f336d9f] Add filter for webmin. Closes gh#fail2ban/fail2ban#99.
  Steven Hiscocks
  * [..746c7d9] bash interactive shell completions for fail2ban-*'s
  Nick Hilliard
  * [0c5a9c5] Add pf action.
- Enhancements:
  Enrico Labedzki
  * [24a8d07] Added new date format for ASSP SMTP Proxy.
  Steven Hiscocks
  * [3d6791f] Ensure restart of Actions after a check fails occurs
    consistently. Closes gh#fail2ban/fail2ban#172.
  * [MANY] Improvements to test cases, travis, and code coverage (coveralls).
  * [b36835f] Add get cinfo to fail2ban-client. Closes gh#fail2ban/fail2ban#124.
  * [ce3ab34] Added ability to specify PID file.
  Orion Poplawski
  * [ddebcab] Enhance fail2ban.service definition dependencies and Pidfile.
    Closes gh#fail2ban/fail2ban#142.
  Yaroslav Halchenko
  * [MANY] Lots of improvements to log messages, man pages and test cases.
  * [91d5736] Postfix filter improvements - empty helo, from and rcpt to.
    Closes gh#fail2ban/fail2ban#126. Bug report by Michael Heuberger.
  * [40c5a2d] adding more of diagnostic messages into -client while starting
    the daemon.
  * [8e63d4c] Compare against None with 'is' instead of '=='.
  * [6fef85f] Strip CR and LF while analyzing the log line
  Daniel Black
  * [3aeb1a9] Add jail.conf manual page. Closes gh#fail2ban/fail2ban#143.
  * [MANY] man page edits.
  * [7cd6dab] Added help command to fail2ban-client.
  * [c8c7b0b,23bbc60] Better logging of log file read errors.
  * [3665e6d] Added code coverage to development process.
  * [41b9f7b,32d10e9,39750b8] More complete ssh filter rules to match openssh
    source. Also include BSD changes.
  * [1d9abd1] Action files can have tags in definition that refer to other
    tags.
  * [10886e7,cec5da2,adb991a] Change actions to response with ICMP port
    unreachable rather than just a drop of the packet.
  Pascal Borreli
  * [a2b29b4] Fixed lots of typos in config files and documentation.
  hamilton5
  * [7ede1e8] Update dovecot filter config.
  Romain Riviere
  * [0ac8746] Enhance named-refused filter for views.
  James Stout
  * [..2143cdf] Solaris support enhancements:
  - README.Solaris
  - failregex'es tune ups (sshd.conf)
  - hostsdeny: do not rely on support of '-i' in sed</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1369742400">- Included logrotate configuration for fail2ban</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1371124800">- Update to version 0.8.10 Primarily bugfix and enhancements release, triggered
  by "bugs" in apache- filters.  If you are relying on listed below apache-
  filters, upgrade asap and seek your distributions to patch their fail2ban
  distribution with [6ccd5781]. The bug's decription can be found in
  https://vndh.net/note:fail2ban-089-denial-service
- Fixes
  * [6ccd5781] filter.d/apache-{auth,nohome,noscript,overflows} - anchor
    failregex at the beginning (and where applicable at the end).
    Addresses a possible DoS. Closes gh#fail2ban/fail2ban#248, bnc#824710
  * action.d/{route,shorewall}.conf - blocktype must be defined
    within [Init].  Closes gh#fail2ban/fail2ban#232
- Enhancements
  * jail.conf -- assure all jails have actions and remove unused
    ports specifications
  * config/filter.d/roundcube-auth.conf -- support roundcube 0.9+
  * files/suse-initd -- update to the copy from stock SUSE
  * Updates to asterisk filter. Closes gh#fail2ban/fail2ban#227,
    gh#fail2ban/fail2ban#230.
  * Updates to asterisk to include AUTH_UNKNOWN_DOMAIN. Closes
    gh#fail2ban/fail2ban#244.</changelog>
<changelog author="schuetzm@gmx.net" date="1379764800">- Added systemd service file and systemd-tmpfiles configuration</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1384430400">- Update to version 0.8.11
- In light of CVE-2013-2178 that triggered our last release we have put a
  significant effort into tightening all of the regexs of our filters to avoid
  another similar vulnerability. We haven't examined all of these for a potential
  DoS scenario however it is possible that another DoS vulnerability exists that
  is fixed by this release. A large number of filters have been updated to
  include more failure regexs supporting previously unbanned failures and support
  newer application versions too. We have test cases for most of these now
  however if you have other examples that demonstrate that a filter is
  insufficient we welcome your feedback. During the tightening of the regexs to
  avoid DoS vulnerabilities there is the possibility that we have inadvertently,
  despite our best intentions, incorrectly allowed a failure to continue.</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390392000">- Update to version 0.8.12
  * Log rotation can now occur with the command "flushlogs" rather than
    reloading fail2ban or keeping the logtarget settings consistent in
    jail.conf/local and /etc/logrotate.d/fail2ban. (dep#697333, rh#891798).
  * Added ignorecommand option for allowing dynamic determination as to ignore
    and IP or not.
  * Remove indentation of name and loglevel while logging to SYSLOG to resolve
    syslog(-ng) parsing problems. (dep#730202). Log lines now also
    report "[PID]" after the name portion too.
  * Epoch dates can now be enclosed within []
  * New actions: badips, firewallcmd-ipset, ufw, blocklist_de
  * New filters: solid-pop3d, nsd, openwebmail, horde, freeswitch, squid,
    ejabberd, openwebmail, groupoffice
  * Filter improvements:
  - apache-noscript now includes php cgi scripts
  - exim-spam filter to match spamassassin log entry for option SAdevnull.
  - Added to sshd filter expression for
    "Received disconnect from : 3: Auth fail"
  - Improved ACL-handling for Asterisk
  - Added improper command pipelining to postfix filter.
  * General fixes:
  - Added lots of jail.conf entries for missing filters that creaped in
    over the last year.
  - synchat changed to use push method which verifies whether all data was
    send. This ensures that all data is sent before closing the connection.
  - Fixed python 2.4 compatibility (as sub-second in date patterns weren't
    2.4 compatible)
  - Complain/email actions fixed to only include relevant IPs to reporting
  * Filter fixes:
  - Added HTTP referrer bit of the apache access log to the apache filters.
  - Apache 2.4 perfork regexes fixed
  - Kernel syslog expression can have leading spaces
  - allow for ",milliseconds" in the custom date format of proftpd.log
  - recidive jail to block all protocols
  - smtps not a IANA standard so may be missing from /etc/services. Due to
    (still) common use 465 has been used as the explicit port number
  - Filter dovecot reordered session and TLS items in regex with wider scope
    for session characters
  * Ugly Fixes (Potentially incompatible changes):
  - Unfortunately at the end of last release when the action
    firewall-cmd-direct-new was added it was too long and had a broken action
    check. The action was renamed to firewallcmd-new to fit within jail name
    name length. (gh#fail2ban/fail2ban#395).
  - Last release added mysqld-syslog-iptables as a jail configuration. This
    jailname was too long and it has been renamed to mysqld-syslog.
- Fixed formating of github references in changelog
- reformatted spec-file</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390392001">- Use new flushlogs syntax after logrotate</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390478400">- Reviewed and fixed github references in the changelog</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390478401">- action firewallcmd-ipset had non-working actioncheck. Removed. rh#1046816
- lsof was required for fail2ban's SysVinit scripts only. Not longer used for
  newer versions of openSUSE</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390996800">Security note: The update to version 0.8.11 has fixed two additional security
  issues: A remote unauthenticated attacker may cause arbitrary IP addresses to
  be blocked by Fail2ban causing legitimate users to be blocked from accessing
  services protected by Fail2ban. CVE-2013-7177 (cyrus-imap) and CVE-2013-7176
  (postfix)</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1391515200">- Upgraded version to 0.8.12 to fix bnc#861504 (CVE-2013-7177) and
  bnc#861503 (CVE-2013-7176)</changelog>
<changelog author="jengelh@inai.de" date="1392724800">- Add a new subpackage to install systemd drop-ins that couple
  SuSEfirewall2 and fail2ban. Added sfw-fail2ban.conf,
  f2b-restart.conf.</changelog>
<changelog author="lars@linux-schulserver.de" date="1403697600">- update to 0.8.13:
  + Fixes:
  - action firewallcmd-ipset had non-working actioncheck. Removed.
    redhat bug #1046816.
  - filter pureftpd - added _daemon which got removed. Added
  + New Features:
  - filter nagios - detects unauthorized access to the nrpe daemon (Ivo Truxa)
  - filter sendmail-{auth,reject} (jserrachinha and cepheid666 and fab23).
  + Enhancements:
  - filter asterisk now supports syslog format
  - filter pureftpd - added all translations of "Authentication failed for
    user"
  - filter dovecot - lip= was optional and extended TLS errors can occur.
    Thanks Noel Butler.
- removed fix-for-upstream-firewallcmd-ipset.conf.patch : fixed
  upstream
- split out nagios-plugins-fail2ban package</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1408536000">- update to 0.8.14
  * minor fixes for claimed Python 2.4 and 2.5 compatibility
  * Handle case when inotify watch is auto deleted on file deletion to stop
    error messages
  * tests - fixed few "leaky" file descriptors when files were not closed while
    being removed physically
  * grep in mail*-whois-lines.conf now also matches end of line to work with
    the recidive filter
- add fail2ban-opensuse-locations.patch to fix default locations as suggested
  in bnc#878028</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1408622400">- Fixed check for %_unitdir to make fail2ban build under older systems, too.
- Changed /usr to %{_prefix} in the spec file</changelog>
<changelog author="jengelh@inai.de" date="1413547200">- Recommend installation of the ordering package when all
  constituing parts are installed</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1416916800">- Added syslog to requirements, as this version of fail2ban does not
  work with systemd-logging: bnc#905733</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1421841600">- Fixed strptime thread safety issue.
  fail2ban-issue_906-strptime.patch (bnc#914075 gh#fail2ban/fail2ban#906)</changelog>
<changelog author="mpluskal@suse.com" date="1429012800">- Add missing dependency on ed (boo#926943)</changelog>

</package>
<package pkgid="38476109cfb5ae50e7fb5d0149b07c2f7d64b23bb7afcd901e0df1993d7329ea" name="SuSEfirewall2-fail2ban" arch="noarch">
    <version epoch="0" ver="0.8.14" rel="2.9.1"/>

<changelog author="jweberhofer@weberhofer.at" date="1349179200">- Added dependencies to python-pyinotifyi, python-gamin and iptables</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1349179201">- Do not longer replace main config-files
- Use variables for directories in spec file</changelog>
<changelog author="meissner@suse.com" date="1349265600">- use Source URL pointing to github</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1354536000">- Fixed initscript as discussed in bnc#790557</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1354795200">One of the important changes is escaping of the &lt;matches&gt; content -- so if you
  crafted some custom action which uses it -- you must upgrade, or you
  would be at a significant security risk.
- Fixes:
  Alan Jenkins
  * [8c38907] Removed 'POSSIBLE BREAK-IN ATTEMPT' from sshd filter to avoid
    banning due to misconfigured DNS. Close gh#fail2ban/fail2ban#64
  Yaroslav Halchenko
  * [83109bc] IMPORTANT: escape the content of &lt;matches&gt; (if used in
    custom action files) since its value could contain arbitrary
    symbols.  Thanks for discovery go to the NBS System security
    team
  * [0935566,5becaf8] Various python 2.4 and 2.5 compatibility fixes.
    Close gh#fail2ban/fail2ban#83
  * [b159eab] do not enable pyinotify backend if pyinotify &lt; 0.8.3
  * [37a2e59] store IP as a base, non-unicode str to avoid spurious messages
    in the console. Close gh#fail2ban/fail2ban#91
- New features:
  David Engeset
  * [2d672d1,6288ec2] 'unbanip' command for the client + avoidance of touching
    the log file to take 'banip' or 'unbanip' in effect.
    Close gh#fail2ban/fail2ban#81, gh#fail2ban/fail2ban#86
- Enhancements:
  * [2d66f31] replaced uninformative "Invalid command" message with warning log
    exception why command actually failed
  * [958a1b0] improved failregex to "support" auth.backend = "htdigest"
  * [9e7a3b7] until we make it proper module -- adjusted sys.path only if
    system-wide run
  * [f52ba99] downgraded "already banned" from WARN to INFO level.
    Closes gh#fail2ban/fail2ban#79
  * [f105379] added hints into the log on some failure return codes (e.g. 0x7f00
    for this gh#fail2ban/fail2ban#87)
  * Various others: travis-ci integration, script to run tests
    against all available Python versions, etc</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1368532800">- Init-Script does no longer require $syslog to be started as file-base logging
  is the default. Synced with Debian script.
- Upgrade to version 0.8.9
- Fixes: Yaroslav Halchenko
  * [6f4dad46] python-2.4 is the minimal version.
  * [1eb23cf8] do not rely on scripts being under /usr -- might differ e.g.
    on Fedora. Closes gh#fail2ban/fail2ban#112. Thanks to Camusensei for the
    bug report.
  * [bf4d4af1] Changes for atomic writes. Thanks to Steven Hiscocks for
    insight. Closes gh#fail2ban/fail2ban#103.
  * [ab044b75] delay check for the existence of config directory until read.
  * [3b4084d4] fixing up for handling of TAI64N timestamps.
  * [154aa38e] do not shutdown logging until all jails stop.
  * [f2156604] pyinotify -- monitor IN_MOVED_TO events. Closes
    gh#fail2ban/fail2ban#184. Thanks to Jon Foster for report and
    troubleshooting.  Orion Poplawski
  * [e4aedfdc00] pyinotify - use bitwise op on masks and do not try tracking
    newly created directories.
  Nicolas Collignon
  * [39667ff6] Avoid leaking file descriptors. Closes gh#fail2ban/fail2ban#167.
  Sergey Brester
  * [b6bb2f88 and d17b4153] invalid date recognition, irregular because of
    sorting template list.
  Steven Hiscocks
  * [7a442f07] When changing log target with python2.{4,5} handle KeyError.
    Closes gh#fail2ban/fail2ban#147, gh#fail2ban/fail2ban#148.
  * [b6a68f51] Fix delaction on server side. Closes gh#fail2ban/fail2ban#124.
  Daniel Black
  * [f0610c01] Allow more that a one word command when changing and Action via
    the fail2ban-client. Closes gh#fail2ban/fail2ban#134.
  * [945ad3d9] Fix dates on email actions to work in different locals. Closes
    gh#fail2ban/fail2ban#70. Thanks to iGeorgeX for the idea.
  blotus
  * [96eb8986] ' and " should also be escaped in action tags Closes
    gh#fail2ban/fail2ban#109
  Christoph Theis, Nick Hilliard, Daniel Black
  * [b3bd877d,cde71080] Make syslog -v and syslog -vv formats work on FreeBSD
- New features:
  Yaroslav Halchenko
  * [9ba27353] Add support for jail.d/{confilefile} and fail2ban.d/{configfile}
    to provide additional flexibility to system adminstrators. Thanks to
    beilber for the idea. Closes gh#fail2ban/fail2ban#114.
  * [3ce53e87] Add exim filter.
  Erwan Ben Souiden
  * [d7d5228] add nagios integration documentation and script to ensure
    fail2ban is running. Closes gh#fail2ban/fail2ban#166.
  Artur Penttinen
  * [29d0df5] Add mysqld filter. Closes gh#fail2ban/fail2ban#152.
  ArndRaphael Brandes
  * [bba3fd8] Add Sogo filter. Closes gh#fail2ban/fail2ban#117.
  Michael Gebetsriother
  * [f9b78ba] Add action route to block at routing level.
  Teodor Micu &amp; Yaroslav Halchenko
  * [5f2d383] Add roundcube auth filter. Closes Debian bug #699442.
  Daniel Black
  * [be06b1b] Add action for iptables-ipsets. Closes gh#fail2ban/fail2ban#102.
  Nick Munger, Ken Menzel, Daniel Black, Christoph Theis &amp; Fabian Wenk
  * [b6d0e8a] Add and enhance the bsd-ipfw action from
    FreeBSD ports.
  Soulard Morgan
  * [f336d9f] Add filter for webmin. Closes gh#fail2ban/fail2ban#99.
  Steven Hiscocks
  * [..746c7d9] bash interactive shell completions for fail2ban-*'s
  Nick Hilliard
  * [0c5a9c5] Add pf action.
- Enhancements:
  Enrico Labedzki
  * [24a8d07] Added new date format for ASSP SMTP Proxy.
  Steven Hiscocks
  * [3d6791f] Ensure restart of Actions after a check fails occurs
    consistently. Closes gh#fail2ban/fail2ban#172.
  * [MANY] Improvements to test cases, travis, and code coverage (coveralls).
  * [b36835f] Add get cinfo to fail2ban-client. Closes gh#fail2ban/fail2ban#124.
  * [ce3ab34] Added ability to specify PID file.
  Orion Poplawski
  * [ddebcab] Enhance fail2ban.service definition dependencies and Pidfile.
    Closes gh#fail2ban/fail2ban#142.
  Yaroslav Halchenko
  * [MANY] Lots of improvements to log messages, man pages and test cases.
  * [91d5736] Postfix filter improvements - empty helo, from and rcpt to.
    Closes gh#fail2ban/fail2ban#126. Bug report by Michael Heuberger.
  * [40c5a2d] adding more of diagnostic messages into -client while starting
    the daemon.
  * [8e63d4c] Compare against None with 'is' instead of '=='.
  * [6fef85f] Strip CR and LF while analyzing the log line
  Daniel Black
  * [3aeb1a9] Add jail.conf manual page. Closes gh#fail2ban/fail2ban#143.
  * [MANY] man page edits.
  * [7cd6dab] Added help command to fail2ban-client.
  * [c8c7b0b,23bbc60] Better logging of log file read errors.
  * [3665e6d] Added code coverage to development process.
  * [41b9f7b,32d10e9,39750b8] More complete ssh filter rules to match openssh
    source. Also include BSD changes.
  * [1d9abd1] Action files can have tags in definition that refer to other
    tags.
  * [10886e7,cec5da2,adb991a] Change actions to response with ICMP port
    unreachable rather than just a drop of the packet.
  Pascal Borreli
  * [a2b29b4] Fixed lots of typos in config files and documentation.
  hamilton5
  * [7ede1e8] Update dovecot filter config.
  Romain Riviere
  * [0ac8746] Enhance named-refused filter for views.
  James Stout
  * [..2143cdf] Solaris support enhancements:
  - README.Solaris
  - failregex'es tune ups (sshd.conf)
  - hostsdeny: do not rely on support of '-i' in sed</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1369742400">- Included logrotate configuration for fail2ban</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1371124800">- Update to version 0.8.10 Primarily bugfix and enhancements release, triggered
  by "bugs" in apache- filters.  If you are relying on listed below apache-
  filters, upgrade asap and seek your distributions to patch their fail2ban
  distribution with [6ccd5781]. The bug's decription can be found in
  https://vndh.net/note:fail2ban-089-denial-service
- Fixes
  * [6ccd5781] filter.d/apache-{auth,nohome,noscript,overflows} - anchor
    failregex at the beginning (and where applicable at the end).
    Addresses a possible DoS. Closes gh#fail2ban/fail2ban#248, bnc#824710
  * action.d/{route,shorewall}.conf - blocktype must be defined
    within [Init].  Closes gh#fail2ban/fail2ban#232
- Enhancements
  * jail.conf -- assure all jails have actions and remove unused
    ports specifications
  * config/filter.d/roundcube-auth.conf -- support roundcube 0.9+
  * files/suse-initd -- update to the copy from stock SUSE
  * Updates to asterisk filter. Closes gh#fail2ban/fail2ban#227,
    gh#fail2ban/fail2ban#230.
  * Updates to asterisk to include AUTH_UNKNOWN_DOMAIN. Closes
    gh#fail2ban/fail2ban#244.</changelog>
<changelog author="schuetzm@gmx.net" date="1379764800">- Added systemd service file and systemd-tmpfiles configuration</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1384430400">- Update to version 0.8.11
- In light of CVE-2013-2178 that triggered our last release we have put a
  significant effort into tightening all of the regexs of our filters to avoid
  another similar vulnerability. We haven't examined all of these for a potential
  DoS scenario however it is possible that another DoS vulnerability exists that
  is fixed by this release. A large number of filters have been updated to
  include more failure regexs supporting previously unbanned failures and support
  newer application versions too. We have test cases for most of these now
  however if you have other examples that demonstrate that a filter is
  insufficient we welcome your feedback. During the tightening of the regexs to
  avoid DoS vulnerabilities there is the possibility that we have inadvertently,
  despite our best intentions, incorrectly allowed a failure to continue.</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390392000">- Update to version 0.8.12
  * Log rotation can now occur with the command "flushlogs" rather than
    reloading fail2ban or keeping the logtarget settings consistent in
    jail.conf/local and /etc/logrotate.d/fail2ban. (dep#697333, rh#891798).
  * Added ignorecommand option for allowing dynamic determination as to ignore
    and IP or not.
  * Remove indentation of name and loglevel while logging to SYSLOG to resolve
    syslog(-ng) parsing problems. (dep#730202). Log lines now also
    report "[PID]" after the name portion too.
  * Epoch dates can now be enclosed within []
  * New actions: badips, firewallcmd-ipset, ufw, blocklist_de
  * New filters: solid-pop3d, nsd, openwebmail, horde, freeswitch, squid,
    ejabberd, openwebmail, groupoffice
  * Filter improvements:
  - apache-noscript now includes php cgi scripts
  - exim-spam filter to match spamassassin log entry for option SAdevnull.
  - Added to sshd filter expression for
    "Received disconnect from : 3: Auth fail"
  - Improved ACL-handling for Asterisk
  - Added improper command pipelining to postfix filter.
  * General fixes:
  - Added lots of jail.conf entries for missing filters that creaped in
    over the last year.
  - synchat changed to use push method which verifies whether all data was
    send. This ensures that all data is sent before closing the connection.
  - Fixed python 2.4 compatibility (as sub-second in date patterns weren't
    2.4 compatible)
  - Complain/email actions fixed to only include relevant IPs to reporting
  * Filter fixes:
  - Added HTTP referrer bit of the apache access log to the apache filters.
  - Apache 2.4 perfork regexes fixed
  - Kernel syslog expression can have leading spaces
  - allow for ",milliseconds" in the custom date format of proftpd.log
  - recidive jail to block all protocols
  - smtps not a IANA standard so may be missing from /etc/services. Due to
    (still) common use 465 has been used as the explicit port number
  - Filter dovecot reordered session and TLS items in regex with wider scope
    for session characters
  * Ugly Fixes (Potentially incompatible changes):
  - Unfortunately at the end of last release when the action
    firewall-cmd-direct-new was added it was too long and had a broken action
    check. The action was renamed to firewallcmd-new to fit within jail name
    name length. (gh#fail2ban/fail2ban#395).
  - Last release added mysqld-syslog-iptables as a jail configuration. This
    jailname was too long and it has been renamed to mysqld-syslog.
- Fixed formating of github references in changelog
- reformatted spec-file</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390392001">- Use new flushlogs syntax after logrotate</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390478400">- Reviewed and fixed github references in the changelog</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390478401">- action firewallcmd-ipset had non-working actioncheck. Removed. rh#1046816
- lsof was required for fail2ban's SysVinit scripts only. Not longer used for
  newer versions of openSUSE</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390996800">Security note: The update to version 0.8.11 has fixed two additional security
  issues: A remote unauthenticated attacker may cause arbitrary IP addresses to
  be blocked by Fail2ban causing legitimate users to be blocked from accessing
  services protected by Fail2ban. CVE-2013-7177 (cyrus-imap) and CVE-2013-7176
  (postfix)</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1391515200">- Upgraded version to 0.8.12 to fix bnc#861504 (CVE-2013-7177) and
  bnc#861503 (CVE-2013-7176)</changelog>
<changelog author="jengelh@inai.de" date="1392724800">- Add a new subpackage to install systemd drop-ins that couple
  SuSEfirewall2 and fail2ban. Added sfw-fail2ban.conf,
  f2b-restart.conf.</changelog>
<changelog author="lars@linux-schulserver.de" date="1403697600">- update to 0.8.13:
  + Fixes:
  - action firewallcmd-ipset had non-working actioncheck. Removed.
    redhat bug #1046816.
  - filter pureftpd - added _daemon which got removed. Added
  + New Features:
  - filter nagios - detects unauthorized access to the nrpe daemon (Ivo Truxa)
  - filter sendmail-{auth,reject} (jserrachinha and cepheid666 and fab23).
  + Enhancements:
  - filter asterisk now supports syslog format
  - filter pureftpd - added all translations of "Authentication failed for
    user"
  - filter dovecot - lip= was optional and extended TLS errors can occur.
    Thanks Noel Butler.
- removed fix-for-upstream-firewallcmd-ipset.conf.patch : fixed
  upstream
- split out nagios-plugins-fail2ban package</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1408536000">- update to 0.8.14
  * minor fixes for claimed Python 2.4 and 2.5 compatibility
  * Handle case when inotify watch is auto deleted on file deletion to stop
    error messages
  * tests - fixed few "leaky" file descriptors when files were not closed while
    being removed physically
  * grep in mail*-whois-lines.conf now also matches end of line to work with
    the recidive filter
- add fail2ban-opensuse-locations.patch to fix default locations as suggested
  in bnc#878028</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1408622400">- Fixed check for %_unitdir to make fail2ban build under older systems, too.
- Changed /usr to %{_prefix} in the spec file</changelog>

</package>
<package pkgid="47fccaae9df5da8e33d663bb5976bdd713f671c78f04c45f5fac47918633db9f" name="SuSEfirewall2-fail2ban" arch="noarch">
    <version epoch="0" ver="0.9.3" rel="2.27.1"/>

<changelog author="jweberhofer@weberhofer.at" date="1368532800">- Init-Script does no longer require $syslog to be started as file-base logging
  is the default. Synced with Debian script.
- Upgrade to version 0.8.9
- Fixes: Yaroslav Halchenko
  * [6f4dad46] python-2.4 is the minimal version.
  * [1eb23cf8] do not rely on scripts being under /usr -- might differ e.g.
    on Fedora. Closes gh#fail2ban/fail2ban#112. Thanks to Camusensei for the
    bug report.
  * [bf4d4af1] Changes for atomic writes. Thanks to Steven Hiscocks for
    insight. Closes gh#fail2ban/fail2ban#103.
  * [ab044b75] delay check for the existence of config directory until read.
  * [3b4084d4] fixing up for handling of TAI64N timestamps.
  * [154aa38e] do not shutdown logging until all jails stop.
  * [f2156604] pyinotify -- monitor IN_MOVED_TO events. Closes
    gh#fail2ban/fail2ban#184. Thanks to Jon Foster for report and
    troubleshooting.  Orion Poplawski
  * [e4aedfdc00] pyinotify - use bitwise op on masks and do not try tracking
    newly created directories.
  Nicolas Collignon
  * [39667ff6] Avoid leaking file descriptors. Closes gh#fail2ban/fail2ban#167.
  Sergey Brester
  * [b6bb2f88 and d17b4153] invalid date recognition, irregular because of
    sorting template list.
  Steven Hiscocks
  * [7a442f07] When changing log target with python2.{4,5} handle KeyError.
    Closes gh#fail2ban/fail2ban#147, gh#fail2ban/fail2ban#148.
  * [b6a68f51] Fix delaction on server side. Closes gh#fail2ban/fail2ban#124.
  Daniel Black
  * [f0610c01] Allow more that a one word command when changing and Action via
    the fail2ban-client. Closes gh#fail2ban/fail2ban#134.
  * [945ad3d9] Fix dates on email actions to work in different locals. Closes
    gh#fail2ban/fail2ban#70. Thanks to iGeorgeX for the idea.
  blotus
  * [96eb8986] ' and " should also be escaped in action tags Closes
    gh#fail2ban/fail2ban#109
  Christoph Theis, Nick Hilliard, Daniel Black
  * [b3bd877d,cde71080] Make syslog -v and syslog -vv formats work on FreeBSD
- New features:
  Yaroslav Halchenko
  * [9ba27353] Add support for jail.d/{confilefile} and fail2ban.d/{configfile}
    to provide additional flexibility to system adminstrators. Thanks to
    beilber for the idea. Closes gh#fail2ban/fail2ban#114.
  * [3ce53e87] Add exim filter.
  Erwan Ben Souiden
  * [d7d5228] add nagios integration documentation and script to ensure
    fail2ban is running. Closes gh#fail2ban/fail2ban#166.
  Artur Penttinen
  * [29d0df5] Add mysqld filter. Closes gh#fail2ban/fail2ban#152.
  ArndRaphael Brandes
  * [bba3fd8] Add Sogo filter. Closes gh#fail2ban/fail2ban#117.
  Michael Gebetsriother
  * [f9b78ba] Add action route to block at routing level.
  Teodor Micu &amp; Yaroslav Halchenko
  * [5f2d383] Add roundcube auth filter. Closes Debian bug #699442.
  Daniel Black
  * [be06b1b] Add action for iptables-ipsets. Closes gh#fail2ban/fail2ban#102.
  Nick Munger, Ken Menzel, Daniel Black, Christoph Theis &amp; Fabian Wenk
  * [b6d0e8a] Add and enhance the bsd-ipfw action from
    FreeBSD ports.
  Soulard Morgan
  * [f336d9f] Add filter for webmin. Closes gh#fail2ban/fail2ban#99.
  Steven Hiscocks
  * [..746c7d9] bash interactive shell completions for fail2ban-*'s
  Nick Hilliard
  * [0c5a9c5] Add pf action.
- Enhancements:
  Enrico Labedzki
  * [24a8d07] Added new date format for ASSP SMTP Proxy.
  Steven Hiscocks
  * [3d6791f] Ensure restart of Actions after a check fails occurs
    consistently. Closes gh#fail2ban/fail2ban#172.
  * [MANY] Improvements to test cases, travis, and code coverage (coveralls).
  * [b36835f] Add get cinfo to fail2ban-client. Closes gh#fail2ban/fail2ban#124.
  * [ce3ab34] Added ability to specify PID file.
  Orion Poplawski
  * [ddebcab] Enhance fail2ban.service definition dependencies and Pidfile.
    Closes gh#fail2ban/fail2ban#142.
  Yaroslav Halchenko
  * [MANY] Lots of improvements to log messages, man pages and test cases.
  * [91d5736] Postfix filter improvements - empty helo, from and rcpt to.
    Closes gh#fail2ban/fail2ban#126. Bug report by Michael Heuberger.
  * [40c5a2d] adding more of diagnostic messages into -client while starting
    the daemon.
  * [8e63d4c] Compare against None with 'is' instead of '=='.
  * [6fef85f] Strip CR and LF while analyzing the log line
  Daniel Black
  * [3aeb1a9] Add jail.conf manual page. Closes gh#fail2ban/fail2ban#143.
  * [MANY] man page edits.
  * [7cd6dab] Added help command to fail2ban-client.
  * [c8c7b0b,23bbc60] Better logging of log file read errors.
  * [3665e6d] Added code coverage to development process.
  * [41b9f7b,32d10e9,39750b8] More complete ssh filter rules to match openssh
    source. Also include BSD changes.
  * [1d9abd1] Action files can have tags in definition that refer to other
    tags.
  * [10886e7,cec5da2,adb991a] Change actions to response with ICMP port
    unreachable rather than just a drop of the packet.
  Pascal Borreli
  * [a2b29b4] Fixed lots of typos in config files and documentation.
  hamilton5
  * [7ede1e8] Update dovecot filter config.
  Romain Riviere
  * [0ac8746] Enhance named-refused filter for views.
  James Stout
  * [..2143cdf] Solaris support enhancements:
  - README.Solaris
  - failregex'es tune ups (sshd.conf)
  - hostsdeny: do not rely on support of '-i' in sed</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1369742400">- Included logrotate configuration for fail2ban</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1371124800">- Update to version 0.8.10 Primarily bugfix and enhancements release, triggered
  by "bugs" in apache- filters.  If you are relying on listed below apache-
  filters, upgrade asap and seek your distributions to patch their fail2ban
  distribution with [6ccd5781]. The bug's decription can be found in
  https://vndh.net/note:fail2ban-089-denial-service
- Fixes
  * [6ccd5781] filter.d/apache-{auth,nohome,noscript,overflows} - anchor
    failregex at the beginning (and where applicable at the end).
    Addresses a possible DoS. Closes gh#fail2ban/fail2ban#248, bnc#824710
  * action.d/{route,shorewall}.conf - blocktype must be defined
    within [Init].  Closes gh#fail2ban/fail2ban#232
- Enhancements
  * jail.conf -- assure all jails have actions and remove unused
    ports specifications
  * config/filter.d/roundcube-auth.conf -- support roundcube 0.9+
  * files/suse-initd -- update to the copy from stock SUSE
  * Updates to asterisk filter. Closes gh#fail2ban/fail2ban#227,
    gh#fail2ban/fail2ban#230.
  * Updates to asterisk to include AUTH_UNKNOWN_DOMAIN. Closes
    gh#fail2ban/fail2ban#244.</changelog>
<changelog author="schuetzm@gmx.net" date="1379764800">- Added systemd service file and systemd-tmpfiles configuration</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1384430400">- Update to version 0.8.11
- In light of CVE-2013-2178 that triggered our last release we have put a
  significant effort into tightening all of the regexs of our filters to avoid
  another similar vulnerability. We haven't examined all of these for a potential
  DoS scenario however it is possible that another DoS vulnerability exists that
  is fixed by this release. A large number of filters have been updated to
  include more failure regexs supporting previously unbanned failures and support
  newer application versions too. We have test cases for most of these now
  however if you have other examples that demonstrate that a filter is
  insufficient we welcome your feedback. During the tightening of the regexs to
  avoid DoS vulnerabilities there is the possibility that we have inadvertently,
  despite our best intentions, incorrectly allowed a failure to continue.</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390392000">- Update to version 0.8.12
  * Log rotation can now occur with the command "flushlogs" rather than
    reloading fail2ban or keeping the logtarget settings consistent in
    jail.conf/local and /etc/logrotate.d/fail2ban. (dep#697333, rh#891798).
  * Added ignorecommand option for allowing dynamic determination as to ignore
    and IP or not.
  * Remove indentation of name and loglevel while logging to SYSLOG to resolve
    syslog(-ng) parsing problems. (dep#730202). Log lines now also
    report "[PID]" after the name portion too.
  * Epoch dates can now be enclosed within []
  * New actions: badips, firewallcmd-ipset, ufw, blocklist_de
  * New filters: solid-pop3d, nsd, openwebmail, horde, freeswitch, squid,
    ejabberd, openwebmail, groupoffice
  * Filter improvements:
  - apache-noscript now includes php cgi scripts
  - exim-spam filter to match spamassassin log entry for option SAdevnull.
  - Added to sshd filter expression for
    "Received disconnect from : 3: Auth fail"
  - Improved ACL-handling for Asterisk
  - Added improper command pipelining to postfix filter.
  * General fixes:
  - Added lots of jail.conf entries for missing filters that creaped in
    over the last year.
  - synchat changed to use push method which verifies whether all data was
    send. This ensures that all data is sent before closing the connection.
  - Fixed python 2.4 compatibility (as sub-second in date patterns weren't
    2.4 compatible)
  - Complain/email actions fixed to only include relevant IPs to reporting
  * Filter fixes:
  - Added HTTP referrer bit of the apache access log to the apache filters.
  - Apache 2.4 perfork regexes fixed
  - Kernel syslog expression can have leading spaces
  - allow for ",milliseconds" in the custom date format of proftpd.log
  - recidive jail to block all protocols
  - smtps not a IANA standard so may be missing from /etc/services. Due to
    (still) common use 465 has been used as the explicit port number
  - Filter dovecot reordered session and TLS items in regex with wider scope
    for session characters
  * Ugly Fixes (Potentially incompatible changes):
  - Unfortunately at the end of last release when the action
    firewall-cmd-direct-new was added it was too long and had a broken action
    check. The action was renamed to firewallcmd-new to fit within jail name
    name length. (gh#fail2ban/fail2ban#395).
  - Last release added mysqld-syslog-iptables as a jail configuration. This
    jailname was too long and it has been renamed to mysqld-syslog.
- Fixed formating of github references in changelog
- reformatted spec-file</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390392001">- Use new flushlogs syntax after logrotate</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390478400">- Reviewed and fixed github references in the changelog</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390478401">- action firewallcmd-ipset had non-working actioncheck. Removed. rh#1046816
- lsof was required for fail2ban's SysVinit scripts only. Not longer used for
  newer versions of openSUSE</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1390996800">Security note: The update to version 0.8.11 has fixed two additional security
  issues: A remote unauthenticated attacker may cause arbitrary IP addresses to
  be blocked by Fail2ban causing legitimate users to be blocked from accessing
  services protected by Fail2ban. CVE-2013-7177 (cyrus-imap) and CVE-2013-7176
  (postfix)</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1391515200">- Upgraded version to 0.8.12 to fix bnc#861504 (CVE-2013-7177) and
  bnc#861503 (CVE-2013-7176)</changelog>
<changelog author="jengelh@inai.de" date="1392724800">- Add a new subpackage to install systemd drop-ins that couple
  SuSEfirewall2 and fail2ban. Added sfw-fail2ban.conf,
  f2b-restart.conf.</changelog>
<changelog author="lars@linux-schulserver.de" date="1403697600">- update to 0.8.13:
  + Fixes:
  - action firewallcmd-ipset had non-working actioncheck. Removed.
    redhat bug #1046816.
  - filter pureftpd - added _daemon which got removed. Added
  + New Features:
  - filter nagios - detects unauthorized access to the nrpe daemon (Ivo Truxa)
  - filter sendmail-{auth,reject} (jserrachinha and cepheid666 and fab23).
  + Enhancements:
  - filter asterisk now supports syslog format
  - filter pureftpd - added all translations of "Authentication failed for
    user"
  - filter dovecot - lip= was optional and extended TLS errors can occur.
    Thanks Noel Butler.
- removed fix-for-upstream-firewallcmd-ipset.conf.patch : fixed
  upstream
- split out nagios-plugins-fail2ban package</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1408536000">- update to 0.8.14
  * minor fixes for claimed Python 2.4 and 2.5 compatibility
  * Handle case when inotify watch is auto deleted on file deletion to stop
    error messages
  * tests - fixed few "leaky" file descriptors when files were not closed while
    being removed physically
  * grep in mail*-whois-lines.conf now also matches end of line to work with
    the recidive filter
- add fail2ban-opensuse-locations.patch to fix default locations as suggested
  in bnc#878028</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1408622400">- Fixed check for %_unitdir to make fail2ban build under older systems, too.
- Changed /usr to %{_prefix} in the spec file</changelog>
<changelog author="jengelh@inai.de" date="1413547200">- Recommend installation of the ordering package when all
  constituing parts are installed</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1416916800">- Added syslog to requirements, as this version of fail2ban does not
  work with systemd-logging: bnc#905733</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1421841600">- Fixed strptime thread safety issue.
  fail2ban-issue_906-strptime.patch (bnc#914075 gh#fail2ban/fail2ban#906)</changelog>
<changelog author="mpluskal@suse.com" date="1429012800">- Add missing dependency on ed (boo#926943)</changelog>
<changelog author="jweberhofer@weberhofer.at" date="1443009600">- This update will fix problems with systemd reported in bnc#917818
- Read the full changelog in /usr/share/doc/packages/fail2ban/ChangeLog
  Read about all changes from version 0.9.0 - 0.9.3
- Update to version 0.9.3
- IMPORTANT incompatible changes:
  * filter.d/roundcube-auth.conf
  - Changed logpath to 'errors' log (was 'userlogins')
  * action.d/iptables-common.conf
  - All calls to iptables command now use -w switch introduced in
    iptables 1.4.20 (some distribution could have patched their
    earlier base version as well) to provide this locking mechanism
    useful under heavy load to avoid contesting on iptables calls.
    If you need to disable, define 'action.d/iptables-common.local'
    with empty value for 'lockingopt' in `[Init]` section.
  * mail-whois-lines, sendmail-geoip-lines and sendmail-whois-lines
    actions now include by default only the first 1000 log lines in
    the emails.  Adjust &lt;grepopts&gt; to augment the behavior.
- Fixes:
  * reload in interactive mode appends all the jails twice (gh-825)
  * reload server/jail failed if database used (but was not changed) and
    some jail active (gh-1072)
  * filter.d/dovecot.conf - also match unknown user in passwd-file.
    Thanks Anton Shestakov
  * Fix fail2ban-regex not parsing journalmatch correctly from filter config
  * filter.d/asterisk.conf - fix security log support for Asterisk 12+
  * filter.d/roundcube-auth.conf
  - Updated regex to work with 'errors' log (1.0.5 and 1.1.1)
  - Added regex to work with 'userlogins' log
  * action.d/sendmail*.conf - use LC_ALL (superseeding LC_TIME) to override
    locale on systems with customized LC_ALL
  * performance fix: minimizes connection overhead, close socket only at
    communication end (gh-1099)
  * unbanip always deletes ip from database (independent of bantime, also if
    currently not banned or persistent)
  * guarantee order of dbfile to be before dbpurgeage (gh-1048)
  * always set 'dbfile' before other database options (gh-1050)
  * kill the entire process group of the child process upon timeout (gh-1129).
    Otherwise could lead to resource exhaustion due to hanging whois
    processes.
  * resolve /var/run/fail2ban path in setup.py to help installation
    on platforms with /var/run -&gt; /run symlink (gh-1142)
- New Features:
  * RETURN iptables target is now a variable: &lt;returntype&gt;
  * New type of operation: pass2allow, use fail2ban for "knocking",
    opening a closed port by swapping blocktype and returntype
  * New filters:
  - froxlor-auth - Thanks Joern Muehlencord
  - apache-pass - filter Apache access log for successful authentication
  * New actions:
  - shorewall-ipset-proto6 - using proto feature of the Shorewall. Still requires
    manual pre-configuration of the shorewall. See the action file for detail.
  * New jails:
  - pass2allow-ftp - allows FTP traffic after successful HTTP authentication
- Enhancements:
  * action.d/cloudflare.conf - improved documentation on how to allow
    multiple CF accounts, and jail.conf got new compound action
    definition action_cf_mwl to submit cloudflare report.
  * Check access to socket for more detailed logging on error (gh-595)
  * fail2ban-testcases man page
  * filter.d/apache-badbots.conf, filter.d/nginx-botsearch.conf - add
    HEAD method verb
  * Revamp of Travis and coverage automated testing
  * Added a space between IP address and the following colon
    in notification emails for easier text selection
  * Character detection heuristics for whois output via optional setting
    in mail-whois*.conf. Thanks Thomas Mayer.
    Not enabled by default, if _whois_command is set to be
    %(_whois_convert_charset)s (e.g. in action.d/mail-whois-common.local),
    it
  - detects character set of whois output (which is undefined by
    RFC 3912) via heuristics of the file command
  - converts whois data to UTF-8 character set with iconv
  - sends the whois output in UTF-8 character set to mail program
  - avoids that heirloom mailx creates binary attachment for input with
    unknown character set
- Update to version 0.9.2 (requested in boo#917818)
  * jail.conf was heavily refactored and now is similar to how it looked on
    Debian systems:
  - default action could be configured once for all jails
  - jails definitions only provide customizations (port, logpath)
  - no need to specify 'filter' if name matches jail name
  * Added fail2ban persistent database
  - default location at /var/lib/fail2ban/fail2ban.sqlite3
  - allows active bans to be reinstated on restart
  - log files read from last position after restart
  * Added systemd journal backend
  - Dependency on python-systemd
  - New "journalmatch" option added to filter configs files
  - New "systemd-journal" option added to fail2ban-regex
  * Support %z (Timezone offset) and %f (sub-seconds) support for datedetector.
    Enhanced existing date/time have been updated patterns to support these.
    ISO8601 now defaults to localtime unless specified otherwise.  Some filters
    have been change as required to capture these elements in the right
    timezone correctly.
  * Log levels are now set by Syslog style strings e.g. DEBUG, ERROR.
  * Optionally can read log files starting from "head" or "tail". See "logpath"
    option in jail.conf(5) man page.
  * Can now set log encoding for files per jail.Default uses systemd locale.
  * iptables-common.conf replaced iptables-blocktype.conf
    (iptables-blocktype.local should still be read) and now also provides
    defaults for the chain, port, protocol and name tags
- Update to version 0.9.1
- Refactoring (IMPORTANT -- Please review your setup and configuration):
  * iptables-common.conf replaced iptables-blocktype.conf
    (iptables-blocktype.local should still be read) and now also
    provides defaults for the chain, port, protocol and name tags
- Fixes:
  * start of file2ban aborted (on slow hosts, systemd considers the server has
    been timed out and kills him), see gh-824
  * UTF-8 fixes in pure-ftp thanks to Johannes Weberhofer. Closes gh-806.
  * systemd backend error on bad utf-8 in python3
  * badips.py action error when logging HTTP error raised with badips request
  * fail2ban-regex failed to work in python3 due to space/tab mix
  * recidive regex samples incorrect log level
  * journalmatch for recidive incorrect PRIORITY
  * loglevel couldn't be changed in fail2ban.conf
  * Handle case when no sqlite library is available for persistent database
  * Only reban once per IP from database on fail2ban restart
  * Nginx filter to support missing server_name. Closes gh-676
  * fail2ban-regex assertion error caused by miscount missed lines with
    multiline regex
  * Fix actions failing to execute for Python 3.4.0. Workaround for
    http://bugs.python.org/issue21207
  * Database now returns persistent bans on restart (bantime &lt; 0)
  * Recursive action tags now fully processed. Fixes issue with bsd-ipfw
    action
  * Fixed TypeError with "ipfailures" and "ipjailfailures" action tags.
    Thanks Serg G. Brester
  * Correct times for non-timezone date times formats during DST
  * Pass a copy of, not original, aInfo into actions to avoid side-effects
  * Per-distribution paths to the exim's main log
  * Ignored IPs are no longer banned when being restored from persistent
    database
  * Manually unbanned IPs are now removed from persistent database, such they
    wont be banned again when Fail2Ban is restarted
  * Pass "bantime" parameter to the actions in default jail's action
    definition(s)
  * filters.d/sieve.conf - fixed typo in _daemon.  Thanks Jisoo Park
  * cyrus-imap -- also catch also failed logins via secured (imaps/pop3s).
    Regression was introduced while strengthening failregex in 0.8.11 (bd175f)
    Debian bug #755173
  * postfix-sasl - added journalmatch.  Thanks Luc Maisonobe
  * postfix* - match with a new daemon string (postfix/submission/smtpd).
    Closes gh-804 .  Thanks Paul Traina
  * apache - added filter for AH01630 client denied by server configuration.
- New features:
  - New filters:
  - monit  Thanks Jason H Martin
  - directadmin  Thanks niorg
  - apache-shellshock  Thanks Eugene Hopkinson (SlowRiot)
  - New actions:
  - symbiosis-blacklist-allports  for Bytemark symbiosis firewall
  - fail2ban-client can fetch the running server version
  - Added Cloudflare API action
- Enhancements
  * Start performance of fail2ban-client (and tests) increased, start time
    and cpu usage rapidly reduced. Introduced a shared storage logic, to
    bypass reading lots of config files (see gh-824).
    Thanks to Joost Molenaar for good catch (reported gh-820).
  * Fail2ban-regex - add print-all-matched option. Closes gh-652
  * Suppress fail2ban-client warnings for non-critical config options
  * Match non "Bye Bye" disconnect messages for sshd locked account regex
  * courier-smtp filter:
  - match lines with user names
  - match lines containing "535 Authentication failed" attempts
  * Add &lt;chain&gt; tag to iptables-ipsets
  * Realign fail2ban log output with white space to improve readability. Does
    not affect SYSLOG output
  * Log unhandled exceptions
  * cyrus-imap: catch "user not found" attempts
  * Add support for Portsentry
- Update to version 0.9.0
  Carries all fixes, features and enhancements from 0.8.13 (unreleased) with
  major changes.
  The minimum supported python version is now 2.6. If you have python-2.4 or 2.5
  you can use the 0.8.12 version of fail2ban.
  Please take note of release notes:
  https://github.com/fail2ban/fail2ban/releases/tag/0.9.0
  Please test your configuration before relying on it.
  Nearly all development is thanks to Steven Hiscocks (THANKS!), merging,
  testcases and timezone support from Daniel Black, and code-review and minor
  additions from Yaroslav Halchenko.
- Refactoring (IMPORTANT -- Please review your setup and configuration):
  * [..bddbf1e] jail.conf was heavily refactored and now is similar
    to how it looked on Debian systems:
  - default action could be configured once for all jails
  - jails definitions only provide customizations (port, logpath)
  - no need to specify 'filter' if name matches jail name
  * [..5aef036] Core functionality moved into fail2ban/ module.
    Closes gh-26
  - tests included in module to aid testing and debugging
  * Added fail2ban persistent database
  - default location at /var/lib/fail2ban/fail2ban.sqlite3
  - allows active bans to be reinstated on restart
  - log files read from last position after restart
  * Added systemd journal backend
  - Dependency on python-systemd
  - New "journalmatch" option added to filter configs files
  - New "systemd-journal" option added to fail2ban-regex
  * Added python3 support
  * Support %z (Timezone offset) and %f (sub-seconds) support for
    datedetector. Enhanced existing date/time have been updated patterns to
    support these. ISO8601 now defaults to localtime unless specified otherwise.
    Some filters have been change as required to capture these elements in the
    right timezone correctly.
  * Log levels are now set by Syslog style strings e.g. DEBUG, ERROR.
  - Log level INFO is now more verbose
  * Optionally can read log files starting from "head" or "tail".
  - See "logpath" option in jail.conf(5) man page.
  * Can now set log encoding for files per jail.
  - Default uses systemd locale.
- New features:
  * [..c7ae460] Multiline failregex. Close gh-54
  * [8af32ed] Guacamole filter and support for Apache Tomcat date
    format
  * [..b6059f4] 'timeout' option for actions Close gh-60 and Debian bug
    [#410077].  Also it would now capture and include stdout and stderr
    into logging messages in case of error or at DEBUG loglevel.
  * Added action xarf-login-attack to report formatted attack messages
    according to the XARF standard (v0.2). Close gh-105
  * Support PyPy
  * Add filter for apache-botsearch
  * Add filter for kerio. Thanks Tony Lawrence for blog of regexs and
    providing samples. Close gh-120
  * Filter for stunnel
  * Filter for Counter Strike 1.6. Thanks to onorua for logs.
    Close gh-347
  * Filter for squirrelmail. Close gh-261
  * Filter for tine20. Close gh-583
  * Custom date formats (strptime) can now be set in filters and jail.conf
  * Python based actions can now be created.
  - SMTP action for sending emails on jail start, stop and ban.
  * Added action to use badips.com reporting and blacklist
  - Requires Python 2.7+
- Enhancements
  * Fail2ban-regex - don't accumulate lines if not printing them.
    add options to suppress output of missed/ignored lines. Close gh-644
  * Asterisk now supports syslog format
  * Jail names increased to 26 characters and iptables prefix reduced
    from fail2ban- to f2b- as suggested by buanzo in gh-462.
  * Multiline filter for sendmail-spam. Close gh-418
  * Multiline regex for Disconnecting: Too many authentication failures for
    root [preauth]\nConnection closed by 6X.XXX.XXX.XXX [preauth]
  * Multiline regex for Disconnecting: Connection from 61.XX.XX.XX port
    51353\nToo many authentication failures for root [preauth]. Thanks
    Helmut Grohne. Close gh-457
  * Replacing use of deprecated API (.warning, .assertEqual, etc)
  * [..a648cc2] Filters can have options now too which are substituted into
    failregex / ignoreregex
  * [..e019ab7] Multiple instances of the same action are allowed in the
    same jail -- use actname option to disambiguate.
  * Add honeypot email address to exim-spam filter as argument
  * Properties and methods of actions accessible from fail2ban-client
  - Use of properties replaces command actions "cinfo" interface
- Whereever possible, path-definitions have been moved paths-opensuse.conf
  which has been submittet upstream
- Use default fail2ban.service including fail2ban-opensuse-service.patch
- Use default suse-initd from upstream
- Run test-cases during build
- run fdupes
- Tests have been moved to a seperate page
- Added rpmlintrc file to ignore some hidden files in the test package
- Must build arch-depended packages for SLES 11
- Removed two tests which can't run on the build server with openSUSE
  before 13.3: fail2ban-exclude-dev-log-tests.patch
- Note: fail2ban-issue_906-strptime.patch has been removed as it is already
  integrated in the current version.</changelog>

</package>
<package pkgid="2a9be275214b22e3e638dd2e6c7b7ae2f8342218f1a3da30beddaa16baab23ca" name="WindowMaker" arch="i586">
    <version epoch="0" ver="0.95.4" rel="5.10.1"/>

<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>
<changelog author="mvetter@suse.com" date="1442836800">- bsc#779179: Remove old SuSE wallpapers and add openSUSE ones.</changelog>
<changelog author="mvetter@suse.com" date="1444046400">- bsc#900820: Always use default openSUSE wallpaper for theme 'SUSE'.</changelog>

</package>
<package pkgid="0f2adaec2642bb9f728018d5b836ffec739a3528f3a8dfedd754eb9e45a46fb8" name="WindowMaker" arch="i586">
    <version epoch="0" ver="0.95.4" rel="5.4.1"/>

<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>

</package>
<package pkgid="917ccd0945f9abc6c6e3aa5dac07e26e38e9c7e10002271a880ff3fad4bb23ab" name="WindowMaker" arch="i586">
    <version epoch="0" ver="0.95.4" rel="5.7.1"/>

<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>
<changelog author="mvetter@suse.com" date="1442836800">- bsc#779179: Remove old SuSE wallpapers and add openSUSE ones.</changelog>

</package>
<package pkgid="fc45c45cc2334c65a5fe83759e1e0f3f5b3b23199652ab49bcdbd63491f4af11" name="WindowMaker" arch="src">
    <version epoch="0" ver="0.95.4" rel="5.10.1"/>

<changelog author="nadvornik@suse.cz" date="1223899200">- fixed composite extension usage [bnc#433808]</changelog>
<changelog author="coolo@suse.de" date="1234353600">- ignore error about menu.orig - it's left for documentation</changelog>
<changelog author="nadvornik@suse.cz" date="1234440000">- updated to development snapshot</changelog>
<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>
<changelog author="mvetter@suse.com" date="1442836800">- bsc#779179: Remove old SuSE wallpapers and add openSUSE ones.</changelog>
<changelog author="mvetter@suse.com" date="1444046400">- bsc#900820: Always use default openSUSE wallpaper for theme 'SUSE'.</changelog>

</package>
<package pkgid="55598e1d5d3cd7e6794040f74415161b349c9bd14841bd79c0da95ff96132423" name="WindowMaker" arch="src">
    <version epoch="0" ver="0.95.4" rel="5.4.1"/>

<changelog author="ro@suse.de" date="1209297600">- remove hermes-devel from buildreq</changelog>
<changelog author="pgajdos@suse.cz" date="1211457600">- fixed "local variable used before set" [bnc#353376]</changelog>
<changelog author="nadvornik@suse.cz" date="1223899200">- fixed composite extension usage [bnc#433808]</changelog>
<changelog author="coolo@suse.de" date="1234353600">- ignore error about menu.orig - it's left for documentation</changelog>
<changelog author="nadvornik@suse.cz" date="1234440000">- updated to development snapshot</changelog>
<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>

</package>
<package pkgid="bffd8a7fe626d2a7534236dc971eaeb3bc11c58afd508888b35fd91994fb17ca" name="WindowMaker" arch="src">
    <version epoch="0" ver="0.95.4" rel="5.7.1"/>

<changelog author="pgajdos@suse.cz" date="1211457600">- fixed "local variable used before set" [bnc#353376]</changelog>
<changelog author="nadvornik@suse.cz" date="1223899200">- fixed composite extension usage [bnc#433808]</changelog>
<changelog author="coolo@suse.de" date="1234353600">- ignore error about menu.orig - it's left for documentation</changelog>
<changelog author="nadvornik@suse.cz" date="1234440000">- updated to development snapshot</changelog>
<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>
<changelog author="mvetter@suse.com" date="1442836800">- bsc#779179: Remove old SuSE wallpapers and add openSUSE ones.</changelog>

</package>
<package pkgid="f6c6fe06dc269bb48a3806cafab72692e3f67bc669b44583c72b9dafd8b3e8d2" name="WindowMaker" arch="x86_64">
    <version epoch="0" ver="0.95.4" rel="5.10.1"/>

<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>
<changelog author="mvetter@suse.com" date="1442836800">- bsc#779179: Remove old SuSE wallpapers and add openSUSE ones.</changelog>
<changelog author="mvetter@suse.com" date="1444046400">- bsc#900820: Always use default openSUSE wallpaper for theme 'SUSE'.</changelog>

</package>
<package pkgid="db0ffe9963c9b24c7e303b70cdeeff0a57c50b1b1f24d402e23f1bd12b358393" name="WindowMaker" arch="x86_64">
    <version epoch="0" ver="0.95.4" rel="5.4.1"/>

<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>

</package>
<package pkgid="bc7f6e5713b68d4d07b47363452753680ce04fc9dacd92ef3609ea60a1ff6090" name="WindowMaker" arch="x86_64">
    <version epoch="0" ver="0.95.4" rel="5.7.1"/>

<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>
<changelog author="mvetter@suse.com" date="1442836800">- bsc#779179: Remove old SuSE wallpapers and add openSUSE ones.</changelog>

</package>
<package pkgid="69f1d958399e3a071d9c2b5d1d849db7c829ac77d8ace8f3046b87f83b786bcf" name="WindowMaker-devel" arch="i586">
    <version epoch="0" ver="0.95.4" rel="5.10.1"/>

<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>
<changelog author="mvetter@suse.com" date="1442836800">- bsc#779179: Remove old SuSE wallpapers and add openSUSE ones.</changelog>
<changelog author="mvetter@suse.com" date="1444046400">- bsc#900820: Always use default openSUSE wallpaper for theme 'SUSE'.</changelog>

</package>
<package pkgid="48e01d02ce753e0db24217b2d0bcfe068c446cb8237206f35463dd17007665ff" name="WindowMaker-devel" arch="i586">
    <version epoch="0" ver="0.95.4" rel="5.4.1"/>

<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>

</package>
<package pkgid="2f61782624d23aebbee9ad437ae2b2cd7c0a86de8875bed4f197e0a0caacfe9b" name="WindowMaker-devel" arch="i586">
    <version epoch="0" ver="0.95.4" rel="5.7.1"/>

<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>
<changelog author="mvetter@suse.com" date="1442836800">- bsc#779179: Remove old SuSE wallpapers and add openSUSE ones.</changelog>

</package>
<package pkgid="db66761529f358bbdfe0d0af3d84e777fb9c7bdd6ba0655a3c340f421594b2aa" name="WindowMaker-devel" arch="x86_64">
    <version epoch="0" ver="0.95.4" rel="5.10.1"/>

<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>
<changelog author="mvetter@suse.com" date="1442836800">- bsc#779179: Remove old SuSE wallpapers and add openSUSE ones.</changelog>
<changelog author="mvetter@suse.com" date="1444046400">- bsc#900820: Always use default openSUSE wallpaper for theme 'SUSE'.</changelog>

</package>
<package pkgid="fe665d6d33d071c8c502e743e04900b4969c5ba84038ee05656b32856f2be6db" name="WindowMaker-devel" arch="x86_64">
    <version epoch="0" ver="0.95.4" rel="5.4.1"/>

<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>

</package>
<package pkgid="9155dfbb76329ce61f0865df13311944a2e1b32ab44901dda861820944086d63" name="WindowMaker-devel" arch="x86_64">
    <version epoch="0" ver="0.95.4" rel="5.7.1"/>

<changelog author="crrodriguez@suse.de" date="1238414400">- remove static libwraster
- remove la files</changelog>
<changelog author="ro@suse.de" date="1270382400">- fix build with libpng14</changelog>
<changelog author="andrea.turrini@gmail.com" date="1311681600">- fixed typos in description of WindowMaker.spec</changelog>
<changelog author="crrodriguez@opensuse.org" date="1314792000">- Fix linking problems with new gnu ld</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix erroneous trailing backslash</changelog>
<changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="chris@computersalat.de" date="1329480000">- update to 0.95.2
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu
- remove obsolete patches
- rpmlintrc
  * add macro-in-comment
  * remove suse-filelist-forbidden
- add missing libjpeg-devel</changelog>
<changelog author="chris@computersalat.de" date="1337947200">- update to 0.95.3
  * no up-to-date ChangeLog available
    see http://repo.or.cz/w/wmaker-crm.git/shortlog
- rebase patches
  * config, menu</changelog>
<changelog author="chris@computersalat.de" date="1340798400">- update to 0.95.3.99.1 (upcoming next release)
  * GIT version 81eefca4ef70414d73048300058e5007f402dd7f
  * fix for "jumping Windows" on resize
  * fix for SUSE menu</changelog>
<changelog author="chris@computersalat.de" date="1347969600">- fix for bnc#780348
  * added WindowMaker-81eefca4e.patch
  * this patch provides fixes for
    o WMRootMenu
    (SuSE, OPEN_MENU, "| xdg_menu --format WindowMaker --charset UTF-8")
    o More (un)maximize tweaks ("jumping window")
  * http://repo.or.cz/w/wmaker-crm.git/commit/81eefca4ef70414d73048300058e5007f402dd7f</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357646400">-  wm-giflib.patch --&gt; fix build with newer giflib
  (stuff must also _always_ include "config.h" as the first file)</changelog>
<changelog author="vcizek@suse.com" date="1358510400">- update to 0.95.4
  * There was a major code cleanup related to icons,
  * some changes in WPrefs,
  * the addition of a new "Center" placement strategy,
  * support for _NET_FRAME_EXTENTS,
  * the removal of CPP dependency to process menu files and small
    fixes and improvements all around.
- dropped WindowMaker-81eefca4e.patch (merged upstream)</changelog>
<changelog author="chris@computersalat.de" date="1359374400">- fix changelog
- rebase config patch</changelog>
<changelog author="sfalken@opensuse.org" date="1397131200">- Added --prefix=/usr to %configure to correct paths for openSUSE</changelog>
<changelog author="sfalken@opensuse.org" date="1397131201">- Updated WindowMaker-menu.patch to correct menus for openSUSE paths
  Generated fix_wmgenmenu_paths.patch, so wmmenugen uses buildtime configured paths
  when generating WMRootMenu
  Add: fix_wmgenmenu_paths.patch</changelog>
<changelog author="mvetter@suse.com" date="1442836800">- bsc#779179: Remove old SuSE wallpapers and add openSUSE ones.</changelog>

</package>
<package pkgid="4d2adb0ce39df8b14b241327361d3cf5ad572be66aa7cf52fde15a58492fe22b" name="a2ps" arch="i586">
    <version epoch="0" ver="4.13" rel="1356.4.1"/>

<changelog author="werner@suse.de" date="1251460800">- Use return value from fopen (bnc#533398)</changelog>
<changelog author="werner@suse.de" date="1282046400">- Suggest a few useful packages (bnc#631293)
- Add a2ps-open as wrapper for printer `display'</changelog>
<changelog author="werner@novell.com" date="1295352000">- Remove tests/gps-ref/Converter.ps and tests/ps-ref/Converter.ps
  since they are non-free (bnc#665104)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="werner@suse.de" date="1320321600">- Fix wrong parameter usage for gv in a2ps.conf (bnc#725806)</changelog>
<changelog author="meissner@suse.de" date="1328616000">- copy config.* files instead of old suse_update_config macro.</changelog>
<changelog author="werner@suse.de" date="1329825600">- Fix shared library build on all 64bit architectures (hint from
  Dinar Valeev)</changelog>
<changelog author="puzel@suse.com" date="1338292800">- fix build with automake-1.12</changelog>
<changelog author="jengelh@inai.de" date="1339848000">- Use a more future-proof source path for copying in config.*</changelog>
<changelog author="coolo@suse.com" date="1343649600">- add texinfo and makeinfo as buildrequires to fix build</changelog>
<changelog author="mmeister@suse.com" date="1363608000">- Added download link to Source section in spec</changelog>
<changelog author="werner@suse.de" date="1386590400">- Work around new linker behaviour that is enforce the liba2ps to
  depend on libm</changelog>
<changelog author="werner@suse.de" date="1396267200">- Add patch CVE-2014-0466.diff to fix bnc#871097 - CVE-2014-0466:
  fixps does not use -dSAFER</changelog>

</package>
<package pkgid="bab7cbabe080c406fbc970c444fe0358f47ab7c99b7e7620350e63e6b9f6b281" name="a2ps" arch="src">
    <version epoch="0" ver="4.13" rel="1356.4.1"/>

<changelog author="werner@suse.de" date="1171886400">- Removed the test file Convert.java and its resulting ps files
  from source tar ball due license problems.</changelog>
<changelog author="ssommer@suse.de" date="1175256000">- add flex to BuildRequires</changelog>
<changelog author="aj@suse.de" date="1177070400">- Use texlive for building.</changelog>
<changelog author="werner@suse.de" date="1204632000">- Work around reencoded fonts from ogonkify in wdiff screen mode</changelog>
<changelog author="werner@suse.de" date="1216123200">- Better workaround for UTF-8 files</changelog>
<changelog author="werner@suse.de" date="1225108800">- Make liba2ps.h includable without any further includes also split
  off a devel package as suggested by Thorsten (bnc#438889)</changelog>
<changelog author="crrodriguez@suse.de" date="1232107200">- use --enable-shared and disable static libraries</changelog>
<changelog author="werner@suse.de" date="1251460800">- Use return value from fopen (bnc#533398)</changelog>
<changelog author="werner@suse.de" date="1282046400">- Suggest a few useful packages (bnc#631293)
- Add a2ps-open as wrapper for printer `display'</changelog>
<changelog author="werner@novell.com" date="1295352000">- Remove tests/gps-ref/Converter.ps and tests/ps-ref/Converter.ps
  since they are non-free (bnc#665104)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="werner@suse.de" date="1320321600">- Fix wrong parameter usage for gv in a2ps.conf (bnc#725806)</changelog>
<changelog author="meissner@suse.de" date="1328616000">- copy config.* files instead of old suse_update_config macro.</changelog>
<changelog author="werner@suse.de" date="1329825600">- Fix shared library build on all 64bit architectures (hint from
  Dinar Valeev)</changelog>
<changelog author="puzel@suse.com" date="1338292800">- fix build with automake-1.12</changelog>
<changelog author="jengelh@inai.de" date="1339848000">- Use a more future-proof source path for copying in config.*</changelog>
<changelog author="coolo@suse.com" date="1343649600">- add texinfo and makeinfo as buildrequires to fix build</changelog>
<changelog author="mmeister@suse.com" date="1363608000">- Added download link to Source section in spec</changelog>
<changelog author="werner@suse.de" date="1386590400">- Work around new linker behaviour that is enforce the liba2ps to
  depend on libm</changelog>
<changelog author="werner@suse.de" date="1396267200">- Add patch CVE-2014-0466.diff to fix bnc#871097 - CVE-2014-0466:
  fixps does not use -dSAFER</changelog>

</package>
<package pkgid="4030e449c952689856b56f431e7a5979a72046e5cf7da88d0be7ca000aa640b5" name="a2ps" arch="x86_64">
    <version epoch="0" ver="4.13" rel="1356.4.1"/>

<changelog author="werner@suse.de" date="1251460800">- Use return value from fopen (bnc#533398)</changelog>
<changelog author="werner@suse.de" date="1282046400">- Suggest a few useful packages (bnc#631293)
- Add a2ps-open as wrapper for printer `display'</changelog>
<changelog author="werner@novell.com" date="1295352000">- Remove tests/gps-ref/Converter.ps and tests/ps-ref/Converter.ps
  since they are non-free (bnc#665104)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="werner@suse.de" date="1320321600">- Fix wrong parameter usage for gv in a2ps.conf (bnc#725806)</changelog>
<changelog author="meissner@suse.de" date="1328616000">- copy config.* files instead of old suse_update_config macro.</changelog>
<changelog author="werner@suse.de" date="1329825600">- Fix shared library build on all 64bit architectures (hint from
  Dinar Valeev)</changelog>
<changelog author="puzel@suse.com" date="1338292800">- fix build with automake-1.12</changelog>
<changelog author="jengelh@inai.de" date="1339848000">- Use a more future-proof source path for copying in config.*</changelog>
<changelog author="coolo@suse.com" date="1343649600">- add texinfo and makeinfo as buildrequires to fix build</changelog>
<changelog author="mmeister@suse.com" date="1363608000">- Added download link to Source section in spec</changelog>
<changelog author="werner@suse.de" date="1386590400">- Work around new linker behaviour that is enforce the liba2ps to
  depend on libm</changelog>
<changelog author="werner@suse.de" date="1396267200">- Add patch CVE-2014-0466.diff to fix bnc#871097 - CVE-2014-0466:
  fixps does not use -dSAFER</changelog>

</package>
<package pkgid="4ffce911a9fb997c12ca0939ef2ffa8d75a96d67dd2fed44bbae41f8db4c22b0" name="a2ps-devel" arch="i586">
    <version epoch="0" ver="4.13" rel="1356.4.1"/>

<changelog author="werner@suse.de" date="1251460800">- Use return value from fopen (bnc#533398)</changelog>
<changelog author="werner@suse.de" date="1282046400">- Suggest a few useful packages (bnc#631293)
- Add a2ps-open as wrapper for printer `display'</changelog>
<changelog author="werner@novell.com" date="1295352000">- Remove tests/gps-ref/Converter.ps and tests/ps-ref/Converter.ps
  since they are non-free (bnc#665104)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="werner@suse.de" date="1320321600">- Fix wrong parameter usage for gv in a2ps.conf (bnc#725806)</changelog>
<changelog author="meissner@suse.de" date="1328616000">- copy config.* files instead of old suse_update_config macro.</changelog>
<changelog author="werner@suse.de" date="1329825600">- Fix shared library build on all 64bit architectures (hint from
  Dinar Valeev)</changelog>
<changelog author="puzel@suse.com" date="1338292800">- fix build with automake-1.12</changelog>
<changelog author="jengelh@inai.de" date="1339848000">- Use a more future-proof source path for copying in config.*</changelog>
<changelog author="coolo@suse.com" date="1343649600">- add texinfo and makeinfo as buildrequires to fix build</changelog>
<changelog author="mmeister@suse.com" date="1363608000">- Added download link to Source section in spec</changelog>
<changelog author="werner@suse.de" date="1386590400">- Work around new linker behaviour that is enforce the liba2ps to
  depend on libm</changelog>
<changelog author="werner@suse.de" date="1396267200">- Add patch CVE-2014-0466.diff to fix bnc#871097 - CVE-2014-0466:
  fixps does not use -dSAFER</changelog>

</package>
<package pkgid="cff962f04b67aa0b9ef0fadc35c67cd62c48a5f60d109d36bdaf59422b8ef29b" name="a2ps-devel" arch="x86_64">
    <version epoch="0" ver="4.13" rel="1356.4.1"/>

<changelog author="werner@suse.de" date="1251460800">- Use return value from fopen (bnc#533398)</changelog>
<changelog author="werner@suse.de" date="1282046400">- Suggest a few useful packages (bnc#631293)
- Add a2ps-open as wrapper for printer `display'</changelog>
<changelog author="werner@novell.com" date="1295352000">- Remove tests/gps-ref/Converter.ps and tests/ps-ref/Converter.ps
  since they are non-free (bnc#665104)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="werner@suse.de" date="1320321600">- Fix wrong parameter usage for gv in a2ps.conf (bnc#725806)</changelog>
<changelog author="meissner@suse.de" date="1328616000">- copy config.* files instead of old suse_update_config macro.</changelog>
<changelog author="werner@suse.de" date="1329825600">- Fix shared library build on all 64bit architectures (hint from
  Dinar Valeev)</changelog>
<changelog author="puzel@suse.com" date="1338292800">- fix build with automake-1.12</changelog>
<changelog author="jengelh@inai.de" date="1339848000">- Use a more future-proof source path for copying in config.*</changelog>
<changelog author="coolo@suse.com" date="1343649600">- add texinfo and makeinfo as buildrequires to fix build</changelog>
<changelog author="mmeister@suse.com" date="1363608000">- Added download link to Source section in spec</changelog>
<changelog author="werner@suse.de" date="1386590400">- Work around new linker behaviour that is enforce the liba2ps to
  depend on libm</changelog>
<changelog author="werner@suse.de" date="1396267200">- Add patch CVE-2014-0466.diff to fix bnc#871097 - CVE-2014-0466:
  fixps does not use -dSAFER</changelog>

</package>
<package pkgid="bb2e6a7b9b7c2b70a29a420003b4f98f2eb28018b937defc930fc22ccb1168b0" name="aaa_base" arch="i586">
    <version epoch="0" ver="13.1" rel="16.20.1"/>

<changelog author="lnussel@suse.de" date="1358596800">- call systemctl to enable/disable services (bnc#798510)</changelog>
<changelog author="lnussel@suse.de" date="1358856000">- remove check whether systemd is running</changelog>
<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>

</package>
<package pkgid="e96adae4a4a0cf1cf3f9ce431fb3f4a6cf8a9861548002f8f82d72cb28703548" name="aaa_base" arch="i586">
    <version epoch="0" ver="13.1" rel="16.26.1"/>

<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>

</package>
<package pkgid="0907de02ac565562fe445930326ed5ea9cf8db714d8f7da785c1360dd39aa677" name="aaa_base" arch="i586">
    <version epoch="0" ver="13.1" rel="16.30.1"/>

<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>

</package>
<package pkgid="46118ce27f247f28454df78437b4bc43c0c0a9336f1911e671c17118836ad7df" name="aaa_base" arch="i586">
    <version epoch="0" ver="13.1" rel="16.34.1"/>

<changelog author="aj@suse.com" date="1364212800">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>

</package>
<package pkgid="0ea323bcc46e54cdc1b9be2ee0370551daf27f9a4efa00f7de05e527e53df28d" name="aaa_base" arch="i586">
    <version epoch="0" ver="13.1" rel="16.38.1"/>

<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>

</package>
<package pkgid="3559c0ab44a1a5925dc4c1a5c859cabafc0e516d0638e7393f7f30e731f9e4d3" name="aaa_base" arch="i586">
    <version epoch="0" ver="13.1" rel="16.42.1"/>

<changelog author="lnussel@suse.de" date="1364385600">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>

</package>
<package pkgid="af6c0a6ec87664912fb5686e3db447db6e69b697b083b8dc3046599d0b55e655" name="aaa_base" arch="i586">
    <version epoch="0" ver="13.1" rel="16.46.1"/>

<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>

</package>
<package pkgid="b692fdb89a9316828c5129e78f06b37da9b98700c9501c21f65df67040c798d9" name="aaa_base" arch="i586">
    <version epoch="0" ver="13.1" rel="16.49.1"/>

<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>
<changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string</changelog>

</package>
<package pkgid="29c334b9e4c9388ffa48ad22e89fb8fc0aadcc2d07660f71950f043cc29b28e4" name="aaa_base" arch="src">
    <version epoch="0" ver="13.1" rel="16.20.1"/>

<changelog author="lnussel@suse.de" date="1358596800">- call systemctl to enable/disable services (bnc#798510)</changelog>
<changelog author="lnussel@suse.de" date="1358856000">- remove check whether systemd is running</changelog>
<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>

</package>
<package pkgid="e68b6c7a31c4d2c3d31ca4f305ff4f5612f3f189b5b4d42119926230824247ca" name="aaa_base" arch="src">
    <version epoch="0" ver="13.1" rel="16.26.1"/>

<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>

</package>
<package pkgid="25b7c956f2c80124bfc97e73579069c3948a2199bd757378bf591657f8bba4b2" name="aaa_base" arch="src">
    <version epoch="0" ver="13.1" rel="16.30.1"/>

<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>

</package>
<package pkgid="34c6c3a2870c3dd4706071a862745c8f183797907f1c307fd131bfc21bddd908" name="aaa_base" arch="src">
    <version epoch="0" ver="13.1" rel="16.34.1"/>

<changelog author="aj@suse.com" date="1364212800">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>

</package>
<package pkgid="4967794dd8c09b0c6c850f95a5d48bc025e402ae387fb7ca7f4dc77b8de44ada" name="aaa_base" arch="src">
    <version epoch="0" ver="13.1" rel="16.38.1"/>

<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>

</package>
<package pkgid="d46b3c38b37e14fcf8f3b3e6d79d7e5ce7287accc194b67813a508a38c008433" name="aaa_base" arch="src">
    <version epoch="0" ver="13.1" rel="16.42.1"/>

<changelog author="lnussel@suse.de" date="1364385600">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>

</package>
<package pkgid="46ce286ffb26814b72ba716f3c7a31621e9e7ef6a24dac1a5a259bd28ca4029a" name="aaa_base" arch="src">
    <version epoch="0" ver="13.1" rel="16.46.1"/>

<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>

</package>
<package pkgid="7a207ee57421c9429d7b878fb1f06ea4e682157a0095457fa07a3fdf68f26d94" name="aaa_base" arch="src">
    <version epoch="0" ver="13.1" rel="16.49.1"/>

<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>
<changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string</changelog>

</package>
<package pkgid="7c909aafb4ee94550434916ae2740b9d1edbc251ec016cec3cc19a356f07eca1" name="aaa_base" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.20.1"/>

<changelog author="lnussel@suse.de" date="1358596800">- call systemctl to enable/disable services (bnc#798510)</changelog>
<changelog author="lnussel@suse.de" date="1358856000">- remove check whether systemd is running</changelog>
<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>

</package>
<package pkgid="82591bbe3099fadb337f598eecfeac69007b6bb922d27f28fa341bf9c9b05c0a" name="aaa_base" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.26.1"/>

<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>

</package>
<package pkgid="3a8ddef5c7c5f41b73ec64e5ca9b244a3f1cb3e2b43d75a7266a24253628ba51" name="aaa_base" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.30.1"/>

<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>

</package>
<package pkgid="52c12d954cceb9588a1013553ddfa45f2c7144f889cafc303a32dfa8ee893242" name="aaa_base" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.34.1"/>

<changelog author="aj@suse.com" date="1364212800">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>

</package>
<package pkgid="beb9b2082de7901e4444449c3cc68bcae01228fc566688d269ade0aa19e85397" name="aaa_base" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.38.1"/>

<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>

</package>
<package pkgid="b6ebf33df604f48f85a6f0744b9651262010cb4f6a885a297e7b96476523b867" name="aaa_base" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.42.1"/>

<changelog author="lnussel@suse.de" date="1364385600">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>

</package>
<package pkgid="65db34a9d865b8f0ccc685fc9746a2bb53031b4156a1645b4a23d27e62d75845" name="aaa_base" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.46.1"/>

<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>

</package>
<package pkgid="0c4a47148d5d838a462c9b3a818778b44296388f2bc8b652c6b33123a8a7b48a" name="aaa_base" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.49.1"/>

<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>
<changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string</changelog>

</package>
<package pkgid="f4ab75e7a9114cc3a36cd67f7c50175f6858b8fbc72cb17a3db82ddba273f937" name="aaa_base-extras" arch="i586">
    <version epoch="0" ver="13.1" rel="16.20.1"/>

<changelog author="lnussel@suse.de" date="1358596800">- call systemctl to enable/disable services (bnc#798510)</changelog>
<changelog author="lnussel@suse.de" date="1358856000">- remove check whether systemd is running</changelog>
<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>

</package>
<package pkgid="cf671f832566538b0e737dc7c58e263797927491c032b34fc6e597920259d937" name="aaa_base-extras" arch="i586">
    <version epoch="0" ver="13.1" rel="16.26.1"/>

<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>

</package>
<package pkgid="28847fda7e3146d53fed9d7cecd6405279f4ed990178e8a6768918fff41749e7" name="aaa_base-extras" arch="i586">
    <version epoch="0" ver="13.1" rel="16.30.1"/>

<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>

</package>
<package pkgid="582f0bfbcc565f1c86f68c3ba5554abe43da34df42c94a452f3036ceda539045" name="aaa_base-extras" arch="i586">
    <version epoch="0" ver="13.1" rel="16.34.1"/>

<changelog author="aj@suse.com" date="1364212800">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>

</package>
<package pkgid="59160d75b9b1d0ddea12ce0f7e1278b60d60dc57c498b88c4a0c8053a141c1e7" name="aaa_base-extras" arch="i586">
    <version epoch="0" ver="13.1" rel="16.38.1"/>

<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>

</package>
<package pkgid="82a5a28ffdc621b82d83949bdc17c0dd65bb62081bc9037bcec1b4dba066c895" name="aaa_base-extras" arch="i586">
    <version epoch="0" ver="13.1" rel="16.42.1"/>

<changelog author="lnussel@suse.de" date="1364385600">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>

</package>
<package pkgid="3fb96d13c40a61fbe5b8466bdcf3154883a54a5ac3b823acbdbb82ee2f2677a1" name="aaa_base-extras" arch="i586">
    <version epoch="0" ver="13.1" rel="16.46.1"/>

<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>

</package>
<package pkgid="6d9dd8311b819331fdd59190097ec70d6b7ca0865c958b8a3d21bdb39700a184" name="aaa_base-extras" arch="i586">
    <version epoch="0" ver="13.1" rel="16.49.1"/>

<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>
<changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string</changelog>

</package>
<package pkgid="cf13bfb24a835a04a2863444ab3b9573183f9314b4f3efff15f861dd3e1b72c8" name="aaa_base-extras" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.20.1"/>

<changelog author="lnussel@suse.de" date="1358596800">- call systemctl to enable/disable services (bnc#798510)</changelog>
<changelog author="lnussel@suse.de" date="1358856000">- remove check whether systemd is running</changelog>
<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>

</package>
<package pkgid="f58fed23dbe1d24f84c93678bf5baf4fb06ff10adeeae697ba7f9203e293cf6b" name="aaa_base-extras" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.26.1"/>

<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>

</package>
<package pkgid="52acbd7edf41537a16a2b41784251e322c051cf894b15cc462de06728169384e" name="aaa_base-extras" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.30.1"/>

<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>

</package>
<package pkgid="048c43a0bbe29b4171997fc47e4f0761d5a71899c95d6812b692b6180eda144f" name="aaa_base-extras" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.34.1"/>

<changelog author="aj@suse.com" date="1364212800">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>

</package>
<package pkgid="900140a08e9f29d1092c72e4b3efbb87fd9a8771fea89aedc882cc60c484e0c3" name="aaa_base-extras" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.38.1"/>

<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>

</package>
<package pkgid="14420f818b3313fe1ad40d19572a030ca6a5d5642f4763ba56d2f4537ff06efc" name="aaa_base-extras" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.42.1"/>

<changelog author="lnussel@suse.de" date="1364385600">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>

</package>
<package pkgid="cc75fca1076e8fc2c7329c9c106b5c917eb7a966779bd0cacccd320ad5d6c4f8" name="aaa_base-extras" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.46.1"/>

<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>

</package>
<package pkgid="14cbfdd9bc9cd35773357156e2fc5472f3c001a8e3af1928bec0354ef3380de7" name="aaa_base-extras" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.49.1"/>

<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>
<changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string</changelog>

</package>
<package pkgid="077e5a00ccaeea80048ae1805dac523b8c5240d0994d0c1a16de382a3b0944ef" name="aaa_base-malloccheck" arch="i586">
    <version epoch="0" ver="13.1" rel="16.20.1"/>

<changelog author="lnussel@suse.de" date="1358596800">- call systemctl to enable/disable services (bnc#798510)</changelog>
<changelog author="lnussel@suse.de" date="1358856000">- remove check whether systemd is running</changelog>
<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>

</package>
<package pkgid="8fd9f6ed4b3b755dc90feae939ac792b3b47132575494e526cc078c85a935f60" name="aaa_base-malloccheck" arch="i586">
    <version epoch="0" ver="13.1" rel="16.26.1"/>

<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>

</package>
<package pkgid="c584694fdeb30e3434547ded2c9d89578f819baba7739f3b4eed2a175529714c" name="aaa_base-malloccheck" arch="i586">
    <version epoch="0" ver="13.1" rel="16.30.1"/>

<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>

</package>
<package pkgid="ca0f645af0fe503bf00537639f50c9500cadb375c69ad2eb3cf0a826839a384c" name="aaa_base-malloccheck" arch="i586">
    <version epoch="0" ver="13.1" rel="16.34.1"/>

<changelog author="aj@suse.com" date="1364212800">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>

</package>
<package pkgid="2911ba15fc54f7f3211941ccc773a6e21b9989c286c7bc2eeb45652247b2da88" name="aaa_base-malloccheck" arch="i586">
    <version epoch="0" ver="13.1" rel="16.38.1"/>

<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>

</package>
<package pkgid="cf21120f07397436044ce48e0ac36721a991fbcee04d77fa0d627fa0a20c8c38" name="aaa_base-malloccheck" arch="i586">
    <version epoch="0" ver="13.1" rel="16.42.1"/>

<changelog author="lnussel@suse.de" date="1364385600">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>

</package>
<package pkgid="3264dfa6addefcc84a2edc1018992d2c475ee8881f7bc6032e2a11aecbf38b88" name="aaa_base-malloccheck" arch="i586">
    <version epoch="0" ver="13.1" rel="16.46.1"/>

<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>

</package>
<package pkgid="97733c6613aada307ef46dfb5ee1fe92277b6b21ac7d27ae0bb770be1de05e07" name="aaa_base-malloccheck" arch="i586">
    <version epoch="0" ver="13.1" rel="16.49.1"/>

<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>
<changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string</changelog>

</package>
<package pkgid="4bd26bebbd4139019971062c382e284f2da4fab7ce1ee8a0b58f77bab66efa12" name="aaa_base-malloccheck" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.20.1"/>

<changelog author="lnussel@suse.de" date="1358596800">- call systemctl to enable/disable services (bnc#798510)</changelog>
<changelog author="lnussel@suse.de" date="1358856000">- remove check whether systemd is running</changelog>
<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>

</package>
<package pkgid="d6198ba0f5b315242f6476bf92affca9e6c7af64260d03d13752225bb1ba7451" name="aaa_base-malloccheck" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.26.1"/>

<changelog author="werner@suse.de" date="1359979200">- Avoid to stumble over missing /dev/stderr in boot script started
  by systemd (work around bnc#728774o but not solve it)</changelog>
<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>

</package>
<package pkgid="85abe09be726fc3619d56064f945720d9fd65bc2e7f28a2a485033c9006c0d7b" name="aaa_base-malloccheck" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.30.1"/>

<changelog author="werner@suse.de" date="1360152000">- Do not override /etc/adjtime if HWCLOCK is already gone (bnc#791485)</changelog>
<changelog author="aj@suse.com" date="1364212800">- Update version number to 13.1
- Update to git head:
  * Remove boot.localnet
  * Revert "rc.status: allow to pass options to systemctl using SYSTEMCTL_OPTIONS"
    SYSTEMCTL_OPTIONS is now handled directly by systemctl.</changelog>
<changelog author="aj@suse.com" date="1364212801">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>

</package>
<package pkgid="df1cc7980efdb58f2b00bba6c00143610e074510cc0da8d86155b6c2fe965b0a" name="aaa_base-malloccheck" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.34.1"/>

<changelog author="aj@suse.com" date="1364212800">- Remove boot.localnet also from spec file</changelog>
<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>

</package>
<package pkgid="ddcfffd364fc6b12a5695af17021543335f2737df287f260137411b6218c341d" name="aaa_base-malloccheck" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.38.1"/>

<changelog author="aj@suse.com" date="1364385600">- Mark file  /lib/mkinitrd/scripts/boot-mtab.sh as exectuable (bnc#809842)
- Compress tarball with xz</changelog>
<changelog author="lnussel@suse.de" date="1364385601">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>

</package>
<package pkgid="c27ceb5b57c49faa1f17a2c0a1e0189a12ea5de1e6f6797811a881f60dd8c3d9" name="aaa_base-malloccheck" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.42.1"/>

<changelog author="lnussel@suse.de" date="1364385600">- chkconfig: rh compatible check mode (bnc#811870)</changelog>
<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>

</package>
<package pkgid="927cfdfc8ecef1077341c8fdedbde2f9b82a9685131e50eec91562fc07900191" name="aaa_base-malloccheck" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.46.1"/>

<changelog author="lnussel@suse.de" date="1364472000">- also check /lib/systemd for compatibility (bnc#812291)</changelog>
<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>

</package>
<package pkgid="dadbfcb5ea773e96a8f718caff2cd5529b1f699c5f9fbde805dd3e9912d4b8dc" name="aaa_base-malloccheck" arch="x86_64">
    <version epoch="0" ver="13.1" rel="16.49.1"/>

<changelog author="werner@suse.de" date="1366718400">- Personal bash completion and bash ls alias (bnc811030, bnc#799241)</changelog>
<changelog author="werner@suse.de" date="1366718401">- Require xz at build time (Who has removed xz from default?)</changelog>
<changelog author="werner@suse.de" date="1369310400">- Add bash completion function to load completions dynamically (bnc#821411)</changelog>
<changelog author="lnussel@suse.de" date="1369656000">- move sysctl defaults to aaa_base (bnc#820443)</changelog>
<changelog author="coolo@suse.com" date="1371470400">- move sysctl directories to filesystem rpm</changelog>
<changelog author="lnussel@suse.de" date="1372420800">- 'mountpoint' was moved to /usr</changelog>
<changelog author="aj@suse.com" date="1375876800">- avoid leaking kernel address information to userspace by using
  kernel.kptr_restrict=1 sysctl
- bash.bashrc: source vte.sh if existing (bnc#827248)</changelog>
<changelog author="aj@suse.com" date="1377259200">- Rename _ls alias to z_ls for zsh. In zsh strings that start with
  an underscore are reserved for completion. This fixes bnc#836067</changelog>
<changelog author="aj@suse.com" date="1377518400">- Fix last commit, rename the actual alias too.</changelog>
<changelog author="lnussel@suse.de" date="1381752000">- change JRE_HOME only in a case it was not defined before (bnc#841284)</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix chkconfig --check (bnc#851374)</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- change mistakenly root:users group to root:root (bnc#843230, CVE-2013-3713)</changelog>
<changelog author="werner@suse.de" date="1387368000">- Use only bash and readline defaults for fallback completion (bnc#851908)</changelog>
<changelog author="lnussel@suse.de" date="1389873600">- make rcfoo usable for not enabled services (bnc#856986)</changelog>
<changelog author="lnussel@suse.de" date="1390564800">- Avoid journal output as this may take time on pure journald systems (bnc#859360)</changelog>
<changelog author="lnussel@suse.de" date="1390824000">- print parse errors to stderr (bnc#860477)</changelog>
<changelog author="ro@suse.de" date="1400673600">- fix error message if zsh sources xdg-environment.sh if some
  pathes do not exist (bnc#875118)</changelog>
<changelog author="ro@suse.com" date="1405080000">- remove "text/js" from mime.types [bnc#812427]</changelog>
<changelog author="lnussel@suse.de" date="1410523200">- remove no longer supported sysconfig settings (bnc#721682)
- update service man page
- always pass --full to systemctl (bnc#882918)
- Enable service script to return LSB status exit values (bnc#880103)
- implement legacy actions (bnc#861124)
- Enable service script to reload systemd if required
- handle targets in /sbin/service as well
- Check systemd service using LoadState (bnc#860083)</changelog>
<changelog author="ro@suse.de" date="1445947200">- add patches from git master for bnc#932456
  - git-11-7c70cd44f911d150de785daf2960cfff660fdd62.patch
    sysconf_addword: do not insert spaces at start of string</changelog>

</package>
<package pkgid="f6263c1afc462017096a1c98b05784a1110b427909cf9b173775913f085a91c6" name="accountsservice" arch="i586">
    <version epoch="0" ver="0.6.34" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1333454400">- Add accountsservice-filter-more-accounts.patch: filter out ftp,
  games, man and mysql system users too, taken from git.
- Add accountsservice-filter-suse-accounts.patch: filter out some
  openSUSE-specific accounts (beagleindex, suse-ncc).</changelog>
<changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 0.6.18:
  + Fix systemd configure check
  + Add a few more common system accounts to the blacklist
  + Fix some issues in systemd session handling
- Drop accountsservice-filter-more-accounts.patch: fixed upstream.
- Drop accountsservice-fix-systemd-test-always-evaluating-true.patch:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1335182400">- Add back accountsservice-filter-more-accounts.patch to filter the
  at user.
- Add accountsservice-filter-no-shell.patch to filter users with no
  shell, which happens when NIS is setup.
- This should fix bnc#757662.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>

</package>
<package pkgid="ae98b1808ea8ccf6595e147c3046c8a58c09de82558f36683ec769499abe25ab" name="accountsservice" arch="i586">
    <version epoch="0" ver="0.6.35" rel="2.16.1"/>

<changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 0.6.18:
  + Fix systemd configure check
  + Add a few more common system accounts to the blacklist
  + Fix some issues in systemd session handling
- Drop accountsservice-filter-more-accounts.patch: fixed upstream.
- Drop accountsservice-fix-systemd-test-always-evaluating-true.patch:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1335182400">- Add back accountsservice-filter-more-accounts.patch to filter the
  at user.
- Add accountsservice-filter-no-shell.patch to filter users with no
  shell, which happens when NIS is setup.
- This should fix bnc#757662.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
<changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35 (bnc#871232):
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>

</package>
<package pkgid="a9ad27817aaa2306a10328296993e4560f167c2b544a1d924d6491985c0840e2" name="accountsservice" arch="i586">
    <version epoch="0" ver="0.6.38" rel="2.20.1"/>

<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
<changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35 (bnc#871232):
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1396440000">- Update to version 0.6.37:
  + BSD fixes.
- Changes from version 0.6.36:
  + Fixes for deleting users.
  + Leak fix.
  + Change user classification logic.
  + BSD fixes.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1411646400">- Update to version 0.6.38 (bnc#896602):
  + Fix polkit policy for non-desktop cases.
  + Fix for a race when new user appears.
  + Some clearer log and debug messages.
- Pass --enable-user-heuristics to configure, ensure that users
  with legacy uid's are still shown in GDM Facebrowser.
  Note that users that have had SystemAccount=true set in
  /var/lib/AccountsService/users/$usr will have to manually set
  this to false if user is wanted to show in facebrowser.</changelog>

</package>
<package pkgid="0b395dd3dd742ef1b751d8a7f79927f73790160a3905d33861f4bb763b11c0f9" name="accountsservice" arch="src">
    <version epoch="0" ver="0.6.34" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1333454400">- Add accountsservice-filter-more-accounts.patch: filter out ftp,
  games, man and mysql system users too, taken from git.
- Add accountsservice-filter-suse-accounts.patch: filter out some
  openSUSE-specific accounts (beagleindex, suse-ncc).</changelog>
<changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 0.6.18:
  + Fix systemd configure check
  + Add a few more common system accounts to the blacklist
  + Fix some issues in systemd session handling
- Drop accountsservice-filter-more-accounts.patch: fixed upstream.
- Drop accountsservice-fix-systemd-test-always-evaluating-true.patch:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1335182400">- Add back accountsservice-filter-more-accounts.patch to filter the
  at user.
- Add accountsservice-filter-no-shell.patch to filter users with no
  shell, which happens when NIS is setup.
- This should fix bnc#757662.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>

</package>
<package pkgid="767cb5fea29e2552e6cc2a08b1d40461f49a58459affa125dce87288fd51b010" name="accountsservice" arch="src">
    <version epoch="0" ver="0.6.35" rel="2.16.1"/>

<changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 0.6.18:
  + Fix systemd configure check
  + Add a few more common system accounts to the blacklist
  + Fix some issues in systemd session handling
- Drop accountsservice-filter-more-accounts.patch: fixed upstream.
- Drop accountsservice-fix-systemd-test-always-evaluating-true.patch:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1335182400">- Add back accountsservice-filter-more-accounts.patch to filter the
  at user.
- Add accountsservice-filter-no-shell.patch to filter users with no
  shell, which happens when NIS is setup.
- This should fix bnc#757662.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
<changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35 (bnc#871232):
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>

</package>
<package pkgid="4a4545b30cdf671c1c7c69072b9ab2883678b64c22179e81e8dde43e8434a818" name="accountsservice" arch="src">
    <version epoch="0" ver="0.6.38" rel="2.20.1"/>

<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
<changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35 (bnc#871232):
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1396440000">- Update to version 0.6.37:
  + BSD fixes.
- Changes from version 0.6.36:
  + Fixes for deleting users.
  + Leak fix.
  + Change user classification logic.
  + BSD fixes.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1411646400">- Update to version 0.6.38 (bnc#896602):
  + Fix polkit policy for non-desktop cases.
  + Fix for a race when new user appears.
  + Some clearer log and debug messages.
- Pass --enable-user-heuristics to configure, ensure that users
  with legacy uid's are still shown in GDM Facebrowser.
  Note that users that have had SystemAccount=true set in
  /var/lib/AccountsService/users/$usr will have to manually set
  this to false if user is wanted to show in facebrowser.</changelog>

</package>
<package pkgid="da838ac4f578d51a8839e17cc3f67112102a8de490199116cdfd9ea463bd5cb4" name="accountsservice" arch="x86_64">
    <version epoch="0" ver="0.6.34" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1333454400">- Add accountsservice-filter-more-accounts.patch: filter out ftp,
  games, man and mysql system users too, taken from git.
- Add accountsservice-filter-suse-accounts.patch: filter out some
  openSUSE-specific accounts (beagleindex, suse-ncc).</changelog>
<changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 0.6.18:
  + Fix systemd configure check
  + Add a few more common system accounts to the blacklist
  + Fix some issues in systemd session handling
- Drop accountsservice-filter-more-accounts.patch: fixed upstream.
- Drop accountsservice-fix-systemd-test-always-evaluating-true.patch:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1335182400">- Add back accountsservice-filter-more-accounts.patch to filter the
  at user.
- Add accountsservice-filter-no-shell.patch to filter users with no
  shell, which happens when NIS is setup.
- This should fix bnc#757662.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>

</package>
<package pkgid="74fd1225d3c15676a1433f3236ba27fdaf3ec8865b1e7571da34a0846d4626b2" name="accountsservice" arch="x86_64">
    <version epoch="0" ver="0.6.35" rel="2.16.1"/>

<changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 0.6.18:
  + Fix systemd configure check
  + Add a few more common system accounts to the blacklist
  + Fix some issues in systemd session handling
- Drop accountsservice-filter-more-accounts.patch: fixed upstream.
- Drop accountsservice-fix-systemd-test-always-evaluating-true.patch:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1335182400">- Add back accountsservice-filter-more-accounts.patch to filter the
  at user.
- Add accountsservice-filter-no-shell.patch to filter users with no
  shell, which happens when NIS is setup.
- This should fix bnc#757662.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
<changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35 (bnc#871232):
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>

</package>
<package pkgid="754a67acca32f7e58fa3a9525f5045dcfa4fa020fee5a33faa677d71c35a559f" name="accountsservice" arch="x86_64">
    <version epoch="0" ver="0.6.38" rel="2.20.1"/>

<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
<changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35 (bnc#871232):
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1396440000">- Update to version 0.6.37:
  + BSD fixes.
- Changes from version 0.6.36:
  + Fixes for deleting users.
  + Leak fix.
  + Change user classification logic.
  + BSD fixes.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1411646400">- Update to version 0.6.38 (bnc#896602):
  + Fix polkit policy for non-desktop cases.
  + Fix for a race when new user appears.
  + Some clearer log and debug messages.
- Pass --enable-user-heuristics to configure, ensure that users
  with legacy uid's are still shown in GDM Facebrowser.
  Note that users that have had SystemAccount=true set in
  /var/lib/AccountsService/users/$usr will have to manually set
  this to false if user is wanted to show in facebrowser.</changelog>

</package>
<package pkgid="9444d7c4389d230cbf0483e22bbe2899d7a6d2febc3edd1966a60e4bff912613" name="accountsservice-devel" arch="i586">
    <version epoch="0" ver="0.6.34" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1333454400">- Add accountsservice-filter-more-accounts.patch: filter out ftp,
  games, man and mysql system users too, taken from git.
- Add accountsservice-filter-suse-accounts.patch: filter out some
  openSUSE-specific accounts (beagleindex, suse-ncc).</changelog>
<changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 0.6.18:
  + Fix systemd configure check
  + Add a few more common system accounts to the blacklist
  + Fix some issues in systemd session handling
- Drop accountsservice-filter-more-accounts.patch: fixed upstream.
- Drop accountsservice-fix-systemd-test-always-evaluating-true.patch:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1335182400">- Add back accountsservice-filter-more-accounts.patch to filter the
  at user.
- Add accountsservice-filter-no-shell.patch to filter users with no
  shell, which happens when NIS is setup.
- This should fix bnc#757662.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>

</package>
<package pkgid="b864d3c5d82ecdab8efa8fabce5f1dc5f28df74d60a40f04d07b6cd0ac089df7" name="accountsservice-devel" arch="i586">
    <version epoch="0" ver="0.6.35" rel="2.16.1"/>

<changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 0.6.18:
  + Fix systemd configure check
  + Add a few more common system accounts to the blacklist
  + Fix some issues in systemd session handling
- Drop accountsservice-filter-more-accounts.patch: fixed upstream.
- Drop accountsservice-fix-systemd-test-always-evaluating-true.patch:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1335182400">- Add back accountsservice-filter-more-accounts.patch to filter the
  at user.
- Add accountsservice-filter-no-shell.patch to filter users with no
  shell, which happens when NIS is setup.
- This should fix bnc#757662.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
<changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35 (bnc#871232):
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>

</package>
<package pkgid="a779b7fab69126afd9bbbb573e85695618f4a1891becced9d44fcb599367df95" name="accountsservice-devel" arch="i586">
    <version epoch="0" ver="0.6.38" rel="2.20.1"/>

<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
<changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35 (bnc#871232):
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1396440000">- Update to version 0.6.37:
  + BSD fixes.
- Changes from version 0.6.36:
  + Fixes for deleting users.
  + Leak fix.
  + Change user classification logic.
  + BSD fixes.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1411646400">- Update to version 0.6.38 (bnc#896602):
  + Fix polkit policy for non-desktop cases.
  + Fix for a race when new user appears.
  + Some clearer log and debug messages.
- Pass --enable-user-heuristics to configure, ensure that users
  with legacy uid's are still shown in GDM Facebrowser.
  Note that users that have had SystemAccount=true set in
  /var/lib/AccountsService/users/$usr will have to manually set
  this to false if user is wanted to show in facebrowser.</changelog>

</package>
<package pkgid="e7da8f8d900f364d3e1129cb5ed0fabd7e19535703f43974e163e9481b801e61" name="accountsservice-devel" arch="x86_64">
    <version epoch="0" ver="0.6.34" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1333454400">- Add accountsservice-filter-more-accounts.patch: filter out ftp,
  games, man and mysql system users too, taken from git.
- Add accountsservice-filter-suse-accounts.patch: filter out some
  openSUSE-specific accounts (beagleindex, suse-ncc).</changelog>
<changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 0.6.18:
  + Fix systemd configure check
  + Add a few more common system accounts to the blacklist
  + Fix some issues in systemd session handling
- Drop accountsservice-filter-more-accounts.patch: fixed upstream.
- Drop accountsservice-fix-systemd-test-always-evaluating-true.patch:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1335182400">- Add back accountsservice-filter-more-accounts.patch to filter the
  at user.
- Add accountsservice-filter-no-shell.patch to filter users with no
  shell, which happens when NIS is setup.
- This should fix bnc#757662.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>

</package>
<package pkgid="4bb0475458d8a5556efac9f62535eccd4ca8cdeda2ac2f7dde1780ec65810e89" name="accountsservice-devel" arch="x86_64">
    <version epoch="0" ver="0.6.35" rel="2.16.1"/>

<changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 0.6.18:
  + Fix systemd configure check
  + Add a few more common system accounts to the blacklist
  + Fix some issues in systemd session handling
- Drop accountsservice-filter-more-accounts.patch: fixed upstream.
- Drop accountsservice-fix-systemd-test-always-evaluating-true.patch:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1335182400">- Add back accountsservice-filter-more-accounts.patch to filter the
  at user.
- Add accountsservice-filter-no-shell.patch to filter users with no
  shell, which happens when NIS is setup.
- This should fix bnc#757662.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
<changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35 (bnc#871232):
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>

</package>
<package pkgid="812e6ce64655a26487ce24010cda64b240974f78431464654695a9e015744741" name="accountsservice-devel" arch="x86_64">
    <version epoch="0" ver="0.6.38" rel="2.20.1"/>

<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
<changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35 (bnc#871232):
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1396440000">- Update to version 0.6.37:
  + BSD fixes.
- Changes from version 0.6.36:
  + Fixes for deleting users.
  + Leak fix.
  + Change user classification logic.
  + BSD fixes.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1411646400">- Update to version 0.6.38 (bnc#896602):
  + Fix polkit policy for non-desktop cases.
  + Fix for a race when new user appears.
  + Some clearer log and debug messages.
- Pass --enable-user-heuristics to configure, ensure that users
  with legacy uid's are still shown in GDM Facebrowser.
  Note that users that have had SystemAccount=true set in
  /var/lib/AccountsService/users/$usr will have to manually set
  this to false if user is wanted to show in facebrowser.</changelog>

</package>
<package pkgid="4048147ba9820f44b1469e3043746497257ddd650aa140fc9097c41a426cdd55" name="accountsservice-lang" arch="noarch">
    <version epoch="0" ver="0.6.34" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1333454400">- Add accountsservice-filter-more-accounts.patch: filter out ftp,
  games, man and mysql system users too, taken from git.
- Add accountsservice-filter-suse-accounts.patch: filter out some
  openSUSE-specific accounts (beagleindex, suse-ncc).</changelog>
<changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 0.6.18:
  + Fix systemd configure check
  + Add a few more common system accounts to the blacklist
  + Fix some issues in systemd session handling
- Drop accountsservice-filter-more-accounts.patch: fixed upstream.
- Drop accountsservice-fix-systemd-test-always-evaluating-true.patch:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1335182400">- Add back accountsservice-filter-more-accounts.patch to filter the
  at user.
- Add accountsservice-filter-no-shell.patch to filter users with no
  shell, which happens when NIS is setup.
- This should fix bnc#757662.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>

</package>
<package pkgid="94def6a17d279a50928631132aa6ac850a4990b2a9b5b07949eb35e96c092125" name="accountsservice-lang" arch="noarch">
    <version epoch="0" ver="0.6.35" rel="2.16.1"/>

<changelog author="dimstar@opensuse.org" date="1334404800">- Update to version 0.6.18:
  + Fix systemd configure check
  + Add a few more common system accounts to the blacklist
  + Fix some issues in systemd session handling
- Drop accountsservice-filter-more-accounts.patch: fixed upstream.
- Drop accountsservice-fix-systemd-test-always-evaluating-true.patch:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1335182400">- Add back accountsservice-filter-more-accounts.patch to filter the
  at user.
- Add accountsservice-filter-no-shell.patch to filter users with no
  shell, which happens when NIS is setup.
- This should fix bnc#757662.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
<changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35 (bnc#871232):
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>

</package>
<package pkgid="ea6edea15e52bedf8bbf683d12be409a9559b140f650f756d90457ceb624fd59" name="accountsservice-lang" arch="noarch">
    <version epoch="0" ver="0.6.38" rel="2.20.1"/>

<changelog author="dimstar@opensuse.org" date="1336132800">- Update to version 0.6.20:
  + Fix user listing which broke in previous release
- Changes from version 0.6.19:
  + Fix spurious warnings in logs
  + Make userdel succeed even if user is already logged in
  + Exclude users with no shell
  + Exclude "at" user
- Drop accountsservice-filter-more-accounts.patch and
  accountsservice-filter-no-shell.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1337342400">- Update to version 0.6.21:
  + Detect old versions of systemd and fall back to ConsoleKit
  + Exclude users without a valid shell
  + Fix log spew</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Add users cyrus, ldap and mailman to the openSUSE specific users
  to be excluded (accountsservice-filter-suse-accounts.patch).
  Fixes bnc#765487.</changelog>
<changelog author="vuntz@opensuse.org" date="1340798400">- Add accountsservice-CVE-2012-2737.patch: fix local file
  disclosure flaw. Fix bnc#768807, CVE-2012-2737.</changelog>
<changelog author="dimstar@opensuse.org" date="1340884800">- Update to version 0.6.22:
  + Correct CVE-2012-2737, local file disclosure
  + small memory leak fix
  + exclude system accounts from ListCachedUsers
  + make has-multiple-users properly only check non-system users
  + remove icon when deleting user
  + Revert usage of getpwent() as fallback for fgetpwent
  + support consolekit call cancellation to prevent crashes caused
    by shortlived sessions
  + ignore built files in .gitignore
  + quiet down build goo nagging
- Drop accountsservice-CVE-2012-2737.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1342612800">- Add the user 'fax' to the exception list (bnc#771177).</changelog>
<changelog author="dimstar@opensuse.org" date="1344427200">- Update to version 0.6.23:
  + Fix up some debug output.
  + add new CacheUser and UncacheUser apis.
  + uncache user before deleting user.</changelog>
<changelog author="dimstar@opensuse.org" date="1346155200">- Update to version 0.6.24:
  + add User.Local property for identifying local users.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 0.6.25:
  + Uninitialized variable fix
  + Typo fix
  + Create data dirs just-in-time
  + Ignore closing sessions for is_logged_in test
  + Disable NULL user for delete_user call
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.6.26:
  + Require libsystemd-login 186.
  + Protect against deleting root user.
  + Add LoginTime and LoginHistory properties.
  + Fix crash consolekit code.
  + Fix has_multiple_user property after removing user.</changelog>
<changelog author="dimstar@opensuse.org" date="1353326400">- Update to version 0.6.28:
  + Fix act_user_manager_delete_user_finish.
  + Fix handling of LoginTime and LoginHistory properties.
- Changes from version 0.6.27:
  + Fix warnings when the singleton user manager object is
    finalized.
  + Generated docs for libaccountsservice.
  + Initialize local_acount to TRUE.
  + Add async api for user creation, caching and deletion.</changelog>
<changelog author="dimstar@opensuse.org" date="1353672000">- Update to version 0.6.29:
  + Translate D-Bus errors to local errors in libaccountsservice.
  + Fix a wrong property name in the login history support.</changelog>
<changelog author="dimstar@opensuse.org" date="1355659200">- Update to version 0.6.30:
  + Minor source clean ups.
  + Crasher fix on 32bit systems.
  + Add get_user_by_id.
  + Don't lose sessions list for users at startup.
  + Add API for detecting when accountsservice is unavailable.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 0.6.31:
  + Check for logind, not systemd (bgo#62586).
  + Add --enable-admin-group configure option (bgo#62235).
  + Be more aggressive at excluding system accounts (bgo#48178).
  + Fix xsession property notification (bgo#58493).
  + Fix login history variant handling (bgo#58466).
- Rebase accountsservice-sysconfig.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.6.32:
  + Don't treat remote users as system accounts (fdo#64186).
  + Clean up spawn_with_login_uid error handling (fdo#55067).
  + Quit on SIGINT/SIGTERM (fdo#63869).
  + Make --debug work as expected (fdo#63870).
  + Remove newlines from debug output (fdo#63871).
  + Fix mismatched function signature (fdo#63873).
  + Fix gir/vapi warnings (fdo#63875).
  + Fix documentation warnings (fdo#63880).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 0.6.34:
  + Try to sanitize automatic login setting when user account is
    deleted or disabled (fdo#54506).
  + Fix build.
- Changes from version 0.6.33:
  + Keep track of non-graphical sessions (fdo#65160).
  + Forget obsolete sessions (fdo#65159).
  + Monitor wtmp for changes (fdo#63159).
  + Ignore non-user sessions (fdo#701514).
  + Rework system account handling (fdo#64769).
  - Never treat cached users as system accounts.
  - Add gdm, gnome-initial-setup users to blacklist.
  - Store system-account bit in key file.
  - Cache newly-created users explicitly.
- Rebase accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1381320000">- Add accountsservice-remotePW-verification.patch: treat NULL
  shadow entry as "password handled remotely" (bnc#844933,
  bgo#708997, fdo#70005).</changelog>
<changelog author="dimstar@opensuse.org" date="1381924800">- Update to version 0.6.35 (bnc#871232):
  + Handle non-existent users better.
  + Misc bug fixes.
  + Misc clean ups.
  + Emit "changed" signal when account type changes for user.
  + Stop shipping vapi files.
  + Avoid connecting to ConsoleKit on logind systems.
  + Add extension interface.
  + Add --enable-coverage option for gcov support.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.
- Drop accountsservice-remotePW-verification.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1396440000">- Update to version 0.6.37:
  + BSD fixes.
- Changes from version 0.6.36:
  + Fixes for deleting users.
  + Leak fix.
  + Change user classification logic.
  + BSD fixes.
- Rebase accountsservice-sysconfig.patch and
  accountsservice-filter-suse-accounts.patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1411646400">- Update to version 0.6.38 (bnc#896602):
  + Fix polkit policy for non-desktop cases.
  + Fix for a race when new user appears.
  + Some clearer log and debug messages.
- Pass --enable-user-heuristics to configure, ensure that users
  with legacy uid's are still shown in GDM Facebrowser.
  Note that users that have had SystemAccount=true set in
  /var/lib/AccountsService/users/$usr will have to manually set
  this to false if user is wanted to show in facebrowser.</changelog>

</package>
<package pkgid="7df44445e5b86ce111d1957653c5d15730545c27c823d6a824050c505deb0500" name="ack" arch="noarch">
    <version epoch="0" ver="2.12" rel="3.4.1"/>

<changelog author="pascal.bleser@opensuse.org" date="1247486400">- update to 1.88:
  * ack has a new plugin system, so you can build plugins to search
    whatever filetype you want
  * added support for .hrl Erlang header files
  * added support for --rake files, which are also --ruby files
  * fixed a bug where files ending in "Makefile" were mistakenly
    identified as Makefiles
  * created a new etc/ directory and its first addition, a bash
    auto-completion file</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1266148800">- update to 1.92:
  [ENHANCEMENTS]
  * Added Scala support.  Thanks to Dan Sully.
  * Added .phtml as an extension for PHP.
  * Using -f or -g now return a proper error code.  If files are
    found, ack returns 0.  If none are found, ack returns 1.  This
    is a change in the specification, but the code didn't match the
    specfication anyway.
  * No man pages are created for any of the .pm files any more.
  [FIXES]
  * The --pager flag would not work.  Now it does.  Thanks Packy
    Anderson.
  * File matching for Emacs work files that match #*# was wrong.
    It was checking the entire path, not just the basename.  This
    is fixed.  (http://github.com/petdance/ack/issues/closed/#issue/101)
  * Fixed URLs that pointed to old Google Code.
- split out perl-App-Ack into its own subpackage</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1266148801">- removed bash completion file, way too slow</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1289476800">- applied patch by Pavol Rusnak &lt;prusnak@suse.cz&gt; from openSUSE:Factory:Contrib/ack to ignore .osc directories (redone for release 1.92)
- merged .changes entries for 1.92 by Petr Uzl &lt;puzel@suse.cz&gt; from openSUSE:Factory:Contrib/ack, he was a lot less lazy than me</changelog>
<changelog author="puzel@novell.com" date="1289908800">- update to 1.94:
  [ENHANCEMENTS]
  * Added support for Go and Delphi.
  * Ignores Monotone's _MTN directories.
  * Added .xsl to the list of --xml files.
- changes from 1.93_02:
  [FIXES]
  * --man and --version now return with an exit code of 0 (they used to exit with a 1)
  [ENHANCEMENTS]
  * the --ignore-dir option now can ignore entire paths relative to your current directory
  * added --invert-file-match switch to negate the sense of the -g/-G switches
- changes from 1.93_01:
  [FILE TYPE UPDATES]
  * added --verilog, --vhdl and --clojure
  * files that match *.mk and *.mak as well as GNUmakefile are now included in the ack filetype 'make' (issue 88)
  * added RSpec's .spec type to the --ruby list
  [ENHANCEMENTS]
  * added docs for -r, -R, --recurse options
  * added new switch --color-lineno and environment variable ACK_COLOR_LINENO, which allow setting the line number color
  * added option --show-types to output the types that ack considers a file to have
  * 'ack --count --no-filename regex' doesn't output a list of numbers but a sum of all occurences; this is NOT what grep does but is the more sensible behavior
  [FIXES]
  * fixed ack misbehavior when using --match or not specifying a regex
  * fixed issue 74: analog to grep, 'ack --count regex file' now only outputs the number of found matches, if only one file is given
  * fixed issue 76: giving both --line and a regex (with --match) now leads to an error; the same is true for -f or -g in conjunction with --match
  * fixed issue 80: piping into ack --count now works as expected: ack always returned 0 when piped into, no matter how many matches where found
  * fixed issue 81: .ackrc now ignores leading/trailing whitespace</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1298721600">- add --spec/--rpm for .spec files</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="puzel@suse.com" date="1316433600">- update to 1.96:
  [ENHANCEMENTS]
  * Now ignores minified Javascript files.  Anything matching
  - min.js or .min.js is ignored.
  * Added Groovy support (--groovy).
  * Added .pm6 as a --perl extension.
  * Lua can now get detected from the shebang line.  Thanks,
    Matthew Wild.
  * Added support for version numbers in executables in shebang
    detection.  Now if your Perl program's shebang refers to
    /usr/local/bin/perl-5.14.1, ack will find it.</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="mrdocs@opensuse.org" date="1330344000">-run osc service localrun format_spec_file to fix for factory</changelog>
<changelog author="idonmez@suse.com" date="1374494400">- Update to version 2.0.4
  * Major update, see http://beyondgrep.com/ack-2.0/ for details
- Refresh ack-ignore-osc.patch, ack-add_spec.patch</changelog>
<changelog author="idonmez@suse.com" date="1376568000">- Add perl-File-Next runtime dependency</changelog>
<changelog author="andreas.stieger@gmx.de" date="1389960000">- update to ack 2.12:
  fixes potential remote code execution via per-project .ackrc files
  [bnc#855340] [CVE-2013-7069]
  * prevents the --pager, --regex and --output options from being
    used from project-level ackrc files, preventing possible code
    execution when using ack through malicious files
  * --pager, --regex and --output options may still be used from
    the global /etc/ackrc, your own private ~/.ackrc, the ACK_OPTIONS
    environment variable, and of course from the command line.
  * Now ignores Eclipse .metadata directory.
- includes changes form 2.11_02:
  * upstream source mispackaging fix
- includes changes from 2.11_01
  * Fixed a race condition in t/file-permission.t that was causing
    failures if tests were run in parallel.
- includes changes from 2.10:
  * Add --perltest for *.t files
  * Added Matlab support
  * More compatibility fixes for Perl 5.8.8.
- includes changes from 2.08
  * ack now ignores CMake's build/cache directories by default
  * Add shebang matching for --lua files
  * Add documentation for --ackrc
  * Add Elixir filetype
  * Add --cathy option
  * Add some helpful debugging tips when an invalid option is found
  * Ignore PDF files by default, because Perl will detect them as text
  * Ignore .gif, .jpg, .jpeg and .png files.  They won't normally be
    selected, but this is an optimization so that ack doesn't have to
    open them to know
  * Ack's colorizing of output would get confused with multiple sets
    of parentheses
  * Ack would get confused when trying to colorize the output in
    DOS-format files
- includes changes from 2.05_01
  * We now ignore the node_modules directories created by npm
  * --pager without an argument implies --pager=$PAGER
  * --perl now recognizes Plack-style .psgi files
  * Added filetypes for Coffescript, JSON, LESS, and Sass.
  * Command-line options now override options set in ackrc files
  * ACK_PAGER and ACK_PAGER_COLOR now work as advertised.
  * Fix a bug resulting in uninitialized variable warnings when more
    than one capture group was specified in the search pattern
  * Make sure ack is happy to build and test under cron and other
    console-less environments.
- packaging changes:
  * run more rests with IO::Pty
  * refresh ack-ignore-osc.patch for upstream changes
  * update project URL
- port changes from devel:languages:perl ack by daxim@cpan.org:
  * correct metadata: licence, CPAN download, homepage
  * unset forced prefix - let Perl configuration and toolchain
    determine the prefix/install_base which will DTRT
  * bash completion is gone, remove dead code
- modified patches:
  * ack-ignore-osc.patch adjust for upstream source changes</changelog>

</package>
<package pkgid="fdc0d26793383a09e2ae81d528b4138d1a57c997a3af11ea0e1f0a134fcb522b" name="ack" arch="src">
    <version epoch="0" ver="2.12" rel="3.4.1"/>

<changelog author="guru@unixtech.be" date="1206446400">- new package (1.78)</changelog>
<changelog author="guru@unixtech.be" date="1216209600">- new upstream version (1.86)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1247486400">- update to 1.88:
  * ack has a new plugin system, so you can build plugins to search
    whatever filetype you want
  * added support for .hrl Erlang header files
  * added support for --rake files, which are also --ruby files
  * fixed a bug where files ending in "Makefile" were mistakenly
    identified as Makefiles
  * created a new etc/ directory and its first addition, a bash
    auto-completion file</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1266148800">- update to 1.92:
  [ENHANCEMENTS]
  * Added Scala support.  Thanks to Dan Sully.
  * Added .phtml as an extension for PHP.
  * Using -f or -g now return a proper error code.  If files are
    found, ack returns 0.  If none are found, ack returns 1.  This
    is a change in the specification, but the code didn't match the
    specfication anyway.
  * No man pages are created for any of the .pm files any more.
  [FIXES]
  * The --pager flag would not work.  Now it does.  Thanks Packy
    Anderson.
  * File matching for Emacs work files that match #*# was wrong.
    It was checking the entire path, not just the basename.  This
    is fixed.  (http://github.com/petdance/ack/issues/closed/#issue/101)
  * Fixed URLs that pointed to old Google Code.
- split out perl-App-Ack into its own subpackage</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1266148801">- removed bash completion file, way too slow</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1289476800">- applied patch by Pavol Rusnak &lt;prusnak@suse.cz&gt; from openSUSE:Factory:Contrib/ack to ignore .osc directories (redone for release 1.92)
- merged .changes entries for 1.92 by Petr Uzl &lt;puzel@suse.cz&gt; from openSUSE:Factory:Contrib/ack, he was a lot less lazy than me</changelog>
<changelog author="puzel@novell.com" date="1289908800">- update to 1.94:
  [ENHANCEMENTS]
  * Added support for Go and Delphi.
  * Ignores Monotone's _MTN directories.
  * Added .xsl to the list of --xml files.
- changes from 1.93_02:
  [FIXES]
  * --man and --version now return with an exit code of 0 (they used to exit with a 1)
  [ENHANCEMENTS]
  * the --ignore-dir option now can ignore entire paths relative to your current directory
  * added --invert-file-match switch to negate the sense of the -g/-G switches
- changes from 1.93_01:
  [FILE TYPE UPDATES]
  * added --verilog, --vhdl and --clojure
  * files that match *.mk and *.mak as well as GNUmakefile are now included in the ack filetype 'make' (issue 88)
  * added RSpec's .spec type to the --ruby list
  [ENHANCEMENTS]
  * added docs for -r, -R, --recurse options
  * added new switch --color-lineno and environment variable ACK_COLOR_LINENO, which allow setting the line number color
  * added option --show-types to output the types that ack considers a file to have
  * 'ack --count --no-filename regex' doesn't output a list of numbers but a sum of all occurences; this is NOT what grep does but is the more sensible behavior
  [FIXES]
  * fixed ack misbehavior when using --match or not specifying a regex
  * fixed issue 74: analog to grep, 'ack --count regex file' now only outputs the number of found matches, if only one file is given
  * fixed issue 76: giving both --line and a regex (with --match) now leads to an error; the same is true for -f or -g in conjunction with --match
  * fixed issue 80: piping into ack --count now works as expected: ack always returned 0 when piped into, no matter how many matches where found
  * fixed issue 81: .ackrc now ignores leading/trailing whitespace</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1298721600">- add --spec/--rpm for .spec files</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="puzel@suse.com" date="1316433600">- update to 1.96:
  [ENHANCEMENTS]
  * Now ignores minified Javascript files.  Anything matching
  - min.js or .min.js is ignored.
  * Added Groovy support (--groovy).
  * Added .pm6 as a --perl extension.
  * Lua can now get detected from the shebang line.  Thanks,
    Matthew Wild.
  * Added support for version numbers in executables in shebang
    detection.  Now if your Perl program's shebang refers to
    /usr/local/bin/perl-5.14.1, ack will find it.</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="mrdocs@opensuse.org" date="1330344000">-run osc service localrun format_spec_file to fix for factory</changelog>
<changelog author="idonmez@suse.com" date="1374494400">- Update to version 2.0.4
  * Major update, see http://beyondgrep.com/ack-2.0/ for details
- Refresh ack-ignore-osc.patch, ack-add_spec.patch</changelog>
<changelog author="idonmez@suse.com" date="1376568000">- Add perl-File-Next runtime dependency</changelog>
<changelog author="andreas.stieger@gmx.de" date="1389960000">- update to ack 2.12:
  fixes potential remote code execution via per-project .ackrc files
  [bnc#855340] [CVE-2013-7069]
  * prevents the --pager, --regex and --output options from being
    used from project-level ackrc files, preventing possible code
    execution when using ack through malicious files
  * --pager, --regex and --output options may still be used from
    the global /etc/ackrc, your own private ~/.ackrc, the ACK_OPTIONS
    environment variable, and of course from the command line.
  * Now ignores Eclipse .metadata directory.
- includes changes form 2.11_02:
  * upstream source mispackaging fix
- includes changes from 2.11_01
  * Fixed a race condition in t/file-permission.t that was causing
    failures if tests were run in parallel.
- includes changes from 2.10:
  * Add --perltest for *.t files
  * Added Matlab support
  * More compatibility fixes for Perl 5.8.8.
- includes changes from 2.08
  * ack now ignores CMake's build/cache directories by default
  * Add shebang matching for --lua files
  * Add documentation for --ackrc
  * Add Elixir filetype
  * Add --cathy option
  * Add some helpful debugging tips when an invalid option is found
  * Ignore PDF files by default, because Perl will detect them as text
  * Ignore .gif, .jpg, .jpeg and .png files.  They won't normally be
    selected, but this is an optimization so that ack doesn't have to
    open them to know
  * Ack's colorizing of output would get confused with multiple sets
    of parentheses
  * Ack would get confused when trying to colorize the output in
    DOS-format files
- includes changes from 2.05_01
  * We now ignore the node_modules directories created by npm
  * --pager without an argument implies --pager=$PAGER
  * --perl now recognizes Plack-style .psgi files
  * Added filetypes for Coffescript, JSON, LESS, and Sass.
  * Command-line options now override options set in ackrc files
  * ACK_PAGER and ACK_PAGER_COLOR now work as advertised.
  * Fix a bug resulting in uninitialized variable warnings when more
    than one capture group was specified in the search pattern
  * Make sure ack is happy to build and test under cron and other
    console-less environments.
- packaging changes:
  * run more rests with IO::Pty
  * refresh ack-ignore-osc.patch for upstream changes
  * update project URL
- port changes from devel:languages:perl ack by daxim@cpan.org:
  * correct metadata: licence, CPAN download, homepage
  * unset forced prefix - let Perl configuration and toolchain
    determine the prefix/install_base which will DTRT
  * bash completion is gone, remove dead code
- modified patches:
  * ack-ignore-osc.patch adjust for upstream source changes</changelog>

</package>
<package pkgid="868a8daf739f1373f3b698da06ca70181ea957673a20db7e9343607a429363c8" name="acpid" arch="i586">
    <version epoch="0" ver="2.0.19" rel="4.4.1"/>

<changelog author="fcrozat@suse.com" date="1314187200">- Use systemd macros to enable acpid service.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="fcrozat@suse.com" date="1316779200">- Ensure acpid is enabled on initial install, under systemd</changelog>
<changelog author="fcrozat@suse.com" date="1317038400">- Use latest systemd RPM macros.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324036800">- Update to acpid 2.0.13</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="crrodriguez@opensuse.org" date="1325332800">- Put acpid back in %{_sbindir} /usr is nowdays mounted by the
  initrd</changelog>
<changelog author="tabraham@novell.com" date="1326801600">- Update to acpid 2.0.14
  + fixed brace style (Ted Felix)
  + added support for a "K" suffix on event strings to indicate
    that they may have originated from a keyboard input layer
    device. This can be used to differentiate between a power
    switch on the keyboard, and a power switch on the computer's
    case. (Ted Felix)
  + Added a pathname to connection along with a find_connection_name()
    Modifications to process_inotify() to log IN_DELETE events.
    Additional debugging output (Ted Felix)</changelog>
<changelog author="tabraham@novell.com" date="1331899200">- Update to acpid 2.0.15
  + Improve man page (Debian bug #656676)
    (acpid.8 acpi_listen.8)  (Ted Felix)
  + Change makefile to get rid of double slashes on install paths.
    Note: This change was lost due to introduction of autoconf which
    wiped out the old Makefile.  (Makefile)  (Gilles Espinasse)
  + Switch from Makefile to autoconf build system.  Fix some related
    warnings.
    (Makefile Makefile.am README TODO acpi_ids.c acpi_ids.h acpid.h
    configure.ac connection_list.h event.c kacpimon/Makefile.am
    kacpimon/makefile proc.h sock.h)
    (Cristian Rodriguez)
  + Fix build warnings uncovered by new gcc settings from autoconf.
    (inotify_handler.c input_layer.c kacpimon/acpi_ids.c kacpimon/acpi_ids.h
    kacpimon/connection_list.c kacpimon/connection_list.h
    kacpimon/input_layer.c kacpimon/kacpimon.c kacpimon/netlink.c netlink.c
    proc.c sock.c)
    (Ted Felix)
  + Remove fcntl() calls to set FD_CLOEXEC and replace with
    CLOEXEC flags within the various open(), recvmsg() and other calls.
    Requires kernel version 2.6.23 and above.
    (acpi_listen.c inotify_handler.c input_layer.c libnetlink.c netlink.c
    proc.c ud_socket.c)
    (Cristian Rodriguez)
  + Add SOCK_NONBLOCK to ud_create_socket().
    (ud_socket.c) (Cristian Rodriguez)
  + Use isfdtype() instead of getsockopt() in is_socket().  Use fchmod(),
    fstat(), and fchown() instead of the non-"f" versions in open_sock().
    (sock.c) (Cristian Rodriguez)
  + Use __attribute__ for argument checking in acpid_log().
    (input_layer.c log.h netlink.c ud_socket.c) (Cristian Rodriguez)
  + Close only the open fds in close_fds().
    (acpid.c) (Cristian Rodriguez)
  + Use accept4() with SOCK_CLOEXEC and SOCK_NONBLOCK in ud_accept().
    Remove unnecessary calls to fcntl() in process_sock().
    (sock.c ud_socket.c) (Cristian Rodriguez)
  + Use asprintf() instead of snprintf() in process_sock().
    (sock.c) (Cristian Rodriguez)
  + Use TEMP_FAILURE_RETRY macro instead of bogus checks for EINTR.
    (acpi_listen.c acpid.c event.c input_layer.c libnetlink.c netlink.c
    proc.c ud_socket.c) (Cristian Rodriguez)
  + Use safer, faster, and more modern functions asprintf(), fstatat(),
    openat(), and fdopen() in the configuration file processing.
    (event.c) (Cristian Rodriguez)
- refreshed patches - acpid-makefile.patch acpid-wrong-memset.patch</changelog>
<changelog author="tabraham@novell.com" date="1333368000">- Update to acpid 2.0.16
  + Add tests for required functions to configure.ac.
    (configure.ac)  (Ted Felix)
  + Move fchmod() before bind() on socket.  Debian bug #664705.
    (sock.c ud_socket.c ud_socket.h)  (Ted Felix)
  + Switch back to chown() as fchown() doesn't appear to work with sockets.
    (sock.c)  (Ted Felix)
  + Add support for headphone (and other) jack switch events.
    (input_layer.c)  (AlexanderR)
  + Add notes on making the tarball.
    (README)  (Ted Felix)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345377600">- Improve systemd unit
  * run in the foreground
  * use netlink only as /proc/acpi files are deprecated.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1348401600">- 2.0.17 release
    (configure.ac)  (Ted Felix)
  - Check for chmod.
    (configure.ac)  (Ted Felix)
  - Add support for tablet mode switch.
    (input_layer.c)  (Fabian Henze)
  - Incorrect sizeof() usage for memset.
    (libnetlink.c)  (Auke Kok)
  - Close some unclosed fd's.
    (acpid.c event.c ud_socket.c)  (Auke Kok)
  - Do not create pid file when running in foreground.
    (acpid.c)  (Cristian Rodriguez)
  - Free regular expression.
    (event.c)  (Cristian Rodriguez)
- acpid-wrong-memset.patch removed, is upstream</changelog>
<changelog author="trenn@suse.de" date="1358251200">-  Catch and process sleep event correctly, even if no X is
  running.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370347200">- 2.0.19 release
- README improvements  (README)  (Ted Felix)
- man page additions  (acpid.8)  (Ted Felix)
    (kacpimon/libnetlink.c)  (Ted Felix)
- Add support for mic mute (KEY_MICMUTE).
    (input_layer.c)  (Ted Felix)
- Fix format of video/tabletmode event string.  CRITICAL.
    (input_layer.c)  (Ted Felix)
- Add how to kill acpid to kacpimon man page.
    (kacpimon.8)  (Ted Felix)
- Add info on logind.conf's HandlePowerKey to man page.
    (acpid.8)  (Ted Felix)
- Remove ExecStop from systemd unit, not required.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370347201">- Also remove After=syslog.target from unit file (target does
  not exists anymore)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1372852800">- remove obsolete thinkpad_acpi modprobe config (bnc#792172)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1372939200">- remove power and sleep button handlers -- now handled by systemd
  just keep them as examples in the documentation</changelog>
<changelog author="werner@suse.de" date="1375444800">- Use sourceforge download as below http://tedfelix.com/linux/
  the tar ball has been removed</changelog>
<changelog author="mchang@suse.com" date="1376395200">- power_button: iterate systemd-logind sessions and do nothing if a
  active X session found (bnc#810125)</changelog>
<changelog author="oneukum@suse.com" date="1392379200">- Correct pointer at further documentation in README</changelog>

</package>
<package pkgid="6751a0441ac7ea43df712da481003a4620fbb6690d2eeeb4052aa33948991de7" name="acpid" arch="src">
    <version epoch="0" ver="2.0.19" rel="4.4.1"/>

<changelog author="fcrozat@suse.com" date="1314187200">- Use systemd macros to enable acpid service.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="fcrozat@suse.com" date="1316779200">- Ensure acpid is enabled on initial install, under systemd</changelog>
<changelog author="fcrozat@suse.com" date="1317038400">- Use latest systemd RPM macros.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324036800">- Update to acpid 2.0.13</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="crrodriguez@opensuse.org" date="1325332800">- Put acpid back in %{_sbindir} /usr is nowdays mounted by the
  initrd</changelog>
<changelog author="tabraham@novell.com" date="1326801600">- Update to acpid 2.0.14
  + fixed brace style (Ted Felix)
  + added support for a "K" suffix on event strings to indicate
    that they may have originated from a keyboard input layer
    device. This can be used to differentiate between a power
    switch on the keyboard, and a power switch on the computer's
    case. (Ted Felix)
  + Added a pathname to connection along with a find_connection_name()
    Modifications to process_inotify() to log IN_DELETE events.
    Additional debugging output (Ted Felix)</changelog>
<changelog author="tabraham@novell.com" date="1331899200">- Update to acpid 2.0.15
  + Improve man page (Debian bug #656676)
    (acpid.8 acpi_listen.8)  (Ted Felix)
  + Change makefile to get rid of double slashes on install paths.
    Note: This change was lost due to introduction of autoconf which
    wiped out the old Makefile.  (Makefile)  (Gilles Espinasse)
  + Switch from Makefile to autoconf build system.  Fix some related
    warnings.
    (Makefile Makefile.am README TODO acpi_ids.c acpi_ids.h acpid.h
    configure.ac connection_list.h event.c kacpimon/Makefile.am
    kacpimon/makefile proc.h sock.h)
    (Cristian Rodriguez)
  + Fix build warnings uncovered by new gcc settings from autoconf.
    (inotify_handler.c input_layer.c kacpimon/acpi_ids.c kacpimon/acpi_ids.h
    kacpimon/connection_list.c kacpimon/connection_list.h
    kacpimon/input_layer.c kacpimon/kacpimon.c kacpimon/netlink.c netlink.c
    proc.c sock.c)
    (Ted Felix)
  + Remove fcntl() calls to set FD_CLOEXEC and replace with
    CLOEXEC flags within the various open(), recvmsg() and other calls.
    Requires kernel version 2.6.23 and above.
    (acpi_listen.c inotify_handler.c input_layer.c libnetlink.c netlink.c
    proc.c ud_socket.c)
    (Cristian Rodriguez)
  + Add SOCK_NONBLOCK to ud_create_socket().
    (ud_socket.c) (Cristian Rodriguez)
  + Use isfdtype() instead of getsockopt() in is_socket().  Use fchmod(),
    fstat(), and fchown() instead of the non-"f" versions in open_sock().
    (sock.c) (Cristian Rodriguez)
  + Use __attribute__ for argument checking in acpid_log().
    (input_layer.c log.h netlink.c ud_socket.c) (Cristian Rodriguez)
  + Close only the open fds in close_fds().
    (acpid.c) (Cristian Rodriguez)
  + Use accept4() with SOCK_CLOEXEC and SOCK_NONBLOCK in ud_accept().
    Remove unnecessary calls to fcntl() in process_sock().
    (sock.c ud_socket.c) (Cristian Rodriguez)
  + Use asprintf() instead of snprintf() in process_sock().
    (sock.c) (Cristian Rodriguez)
  + Use TEMP_FAILURE_RETRY macro instead of bogus checks for EINTR.
    (acpi_listen.c acpid.c event.c input_layer.c libnetlink.c netlink.c
    proc.c ud_socket.c) (Cristian Rodriguez)
  + Use safer, faster, and more modern functions asprintf(), fstatat(),
    openat(), and fdopen() in the configuration file processing.
    (event.c) (Cristian Rodriguez)
- refreshed patches - acpid-makefile.patch acpid-wrong-memset.patch</changelog>
<changelog author="tabraham@novell.com" date="1333368000">- Update to acpid 2.0.16
  + Add tests for required functions to configure.ac.
    (configure.ac)  (Ted Felix)
  + Move fchmod() before bind() on socket.  Debian bug #664705.
    (sock.c ud_socket.c ud_socket.h)  (Ted Felix)
  + Switch back to chown() as fchown() doesn't appear to work with sockets.
    (sock.c)  (Ted Felix)
  + Add support for headphone (and other) jack switch events.
    (input_layer.c)  (AlexanderR)
  + Add notes on making the tarball.
    (README)  (Ted Felix)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345377600">- Improve systemd unit
  * run in the foreground
  * use netlink only as /proc/acpi files are deprecated.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1348401600">- 2.0.17 release
    (configure.ac)  (Ted Felix)
  - Check for chmod.
    (configure.ac)  (Ted Felix)
  - Add support for tablet mode switch.
    (input_layer.c)  (Fabian Henze)
  - Incorrect sizeof() usage for memset.
    (libnetlink.c)  (Auke Kok)
  - Close some unclosed fd's.
    (acpid.c event.c ud_socket.c)  (Auke Kok)
  - Do not create pid file when running in foreground.
    (acpid.c)  (Cristian Rodriguez)
  - Free regular expression.
    (event.c)  (Cristian Rodriguez)
- acpid-wrong-memset.patch removed, is upstream</changelog>
<changelog author="trenn@suse.de" date="1358251200">-  Catch and process sleep event correctly, even if no X is
  running.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370347200">- 2.0.19 release
- README improvements  (README)  (Ted Felix)
- man page additions  (acpid.8)  (Ted Felix)
    (kacpimon/libnetlink.c)  (Ted Felix)
- Add support for mic mute (KEY_MICMUTE).
    (input_layer.c)  (Ted Felix)
- Fix format of video/tabletmode event string.  CRITICAL.
    (input_layer.c)  (Ted Felix)
- Add how to kill acpid to kacpimon man page.
    (kacpimon.8)  (Ted Felix)
- Add info on logind.conf's HandlePowerKey to man page.
    (acpid.8)  (Ted Felix)
- Remove ExecStop from systemd unit, not required.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370347201">- Also remove After=syslog.target from unit file (target does
  not exists anymore)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1372852800">- remove obsolete thinkpad_acpi modprobe config (bnc#792172)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1372939200">- remove power and sleep button handlers -- now handled by systemd
  just keep them as examples in the documentation</changelog>
<changelog author="werner@suse.de" date="1375444800">- Use sourceforge download as below http://tedfelix.com/linux/
  the tar ball has been removed</changelog>
<changelog author="mchang@suse.com" date="1376395200">- power_button: iterate systemd-logind sessions and do nothing if a
  active X session found (bnc#810125)</changelog>
<changelog author="oneukum@suse.com" date="1392379200">- Correct pointer at further documentation in README</changelog>

</package>
<package pkgid="0846df3324cd1dae3324b82f0370ab5b666ae80f3821511bed5d01499be65cb1" name="acpid" arch="x86_64">
    <version epoch="0" ver="2.0.19" rel="4.4.1"/>

<changelog author="fcrozat@suse.com" date="1314187200">- Use systemd macros to enable acpid service.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="fcrozat@suse.com" date="1316779200">- Ensure acpid is enabled on initial install, under systemd</changelog>
<changelog author="fcrozat@suse.com" date="1317038400">- Use latest systemd RPM macros.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324036800">- Update to acpid 2.0.13</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="crrodriguez@opensuse.org" date="1325332800">- Put acpid back in %{_sbindir} /usr is nowdays mounted by the
  initrd</changelog>
<changelog author="tabraham@novell.com" date="1326801600">- Update to acpid 2.0.14
  + fixed brace style (Ted Felix)
  + added support for a "K" suffix on event strings to indicate
    that they may have originated from a keyboard input layer
    device. This can be used to differentiate between a power
    switch on the keyboard, and a power switch on the computer's
    case. (Ted Felix)
  + Added a pathname to connection along with a find_connection_name()
    Modifications to process_inotify() to log IN_DELETE events.
    Additional debugging output (Ted Felix)</changelog>
<changelog author="tabraham@novell.com" date="1331899200">- Update to acpid 2.0.15
  + Improve man page (Debian bug #656676)
    (acpid.8 acpi_listen.8)  (Ted Felix)
  + Change makefile to get rid of double slashes on install paths.
    Note: This change was lost due to introduction of autoconf which
    wiped out the old Makefile.  (Makefile)  (Gilles Espinasse)
  + Switch from Makefile to autoconf build system.  Fix some related
    warnings.
    (Makefile Makefile.am README TODO acpi_ids.c acpi_ids.h acpid.h
    configure.ac connection_list.h event.c kacpimon/Makefile.am
    kacpimon/makefile proc.h sock.h)
    (Cristian Rodriguez)
  + Fix build warnings uncovered by new gcc settings from autoconf.
    (inotify_handler.c input_layer.c kacpimon/acpi_ids.c kacpimon/acpi_ids.h
    kacpimon/connection_list.c kacpimon/connection_list.h
    kacpimon/input_layer.c kacpimon/kacpimon.c kacpimon/netlink.c netlink.c
    proc.c sock.c)
    (Ted Felix)
  + Remove fcntl() calls to set FD_CLOEXEC and replace with
    CLOEXEC flags within the various open(), recvmsg() and other calls.
    Requires kernel version 2.6.23 and above.
    (acpi_listen.c inotify_handler.c input_layer.c libnetlink.c netlink.c
    proc.c ud_socket.c)
    (Cristian Rodriguez)
  + Add SOCK_NONBLOCK to ud_create_socket().
    (ud_socket.c) (Cristian Rodriguez)
  + Use isfdtype() instead of getsockopt() in is_socket().  Use fchmod(),
    fstat(), and fchown() instead of the non-"f" versions in open_sock().
    (sock.c) (Cristian Rodriguez)
  + Use __attribute__ for argument checking in acpid_log().
    (input_layer.c log.h netlink.c ud_socket.c) (Cristian Rodriguez)
  + Close only the open fds in close_fds().
    (acpid.c) (Cristian Rodriguez)
  + Use accept4() with SOCK_CLOEXEC and SOCK_NONBLOCK in ud_accept().
    Remove unnecessary calls to fcntl() in process_sock().
    (sock.c ud_socket.c) (Cristian Rodriguez)
  + Use asprintf() instead of snprintf() in process_sock().
    (sock.c) (Cristian Rodriguez)
  + Use TEMP_FAILURE_RETRY macro instead of bogus checks for EINTR.
    (acpi_listen.c acpid.c event.c input_layer.c libnetlink.c netlink.c
    proc.c ud_socket.c) (Cristian Rodriguez)
  + Use safer, faster, and more modern functions asprintf(), fstatat(),
    openat(), and fdopen() in the configuration file processing.
    (event.c) (Cristian Rodriguez)
- refreshed patches - acpid-makefile.patch acpid-wrong-memset.patch</changelog>
<changelog author="tabraham@novell.com" date="1333368000">- Update to acpid 2.0.16
  + Add tests for required functions to configure.ac.
    (configure.ac)  (Ted Felix)
  + Move fchmod() before bind() on socket.  Debian bug #664705.
    (sock.c ud_socket.c ud_socket.h)  (Ted Felix)
  + Switch back to chown() as fchown() doesn't appear to work with sockets.
    (sock.c)  (Ted Felix)
  + Add support for headphone (and other) jack switch events.
    (input_layer.c)  (AlexanderR)
  + Add notes on making the tarball.
    (README)  (Ted Felix)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345377600">- Improve systemd unit
  * run in the foreground
  * use netlink only as /proc/acpi files are deprecated.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1348401600">- 2.0.17 release
    (configure.ac)  (Ted Felix)
  - Check for chmod.
    (configure.ac)  (Ted Felix)
  - Add support for tablet mode switch.
    (input_layer.c)  (Fabian Henze)
  - Incorrect sizeof() usage for memset.
    (libnetlink.c)  (Auke Kok)
  - Close some unclosed fd's.
    (acpid.c event.c ud_socket.c)  (Auke Kok)
  - Do not create pid file when running in foreground.
    (acpid.c)  (Cristian Rodriguez)
  - Free regular expression.
    (event.c)  (Cristian Rodriguez)
- acpid-wrong-memset.patch removed, is upstream</changelog>
<changelog author="trenn@suse.de" date="1358251200">-  Catch and process sleep event correctly, even if no X is
  running.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370347200">- 2.0.19 release
- README improvements  (README)  (Ted Felix)
- man page additions  (acpid.8)  (Ted Felix)
    (kacpimon/libnetlink.c)  (Ted Felix)
- Add support for mic mute (KEY_MICMUTE).
    (input_layer.c)  (Ted Felix)
- Fix format of video/tabletmode event string.  CRITICAL.
    (input_layer.c)  (Ted Felix)
- Add how to kill acpid to kacpimon man page.
    (kacpimon.8)  (Ted Felix)
- Add info on logind.conf's HandlePowerKey to man page.
    (acpid.8)  (Ted Felix)
- Remove ExecStop from systemd unit, not required.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1370347201">- Also remove After=syslog.target from unit file (target does
  not exists anymore)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1372852800">- remove obsolete thinkpad_acpi modprobe config (bnc#792172)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1372939200">- remove power and sleep button handlers -- now handled by systemd
  just keep them as examples in the documentation</changelog>
<changelog author="werner@suse.de" date="1375444800">- Use sourceforge download as below http://tedfelix.com/linux/
  the tar ball has been removed</changelog>
<changelog author="mchang@suse.com" date="1376395200">- power_button: iterate systemd-logind sessions and do nothing if a
  active X session found (bnc#810125)</changelog>
<changelog author="oneukum@suse.com" date="1392379200">- Correct pointer at further documentation in README</changelog>

</package>
<package pkgid="caf75514788a204d91ef3c8715a2d9f074fc6d7606bcfa8e0a4d57b3bcdefda4" name="agrep" arch="i586">
    <version epoch="0" ver="0.8.1" rel="17.4.1"/>

<changelog author="dmueller@suse.de" date="1172404800">- Initial package (0.7.5)</changelog>
<changelog author="coolo@suse.de" date="1201176000">- fix build</changelog>
<changelog author="pgajdos@suse.cz" date="1245326400">- updated to 0.7.6 (see NEWS)</changelog>
<changelog author="pgajdos@suse.cz" date="1260446400">- updated to 0.8.0:
  - Added tre_ prefix to all functions exported from libtre.  This
    changes the binary interface (ABI).  The old source interface
    (API) is still available in &lt;tre/regex.h&gt;.  New programs should
    use &lt;tre/tre.h&gt;.
  - Visual C++ 6 project files replaced with Visual Studio 2008 files.
  - Bug fixes.
- package renamed to tre, splitted out subpackage libtre5</changelog>
<changelog author="jengelh@medozas.de" date="1327752000">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags
- Enable pkgconfig provides</changelog>
<changelog author="cfarrell@suse.com" date="1336478400">- license update: BSD-3-Clause
  Package is predominantly BSD-3-Clause licensed. This spec file license
  update makes the openSUSE package license substantially similar to the
  Fedora package license"</changelog>
<changelog author="bjones@ece.msstate.edu" date="1396958400">- Added make check tests
- Added python-tre wrapper
- Used updated source from https://github.com/laurikari/tre/</changelog>

</package>
<package pkgid="874a68e60a713b8931e5975892d2b512aa462b282965a9e15cead3ee4c279f5c" name="agrep" arch="x86_64">
    <version epoch="0" ver="0.8.1" rel="17.4.1"/>

<changelog author="dmueller@suse.de" date="1172404800">- Initial package (0.7.5)</changelog>
<changelog author="coolo@suse.de" date="1201176000">- fix build</changelog>
<changelog author="pgajdos@suse.cz" date="1245326400">- updated to 0.7.6 (see NEWS)</changelog>
<changelog author="pgajdos@suse.cz" date="1260446400">- updated to 0.8.0:
  - Added tre_ prefix to all functions exported from libtre.  This
    changes the binary interface (ABI).  The old source interface
    (API) is still available in &lt;tre/regex.h&gt;.  New programs should
    use &lt;tre/tre.h&gt;.
  - Visual C++ 6 project files replaced with Visual Studio 2008 files.
  - Bug fixes.
- package renamed to tre, splitted out subpackage libtre5</changelog>
<changelog author="jengelh@medozas.de" date="1327752000">- Remove redundant tags/sections per specfile guideline suggestions
- Parallel building using %_smp_mflags
- Enable pkgconfig provides</changelog>
<changelog author="cfarrell@suse.com" date="1336478400">- license update: BSD-3-Clause
  Package is predominantly BSD-3-Clause licensed. This spec file license
  update makes the openSUSE package license substantially similar to the
  Fedora package license"</changelog>
<changelog author="bjones@ece.msstate.edu" date="1396958400">- Added make check tests
- Added python-tre wrapper
- Used updated source from https://github.com/laurikari/tre/</changelog>

</package>
<package pkgid="caeb7d29ace1bdd1d9bcaaba632b98ee5d121dcfd3f9fd9c519bf62d4cc26670" name="aisleriot" arch="i586">
    <version epoch="0" ver="3.10.1" rel="17.9"/>

<changelog author="dimstar@opensuse.org" date="1321876800">- Update to version 3.3.0:
  + Change card theme format
  + Many game fixes
  + Updated translations.
- Drop aisleriot-automagic-guile.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh as
  we don't carry any patch requiring this anymore.
- Pass --with-guile=auto to configure.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1322481600">- Add aisleriot-fix-freecell-exception.patch: Fix trying to make
  the first move in a freecell game generates an exception
  (bnc#730053, bgo#649730).</changelog>
<changelog author="vuntz@opensuse.org" date="1324382400">- Update to version 3.3.1:
  + Aisleriot now requires guile &gt;= 2.0
  + Many improvements and bug fixes
  + Updated translations.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Remove pkgconfig(ice) and pkgconfig(sm) BuildRequires: removed
  upstream.
- Really drop aisleriot-automagic-guile.patch.
- Drop aisleriot-fix-freecell-exception.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1328616000">- Update to version 3.3.2:
  + Misc improvements and bug fixes
  + Updated translations.
- Remove xz BuildRequires now that it comes for free in the build
  system.
- Drop gnome-freecell.png source file and stop manually installing
  a 256x256 icon: it's done upstream now.
- Add sed hack in %prep to work around a bug in yelp-tools that
  caused this tarball to not contain all help translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1330257600">- Change itstool BuildRequires to yelp-tools: this is really what
  is needed for build.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763200">- Remove hack to find localized help: this has been fixed in
  find-lang.sh.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763201">- Update to version 3.4.0:
  + Updated translations.
- Note that we keep the sed hack in %prep for missing translations:
  things are still broken, unfortunately.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763202">- Update to version 3.4.0.1:
  + Updated translations.
- Remove sed hack in %prep for missing translations: fixed
  upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1338811200">- Update to version 3.5.0:
  + Build fixes.
  + Many games fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1345377600">- Update to version 3.5.90:
  + Many games fixes
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Fix help link
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350388800">- Update to version 3.6.1:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1350475200">- Add fdupes buildrequires, and use fdupes macro to get rid of
  duplicate help files.</changelog>
<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 3.6.2:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 3.7.91:
  + Bugs fixed: bgo#588260, bgo#679715, bgo#688525, bgo#695086,
    bgo#695087, bgo#695102.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1368446400">- Update to version 3.8.0:
  + Updated translations.
- Replace dummy-release BuildRequires with suse-release: configure
  uses /etc/os-release to identify the distribution and do some
  sane defaults based on this.</changelog>
<changelog author="zaitor@opensuse.org" date="1375012800">- Update to version 3.9.90:
  + Many game improvements.
  + New card decks.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 3.10.0:
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Updated translations.</changelog>

</package>
<package pkgid="4098011ac8712fbe178d37bb90c1f47c0b8634a60cb9a678aa680c50f6b60336" name="aisleriot" arch="src">
    <version epoch="0" ver="3.10.1" rel="17.9"/>

<changelog author="dimstar@opensuse.org" date="1321876800">- Update to version 3.3.0:
  + Change card theme format
  + Many game fixes
  + Updated translations.
- Drop aisleriot-automagic-guile.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh as
  we don't carry any patch requiring this anymore.
- Pass --with-guile=auto to configure.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1322481600">- Add aisleriot-fix-freecell-exception.patch: Fix trying to make
  the first move in a freecell game generates an exception
  (bnc#730053, bgo#649730).</changelog>
<changelog author="vuntz@opensuse.org" date="1324382400">- Update to version 3.3.1:
  + Aisleriot now requires guile &gt;= 2.0
  + Many improvements and bug fixes
  + Updated translations.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Remove pkgconfig(ice) and pkgconfig(sm) BuildRequires: removed
  upstream.
- Really drop aisleriot-automagic-guile.patch.
- Drop aisleriot-fix-freecell-exception.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1328616000">- Update to version 3.3.2:
  + Misc improvements and bug fixes
  + Updated translations.
- Remove xz BuildRequires now that it comes for free in the build
  system.
- Drop gnome-freecell.png source file and stop manually installing
  a 256x256 icon: it's done upstream now.
- Add sed hack in %prep to work around a bug in yelp-tools that
  caused this tarball to not contain all help translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1330257600">- Change itstool BuildRequires to yelp-tools: this is really what
  is needed for build.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763200">- Remove hack to find localized help: this has been fixed in
  find-lang.sh.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763201">- Update to version 3.4.0:
  + Updated translations.
- Note that we keep the sed hack in %prep for missing translations:
  things are still broken, unfortunately.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763202">- Update to version 3.4.0.1:
  + Updated translations.
- Remove sed hack in %prep for missing translations: fixed
  upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1338811200">- Update to version 3.5.0:
  + Build fixes.
  + Many games fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1345377600">- Update to version 3.5.90:
  + Many games fixes
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Fix help link
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350388800">- Update to version 3.6.1:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1350475200">- Add fdupes buildrequires, and use fdupes macro to get rid of
  duplicate help files.</changelog>
<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 3.6.2:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 3.7.91:
  + Bugs fixed: bgo#588260, bgo#679715, bgo#688525, bgo#695086,
    bgo#695087, bgo#695102.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1368446400">- Update to version 3.8.0:
  + Updated translations.
- Replace dummy-release BuildRequires with suse-release: configure
  uses /etc/os-release to identify the distribution and do some
  sane defaults based on this.</changelog>
<changelog author="zaitor@opensuse.org" date="1375012800">- Update to version 3.9.90:
  + Many game improvements.
  + New card decks.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 3.10.0:
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Updated translations.</changelog>

</package>
<package pkgid="526d1d653b50ac1b1fee1a2d2db85b1e67839b4a7bc23af42d44933512a77e4e" name="aisleriot" arch="x86_64">
    <version epoch="0" ver="3.10.1" rel="17.9"/>

<changelog author="dimstar@opensuse.org" date="1321876800">- Update to version 3.3.0:
  + Change card theme format
  + Many game fixes
  + Updated translations.
- Drop aisleriot-automagic-guile.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh as
  we don't carry any patch requiring this anymore.
- Pass --with-guile=auto to configure.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1322481600">- Add aisleriot-fix-freecell-exception.patch: Fix trying to make
  the first move in a freecell game generates an exception
  (bnc#730053, bgo#649730).</changelog>
<changelog author="vuntz@opensuse.org" date="1324382400">- Update to version 3.3.1:
  + Aisleriot now requires guile &gt;= 2.0
  + Many improvements and bug fixes
  + Updated translations.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Remove pkgconfig(ice) and pkgconfig(sm) BuildRequires: removed
  upstream.
- Really drop aisleriot-automagic-guile.patch.
- Drop aisleriot-fix-freecell-exception.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1328616000">- Update to version 3.3.2:
  + Misc improvements and bug fixes
  + Updated translations.
- Remove xz BuildRequires now that it comes for free in the build
  system.
- Drop gnome-freecell.png source file and stop manually installing
  a 256x256 icon: it's done upstream now.
- Add sed hack in %prep to work around a bug in yelp-tools that
  caused this tarball to not contain all help translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1330257600">- Change itstool BuildRequires to yelp-tools: this is really what
  is needed for build.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763200">- Remove hack to find localized help: this has been fixed in
  find-lang.sh.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763201">- Update to version 3.4.0:
  + Updated translations.
- Note that we keep the sed hack in %prep for missing translations:
  things are still broken, unfortunately.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763202">- Update to version 3.4.0.1:
  + Updated translations.
- Remove sed hack in %prep for missing translations: fixed
  upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1338811200">- Update to version 3.5.0:
  + Build fixes.
  + Many games fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1345377600">- Update to version 3.5.90:
  + Many games fixes
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Fix help link
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350388800">- Update to version 3.6.1:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1350475200">- Add fdupes buildrequires, and use fdupes macro to get rid of
  duplicate help files.</changelog>
<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 3.6.2:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 3.7.91:
  + Bugs fixed: bgo#588260, bgo#679715, bgo#688525, bgo#695086,
    bgo#695087, bgo#695102.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1368446400">- Update to version 3.8.0:
  + Updated translations.
- Replace dummy-release BuildRequires with suse-release: configure
  uses /etc/os-release to identify the distribution and do some
  sane defaults based on this.</changelog>
<changelog author="zaitor@opensuse.org" date="1375012800">- Update to version 3.9.90:
  + Many game improvements.
  + New card decks.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 3.10.0:
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Updated translations.</changelog>

</package>
<package pkgid="f63a48b0e292edba41f54838ef165c8b967574b27d41c7092aebc2fe7a0ce84f" name="aisleriot-lang" arch="noarch">
    <version epoch="0" ver="3.10.1" rel="17.9"/>

<changelog author="dimstar@opensuse.org" date="1321876800">- Update to version 3.3.0:
  + Change card theme format
  + Many game fixes
  + Updated translations.
- Drop aisleriot-automagic-guile.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh as
  we don't carry any patch requiring this anymore.
- Pass --with-guile=auto to configure.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1322481600">- Add aisleriot-fix-freecell-exception.patch: Fix trying to make
  the first move in a freecell game generates an exception
  (bnc#730053, bgo#649730).</changelog>
<changelog author="vuntz@opensuse.org" date="1324382400">- Update to version 3.3.1:
  + Aisleriot now requires guile &gt;= 2.0
  + Many improvements and bug fixes
  + Updated translations.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Remove pkgconfig(ice) and pkgconfig(sm) BuildRequires: removed
  upstream.
- Really drop aisleriot-automagic-guile.patch.
- Drop aisleriot-fix-freecell-exception.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1328616000">- Update to version 3.3.2:
  + Misc improvements and bug fixes
  + Updated translations.
- Remove xz BuildRequires now that it comes for free in the build
  system.
- Drop gnome-freecell.png source file and stop manually installing
  a 256x256 icon: it's done upstream now.
- Add sed hack in %prep to work around a bug in yelp-tools that
  caused this tarball to not contain all help translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1330257600">- Change itstool BuildRequires to yelp-tools: this is really what
  is needed for build.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763200">- Remove hack to find localized help: this has been fixed in
  find-lang.sh.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763201">- Update to version 3.4.0:
  + Updated translations.
- Note that we keep the sed hack in %prep for missing translations:
  things are still broken, unfortunately.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763202">- Update to version 3.4.0.1:
  + Updated translations.
- Remove sed hack in %prep for missing translations: fixed
  upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1338811200">- Update to version 3.5.0:
  + Build fixes.
  + Many games fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1345377600">- Update to version 3.5.90:
  + Many games fixes
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Fix help link
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350388800">- Update to version 3.6.1:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1350475200">- Add fdupes buildrequires, and use fdupes macro to get rid of
  duplicate help files.</changelog>
<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 3.6.2:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 3.7.91:
  + Bugs fixed: bgo#588260, bgo#679715, bgo#688525, bgo#695086,
    bgo#695087, bgo#695102.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1368446400">- Update to version 3.8.0:
  + Updated translations.
- Replace dummy-release BuildRequires with suse-release: configure
  uses /etc/os-release to identify the distribution and do some
  sane defaults based on this.</changelog>
<changelog author="zaitor@opensuse.org" date="1375012800">- Update to version 3.9.90:
  + Many game improvements.
  + New card decks.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 3.10.0:
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Updated translations.</changelog>

</package>
<package pkgid="a41593cbdb8a1a043984b3bf42b586283d7124b0d22e35a07772dcb1f1dc37cb" name="aisleriot-themes" arch="noarch">
    <version epoch="0" ver="3.10.1" rel="17.9"/>

<changelog author="dimstar@opensuse.org" date="1321876800">- Update to version 3.3.0:
  + Change card theme format
  + Many game fixes
  + Updated translations.
- Drop aisleriot-automagic-guile.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh as
  we don't carry any patch requiring this anymore.
- Pass --with-guile=auto to configure.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1322481600">- Add aisleriot-fix-freecell-exception.patch: Fix trying to make
  the first move in a freecell game generates an exception
  (bnc#730053, bgo#649730).</changelog>
<changelog author="vuntz@opensuse.org" date="1324382400">- Update to version 3.3.1:
  + Aisleriot now requires guile &gt;= 2.0
  + Many improvements and bug fixes
  + Updated translations.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Remove pkgconfig(ice) and pkgconfig(sm) BuildRequires: removed
  upstream.
- Really drop aisleriot-automagic-guile.patch.
- Drop aisleriot-fix-freecell-exception.patch: fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1328616000">- Update to version 3.3.2:
  + Misc improvements and bug fixes
  + Updated translations.
- Remove xz BuildRequires now that it comes for free in the build
  system.
- Drop gnome-freecell.png source file and stop manually installing
  a 256x256 icon: it's done upstream now.
- Add sed hack in %prep to work around a bug in yelp-tools that
  caused this tarball to not contain all help translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1330257600">- Change itstool BuildRequires to yelp-tools: this is really what
  is needed for build.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763200">- Remove hack to find localized help: this has been fixed in
  find-lang.sh.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763201">- Update to version 3.4.0:
  + Updated translations.
- Note that we keep the sed hack in %prep for missing translations:
  things are still broken, unfortunately.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763202">- Update to version 3.4.0.1:
  + Updated translations.
- Remove sed hack in %prep for missing translations: fixed
  upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1338811200">- Update to version 3.5.0:
  + Build fixes.
  + Many games fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1345377600">- Update to version 3.5.90:
  + Many games fixes
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Fix help link
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350388800">- Update to version 3.6.1:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1350475200">- Add fdupes buildrequires, and use fdupes macro to get rid of
  duplicate help files.</changelog>
<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 3.6.2:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 3.7.91:
  + Bugs fixed: bgo#588260, bgo#679715, bgo#688525, bgo#695086,
    bgo#695087, bgo#695102.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1368446400">- Update to version 3.8.0:
  + Updated translations.
- Replace dummy-release BuildRequires with suse-release: configure
  uses /etc/os-release to identify the distribution and do some
  sane defaults based on this.</changelog>
<changelog author="zaitor@opensuse.org" date="1375012800">- Update to version 3.9.90:
  + Many game improvements.
  + New card decks.
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 3.10.0:
  + Build fixes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Updated translations.</changelog>

</package>
<package pkgid="39a1a4bba747f5f5b445f9fb43249c8288073533924641067f30d0bf281e8cc9" name="akonadi" arch="i586">
    <version epoch="0" ver="4.11.3" rel="48.4"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="2b67fbaeaba1d7a383f6b64ce4cb24c2d099774c23d5985ce11e26e9c8cd56a6" name="akonadi" arch="i586">
    <version epoch="0" ver="4.11.4" rel="444.11"/>

<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>

</package>
<package pkgid="148de235c685d7957b88f395a11b97e8b958ce7fa1425b1f44ac04d98fbf031f" name="akonadi" arch="i586">
    <version epoch="0" ver="4.11.5" rel="460.5"/>

<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>

</package>
<package pkgid="13f38567117e0143a353b9549b9a70df4a0da031c8edc622596a58d4628a7032" name="akonadi" arch="i586">
    <version epoch="0" ver="4.11.5" rel="464.1"/>

<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>
<changelog author="ctrippe@opensuse.org" date="1397390400">- make it possible to manually select untrusted PGP keys
  (bnc#859984, kde#328311); added patch pgp_key_select.diff</changelog>

</package>
<package pkgid="0cf3bc28d9b5e3908acab0f26fa3474561bf51b7427c65b9161860f49e12debb" name="akonadi" arch="i586">
    <version epoch="0" ver="4.11.5" rel="468.2"/>

<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>
<changelog author="ctrippe@opensuse.org" date="1397390400">- make it possible to manually select untrusted PGP keys
  (bnc#859984, kde#328311); added patch pgp_key_select.diff</changelog>
<changelog author="ctrippe@opensuse.org" date="1399464000">- Fixes a bug, when the task name field is empty in the ktimetracker
  histroy dialog (bnc#876316, kde#308923);
  added patch ktimetracker_task_name_field_in_histroy.diff</changelog>

</package>
<package pkgid="d01257ed1482997a0a4e66ad172b3d7cb3b1c8028778b5583edbcced2d02a430" name="akonadi" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="48.4"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="d61a9b3d22d7cb3dddfff39d20f025b72df94177211a0c732dca9073f5f75b9a" name="akonadi" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="444.11"/>

<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>

</package>
<package pkgid="8f0fd3184bf505f35ceecfb4ba692b7ecfb6e11e82563a4ad87258bed9c0e627" name="akonadi" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="460.5"/>

<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>

</package>
<package pkgid="7a965c6ba24029f675e5b0fea528668decf12159899b878d105788400636a483" name="akonadi" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="464.1"/>

<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>
<changelog author="ctrippe@opensuse.org" date="1397390400">- make it possible to manually select untrusted PGP keys
  (bnc#859984, kde#328311); added patch pgp_key_select.diff</changelog>

</package>
<package pkgid="dbcc5770505bc39fe7e8edcf11fc2829cc001014d54fb0fe8199b2a23f5d6825" name="akonadi" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="468.2"/>

<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>
<changelog author="ctrippe@opensuse.org" date="1397390400">- make it possible to manually select untrusted PGP keys
  (bnc#859984, kde#328311); added patch pgp_key_select.diff</changelog>
<changelog author="ctrippe@opensuse.org" date="1399464000">- Fixes a bug, when the task name field is empty in the ktimetracker
  histroy dialog (bnc#876316, kde#308923);
  added patch ktimetracker_task_name_field_in_histroy.diff</changelog>

</package>
<package pkgid="404f1a4c022f201a54e60fae5a35d23ecaaea2992e384815eafacd6d1098622b" name="akonadi-runtime" arch="i586">
    <version epoch="0" ver="1.10.3" rel="7.1"/>

<changelog author="coolo@suse.com" date="1319025600">- switch back to mysql default backend (bnc#718367)</changelog>
<changelog author="dmueller@suse.de" date="1325505600">- update to 1.6.90 (1.7 RC1):
  - Support for PostgreSQL &gt;= 9.
  - Improve RFC 3501 compatibility in LOGIN and non-silent SELECT commands.
  - Add support for running multiple instance concurrently in the same user session.
  - Update agent interface to include collectionTreeSynchronized signal.
  - Add consistency checker system.
  - Add support for database vacuuming.
  - Various optimizations to reduce the number of SQL queries.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1327320000">- Update to 1.7.0
  - Fix search result retrieval from Nepomuk.
  - Support for PostgreSQL &gt;= 9.
  - Improve RFC 3501 compatibility in LOGIN and non-silent SELECT commands.
  - Add support for running multiple instance concurrently in the same user session.
  - Update agent interface to include collectionTreeSynchronized signal.
  - Add consistency checker system.
  - Add support for database vacuuming.
  - Various optimizations to reduce the number of SQL queries.</changelog>
<changelog author="idonmez@suse.com" date="1331121600">- Update to 1.7.1
  * Don't truncate SPARQL queries in virtual collections.
  * Optimize change notifications for deleted collection attributes.
  * Fix possible data loss during item copy/move operations.</changelog>
<changelog author="kruber@zib.de" date="1334750400">- Update to 1.7.2
  * Fix and optimize searching via Nepomuk.</changelog>
<changelog author="dmueller@suse.com" date="1341576000">- fix build failure with gcc41</changelog>
<changelog author="toddrme2178@gmail.com" date="1342785600">- Update to 1.7.95
  * Fix Nepomuk queries getting stuck if Nepomuk service crashes.
  * Fix unecessary remote retrieval of already cached item parts.
  * Reset RID/RREV during cross-resource collection moves.
  * Increase timeout for remote item retrieval.
- Update to 1.7.90
  * Fix handling of large SPARQL queries.
  * Support cleanup of orphaned resources in the consistency checker.
  * Support compilation with Clang.
- Rebased patch</changelog>
<changelog author="toddrme2178@gmail.com" date="1343736000">- Update to 1.8.0
  * Fix deadlock in ad-hoc Nepomuk searches.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to akonadi 1.8.1
  * Fix payload loss on some move/copy scenarios.
  * Improve error reporting for failed item retrievals.</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1353758400">- Update to 1.9beta1
  * Recover from lost external payload files.
  * Improve the virtual collections handling.
  * Many code and queries optimizations.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1353844800">- Only require mysql on SLES.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1356609600">- Update to 1.9.0
  * Respect collection cache policy refresh interval for collection tree sync.
  * Fix initialization of PostgreSQL database.
  * Correctly count items flags in virtual collections.
  * Notify parent virtual collections about item changes.
  * Require CMake &gt;= 2.8.8.
  * Remove dependency to Automoc4.
  * Support Qt 5.
- Remove automoc4 BuildRequires</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367841600">- Update to 1.9.2
  * Add option to FETCH to ignore external retrieval failures.
  * Properly restrict external payload removal.
  * Add buildsystem option to choose between Qt4 and Qt5.
  * Changes from version 1.9.1:
  * Disable query cache for Sqlite.
  * Handle missing mysqld better.
  * Ignore my.cnf settings when using the internal MySQL server.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1370606400">- Add mysql56.diff
  Renames an option that was removed in MySQL &gt;= 5.6 (kde#319016)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371124800">- Update to 1.9.80
  * Update item access time less often.
  * Don't try to start akonadiserver if mysqld is not installed
  * Allow to fetch available items even if there are errors in
    some of the items.
  * Properly restrict the external part removal to the deleted
    collection.
  * Support checking the cache for payloads in the FETCH command.
  * Add infrastructure to track client capabilities.
  * Allow to disable the cache verification on retrieval.
  * fsck: move orphaned pim items to lost+found, delete orphaned
    pim item flags.
  * Introduce NotificationMessageV2 that supports batch operations
    on set of entities.
  * Fix build with Boost &gt;= 1.53.
  * Fix a runtime issue with MySQL &gt;= 5.6 (MySQL &gt;= 5.1.3 is now
    the minimum version).
- Drop mysql56.diff, patch is included in this release</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373371200">- Update to 1.10.0
  * Memory optimizations
  * Fix a runtime error on Windows</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 1.10.2
  * Fix PostgreSQL support (once more)
  * Changes from version 1.10.1:
  * Fix PostgreSQL support
  * Optimize appending flags to items
  * Introduce CHANGEDSINCE parameter to FETCH command</changelog>
<changelog author="coolo@suse.com" date="1375358400">- openSUSE defaults to mariadb, so let's do the same</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Update to 1.10.3
  * Fix support for latest PostgreSQL
  * Check MySQL version at runtime, require at least 5.1
  * Fix crash when destroying DataStore with backends other than MySQL
  * Fix problem with too long socket paths
  * Send dummy queries to MySQL to keep the connection alive
  * Fix crash when no flags are changed
  * For more details see:
    http://www.progdan.cz/2013/10/akonadi-1-10-3-with-postgresql-fix/</changelog>

</package>
<package pkgid="905e3e622e50cf3a959c6085214407a0cea23e5b949f26b4957bbe1f5da2d677" name="akonadi-runtime" arch="src">
    <version epoch="0" ver="1.10.3" rel="7.1"/>

<changelog author="coolo@suse.com" date="1319025600">- switch back to mysql default backend (bnc#718367)</changelog>
<changelog author="dmueller@suse.de" date="1325505600">- update to 1.6.90 (1.7 RC1):
  - Support for PostgreSQL &gt;= 9.
  - Improve RFC 3501 compatibility in LOGIN and non-silent SELECT commands.
  - Add support for running multiple instance concurrently in the same user session.
  - Update agent interface to include collectionTreeSynchronized signal.
  - Add consistency checker system.
  - Add support for database vacuuming.
  - Various optimizations to reduce the number of SQL queries.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1327320000">- Update to 1.7.0
  - Fix search result retrieval from Nepomuk.
  - Support for PostgreSQL &gt;= 9.
  - Improve RFC 3501 compatibility in LOGIN and non-silent SELECT commands.
  - Add support for running multiple instance concurrently in the same user session.
  - Update agent interface to include collectionTreeSynchronized signal.
  - Add consistency checker system.
  - Add support for database vacuuming.
  - Various optimizations to reduce the number of SQL queries.</changelog>
<changelog author="idonmez@suse.com" date="1331121600">- Update to 1.7.1
  * Don't truncate SPARQL queries in virtual collections.
  * Optimize change notifications for deleted collection attributes.
  * Fix possible data loss during item copy/move operations.</changelog>
<changelog author="kruber@zib.de" date="1334750400">- Update to 1.7.2
  * Fix and optimize searching via Nepomuk.</changelog>
<changelog author="dmueller@suse.com" date="1341576000">- fix build failure with gcc41</changelog>
<changelog author="toddrme2178@gmail.com" date="1342785600">- Update to 1.7.95
  * Fix Nepomuk queries getting stuck if Nepomuk service crashes.
  * Fix unecessary remote retrieval of already cached item parts.
  * Reset RID/RREV during cross-resource collection moves.
  * Increase timeout for remote item retrieval.
- Update to 1.7.90
  * Fix handling of large SPARQL queries.
  * Support cleanup of orphaned resources in the consistency checker.
  * Support compilation with Clang.
- Rebased patch</changelog>
<changelog author="toddrme2178@gmail.com" date="1343736000">- Update to 1.8.0
  * Fix deadlock in ad-hoc Nepomuk searches.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to akonadi 1.8.1
  * Fix payload loss on some move/copy scenarios.
  * Improve error reporting for failed item retrievals.</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1353758400">- Update to 1.9beta1
  * Recover from lost external payload files.
  * Improve the virtual collections handling.
  * Many code and queries optimizations.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1353844800">- Only require mysql on SLES.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1356609600">- Update to 1.9.0
  * Respect collection cache policy refresh interval for collection tree sync.
  * Fix initialization of PostgreSQL database.
  * Correctly count items flags in virtual collections.
  * Notify parent virtual collections about item changes.
  * Require CMake &gt;= 2.8.8.
  * Remove dependency to Automoc4.
  * Support Qt 5.
- Remove automoc4 BuildRequires</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367841600">- Update to 1.9.2
  * Add option to FETCH to ignore external retrieval failures.
  * Properly restrict external payload removal.
  * Add buildsystem option to choose between Qt4 and Qt5.
  * Changes from version 1.9.1:
  * Disable query cache for Sqlite.
  * Handle missing mysqld better.
  * Ignore my.cnf settings when using the internal MySQL server.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1370606400">- Add mysql56.diff
  Renames an option that was removed in MySQL &gt;= 5.6 (kde#319016)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371124800">- Update to 1.9.80
  * Update item access time less often.
  * Don't try to start akonadiserver if mysqld is not installed
  * Allow to fetch available items even if there are errors in
    some of the items.
  * Properly restrict the external part removal to the deleted
    collection.
  * Support checking the cache for payloads in the FETCH command.
  * Add infrastructure to track client capabilities.
  * Allow to disable the cache verification on retrieval.
  * fsck: move orphaned pim items to lost+found, delete orphaned
    pim item flags.
  * Introduce NotificationMessageV2 that supports batch operations
    on set of entities.
  * Fix build with Boost &gt;= 1.53.
  * Fix a runtime issue with MySQL &gt;= 5.6 (MySQL &gt;= 5.1.3 is now
    the minimum version).
- Drop mysql56.diff, patch is included in this release</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373371200">- Update to 1.10.0
  * Memory optimizations
  * Fix a runtime error on Windows</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 1.10.2
  * Fix PostgreSQL support (once more)
  * Changes from version 1.10.1:
  * Fix PostgreSQL support
  * Optimize appending flags to items
  * Introduce CHANGEDSINCE parameter to FETCH command</changelog>
<changelog author="coolo@suse.com" date="1375358400">- openSUSE defaults to mariadb, so let's do the same</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Update to 1.10.3
  * Fix support for latest PostgreSQL
  * Check MySQL version at runtime, require at least 5.1
  * Fix crash when destroying DataStore with backends other than MySQL
  * Fix problem with too long socket paths
  * Send dummy queries to MySQL to keep the connection alive
  * Fix crash when no flags are changed
  * For more details see:
    http://www.progdan.cz/2013/10/akonadi-1-10-3-with-postgresql-fix/</changelog>

</package>
<package pkgid="51e36801f1a8c1838b72c9234c04e4987443072bb84fcc07d693a5a44bd621ed" name="akonadi-runtime" arch="x86_64">
    <version epoch="0" ver="1.10.3" rel="7.1"/>

<changelog author="coolo@suse.com" date="1319025600">- switch back to mysql default backend (bnc#718367)</changelog>
<changelog author="dmueller@suse.de" date="1325505600">- update to 1.6.90 (1.7 RC1):
  - Support for PostgreSQL &gt;= 9.
  - Improve RFC 3501 compatibility in LOGIN and non-silent SELECT commands.
  - Add support for running multiple instance concurrently in the same user session.
  - Update agent interface to include collectionTreeSynchronized signal.
  - Add consistency checker system.
  - Add support for database vacuuming.
  - Various optimizations to reduce the number of SQL queries.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1327320000">- Update to 1.7.0
  - Fix search result retrieval from Nepomuk.
  - Support for PostgreSQL &gt;= 9.
  - Improve RFC 3501 compatibility in LOGIN and non-silent SELECT commands.
  - Add support for running multiple instance concurrently in the same user session.
  - Update agent interface to include collectionTreeSynchronized signal.
  - Add consistency checker system.
  - Add support for database vacuuming.
  - Various optimizations to reduce the number of SQL queries.</changelog>
<changelog author="idonmez@suse.com" date="1331121600">- Update to 1.7.1
  * Don't truncate SPARQL queries in virtual collections.
  * Optimize change notifications for deleted collection attributes.
  * Fix possible data loss during item copy/move operations.</changelog>
<changelog author="kruber@zib.de" date="1334750400">- Update to 1.7.2
  * Fix and optimize searching via Nepomuk.</changelog>
<changelog author="dmueller@suse.com" date="1341576000">- fix build failure with gcc41</changelog>
<changelog author="toddrme2178@gmail.com" date="1342785600">- Update to 1.7.95
  * Fix Nepomuk queries getting stuck if Nepomuk service crashes.
  * Fix unecessary remote retrieval of already cached item parts.
  * Reset RID/RREV during cross-resource collection moves.
  * Increase timeout for remote item retrieval.
- Update to 1.7.90
  * Fix handling of large SPARQL queries.
  * Support cleanup of orphaned resources in the consistency checker.
  * Support compilation with Clang.
- Rebased patch</changelog>
<changelog author="toddrme2178@gmail.com" date="1343736000">- Update to 1.8.0
  * Fix deadlock in ad-hoc Nepomuk searches.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to akonadi 1.8.1
  * Fix payload loss on some move/copy scenarios.
  * Improve error reporting for failed item retrievals.</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1353758400">- Update to 1.9beta1
  * Recover from lost external payload files.
  * Improve the virtual collections handling.
  * Many code and queries optimizations.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1353844800">- Only require mysql on SLES.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1356609600">- Update to 1.9.0
  * Respect collection cache policy refresh interval for collection tree sync.
  * Fix initialization of PostgreSQL database.
  * Correctly count items flags in virtual collections.
  * Notify parent virtual collections about item changes.
  * Require CMake &gt;= 2.8.8.
  * Remove dependency to Automoc4.
  * Support Qt 5.
- Remove automoc4 BuildRequires</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367841600">- Update to 1.9.2
  * Add option to FETCH to ignore external retrieval failures.
  * Properly restrict external payload removal.
  * Add buildsystem option to choose between Qt4 and Qt5.
  * Changes from version 1.9.1:
  * Disable query cache for Sqlite.
  * Handle missing mysqld better.
  * Ignore my.cnf settings when using the internal MySQL server.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1370606400">- Add mysql56.diff
  Renames an option that was removed in MySQL &gt;= 5.6 (kde#319016)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371124800">- Update to 1.9.80
  * Update item access time less often.
  * Don't try to start akonadiserver if mysqld is not installed
  * Allow to fetch available items even if there are errors in
    some of the items.
  * Properly restrict the external part removal to the deleted
    collection.
  * Support checking the cache for payloads in the FETCH command.
  * Add infrastructure to track client capabilities.
  * Allow to disable the cache verification on retrieval.
  * fsck: move orphaned pim items to lost+found, delete orphaned
    pim item flags.
  * Introduce NotificationMessageV2 that supports batch operations
    on set of entities.
  * Fix build with Boost &gt;= 1.53.
  * Fix a runtime issue with MySQL &gt;= 5.6 (MySQL &gt;= 5.1.3 is now
    the minimum version).
- Drop mysql56.diff, patch is included in this release</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373371200">- Update to 1.10.0
  * Memory optimizations
  * Fix a runtime error on Windows</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 1.10.2
  * Fix PostgreSQL support (once more)
  * Changes from version 1.10.1:
  * Fix PostgreSQL support
  * Optimize appending flags to items
  * Introduce CHANGEDSINCE parameter to FETCH command</changelog>
<changelog author="coolo@suse.com" date="1375358400">- openSUSE defaults to mariadb, so let's do the same</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Update to 1.10.3
  * Fix support for latest PostgreSQL
  * Check MySQL version at runtime, require at least 5.1
  * Fix crash when destroying DataStore with backends other than MySQL
  * Fix problem with too long socket paths
  * Send dummy queries to MySQL to keep the connection alive
  * Fix crash when no flags are changed
  * For more details see:
    http://www.progdan.cz/2013/10/akonadi-1-10-3-with-postgresql-fix/</changelog>

</package>
<package pkgid="13064ccdae6663c513c75259a8be254e99cc87746b69eee97dea1724f0130575" name="akregator" arch="i586">
    <version epoch="0" ver="4.11.3" rel="48.4"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="06f10c3dc7329f54972a17b788c101b97aed5684b443c8b8597ede5816b0225c" name="akregator" arch="i586">
    <version epoch="0" ver="4.11.4" rel="444.11"/>

<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>

</package>
<package pkgid="f5c68831c2af9c76ed0a83ab45d98464fb343136677a6ff6bf12c2e9f3be055f" name="akregator" arch="i586">
    <version epoch="0" ver="4.11.5" rel="460.5"/>

<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>

</package>
<package pkgid="146bca6978dc0177bada60ddd1443e9b12f45f691bb852b6861fa9ca92ca8c68" name="akregator" arch="i586">
    <version epoch="0" ver="4.11.5" rel="464.1"/>

<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>
<changelog author="ctrippe@opensuse.org" date="1397390400">- make it possible to manually select untrusted PGP keys
  (bnc#859984, kde#328311); added patch pgp_key_select.diff</changelog>

</package>
<package pkgid="33f637a342287398bf0cf432b78b7bf9e10701e50362741a38cfdb494c17da53" name="akregator" arch="i586">
    <version epoch="0" ver="4.11.5" rel="468.2"/>

<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>
<changelog author="ctrippe@opensuse.org" date="1397390400">- make it possible to manually select untrusted PGP keys
  (bnc#859984, kde#328311); added patch pgp_key_select.diff</changelog>
<changelog author="ctrippe@opensuse.org" date="1399464000">- Fixes a bug, when the task name field is empty in the ktimetracker
  histroy dialog (bnc#876316, kde#308923);
  added patch ktimetracker_task_name_field_in_histroy.diff</changelog>

</package>
<package pkgid="bece15239321d034a701d907e97c8a17cab3a06410ea4f203f5941fed2fa84ae" name="akregator" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="48.4"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="9a70b56a462e0e91fff2fb182c8aef349991c0f7c58ca63c92c70bdb89a036df" name="akregator" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="444.11"/>

<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>

</package>
<package pkgid="60c2fca81738f9d8f49206cf6cbd4d2bf46835b8f5891a8839239662f6d781c7" name="akregator" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="460.5"/>

<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>

</package>
<package pkgid="c38af7c6d6891d36643929d3346352def6f97b216a77b899d050faa78d7c31f7" name="akregator" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="464.1"/>

<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>
<changelog author="ctrippe@opensuse.org" date="1397390400">- make it possible to manually select untrusted PGP keys
  (bnc#859984, kde#328311); added patch pgp_key_select.diff</changelog>

</package>
<package pkgid="a24d8dc2a0027283af338a7cd8518f0331a72ecbe82ac0425f1fe01504210c98" name="akregator" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="468.2"/>

<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>
<changelog author="ctrippe@opensuse.org" date="1397390400">- make it possible to manually select untrusted PGP keys
  (bnc#859984, kde#328311); added patch pgp_key_select.diff</changelog>
<changelog author="ctrippe@opensuse.org" date="1399464000">- Fixes a bug, when the task name field is empty in the ktimetracker
  histroy dialog (bnc#876316, kde#308923);
  added patch ktimetracker_task_name_field_in_histroy.diff</changelog>

</package>
<package pkgid="170d2c7dd59301edc4abe3a97e4949ea83c90bab8f67246fc03b1517ffa96622" name="alsa" arch="i586">
    <version epoch="0" ver="1.0.27.2" rel="3.5.1"/>

<changelog author="tiwai@suse.de" date="1340884800">- Use a special modprobe config for loading OSS and sequencer
  modules automatically (bnc#768361,bnc#768352,bnc#757484,
  bnc#767738)
- Remove the automatic module loading part from alsasound init
  script since modprobe does it now
- Set LOAD_SEQUENCER=no and LOAD_OSS_EMUL_MODULES=no as default;
  these were already disabled on 12.1 with systemd.
  This is only for new installations.  Users upgrading from old
  distros aren't affected.</changelog>
<changelog author="tiwai@suse.de" date="1341489600">- Fix useless assert in hctl, backport from upstream</changelog>
<changelog author="tiwai@suse.de" date="1347019200">- Updated to version 1.0.26:
  * just including all previous patches</changelog>
<changelog author="tiwai@suse.de" date="1350475200">- backport from upstream tree:
  * lots of patches to support the new chmap API
  * fix segfault in rate plugin error path
  * add a couple of test programs
  * fix inifinte loop in htimestamp of dmix &amp; co</changelog>
<changelog author="tiwai@suse.de" date="1352808000">- backport fixes from upstream tree:
  0031-pcm-support-for-audio-timestamps.patch
  0032-pcm-fix-64-bit-SNDRV_PCM_IOCTL_STATUS-ABI-breakage.patch
  0033-PCM-Fix-memory-leak-for-pcm-empty-and-asym-plugins.patch
  0034-Reduce-compilation-warnings.patch
  0035-PCM-Avoid-busy-loop-in-snd_pcm_write_areas-with-rate.patch</changelog>
<changelog author="tiwai@suse.de" date="1354190400">- backport UAPI header fix, chmap extension and comiple warning fix
  0036-Merge-kernel-uapi-sound-asound.h-and-asequencer.h.patch
  0037-PCM-Add-more-chmap-definitions-for-UAC2.patch
  0038-PCM-shut-up-a-compile-unused-parameter-compile-warni.patch
  0039-Add-workaround-for-conflicting-snd_seq_event_t-defin.patch</changelog>
<changelog author="tiwai@suse.de" date="1354622400">- 0040-PCM-Fix-conflict-of-_snd_pcm_hw_params-definitions.patch:
  fix the segfault due to the symbol conflict of _snd_pcm_hw_params</changelog>
<changelog author="tiwai@suse.de" date="1355400000">- 0041-configure-Quite-AM_CONDITIONAL-arguments.patch:
  Fix for the recent automake conditionals
- 0042-mixer-Don-t-build-simple_abst-when-no-libdl-is-avail.patch:
  Minor fix for the build without libdl
- Fix endian check breakage due to the recent UAPI header move:
  0043-Fix-endian-check-in-local.h.patch</changelog>
<changelog author="tiwai@suse.de" date="1359720000">- Backport a few fix patches from upstream, mostly for fixing
  crashes in multi-thread programs:
  0044-configure-do-not-detect-incorrect-cross-compiler.patch
  0045-ucm-Set-uc_mgr-ctl-to-NULL-after-closing-it.patch
  0046-snd_pcm_direct_parse_open_conf-use-thread-safe-getgr.patch
  0047-Add-snd_lib_error_set_local-to-install-a-thread-loca.patch
  0048-snd_device_name_hint-do-not-change-the-global-error-.patch
  0049-snd_device_name_hint-do-not-use-global-snd_config.patch
  0050-conf-Fix-a-memory-access-violation-resulting-from-im.patch</changelog>
<changelog author="tiwai@suse.de" date="1363003200">- More backports of fix patches from upstream:
  0051-Add-sys-types.h-to-include-list.patch
  0052-control-Simplify-using-snd_config_get_bool.patch
  0053-Add-workaround-for-conflicting-IEC958-controls-for-H.patch
  0054-snd_mixer_poll_descriptors_revents-should-loop-over-.patch</changelog>
<changelog author="tiwai@suse.de" date="1365163200">- Backport upstream fix patches:
  0055-pcm-fix-and-optimize-snd_pcm_areas_copy-function.patch
  0056-USB-audio-Add-HP-Digital-Stereo-Headset-to-SPDIF-bla.patch
  0057-pcm-fix-typo-should-be-SND_PCM_STATE_PREPARED.patch
- Fix typos in comments in joystick script (bnc#805765)</changelog>
<changelog author="tiwai@suse.de" date="1365508800">- Backport upstream fixes:
  0058-control-pcm-implement-snd_ctl_abort-and-snd_pcm_abor.patch
  0059-all-places-doxygen-cleanups.patch
  0060-pcm-direct-plugins-do-more-safe-IPC-semaphore-handli.patch
- Fix segfault with openal-soft (bnc#814250):
  0061-Clean-up-dlobj-cache-only-when-no-user-is-present.patch
  0062-Optimize-NULL-check-in-snd_dlobj_cache_put.patch</changelog>
<changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  including all previous fixes; all 00*-* patches dropped</changelog>
<changelog author="tiwai@suse.de" date="1366891200">- Upstream fix for dlobj cache crash (bnc#814250)
  0001-Fix-doubly-call-of-dlclose-in-dlobj-caching-code.patch
- Upstream patches for support DSD
  0002-pcm.c-fix-indentation.patch
  0003-bring-pcm.h-and-pcm.c-in-sync-with-the-kernel-list.patch
- Fix compile errors with C90 (bnc#817077)
  0004-Use-__inline__-for-exported-headers.patch
  0005-Add-definition-of-__inline__-for-non-GCC.patch</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Bump to version 1.0.27.1, including previous fixes, USB config
  quirks, addition of UCM configs and other misc fix patches
- Backport upstream fixes:
  0001-pcm-Fix-typo-in-documentation-PREPARE-PREPARED.patch
  0002-ucm-Fix-segfault-when-device-argument-is-missing-fro.patch</changelog>
<changelog author="tiwai@suse.de" date="1371470400">- Backport upstream fixes for plug-in API rewind, a possible memory
  leak in direct plugins, chmap buffer overflow and some segfaults:
  0003-Allow-specifying-the-max-number-of-cards.patch
  0004-pcm_hw-Remove-unused-fields-in-struct.patch
  0005-pcm_plugin-Fix-return-value-of-snd_pcm_rewind.patch
  0006-pcm_direct-fix-the-memory-leak-when-parsing-the-slav.patch
  0007-chmap-Always-succeed-setting-the-map-to-what-it-alre.patch
  0008-pcm_hw-Fix-buffer-overflow-in-chmap.patch
  0009-pcm_direct-fix-SEGFAULT-when-getgrnam_r-returns-0-an.patch</changelog>
<changelog author="tiwai@suse.de" date="1373371200">- updated to version 1.0.27.2:
  just version bump, including all previous fixes</changelog>
<changelog author="tiwai@suse.de" date="1378468800">- Backport upstream fixes:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch</changelog>
<changelog author="tiwai@suse.de" date="1380628800">- Backport upstream fixes: namehints double-free fix, expansion of
  more HDMI devices, and a fix for dB conversion
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch</changelog>
<changelog author="tiwai@suse.de" date="1385553600">- Fix aborting in races at closing dmix streams (bnc#852446):
  0019-dmix-Don-t-use-assert-and-abort.patch</changelog>

</package>
<package pkgid="7414570ec8ee8df1976dac27b215445fa1978f94f58ccf4e27613ff29e986be1" name="alsa" arch="src">
    <version epoch="0" ver="1.0.27.2" rel="3.5.1"/>

<changelog author="tiwai@suse.de" date="1340884800">- Use a special modprobe config for loading OSS and sequencer
  modules automatically (bnc#768361,bnc#768352,bnc#757484,
  bnc#767738)
- Remove the automatic module loading part from alsasound init
  script since modprobe does it now
- Set LOAD_SEQUENCER=no and LOAD_OSS_EMUL_MODULES=no as default;
  these were already disabled on 12.1 with systemd.
  This is only for new installations.  Users upgrading from old
  distros aren't affected.</changelog>
<changelog author="tiwai@suse.de" date="1341489600">- Fix useless assert in hctl, backport from upstream</changelog>
<changelog author="tiwai@suse.de" date="1347019200">- Updated to version 1.0.26:
  * just including all previous patches</changelog>
<changelog author="tiwai@suse.de" date="1350475200">- backport from upstream tree:
  * lots of patches to support the new chmap API
  * fix segfault in rate plugin error path
  * add a couple of test programs
  * fix inifinte loop in htimestamp of dmix &amp; co</changelog>
<changelog author="tiwai@suse.de" date="1352808000">- backport fixes from upstream tree:
  0031-pcm-support-for-audio-timestamps.patch
  0032-pcm-fix-64-bit-SNDRV_PCM_IOCTL_STATUS-ABI-breakage.patch
  0033-PCM-Fix-memory-leak-for-pcm-empty-and-asym-plugins.patch
  0034-Reduce-compilation-warnings.patch
  0035-PCM-Avoid-busy-loop-in-snd_pcm_write_areas-with-rate.patch</changelog>
<changelog author="tiwai@suse.de" date="1354190400">- backport UAPI header fix, chmap extension and comiple warning fix
  0036-Merge-kernel-uapi-sound-asound.h-and-asequencer.h.patch
  0037-PCM-Add-more-chmap-definitions-for-UAC2.patch
  0038-PCM-shut-up-a-compile-unused-parameter-compile-warni.patch
  0039-Add-workaround-for-conflicting-snd_seq_event_t-defin.patch</changelog>
<changelog author="tiwai@suse.de" date="1354622400">- 0040-PCM-Fix-conflict-of-_snd_pcm_hw_params-definitions.patch:
  fix the segfault due to the symbol conflict of _snd_pcm_hw_params</changelog>
<changelog author="tiwai@suse.de" date="1355400000">- 0041-configure-Quite-AM_CONDITIONAL-arguments.patch:
  Fix for the recent automake conditionals
- 0042-mixer-Don-t-build-simple_abst-when-no-libdl-is-avail.patch:
  Minor fix for the build without libdl
- Fix endian check breakage due to the recent UAPI header move:
  0043-Fix-endian-check-in-local.h.patch</changelog>
<changelog author="tiwai@suse.de" date="1359720000">- Backport a few fix patches from upstream, mostly for fixing
  crashes in multi-thread programs:
  0044-configure-do-not-detect-incorrect-cross-compiler.patch
  0045-ucm-Set-uc_mgr-ctl-to-NULL-after-closing-it.patch
  0046-snd_pcm_direct_parse_open_conf-use-thread-safe-getgr.patch
  0047-Add-snd_lib_error_set_local-to-install-a-thread-loca.patch
  0048-snd_device_name_hint-do-not-change-the-global-error-.patch
  0049-snd_device_name_hint-do-not-use-global-snd_config.patch
  0050-conf-Fix-a-memory-access-violation-resulting-from-im.patch</changelog>
<changelog author="tiwai@suse.de" date="1363003200">- More backports of fix patches from upstream:
  0051-Add-sys-types.h-to-include-list.patch
  0052-control-Simplify-using-snd_config_get_bool.patch
  0053-Add-workaround-for-conflicting-IEC958-controls-for-H.patch
  0054-snd_mixer_poll_descriptors_revents-should-loop-over-.patch</changelog>
<changelog author="tiwai@suse.de" date="1365163200">- Backport upstream fix patches:
  0055-pcm-fix-and-optimize-snd_pcm_areas_copy-function.patch
  0056-USB-audio-Add-HP-Digital-Stereo-Headset-to-SPDIF-bla.patch
  0057-pcm-fix-typo-should-be-SND_PCM_STATE_PREPARED.patch
- Fix typos in comments in joystick script (bnc#805765)</changelog>
<changelog author="tiwai@suse.de" date="1365508800">- Backport upstream fixes:
  0058-control-pcm-implement-snd_ctl_abort-and-snd_pcm_abor.patch
  0059-all-places-doxygen-cleanups.patch
  0060-pcm-direct-plugins-do-more-safe-IPC-semaphore-handli.patch
- Fix segfault with openal-soft (bnc#814250):
  0061-Clean-up-dlobj-cache-only-when-no-user-is-present.patch
  0062-Optimize-NULL-check-in-snd_dlobj_cache_put.patch</changelog>
<changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  including all previous fixes; all 00*-* patches dropped</changelog>
<changelog author="tiwai@suse.de" date="1366891200">- Upstream fix for dlobj cache crash (bnc#814250)
  0001-Fix-doubly-call-of-dlclose-in-dlobj-caching-code.patch
- Upstream patches for support DSD
  0002-pcm.c-fix-indentation.patch
  0003-bring-pcm.h-and-pcm.c-in-sync-with-the-kernel-list.patch
- Fix compile errors with C90 (bnc#817077)
  0004-Use-__inline__-for-exported-headers.patch
  0005-Add-definition-of-__inline__-for-non-GCC.patch</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Bump to version 1.0.27.1, including previous fixes, USB config
  quirks, addition of UCM configs and other misc fix patches
- Backport upstream fixes:
  0001-pcm-Fix-typo-in-documentation-PREPARE-PREPARED.patch
  0002-ucm-Fix-segfault-when-device-argument-is-missing-fro.patch</changelog>
<changelog author="tiwai@suse.de" date="1371470400">- Backport upstream fixes for plug-in API rewind, a possible memory
  leak in direct plugins, chmap buffer overflow and some segfaults:
  0003-Allow-specifying-the-max-number-of-cards.patch
  0004-pcm_hw-Remove-unused-fields-in-struct.patch
  0005-pcm_plugin-Fix-return-value-of-snd_pcm_rewind.patch
  0006-pcm_direct-fix-the-memory-leak-when-parsing-the-slav.patch
  0007-chmap-Always-succeed-setting-the-map-to-what-it-alre.patch
  0008-pcm_hw-Fix-buffer-overflow-in-chmap.patch
  0009-pcm_direct-fix-SEGFAULT-when-getgrnam_r-returns-0-an.patch</changelog>
<changelog author="tiwai@suse.de" date="1373371200">- updated to version 1.0.27.2:
  just version bump, including all previous fixes</changelog>
<changelog author="tiwai@suse.de" date="1378468800">- Backport upstream fixes:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch</changelog>
<changelog author="tiwai@suse.de" date="1380628800">- Backport upstream fixes: namehints double-free fix, expansion of
  more HDMI devices, and a fix for dB conversion
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch</changelog>
<changelog author="tiwai@suse.de" date="1385553600">- Fix aborting in races at closing dmix streams (bnc#852446):
  0019-dmix-Don-t-use-assert-and-abort.patch</changelog>

</package>
<package pkgid="a17019f018839c7d0f4ca2166ce32708acc87a59d46977589038eeb78419a824" name="alsa" arch="x86_64">
    <version epoch="0" ver="1.0.27.2" rel="3.5.1"/>

<changelog author="tiwai@suse.de" date="1340884800">- Use a special modprobe config for loading OSS and sequencer
  modules automatically (bnc#768361,bnc#768352,bnc#757484,
  bnc#767738)
- Remove the automatic module loading part from alsasound init
  script since modprobe does it now
- Set LOAD_SEQUENCER=no and LOAD_OSS_EMUL_MODULES=no as default;
  these were already disabled on 12.1 with systemd.
  This is only for new installations.  Users upgrading from old
  distros aren't affected.</changelog>
<changelog author="tiwai@suse.de" date="1341489600">- Fix useless assert in hctl, backport from upstream</changelog>
<changelog author="tiwai@suse.de" date="1347019200">- Updated to version 1.0.26:
  * just including all previous patches</changelog>
<changelog author="tiwai@suse.de" date="1350475200">- backport from upstream tree:
  * lots of patches to support the new chmap API
  * fix segfault in rate plugin error path
  * add a couple of test programs
  * fix inifinte loop in htimestamp of dmix &amp; co</changelog>
<changelog author="tiwai@suse.de" date="1352808000">- backport fixes from upstream tree:
  0031-pcm-support-for-audio-timestamps.patch
  0032-pcm-fix-64-bit-SNDRV_PCM_IOCTL_STATUS-ABI-breakage.patch
  0033-PCM-Fix-memory-leak-for-pcm-empty-and-asym-plugins.patch
  0034-Reduce-compilation-warnings.patch
  0035-PCM-Avoid-busy-loop-in-snd_pcm_write_areas-with-rate.patch</changelog>
<changelog author="tiwai@suse.de" date="1354190400">- backport UAPI header fix, chmap extension and comiple warning fix
  0036-Merge-kernel-uapi-sound-asound.h-and-asequencer.h.patch
  0037-PCM-Add-more-chmap-definitions-for-UAC2.patch
  0038-PCM-shut-up-a-compile-unused-parameter-compile-warni.patch
  0039-Add-workaround-for-conflicting-snd_seq_event_t-defin.patch</changelog>
<changelog author="tiwai@suse.de" date="1354622400">- 0040-PCM-Fix-conflict-of-_snd_pcm_hw_params-definitions.patch:
  fix the segfault due to the symbol conflict of _snd_pcm_hw_params</changelog>
<changelog author="tiwai@suse.de" date="1355400000">- 0041-configure-Quite-AM_CONDITIONAL-arguments.patch:
  Fix for the recent automake conditionals
- 0042-mixer-Don-t-build-simple_abst-when-no-libdl-is-avail.patch:
  Minor fix for the build without libdl
- Fix endian check breakage due to the recent UAPI header move:
  0043-Fix-endian-check-in-local.h.patch</changelog>
<changelog author="tiwai@suse.de" date="1359720000">- Backport a few fix patches from upstream, mostly for fixing
  crashes in multi-thread programs:
  0044-configure-do-not-detect-incorrect-cross-compiler.patch
  0045-ucm-Set-uc_mgr-ctl-to-NULL-after-closing-it.patch
  0046-snd_pcm_direct_parse_open_conf-use-thread-safe-getgr.patch
  0047-Add-snd_lib_error_set_local-to-install-a-thread-loca.patch
  0048-snd_device_name_hint-do-not-change-the-global-error-.patch
  0049-snd_device_name_hint-do-not-use-global-snd_config.patch
  0050-conf-Fix-a-memory-access-violation-resulting-from-im.patch</changelog>
<changelog author="tiwai@suse.de" date="1363003200">- More backports of fix patches from upstream:
  0051-Add-sys-types.h-to-include-list.patch
  0052-control-Simplify-using-snd_config_get_bool.patch
  0053-Add-workaround-for-conflicting-IEC958-controls-for-H.patch
  0054-snd_mixer_poll_descriptors_revents-should-loop-over-.patch</changelog>
<changelog author="tiwai@suse.de" date="1365163200">- Backport upstream fix patches:
  0055-pcm-fix-and-optimize-snd_pcm_areas_copy-function.patch
  0056-USB-audio-Add-HP-Digital-Stereo-Headset-to-SPDIF-bla.patch
  0057-pcm-fix-typo-should-be-SND_PCM_STATE_PREPARED.patch
- Fix typos in comments in joystick script (bnc#805765)</changelog>
<changelog author="tiwai@suse.de" date="1365508800">- Backport upstream fixes:
  0058-control-pcm-implement-snd_ctl_abort-and-snd_pcm_abor.patch
  0059-all-places-doxygen-cleanups.patch
  0060-pcm-direct-plugins-do-more-safe-IPC-semaphore-handli.patch
- Fix segfault with openal-soft (bnc#814250):
  0061-Clean-up-dlobj-cache-only-when-no-user-is-present.patch
  0062-Optimize-NULL-check-in-snd_dlobj_cache_put.patch</changelog>
<changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  including all previous fixes; all 00*-* patches dropped</changelog>
<changelog author="tiwai@suse.de" date="1366891200">- Upstream fix for dlobj cache crash (bnc#814250)
  0001-Fix-doubly-call-of-dlclose-in-dlobj-caching-code.patch
- Upstream patches for support DSD
  0002-pcm.c-fix-indentation.patch
  0003-bring-pcm.h-and-pcm.c-in-sync-with-the-kernel-list.patch
- Fix compile errors with C90 (bnc#817077)
  0004-Use-__inline__-for-exported-headers.patch
  0005-Add-definition-of-__inline__-for-non-GCC.patch</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Bump to version 1.0.27.1, including previous fixes, USB config
  quirks, addition of UCM configs and other misc fix patches
- Backport upstream fixes:
  0001-pcm-Fix-typo-in-documentation-PREPARE-PREPARED.patch
  0002-ucm-Fix-segfault-when-device-argument-is-missing-fro.patch</changelog>
<changelog author="tiwai@suse.de" date="1371470400">- Backport upstream fixes for plug-in API rewind, a possible memory
  leak in direct plugins, chmap buffer overflow and some segfaults:
  0003-Allow-specifying-the-max-number-of-cards.patch
  0004-pcm_hw-Remove-unused-fields-in-struct.patch
  0005-pcm_plugin-Fix-return-value-of-snd_pcm_rewind.patch
  0006-pcm_direct-fix-the-memory-leak-when-parsing-the-slav.patch
  0007-chmap-Always-succeed-setting-the-map-to-what-it-alre.patch
  0008-pcm_hw-Fix-buffer-overflow-in-chmap.patch
  0009-pcm_direct-fix-SEGFAULT-when-getgrnam_r-returns-0-an.patch</changelog>
<changelog author="tiwai@suse.de" date="1373371200">- updated to version 1.0.27.2:
  just version bump, including all previous fixes</changelog>
<changelog author="tiwai@suse.de" date="1378468800">- Backport upstream fixes:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch</changelog>
<changelog author="tiwai@suse.de" date="1380628800">- Backport upstream fixes: namehints double-free fix, expansion of
  more HDMI devices, and a fix for dB conversion
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch</changelog>
<changelog author="tiwai@suse.de" date="1385553600">- Fix aborting in races at closing dmix streams (bnc#852446):
  0019-dmix-Don-t-use-assert-and-abort.patch</changelog>

</package>
<package pkgid="9c792853b98a3788671b465d4dd8378295a128655eba0be31dda4d1ea6a7ddbb" name="alsa-devel" arch="i586">
    <version epoch="0" ver="1.0.27.2" rel="3.5.1"/>

<changelog author="tiwai@suse.de" date="1340884800">- Use a special modprobe config for loading OSS and sequencer
  modules automatically (bnc#768361,bnc#768352,bnc#757484,
  bnc#767738)
- Remove the automatic module loading part from alsasound init
  script since modprobe does it now
- Set LOAD_SEQUENCER=no and LOAD_OSS_EMUL_MODULES=no as default;
  these were already disabled on 12.1 with systemd.
  This is only for new installations.  Users upgrading from old
  distros aren't affected.</changelog>
<changelog author="tiwai@suse.de" date="1341489600">- Fix useless assert in hctl, backport from upstream</changelog>
<changelog author="tiwai@suse.de" date="1347019200">- Updated to version 1.0.26:
  * just including all previous patches</changelog>
<changelog author="tiwai@suse.de" date="1350475200">- backport from upstream tree:
  * lots of patches to support the new chmap API
  * fix segfault in rate plugin error path
  * add a couple of test programs
  * fix inifinte loop in htimestamp of dmix &amp; co</changelog>
<changelog author="tiwai@suse.de" date="1352808000">- backport fixes from upstream tree:
  0031-pcm-support-for-audio-timestamps.patch
  0032-pcm-fix-64-bit-SNDRV_PCM_IOCTL_STATUS-ABI-breakage.patch
  0033-PCM-Fix-memory-leak-for-pcm-empty-and-asym-plugins.patch
  0034-Reduce-compilation-warnings.patch
  0035-PCM-Avoid-busy-loop-in-snd_pcm_write_areas-with-rate.patch</changelog>
<changelog author="tiwai@suse.de" date="1354190400">- backport UAPI header fix, chmap extension and comiple warning fix
  0036-Merge-kernel-uapi-sound-asound.h-and-asequencer.h.patch
  0037-PCM-Add-more-chmap-definitions-for-UAC2.patch
  0038-PCM-shut-up-a-compile-unused-parameter-compile-warni.patch
  0039-Add-workaround-for-conflicting-snd_seq_event_t-defin.patch</changelog>
<changelog author="tiwai@suse.de" date="1354622400">- 0040-PCM-Fix-conflict-of-_snd_pcm_hw_params-definitions.patch:
  fix the segfault due to the symbol conflict of _snd_pcm_hw_params</changelog>
<changelog author="tiwai@suse.de" date="1355400000">- 0041-configure-Quite-AM_CONDITIONAL-arguments.patch:
  Fix for the recent automake conditionals
- 0042-mixer-Don-t-build-simple_abst-when-no-libdl-is-avail.patch:
  Minor fix for the build without libdl
- Fix endian check breakage due to the recent UAPI header move:
  0043-Fix-endian-check-in-local.h.patch</changelog>
<changelog author="tiwai@suse.de" date="1359720000">- Backport a few fix patches from upstream, mostly for fixing
  crashes in multi-thread programs:
  0044-configure-do-not-detect-incorrect-cross-compiler.patch
  0045-ucm-Set-uc_mgr-ctl-to-NULL-after-closing-it.patch
  0046-snd_pcm_direct_parse_open_conf-use-thread-safe-getgr.patch
  0047-Add-snd_lib_error_set_local-to-install-a-thread-loca.patch
  0048-snd_device_name_hint-do-not-change-the-global-error-.patch
  0049-snd_device_name_hint-do-not-use-global-snd_config.patch
  0050-conf-Fix-a-memory-access-violation-resulting-from-im.patch</changelog>
<changelog author="tiwai@suse.de" date="1363003200">- More backports of fix patches from upstream:
  0051-Add-sys-types.h-to-include-list.patch
  0052-control-Simplify-using-snd_config_get_bool.patch
  0053-Add-workaround-for-conflicting-IEC958-controls-for-H.patch
  0054-snd_mixer_poll_descriptors_revents-should-loop-over-.patch</changelog>
<changelog author="tiwai@suse.de" date="1365163200">- Backport upstream fix patches:
  0055-pcm-fix-and-optimize-snd_pcm_areas_copy-function.patch
  0056-USB-audio-Add-HP-Digital-Stereo-Headset-to-SPDIF-bla.patch
  0057-pcm-fix-typo-should-be-SND_PCM_STATE_PREPARED.patch
- Fix typos in comments in joystick script (bnc#805765)</changelog>
<changelog author="tiwai@suse.de" date="1365508800">- Backport upstream fixes:
  0058-control-pcm-implement-snd_ctl_abort-and-snd_pcm_abor.patch
  0059-all-places-doxygen-cleanups.patch
  0060-pcm-direct-plugins-do-more-safe-IPC-semaphore-handli.patch
- Fix segfault with openal-soft (bnc#814250):
  0061-Clean-up-dlobj-cache-only-when-no-user-is-present.patch
  0062-Optimize-NULL-check-in-snd_dlobj_cache_put.patch</changelog>
<changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  including all previous fixes; all 00*-* patches dropped</changelog>
<changelog author="tiwai@suse.de" date="1366891200">- Upstream fix for dlobj cache crash (bnc#814250)
  0001-Fix-doubly-call-of-dlclose-in-dlobj-caching-code.patch
- Upstream patches for support DSD
  0002-pcm.c-fix-indentation.patch
  0003-bring-pcm.h-and-pcm.c-in-sync-with-the-kernel-list.patch
- Fix compile errors with C90 (bnc#817077)
  0004-Use-__inline__-for-exported-headers.patch
  0005-Add-definition-of-__inline__-for-non-GCC.patch</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Bump to version 1.0.27.1, including previous fixes, USB config
  quirks, addition of UCM configs and other misc fix patches
- Backport upstream fixes:
  0001-pcm-Fix-typo-in-documentation-PREPARE-PREPARED.patch
  0002-ucm-Fix-segfault-when-device-argument-is-missing-fro.patch</changelog>
<changelog author="tiwai@suse.de" date="1371470400">- Backport upstream fixes for plug-in API rewind, a possible memory
  leak in direct plugins, chmap buffer overflow and some segfaults:
  0003-Allow-specifying-the-max-number-of-cards.patch
  0004-pcm_hw-Remove-unused-fields-in-struct.patch
  0005-pcm_plugin-Fix-return-value-of-snd_pcm_rewind.patch
  0006-pcm_direct-fix-the-memory-leak-when-parsing-the-slav.patch
  0007-chmap-Always-succeed-setting-the-map-to-what-it-alre.patch
  0008-pcm_hw-Fix-buffer-overflow-in-chmap.patch
  0009-pcm_direct-fix-SEGFAULT-when-getgrnam_r-returns-0-an.patch</changelog>
<changelog author="tiwai@suse.de" date="1373371200">- updated to version 1.0.27.2:
  just version bump, including all previous fixes</changelog>
<changelog author="tiwai@suse.de" date="1378468800">- Backport upstream fixes:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch</changelog>
<changelog author="tiwai@suse.de" date="1380628800">- Backport upstream fixes: namehints double-free fix, expansion of
  more HDMI devices, and a fix for dB conversion
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch</changelog>
<changelog author="tiwai@suse.de" date="1385553600">- Fix aborting in races at closing dmix streams (bnc#852446):
  0019-dmix-Don-t-use-assert-and-abort.patch</changelog>

</package>
<package pkgid="689901203a02b3d59ecf5ea8fd3a2500133b7e7ba9565af2cb9ecbdf1896cf58" name="alsa-devel" arch="x86_64">
    <version epoch="0" ver="1.0.27.2" rel="3.5.1"/>

<changelog author="tiwai@suse.de" date="1340884800">- Use a special modprobe config for loading OSS and sequencer
  modules automatically (bnc#768361,bnc#768352,bnc#757484,
  bnc#767738)
- Remove the automatic module loading part from alsasound init
  script since modprobe does it now
- Set LOAD_SEQUENCER=no and LOAD_OSS_EMUL_MODULES=no as default;
  these were already disabled on 12.1 with systemd.
  This is only for new installations.  Users upgrading from old
  distros aren't affected.</changelog>
<changelog author="tiwai@suse.de" date="1341489600">- Fix useless assert in hctl, backport from upstream</changelog>
<changelog author="tiwai@suse.de" date="1347019200">- Updated to version 1.0.26:
  * just including all previous patches</changelog>
<changelog author="tiwai@suse.de" date="1350475200">- backport from upstream tree:
  * lots of patches to support the new chmap API
  * fix segfault in rate plugin error path
  * add a couple of test programs
  * fix inifinte loop in htimestamp of dmix &amp; co</changelog>
<changelog author="tiwai@suse.de" date="1352808000">- backport fixes from upstream tree:
  0031-pcm-support-for-audio-timestamps.patch
  0032-pcm-fix-64-bit-SNDRV_PCM_IOCTL_STATUS-ABI-breakage.patch
  0033-PCM-Fix-memory-leak-for-pcm-empty-and-asym-plugins.patch
  0034-Reduce-compilation-warnings.patch
  0035-PCM-Avoid-busy-loop-in-snd_pcm_write_areas-with-rate.patch</changelog>
<changelog author="tiwai@suse.de" date="1354190400">- backport UAPI header fix, chmap extension and comiple warning fix
  0036-Merge-kernel-uapi-sound-asound.h-and-asequencer.h.patch
  0037-PCM-Add-more-chmap-definitions-for-UAC2.patch
  0038-PCM-shut-up-a-compile-unused-parameter-compile-warni.patch
  0039-Add-workaround-for-conflicting-snd_seq_event_t-defin.patch</changelog>
<changelog author="tiwai@suse.de" date="1354622400">- 0040-PCM-Fix-conflict-of-_snd_pcm_hw_params-definitions.patch:
  fix the segfault due to the symbol conflict of _snd_pcm_hw_params</changelog>
<changelog author="tiwai@suse.de" date="1355400000">- 0041-configure-Quite-AM_CONDITIONAL-arguments.patch:
  Fix for the recent automake conditionals
- 0042-mixer-Don-t-build-simple_abst-when-no-libdl-is-avail.patch:
  Minor fix for the build without libdl
- Fix endian check breakage due to the recent UAPI header move:
  0043-Fix-endian-check-in-local.h.patch</changelog>
<changelog author="tiwai@suse.de" date="1359720000">- Backport a few fix patches from upstream, mostly for fixing
  crashes in multi-thread programs:
  0044-configure-do-not-detect-incorrect-cross-compiler.patch
  0045-ucm-Set-uc_mgr-ctl-to-NULL-after-closing-it.patch
  0046-snd_pcm_direct_parse_open_conf-use-thread-safe-getgr.patch
  0047-Add-snd_lib_error_set_local-to-install-a-thread-loca.patch
  0048-snd_device_name_hint-do-not-change-the-global-error-.patch
  0049-snd_device_name_hint-do-not-use-global-snd_config.patch
  0050-conf-Fix-a-memory-access-violation-resulting-from-im.patch</changelog>
<changelog author="tiwai@suse.de" date="1363003200">- More backports of fix patches from upstream:
  0051-Add-sys-types.h-to-include-list.patch
  0052-control-Simplify-using-snd_config_get_bool.patch
  0053-Add-workaround-for-conflicting-IEC958-controls-for-H.patch
  0054-snd_mixer_poll_descriptors_revents-should-loop-over-.patch</changelog>
<changelog author="tiwai@suse.de" date="1365163200">- Backport upstream fix patches:
  0055-pcm-fix-and-optimize-snd_pcm_areas_copy-function.patch
  0056-USB-audio-Add-HP-Digital-Stereo-Headset-to-SPDIF-bla.patch
  0057-pcm-fix-typo-should-be-SND_PCM_STATE_PREPARED.patch
- Fix typos in comments in joystick script (bnc#805765)</changelog>
<changelog author="tiwai@suse.de" date="1365508800">- Backport upstream fixes:
  0058-control-pcm-implement-snd_ctl_abort-and-snd_pcm_abor.patch
  0059-all-places-doxygen-cleanups.patch
  0060-pcm-direct-plugins-do-more-safe-IPC-semaphore-handli.patch
- Fix segfault with openal-soft (bnc#814250):
  0061-Clean-up-dlobj-cache-only-when-no-user-is-present.patch
  0062-Optimize-NULL-check-in-snd_dlobj_cache_put.patch</changelog>
<changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  including all previous fixes; all 00*-* patches dropped</changelog>
<changelog author="tiwai@suse.de" date="1366891200">- Upstream fix for dlobj cache crash (bnc#814250)
  0001-Fix-doubly-call-of-dlclose-in-dlobj-caching-code.patch
- Upstream patches for support DSD
  0002-pcm.c-fix-indentation.patch
  0003-bring-pcm.h-and-pcm.c-in-sync-with-the-kernel-list.patch
- Fix compile errors with C90 (bnc#817077)
  0004-Use-__inline__-for-exported-headers.patch
  0005-Add-definition-of-__inline__-for-non-GCC.patch</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Bump to version 1.0.27.1, including previous fixes, USB config
  quirks, addition of UCM configs and other misc fix patches
- Backport upstream fixes:
  0001-pcm-Fix-typo-in-documentation-PREPARE-PREPARED.patch
  0002-ucm-Fix-segfault-when-device-argument-is-missing-fro.patch</changelog>
<changelog author="tiwai@suse.de" date="1371470400">- Backport upstream fixes for plug-in API rewind, a possible memory
  leak in direct plugins, chmap buffer overflow and some segfaults:
  0003-Allow-specifying-the-max-number-of-cards.patch
  0004-pcm_hw-Remove-unused-fields-in-struct.patch
  0005-pcm_plugin-Fix-return-value-of-snd_pcm_rewind.patch
  0006-pcm_direct-fix-the-memory-leak-when-parsing-the-slav.patch
  0007-chmap-Always-succeed-setting-the-map-to-what-it-alre.patch
  0008-pcm_hw-Fix-buffer-overflow-in-chmap.patch
  0009-pcm_direct-fix-SEGFAULT-when-getgrnam_r-returns-0-an.patch</changelog>
<changelog author="tiwai@suse.de" date="1373371200">- updated to version 1.0.27.2:
  just version bump, including all previous fixes</changelog>
<changelog author="tiwai@suse.de" date="1378468800">- Backport upstream fixes:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch</changelog>
<changelog author="tiwai@suse.de" date="1380628800">- Backport upstream fixes: namehints double-free fix, expansion of
  more HDMI devices, and a fix for dB conversion
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch</changelog>
<changelog author="tiwai@suse.de" date="1385553600">- Fix aborting in races at closing dmix streams (bnc#852446):
  0019-dmix-Don-t-use-assert-and-abort.patch</changelog>

</package>
<package pkgid="544564df9ceca4ebe2ffb3141e3ae2a5230c87df0643fdc3171972ff4d663b4c" name="alsa-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.27.2" rel="3.5.1"/>

<changelog author="tiwai@suse.de" date="1340884800">- Use a special modprobe config for loading OSS and sequencer
  modules automatically (bnc#768361,bnc#768352,bnc#757484,
  bnc#767738)
- Remove the automatic module loading part from alsasound init
  script since modprobe does it now
- Set LOAD_SEQUENCER=no and LOAD_OSS_EMUL_MODULES=no as default;
  these were already disabled on 12.1 with systemd.
  This is only for new installations.  Users upgrading from old
  distros aren't affected.</changelog>
<changelog author="tiwai@suse.de" date="1341489600">- Fix useless assert in hctl, backport from upstream</changelog>
<changelog author="tiwai@suse.de" date="1347019200">- Updated to version 1.0.26:
  * just including all previous patches</changelog>
<changelog author="tiwai@suse.de" date="1350475200">- backport from upstream tree:
  * lots of patches to support the new chmap API
  * fix segfault in rate plugin error path
  * add a couple of test programs
  * fix inifinte loop in htimestamp of dmix &amp; co</changelog>
<changelog author="tiwai@suse.de" date="1352808000">- backport fixes from upstream tree:
  0031-pcm-support-for-audio-timestamps.patch
  0032-pcm-fix-64-bit-SNDRV_PCM_IOCTL_STATUS-ABI-breakage.patch
  0033-PCM-Fix-memory-leak-for-pcm-empty-and-asym-plugins.patch
  0034-Reduce-compilation-warnings.patch
  0035-PCM-Avoid-busy-loop-in-snd_pcm_write_areas-with-rate.patch</changelog>
<changelog author="tiwai@suse.de" date="1354190400">- backport UAPI header fix, chmap extension and comiple warning fix
  0036-Merge-kernel-uapi-sound-asound.h-and-asequencer.h.patch
  0037-PCM-Add-more-chmap-definitions-for-UAC2.patch
  0038-PCM-shut-up-a-compile-unused-parameter-compile-warni.patch
  0039-Add-workaround-for-conflicting-snd_seq_event_t-defin.patch</changelog>
<changelog author="tiwai@suse.de" date="1354622400">- 0040-PCM-Fix-conflict-of-_snd_pcm_hw_params-definitions.patch:
  fix the segfault due to the symbol conflict of _snd_pcm_hw_params</changelog>
<changelog author="tiwai@suse.de" date="1355400000">- 0041-configure-Quite-AM_CONDITIONAL-arguments.patch:
  Fix for the recent automake conditionals
- 0042-mixer-Don-t-build-simple_abst-when-no-libdl-is-avail.patch:
  Minor fix for the build without libdl
- Fix endian check breakage due to the recent UAPI header move:
  0043-Fix-endian-check-in-local.h.patch</changelog>
<changelog author="tiwai@suse.de" date="1359720000">- Backport a few fix patches from upstream, mostly for fixing
  crashes in multi-thread programs:
  0044-configure-do-not-detect-incorrect-cross-compiler.patch
  0045-ucm-Set-uc_mgr-ctl-to-NULL-after-closing-it.patch
  0046-snd_pcm_direct_parse_open_conf-use-thread-safe-getgr.patch
  0047-Add-snd_lib_error_set_local-to-install-a-thread-loca.patch
  0048-snd_device_name_hint-do-not-change-the-global-error-.patch
  0049-snd_device_name_hint-do-not-use-global-snd_config.patch
  0050-conf-Fix-a-memory-access-violation-resulting-from-im.patch</changelog>
<changelog author="tiwai@suse.de" date="1363003200">- More backports of fix patches from upstream:
  0051-Add-sys-types.h-to-include-list.patch
  0052-control-Simplify-using-snd_config_get_bool.patch
  0053-Add-workaround-for-conflicting-IEC958-controls-for-H.patch
  0054-snd_mixer_poll_descriptors_revents-should-loop-over-.patch</changelog>
<changelog author="tiwai@suse.de" date="1365163200">- Backport upstream fix patches:
  0055-pcm-fix-and-optimize-snd_pcm_areas_copy-function.patch
  0056-USB-audio-Add-HP-Digital-Stereo-Headset-to-SPDIF-bla.patch
  0057-pcm-fix-typo-should-be-SND_PCM_STATE_PREPARED.patch
- Fix typos in comments in joystick script (bnc#805765)</changelog>
<changelog author="tiwai@suse.de" date="1365508800">- Backport upstream fixes:
  0058-control-pcm-implement-snd_ctl_abort-and-snd_pcm_abor.patch
  0059-all-places-doxygen-cleanups.patch
  0060-pcm-direct-plugins-do-more-safe-IPC-semaphore-handli.patch
- Fix segfault with openal-soft (bnc#814250):
  0061-Clean-up-dlobj-cache-only-when-no-user-is-present.patch
  0062-Optimize-NULL-check-in-snd_dlobj_cache_put.patch</changelog>
<changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  including all previous fixes; all 00*-* patches dropped</changelog>
<changelog author="tiwai@suse.de" date="1366891200">- Upstream fix for dlobj cache crash (bnc#814250)
  0001-Fix-doubly-call-of-dlclose-in-dlobj-caching-code.patch
- Upstream patches for support DSD
  0002-pcm.c-fix-indentation.patch
  0003-bring-pcm.h-and-pcm.c-in-sync-with-the-kernel-list.patch
- Fix compile errors with C90 (bnc#817077)
  0004-Use-__inline__-for-exported-headers.patch
  0005-Add-definition-of-__inline__-for-non-GCC.patch</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Bump to version 1.0.27.1, including previous fixes, USB config
  quirks, addition of UCM configs and other misc fix patches
- Backport upstream fixes:
  0001-pcm-Fix-typo-in-documentation-PREPARE-PREPARED.patch
  0002-ucm-Fix-segfault-when-device-argument-is-missing-fro.patch</changelog>
<changelog author="tiwai@suse.de" date="1371470400">- Backport upstream fixes for plug-in API rewind, a possible memory
  leak in direct plugins, chmap buffer overflow and some segfaults:
  0003-Allow-specifying-the-max-number-of-cards.patch
  0004-pcm_hw-Remove-unused-fields-in-struct.patch
  0005-pcm_plugin-Fix-return-value-of-snd_pcm_rewind.patch
  0006-pcm_direct-fix-the-memory-leak-when-parsing-the-slav.patch
  0007-chmap-Always-succeed-setting-the-map-to-what-it-alre.patch
  0008-pcm_hw-Fix-buffer-overflow-in-chmap.patch
  0009-pcm_direct-fix-SEGFAULT-when-getgrnam_r-returns-0-an.patch</changelog>
<changelog author="tiwai@suse.de" date="1373371200">- updated to version 1.0.27.2:
  just version bump, including all previous fixes</changelog>
<changelog author="tiwai@suse.de" date="1378468800">- Backport upstream fixes:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch</changelog>
<changelog author="tiwai@suse.de" date="1380628800">- Backport upstream fixes: namehints double-free fix, expansion of
  more HDMI devices, and a fix for dB conversion
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch</changelog>
<changelog author="tiwai@suse.de" date="1385553600">- Fix aborting in races at closing dmix streams (bnc#852446):
  0019-dmix-Don-t-use-assert-and-abort.patch</changelog>

</package>
<package pkgid="3d796d2e8a88b65691de58083ddb141ff2f832bcc22ee0479c8ed2f132ad0ed5" name="alsa-docs" arch="noarch">
    <version epoch="0" ver="1.0.27.2" rel="3.5.1"/>

<changelog author="tiwai@suse.de" date="1340884800">- Use a special modprobe config for loading OSS and sequencer
  modules automatically (bnc#768361,bnc#768352,bnc#757484,
  bnc#767738)
- Remove the automatic module loading part from alsasound init
  script since modprobe does it now
- Set LOAD_SEQUENCER=no and LOAD_OSS_EMUL_MODULES=no as default;
  these were already disabled on 12.1 with systemd.
  This is only for new installations.  Users upgrading from old
  distros aren't affected.</changelog>
<changelog author="tiwai@suse.de" date="1341489600">- Fix useless assert in hctl, backport from upstream</changelog>
<changelog author="tiwai@suse.de" date="1347019200">- Updated to version 1.0.26:
  * just including all previous patches</changelog>
<changelog author="tiwai@suse.de" date="1350475200">- backport from upstream tree:
  * lots of patches to support the new chmap API
  * fix segfault in rate plugin error path
  * add a couple of test programs
  * fix inifinte loop in htimestamp of dmix &amp; co</changelog>
<changelog author="tiwai@suse.de" date="1352808000">- backport fixes from upstream tree:
  0031-pcm-support-for-audio-timestamps.patch
  0032-pcm-fix-64-bit-SNDRV_PCM_IOCTL_STATUS-ABI-breakage.patch
  0033-PCM-Fix-memory-leak-for-pcm-empty-and-asym-plugins.patch
  0034-Reduce-compilation-warnings.patch
  0035-PCM-Avoid-busy-loop-in-snd_pcm_write_areas-with-rate.patch</changelog>
<changelog author="tiwai@suse.de" date="1354190400">- backport UAPI header fix, chmap extension and comiple warning fix
  0036-Merge-kernel-uapi-sound-asound.h-and-asequencer.h.patch
  0037-PCM-Add-more-chmap-definitions-for-UAC2.patch
  0038-PCM-shut-up-a-compile-unused-parameter-compile-warni.patch
  0039-Add-workaround-for-conflicting-snd_seq_event_t-defin.patch</changelog>
<changelog author="tiwai@suse.de" date="1354622400">- 0040-PCM-Fix-conflict-of-_snd_pcm_hw_params-definitions.patch:
  fix the segfault due to the symbol conflict of _snd_pcm_hw_params</changelog>
<changelog author="tiwai@suse.de" date="1355400000">- 0041-configure-Quite-AM_CONDITIONAL-arguments.patch:
  Fix for the recent automake conditionals
- 0042-mixer-Don-t-build-simple_abst-when-no-libdl-is-avail.patch:
  Minor fix for the build without libdl
- Fix endian check breakage due to the recent UAPI header move:
  0043-Fix-endian-check-in-local.h.patch</changelog>
<changelog author="tiwai@suse.de" date="1359720000">- Backport a few fix patches from upstream, mostly for fixing
  crashes in multi-thread programs:
  0044-configure-do-not-detect-incorrect-cross-compiler.patch
  0045-ucm-Set-uc_mgr-ctl-to-NULL-after-closing-it.patch
  0046-snd_pcm_direct_parse_open_conf-use-thread-safe-getgr.patch
  0047-Add-snd_lib_error_set_local-to-install-a-thread-loca.patch
  0048-snd_device_name_hint-do-not-change-the-global-error-.patch
  0049-snd_device_name_hint-do-not-use-global-snd_config.patch
  0050-conf-Fix-a-memory-access-violation-resulting-from-im.patch</changelog>
<changelog author="tiwai@suse.de" date="1363003200">- More backports of fix patches from upstream:
  0051-Add-sys-types.h-to-include-list.patch
  0052-control-Simplify-using-snd_config_get_bool.patch
  0053-Add-workaround-for-conflicting-IEC958-controls-for-H.patch
  0054-snd_mixer_poll_descriptors_revents-should-loop-over-.patch</changelog>
<changelog author="tiwai@suse.de" date="1365163200">- Backport upstream fix patches:
  0055-pcm-fix-and-optimize-snd_pcm_areas_copy-function.patch
  0056-USB-audio-Add-HP-Digital-Stereo-Headset-to-SPDIF-bla.patch
  0057-pcm-fix-typo-should-be-SND_PCM_STATE_PREPARED.patch
- Fix typos in comments in joystick script (bnc#805765)</changelog>
<changelog author="tiwai@suse.de" date="1365508800">- Backport upstream fixes:
  0058-control-pcm-implement-snd_ctl_abort-and-snd_pcm_abor.patch
  0059-all-places-doxygen-cleanups.patch
  0060-pcm-direct-plugins-do-more-safe-IPC-semaphore-handli.patch
- Fix segfault with openal-soft (bnc#814250):
  0061-Clean-up-dlobj-cache-only-when-no-user-is-present.patch
  0062-Optimize-NULL-check-in-snd_dlobj_cache_put.patch</changelog>
<changelog author="tiwai@suse.de" date="1365768000">- Updated to version 1.0.27:
  including all previous fixes; all 00*-* patches dropped</changelog>
<changelog author="tiwai@suse.de" date="1366891200">- Upstream fix for dlobj cache crash (bnc#814250)
  0001-Fix-doubly-call-of-dlclose-in-dlobj-caching-code.patch
- Upstream patches for support DSD
  0002-pcm.c-fix-indentation.patch
  0003-bring-pcm.h-and-pcm.c-in-sync-with-the-kernel-list.patch
- Fix compile errors with C90 (bnc#817077)
  0004-Use-__inline__-for-exported-headers.patch
  0005-Add-definition-of-__inline__-for-non-GCC.patch</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Bump to version 1.0.27.1, including previous fixes, USB config
  quirks, addition of UCM configs and other misc fix patches
- Backport upstream fixes:
  0001-pcm-Fix-typo-in-documentation-PREPARE-PREPARED.patch
  0002-ucm-Fix-segfault-when-device-argument-is-missing-fro.patch</changelog>
<changelog author="tiwai@suse.de" date="1371470400">- Backport upstream fixes for plug-in API rewind, a possible memory
  leak in direct plugins, chmap buffer overflow and some segfaults:
  0003-Allow-specifying-the-max-number-of-cards.patch
  0004-pcm_hw-Remove-unused-fields-in-struct.patch
  0005-pcm_plugin-Fix-return-value-of-snd_pcm_rewind.patch
  0006-pcm_direct-fix-the-memory-leak-when-parsing-the-slav.patch
  0007-chmap-Always-succeed-setting-the-map-to-what-it-alre.patch
  0008-pcm_hw-Fix-buffer-overflow-in-chmap.patch
  0009-pcm_direct-fix-SEGFAULT-when-getgrnam_r-returns-0-an.patch</changelog>
<changelog author="tiwai@suse.de" date="1373371200">- updated to version 1.0.27.2:
  just version bump, including all previous fixes</changelog>
<changelog author="tiwai@suse.de" date="1378468800">- Backport upstream fixes:
  0001-local.h-use-__kernel_off_t-from-linux-types.h.patch
  0002-conf-cards-add-Audio-Advantage-Micro-II.patch
  0003-pcm-Fix-a-wrong-value-shown-in-the-error-message-in-.patch
  0004-UCM-Document-some-standard-values.patch
  0005-hdspm.h-Update-LTC-ioctl-to-use-struct-hdspm_ltc.patch
  0006-Update-iatomic.h-functions-definitions-for-mips.patch</changelog>
<changelog author="tiwai@suse.de" date="1380628800">- Backport upstream fixes: namehints double-free fix, expansion of
  more HDMI devices, and a fix for dB conversion
  0007-Fix-access-of-freed-memory-in-namehints.patch
  0008-HDA-Intel-present-up-to-8-HDMI-DP-outputs-via-hdmi-d.patch
  0009-snd_tlv_convert_from_dB-fix-decreasing-gain-across-e.patch</changelog>
<changelog author="tiwai@suse.de" date="1385553600">- Fix aborting in races at closing dmix streams (bnc#852446):
  0019-dmix-Don-t-use-assert-and-abort.patch</changelog>

</package>
<package pkgid="75b243a9e3d817333a857b1400227492398bcb52c29893dd5fce832460a55292" name="alsa-oss" arch="i586">
    <version epoch="0" ver="1.0.25" rel="8.4.1"/>

<changelog author="olh@suse.de" date="1210852800">- remove unneeded Recommends: -64bit on ppc (bnc#390761)</changelog>
<changelog author="tiwai@suse.de" date="1216123200">- updated to version 1.0.17:
  * just a version bump</changelog>
<changelog author="jengelh@medozas.de" date="1264593600">- package baselibs.conf</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="tiwai@suse.de" date="1327492800">- updated to version 1.0.25;
  pcm: check for XRUN state for GETxSPACE and GETxPTR ioctls
  select: better check for null bit arrays</changelog>
<changelog author="reddwarf@opensuse.org" date="1333022400">- stop recommending alsa-oss-32bit</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Backport upstream fixes:
  0001-Fix-path-to-libaoss.so.patch
  0002-Add-AM_MAINTAINER_MODE-enable-to-configure.in.patch</changelog>
<changelog author="tiwai@suse.de" date="1398686400">- Revert 0001-Fix-path-to-libaoss.so.patch, as this causes
  regressions on multi-arch (bnc#874331)</changelog>
<changelog author="tiwai@suse.de" date="1398686401">- Fix for dmix with unaligned sample rate:
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>

</package>
<package pkgid="7f18e4d796e25424742ed92bf780887d6bd8bbdc4269ff481f991c42bb1cc2c1" name="alsa-oss" arch="src">
    <version epoch="0" ver="1.0.25" rel="8.4.1"/>

<changelog author="tiwai@suse.de" date="1176724800">- split from alsa package.</changelog>
<changelog author="tiwai@suse.de" date="1178107200">- updated to version 1.0.14rc4:
  including HG fixes since 1.0.12</changelog>
<changelog author="tiwai@suse.de" date="1180612800">- updated to version 1.0.14-final
  just version number changes.</changelog>
<changelog author="tiwai@suse.de" date="1192536000">- updated to version 1.0.15:
  * Fix dsp-&gt;oss_format setting</changelog>
<changelog author="sbrabec@suse.cz" date="1204891200">- Added bi-arch counterpart Recommends to prevent arch clashes
  (bnc#117079#c14).</changelog>
<changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
<changelog author="olh@suse.de" date="1210852800">- remove unneeded Recommends: -64bit on ppc (bnc#390761)</changelog>
<changelog author="tiwai@suse.de" date="1216123200">- updated to version 1.0.17:
  * just a version bump</changelog>
<changelog author="jengelh@medozas.de" date="1264593600">- package baselibs.conf</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="tiwai@suse.de" date="1327492800">- updated to version 1.0.25;
  pcm: check for XRUN state for GETxSPACE and GETxPTR ioctls
  select: better check for null bit arrays</changelog>
<changelog author="reddwarf@opensuse.org" date="1333022400">- stop recommending alsa-oss-32bit</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Backport upstream fixes:
  0001-Fix-path-to-libaoss.so.patch
  0002-Add-AM_MAINTAINER_MODE-enable-to-configure.in.patch</changelog>
<changelog author="tiwai@suse.de" date="1398686400">- Revert 0001-Fix-path-to-libaoss.so.patch, as this causes
  regressions on multi-arch (bnc#874331)</changelog>
<changelog author="tiwai@suse.de" date="1398686401">- Fix for dmix with unaligned sample rate:
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>

</package>
<package pkgid="bec6886f1f13d4be3fc3cb2d1e22d82c8dc29c900b67adf930bc09a93d0c625a" name="alsa-oss" arch="x86_64">
    <version epoch="0" ver="1.0.25" rel="8.4.1"/>

<changelog author="olh@suse.de" date="1210852800">- remove unneeded Recommends: -64bit on ppc (bnc#390761)</changelog>
<changelog author="tiwai@suse.de" date="1216123200">- updated to version 1.0.17:
  * just a version bump</changelog>
<changelog author="jengelh@medozas.de" date="1264593600">- package baselibs.conf</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="tiwai@suse.de" date="1327492800">- updated to version 1.0.25;
  pcm: check for XRUN state for GETxSPACE and GETxPTR ioctls
  select: better check for null bit arrays</changelog>
<changelog author="reddwarf@opensuse.org" date="1333022400">- stop recommending alsa-oss-32bit</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Backport upstream fixes:
  0001-Fix-path-to-libaoss.so.patch
  0002-Add-AM_MAINTAINER_MODE-enable-to-configure.in.patch</changelog>
<changelog author="tiwai@suse.de" date="1398686400">- Revert 0001-Fix-path-to-libaoss.so.patch, as this causes
  regressions on multi-arch (bnc#874331)</changelog>
<changelog author="tiwai@suse.de" date="1398686401">- Fix for dmix with unaligned sample rate:
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>

</package>
<package pkgid="eb9ec6294a8cacbf1c5f51d867efcb4812ba382c9dfe254a7eb3dd0d25c0243c" name="alsa-oss-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.25" rel="8.4.1"/>

<changelog author="olh@suse.de" date="1210852800">- remove unneeded Recommends: -64bit on ppc (bnc#390761)</changelog>
<changelog author="tiwai@suse.de" date="1216123200">- updated to version 1.0.17:
  * just a version bump</changelog>
<changelog author="jengelh@medozas.de" date="1264593600">- package baselibs.conf</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="tiwai@suse.de" date="1327492800">- updated to version 1.0.25;
  pcm: check for XRUN state for GETxSPACE and GETxPTR ioctls
  select: better check for null bit arrays</changelog>
<changelog author="reddwarf@opensuse.org" date="1333022400">- stop recommending alsa-oss-32bit</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Backport upstream fixes:
  0001-Fix-path-to-libaoss.so.patch
  0002-Add-AM_MAINTAINER_MODE-enable-to-configure.in.patch</changelog>
<changelog author="tiwai@suse.de" date="1398686400">- Revert 0001-Fix-path-to-libaoss.so.patch, as this causes
  regressions on multi-arch (bnc#874331)</changelog>
<changelog author="tiwai@suse.de" date="1398686401">- Fix for dmix with unaligned sample rate:
  0003-Fix-the-argument-passed-to-snd_pcm_dump_setup.patch
  0004-Workaround-for-aoss-dmix-with-unaligned-rates.patch</changelog>

</package>
<package pkgid="914580fa5140a1c03a63ae172a0437040a87d50effd34d8a162c4d24314a81ea" name="alsa-utils" arch="i586">
    <version epoch="0" ver="1.0.27.2" rel="4.5.1"/>

<changelog author="tiwai@suse.de" date="1352721600">- Fix build breakage on 11.4
- Correct udev rules path (the recent udev places /usr/lib/udev)</changelog>
<changelog author="tiwai@suse.de" date="1354190400">- Backport fixes from upstream
  0006-alsamixer-fix-handling-of-removed-controls.patch
  0007-aplay-Show-usage-if-no-parameter-is-passed.patch
  0008-amixer-fix-rounding-of-relative-changes.patch
  0009-amixer-Fix-parsing-container-TLV-entries.patch</changelog>
<changelog author="tiwai@suse.de" date="1354276800">- Build with libsamplerate for aloop (bnc#792173)
- Add a patch to handle alsaloop properly without libsamplerate
  (bnc#792173):
  0010-alsaloop-Make-alsaloop-working-without-libsamplerate.patch
  0011-alsaloop-Fix-missing-endif.patch</changelog>
<changelog author="tiwai@suse.de" date="1354363200">- Add libsamplerate-devel to buildrequires for alsaloop
  (bnc#792173)</changelog>
<changelog author="tiwai@suse.de" date="1359720000">- Backport a few fix patches from upstream git tree:
  0012-aplay-Add-the-support-for-big-endian-WAV-format-RIFX.patch
  0013-configure-Fix-obsolete-AM_CONFIG_HEADER-macro.patch
  0014-speaker-test-increase-the-maximum-supported-rate-to-.patch
  0015-amixer-Fix-dB-value-outputs-in-amixer-contents.patch</changelog>
<changelog author="tiwai@suse.de" date="1365768000">- Update to version 1.0.27:
  including all previous fixes; all 00*-* patches dropped
  * Add support for alsactl daemon mode
  * Add snd_pcm_abort() support in aplay</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365854400">- Added service_typo.patch, fixes alsa-restore service not starting</changelog>
<changelog author="tiwai@suse.de" date="1366027200">- Replace the previous fix with the upstream patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366027201">- Added patch from upstream, which fixes buffer overflow,
  0002-alsactl-Fix-the-string-size-for-the-lock-file-contents.patch</changelog>
<changelog author="tiwai@suse.de" date="1366286400">- Upstream fix: arecord: add a missing break to the capture loop
  0003-arecord-add-a-missing-break-to-the-capture-loop.patch</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Bump to version 1.0.27.1, including previous fixes
- Removed requirement of libudev-devel, as the superfluous rules
  file is dropped in 1.0.27.1.
- Backport upstream fix:
  0001-Release-v1.0.27.1.patch</changelog>
<changelog author="tiwai@suse.de" date="1369656000">- Backport upstream fixes:
  0002-alsactl-init-ca0106-file-was-omitted.patch
  0003-alsactl-return-back-the-udevrules_DATA-rule-for-90-a.patch
- Add missing ca0106 alsactl init file
- Revert the udev file drop in the previous commit</changelog>
<changelog author="tiwai@suse.de" date="1369828800">- Backport upstream fixes wrt amixer:
  0004-amixer-Fix-the-hctl-elem-search-bug.patch
  0005-amixer-fix-print_dB-for-0.99-.-0.01-range.patch</changelog>
<changelog author="tiwai@suse.de" date="1371470400">- Backport upstream fixes wrt chmap handling:
  0006-amixer-Print-TLV-of-channel-map-controls.patch
  0007-speaker-test-Fix-wrong-wave-file-played-back-in-chma.patch</changelog>
<changelog author="tiwai@suse.de" date="1374235200">- updated to version 1.0.27.2
  including all previous fixes
- fix a typo in alsa-state.service:
  0001-alsactl-alsa-state.service-fix-typo-rkill-kill.patch</changelog>
<changelog author="tiwai@suse.de" date="1374235201">- remove superfluous ca0106 file (now included in 1.0.27.2)</changelog>
<changelog author="tiwai@suse.de" date="1378468800">- Upstream fix:
  0002-alsaloop-fix-wrong-alias-for-signal.h.patch</changelog>
<changelog author="tiwai@suse.de" date="1378728000">- Upstream fix:
  0003-aplay-fix-two-off-by-one-errors.patch</changelog>
<changelog author="tiwai@suse.de" date="1380628800">- Upstream fixes: addition of -z option to alsaloop, and a fix for
  amixer TLV parser
  0004-alsaloop-add-z-syslog-option-to-use-syslog-for-error.patch
  0005-amixer-actually-print-all-TLVs-in-a-container-TLV.patch</changelog>
<changelog author="tiwai@suse.de" date="1410177600">- Fix a few alsactl bugs (bnc#895581); now the lock file is created
  in /var/lock directory instead of /var/lib:
  0006-alsactl-Fix-the-va_list-initialization-in-cerror_-an.patch
  0007-alsa-restore.rules-refer-to-correct-attr.patch
  0010-alsactl-Store-lockfile-in-var-lock-add-D-option-to-s.patch
  0011-configure-add-with-lock-dir-option.patch
  0012-alsactl-add-L-no-lock-and-change-D-lock-dir-to-O-sta.patch
  0013-alsactl-Do-not-run-udev-rule-before-datadir-sbindir-.patch
  0014-alsactl-Fixup-test-for-mydatadir-sbindir.patch</changelog>

</package>
<package pkgid="022d401bd20fd0789109be1e0cffa531eeb72e59ab1c2dec1983b0da882346d9" name="alsa-utils" arch="src">
    <version epoch="0" ver="1.0.27.2" rel="4.5.1"/>

<changelog author="tiwai@suse.de" date="1352721600">- Fix build breakage on 11.4
- Correct udev rules path (the recent udev places /usr/lib/udev)</changelog>
<changelog author="tiwai@suse.de" date="1354190400">- Backport fixes from upstream
  0006-alsamixer-fix-handling-of-removed-controls.patch
  0007-aplay-Show-usage-if-no-parameter-is-passed.patch
  0008-amixer-fix-rounding-of-relative-changes.patch
  0009-amixer-Fix-parsing-container-TLV-entries.patch</changelog>
<changelog author="tiwai@suse.de" date="1354276800">- Build with libsamplerate for aloop (bnc#792173)
- Add a patch to handle alsaloop properly without libsamplerate
  (bnc#792173):
  0010-alsaloop-Make-alsaloop-working-without-libsamplerate.patch
  0011-alsaloop-Fix-missing-endif.patch</changelog>
<changelog author="tiwai@suse.de" date="1354363200">- Add libsamplerate-devel to buildrequires for alsaloop
  (bnc#792173)</changelog>
<changelog author="tiwai@suse.de" date="1359720000">- Backport a few fix patches from upstream git tree:
  0012-aplay-Add-the-support-for-big-endian-WAV-format-RIFX.patch
  0013-configure-Fix-obsolete-AM_CONFIG_HEADER-macro.patch
  0014-speaker-test-increase-the-maximum-supported-rate-to-.patch
  0015-amixer-Fix-dB-value-outputs-in-amixer-contents.patch</changelog>
<changelog author="tiwai@suse.de" date="1365768000">- Update to version 1.0.27:
  including all previous fixes; all 00*-* patches dropped
  * Add support for alsactl daemon mode
  * Add snd_pcm_abort() support in aplay</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365854400">- Added service_typo.patch, fixes alsa-restore service not starting</changelog>
<changelog author="tiwai@suse.de" date="1366027200">- Replace the previous fix with the upstream patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366027201">- Added patch from upstream, which fixes buffer overflow,
  0002-alsactl-Fix-the-string-size-for-the-lock-file-contents.patch</changelog>
<changelog author="tiwai@suse.de" date="1366286400">- Upstream fix: arecord: add a missing break to the capture loop
  0003-arecord-add-a-missing-break-to-the-capture-loop.patch</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Bump to version 1.0.27.1, including previous fixes
- Removed requirement of libudev-devel, as the superfluous rules
  file is dropped in 1.0.27.1.
- Backport upstream fix:
  0001-Release-v1.0.27.1.patch</changelog>
<changelog author="tiwai@suse.de" date="1369656000">- Backport upstream fixes:
  0002-alsactl-init-ca0106-file-was-omitted.patch
  0003-alsactl-return-back-the-udevrules_DATA-rule-for-90-a.patch
- Add missing ca0106 alsactl init file
- Revert the udev file drop in the previous commit</changelog>
<changelog author="tiwai@suse.de" date="1369828800">- Backport upstream fixes wrt amixer:
  0004-amixer-Fix-the-hctl-elem-search-bug.patch
  0005-amixer-fix-print_dB-for-0.99-.-0.01-range.patch</changelog>
<changelog author="tiwai@suse.de" date="1371470400">- Backport upstream fixes wrt chmap handling:
  0006-amixer-Print-TLV-of-channel-map-controls.patch
  0007-speaker-test-Fix-wrong-wave-file-played-back-in-chma.patch</changelog>
<changelog author="tiwai@suse.de" date="1374235200">- updated to version 1.0.27.2
  including all previous fixes
- fix a typo in alsa-state.service:
  0001-alsactl-alsa-state.service-fix-typo-rkill-kill.patch</changelog>
<changelog author="tiwai@suse.de" date="1374235201">- remove superfluous ca0106 file (now included in 1.0.27.2)</changelog>
<changelog author="tiwai@suse.de" date="1378468800">- Upstream fix:
  0002-alsaloop-fix-wrong-alias-for-signal.h.patch</changelog>
<changelog author="tiwai@suse.de" date="1378728000">- Upstream fix:
  0003-aplay-fix-two-off-by-one-errors.patch</changelog>
<changelog author="tiwai@suse.de" date="1380628800">- Upstream fixes: addition of -z option to alsaloop, and a fix for
  amixer TLV parser
  0004-alsaloop-add-z-syslog-option-to-use-syslog-for-error.patch
  0005-amixer-actually-print-all-TLVs-in-a-container-TLV.patch</changelog>
<changelog author="tiwai@suse.de" date="1410177600">- Fix a few alsactl bugs (bnc#895581); now the lock file is created
  in /var/lock directory instead of /var/lib:
  0006-alsactl-Fix-the-va_list-initialization-in-cerror_-an.patch
  0007-alsa-restore.rules-refer-to-correct-attr.patch
  0010-alsactl-Store-lockfile-in-var-lock-add-D-option-to-s.patch
  0011-configure-add-with-lock-dir-option.patch
  0012-alsactl-add-L-no-lock-and-change-D-lock-dir-to-O-sta.patch
  0013-alsactl-Do-not-run-udev-rule-before-datadir-sbindir-.patch
  0014-alsactl-Fixup-test-for-mydatadir-sbindir.patch</changelog>

</package>
<package pkgid="0e7a7316bf8e89b5b68157f71808540dc20382b978e5a73cf14f6af1ab2fc6f4" name="alsa-utils" arch="x86_64">
    <version epoch="0" ver="1.0.27.2" rel="4.5.1"/>

<changelog author="tiwai@suse.de" date="1352721600">- Fix build breakage on 11.4
- Correct udev rules path (the recent udev places /usr/lib/udev)</changelog>
<changelog author="tiwai@suse.de" date="1354190400">- Backport fixes from upstream
  0006-alsamixer-fix-handling-of-removed-controls.patch
  0007-aplay-Show-usage-if-no-parameter-is-passed.patch
  0008-amixer-fix-rounding-of-relative-changes.patch
  0009-amixer-Fix-parsing-container-TLV-entries.patch</changelog>
<changelog author="tiwai@suse.de" date="1354276800">- Build with libsamplerate for aloop (bnc#792173)
- Add a patch to handle alsaloop properly without libsamplerate
  (bnc#792173):
  0010-alsaloop-Make-alsaloop-working-without-libsamplerate.patch
  0011-alsaloop-Fix-missing-endif.patch</changelog>
<changelog author="tiwai@suse.de" date="1354363200">- Add libsamplerate-devel to buildrequires for alsaloop
  (bnc#792173)</changelog>
<changelog author="tiwai@suse.de" date="1359720000">- Backport a few fix patches from upstream git tree:
  0012-aplay-Add-the-support-for-big-endian-WAV-format-RIFX.patch
  0013-configure-Fix-obsolete-AM_CONFIG_HEADER-macro.patch
  0014-speaker-test-increase-the-maximum-supported-rate-to-.patch
  0015-amixer-Fix-dB-value-outputs-in-amixer-contents.patch</changelog>
<changelog author="tiwai@suse.de" date="1365768000">- Update to version 1.0.27:
  including all previous fixes; all 00*-* patches dropped
  * Add support for alsactl daemon mode
  * Add snd_pcm_abort() support in aplay</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365854400">- Added service_typo.patch, fixes alsa-restore service not starting</changelog>
<changelog author="tiwai@suse.de" date="1366027200">- Replace the previous fix with the upstream patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366027201">- Added patch from upstream, which fixes buffer overflow,
  0002-alsactl-Fix-the-string-size-for-the-lock-file-contents.patch</changelog>
<changelog author="tiwai@suse.de" date="1366286400">- Upstream fix: arecord: add a missing break to the capture loop
  0003-arecord-add-a-missing-break-to-the-capture-loop.patch</changelog>
<changelog author="tiwai@suse.de" date="1369310400">- Bump to version 1.0.27.1, including previous fixes
- Removed requirement of libudev-devel, as the superfluous rules
  file is dropped in 1.0.27.1.
- Backport upstream fix:
  0001-Release-v1.0.27.1.patch</changelog>
<changelog author="tiwai@suse.de" date="1369656000">- Backport upstream fixes:
  0002-alsactl-init-ca0106-file-was-omitted.patch
  0003-alsactl-return-back-the-udevrules_DATA-rule-for-90-a.patch
- Add missing ca0106 alsactl init file
- Revert the udev file drop in the previous commit</changelog>
<changelog author="tiwai@suse.de" date="1369828800">- Backport upstream fixes wrt amixer:
  0004-amixer-Fix-the-hctl-elem-search-bug.patch
  0005-amixer-fix-print_dB-for-0.99-.-0.01-range.patch</changelog>
<changelog author="tiwai@suse.de" date="1371470400">- Backport upstream fixes wrt chmap handling:
  0006-amixer-Print-TLV-of-channel-map-controls.patch
  0007-speaker-test-Fix-wrong-wave-file-played-back-in-chma.patch</changelog>
<changelog author="tiwai@suse.de" date="1374235200">- updated to version 1.0.27.2
  including all previous fixes
- fix a typo in alsa-state.service:
  0001-alsactl-alsa-state.service-fix-typo-rkill-kill.patch</changelog>
<changelog author="tiwai@suse.de" date="1374235201">- remove superfluous ca0106 file (now included in 1.0.27.2)</changelog>
<changelog author="tiwai@suse.de" date="1378468800">- Upstream fix:
  0002-alsaloop-fix-wrong-alias-for-signal.h.patch</changelog>
<changelog author="tiwai@suse.de" date="1378728000">- Upstream fix:
  0003-aplay-fix-two-off-by-one-errors.patch</changelog>
<changelog author="tiwai@suse.de" date="1380628800">- Upstream fixes: addition of -z option to alsaloop, and a fix for
  amixer TLV parser
  0004-alsaloop-add-z-syslog-option-to-use-syslog-for-error.patch
  0005-amixer-actually-print-all-TLVs-in-a-container-TLV.patch</changelog>
<changelog author="tiwai@suse.de" date="1410177600">- Fix a few alsactl bugs (bnc#895581); now the lock file is created
  in /var/lock directory instead of /var/lib:
  0006-alsactl-Fix-the-va_list-initialization-in-cerror_-an.patch
  0007-alsa-restore.rules-refer-to-correct-attr.patch
  0010-alsactl-Store-lockfile-in-var-lock-add-D-option-to-s.patch
  0011-configure-add-with-lock-dir-option.patch
  0012-alsactl-add-L-no-lock-and-change-D-lock-dir-to-O-sta.patch
  0013-alsactl-Do-not-run-udev-rule-before-datadir-sbindir-.patch
  0014-alsactl-Fixup-test-for-mydatadir-sbindir.patch</changelog>

</package>
<package pkgid="be67af012a32f07f36eeb2e50b90edd134740f1c518f0255eb3303be4c1645e1" name="amarok" arch="i586">
    <version epoch="0" ver="2.8.0" rel="4.4.2"/>

<changelog author="ctrippe@opensuse.org" date="1351857600">- Install the english handbook only with the lang-package as otherwise
  translations will not be displayed when they are provided by
  bundle-lang-kde-* (bnc#695108)
- No longer Build-require libksuseinstall-devel as the corresponding
  patch was removed</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1355659200">- fix broken signal/slot signatures caused by SR:130759</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358510400">- Update to 2.7
  * FEATURES:
  * Track dragging support in Unique Tracks tab of the Synchronize
    Statistics action; allows you to do a "diff" between collections
    and transfer missing tracks. (kde#237266)
  * Amarok now scrobbles tracks in streams if the stream correctly
    updates meta-data. (kde#240732)
  * When scrobbling to Last.fm, Amarok announces suggested tag
    corrections (configurable). (kde#309697)
  * Ability to scrobble recently played tracks from iPod (and
    the like) to Last.fm.
  * Synchronization of labels and rating between Last.fm and
    Amarok collections; play count can be synchronized one-way
    from Last.fm to Amarok. (kde#206249)
  * Statistics synchronization between collections, supports
    rating, first / last played time, play count and labels.
  * New APG constraint: Specify a total file size for playlist.
    (kde#283618)
  * Amazon store: Added support for Amazon MP3 in Italy and
    Spain. (kde#307981)
  * Mark downloaded podcast episodes to keep, even when purge
    is enabled. (kde#261062)
  * Nepomuk plugin: Play and manage tracks using the Nepomuk
    database.
  * Support for reading and writing tags from/to mod, s3m,
    it and xm files.
  * Amazon store: It is now possible to add items to your
    shopping cart using amarok:// URLs.
  * Amazon store: Use the context info applet to show further
    infos about a selected item.
  * New argument --debug-audio to enable Phonon debugging.
  * Amazon store: We now ship a utility to handle downloads
    from Amazon.
- Removed patch liblastfm1-support.diff (fixed upstream)
- Added build require for nepomuk-core-devel for the Nepomuk plugin</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1360929600">- Added trackNumber-typo-fix.diff, fixes kde#311847, track number
  not shown in Nepomuk collection</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1368100800">- Added fix-crashes-on-track-change.patch, fixes frequent crashes
  when changing tracks (kde#319371)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1368619200">- Update to 2.7.1
  * CHANGES:
  * Problematic support for treating MusicBrainz ids as track
    unique ids was dropped; should avoid surprising
    "Duplicate Tracks Found" errors. (315329)
  * BUGFIXES:
  * Fix inability to reverse "Use Music Location" decision and
    inability to clear database once all collection directories
    have been unset. (kde#316216)
  * Fix frequent crashes on Linux when starting to play a track.
    (kde#319371)
  * Fix compilation error on systems with gcc-4.2 (kde#314528)
  * Fix inability to create database when home directory contains
    non-ASCII characters. (kde#313914)
  * Fix typo in Nepomuk query which did not let track numbers of
    Nepomuk Collection tracks show up in Amarok. (kde#311847)
- Drop fix-crashes-on-track-change.patch and trackNumber-typo-fix.diff
  these patches are included in this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371124800">- Added kill-amarok-mockup.patch which removes usage of non-existant
  Amarok-Mockup plasma theme, that casues crashes with KDE 4.11
  (kde#320855)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1371988800">- Added clamz as recommended runtime requirement.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1372939200">- Update to 2.7.90
  * FEATURES:
  * Ctrl+C copies the currently playing artist &amp; title to the
    clipboard. (kde#228872)
  * Volume fade-out is now also available for pause.
  * The Files browser now has a Refresh button. (kde#213666)
  * The active playlist item is animated with a soft glow effect.
  * Added an audio analyzer visualization applet.
  * Added a function for resetting the GUI layout back to default
    state. (kde#300753)
  * Pressing enter when searching collections now adds found
    tracks to the playlist and clears the search bar, this is a
    very convenient way to populate your playlist.
  * Allow to transcode only certain (different format,
    playability) tracks when transferring them to a
    collection (kde#312407)
  * On-Screen-Display fades in/out smoothly.
  * Added support for .asx playlists; (kde#170207)
  * Add Radio GFM radio streams to Cool Stream Script.
    (kde#317978)
  * Added options to pause playback on system suspend and to
    inhibit automatic suspend  if playing a track (enabled by
    default); (kde#259862) (kde#222571)
  * Playlist files are now read asynchronously when possible;
    (kde#291934)
  * Added support to filter tracks to scrobble to Last.fm by
    label. (kde#140198)
  * Added transcoding support for Opus codec if ffmpeg is
    compiled with support for the libopus library
  * Added keyboard shortcuts for small 2 s seeks
    (Ctrl + Left/Right) and long 1 minute  seeks
    (Shift + Left/Right) in addition to standard 10 s seeks.
    Durations are now configurable in amarokrc, see
    Amarok Handbook (kde#177258)
  * Added support for files in Opus codec if Amarok is compiled
    against recent enough TagLib (post 1.8) (kde#312905)
  * Added Ctrl+H shortcut to randomize playlist (kde#208061)
  * CHANGES:
  * Removed LikeBack (a development feature in debug builds).
    (kde#312498) (kde#252323)
  * Collection Browser: Artist level was renamed to Track Artist
    and replaced by Album Artist by default. Various Artists
    item is no longer shown under Track Artist level.
  * Removed the splash screen.
  * Playlist-related actions were harmonized, double-clicking
    or pressing enter will append tracks to playlist, using any
    "play media" action will prepend tracks to queue and
    immediately start playing; middle-clicking or will append
    &amp; play while other append or replace actions will no longer
    start playback. (kde#145468, kde#145490, kde#194549)
  * When a new collection plugin is enabled, its collections
    appear immediately without a need for restart.
  * Update the MusicBrainz tagger to MusicBrainz web service 2,
    make it show some more good suggestions for tagging, and add
    some options to help choosing the best results.
  * Add note about generating .mood files into Moodbar Options;
    (kde#289483)
  * Amarok now depends on Qt 4.8.2.
  * Add prepareToQuit() signal to Amarok.Window script bindings;
    (kde#241066)
  * Data CDs are now recognized in Amarok; (kde#316128)
  * On-Screen-Display now uses the system font instead of
    hardcoded sans-serif. (kde#248707)
  * Fancy behavior of some context menus showing different
    actions when Shift key is held has been reverted.
    All entries are now shown all the time.
  * The dynamic playlist behavior has changed. It will no longer
    generate "pretty good" playlists that do not fulfill the
    given biases. Instead it might add no song at all if given
    impossible-to-fulfill conditions.
  * The "tracks have been hidden in the playlist" warning when
    filtering the playlist is now displayed inside the playlist.
    (kde#260352)
  * Update tag widget for Layout edit, filter edit, organize
    collection and guess tag dialog.
  * When fadeout and/or Replay Gain isn't possible, gray-out
    related UI elements in order not to fool users.
  * BUGFIXES:
  * When you remove whole directories from the Local Collection
    and have Watch Folders for Changes enabled, the tracks now
    disappear from Collection Browser. (kde#311078)
  * Fix dynamic playlist bug: When "Automatically scroll playlist
    to current track" was enabled, Amarok would keep scrolling
    to the bottom. (kde#284214)
  * Fix a problem where ghost tracks would remain in the Local
    Collection until the  database is wiped. (kde#319084)
  * Added missing CMake check for QtWebKit. (kde#321598)
  * Definitely fix a bug where Local Collection wouldn't update
    in browser. (kde#262504)
  * Fix crashed caused by race conditions at the end of the
    track scanning. (kde#319835)
  * Fix crash when disabling the Free Music Charts script.
    (kde#321329)
  * Albums having same name but different album artist won't be
    mixed together on the playlist if sorting by album is enabled.
  * Fix crash on startup with KDE 4.11. (kde#320855)
  * Fix tracks not able to be dragged around when playlist
    is shuffled. (kde#320129)
  * Prevent Last.fm scrobbles not being submitted until restart
    due to change in liblastfm 1.0.7. (kde#320219)
  * Resume Playback on Start will correctly restore paused state,
    instead of always starting in playing state. (kde#313330)
  * Optimize removal of tens of thousands of tracks from
    playlist. (kde#316242)
  * Fix `amarok --queue` which didn't actually queue the
    tracks. (kde#317385)
  * Fix suboptimal initial MusicBrainz tag dialog size by
    remembering it. (kde#269454)
  * Fix file-browser becoming empty when a file was moved to
    trash. (kde#317944)
  * Fix `amarok --play file.mp3` option didn't actually start
    playback.
  * Reason why a particular track is not playable is now shown
    in playlist tooltip; (kde#313649)
  * Pre-apmlifier in equalizer is now only enabled if it is
    actually supported; (kde#301311)
  * Fix Amarok crashed while doing "Organize Files" (kde#317980)
  * Fix Amarok erroneously merges two albums.
    (kde#216759, kde#272802)
  * Fix Crash on very long artist names. (kde#276894)
  * Fix Move tracks to rubbish and the current track cover
    changes to the deleted cover. (kde#306735)
  * Fix theoretical configwidget leak in services. (kde#301352)
  * Fix "Local collection" text label is truncated with
    large font. (kde#282561)
  * Fix crash by putting a broadcast in the playlist.
    (kde#313718)
  * Fix Keyboard navigates context menu in collection will move
    two items. (kde#307794)
  * Fix add track to playlist by double click on arrow in the
    collection. (kde#279513)
  * Fix VFAT safe names missing a couple of idiosyncrasies.
    (kde#312574)
  * Clarify message when Last.fm streams are not available.
    (kde#315771)
  * Fix crash when Dynamic Playlist based on last.fm is aborted.
    (kde#314243)
  * Fix Group by directory doesn't work in main playlist.
    (kde#265415)
  * Don't remove common labels when editing the tags of multiple
    tracks. (kde#316043)
  * Fix vertical positioning of On-Screen-Display. (kde#269788)
  * Fix OSD sometimes misplaces the font and the font's shadow.
    (kde#257643)
  * Prevent inability to save Last.fm password in corner cases.
    (kde#315306)
  * Fix "Copy to Collection" window doesn't fit on small screens.
    (kde#283361)
  * Fix crash when quitting Amarok with Statistics Synchronization
    open. (kde#315525)
  * Fix items moving around when expanded in collection browser.
    (kde#305602)
  * Fix Organize collection folder deletion going 'too far'.
    (kde#314348)
  * Fix %albumartist% placeholder translates to some strange unicode
    symbol. (kde#314351)
  * Fix bumpy fade-out when first used. (kde#312062)
  * Fix crash when switching/removing organize collection presets.
    (kde#314344)
  * Fix crash on start if a playlist source is unavailable.
    (kde#313460)
  * Fix Copy/Move to collection picks up wrong destination path
    and fails silently. (kde#314460)
  * Cleanup TrackOrganizer. (kde#305291)
  * Fix Editing Playist Layout Editor. (kde#250594)
  * Fix Display glitch for rating in verbose playlist. (kde#300118)
  * Refactoring Ampache service, fix Albums with multiple disks not
    listed correctly. (kde#249857)
  * Fix playlist sorting by type. (kde#249338)
  * Fix subtle bugs when a long fade-out is initiated near the
    song end.
  * Don't try to fade-out with phonon backends that don't
    support it. (vlc)
  * Fix Can't edit &amp; save an existing equalizer preset.
    (kde#241874)
  * Clean up Equalizer Dialog. (kde#274972)
- Drop kill-amarok-mockup.patch, included in this release
- Added oxygen-icon-theme BuildRequires, needed for amzdownloader icon
- Explicitly BuildRequire Qt4 &gt;= 4.8.2, as per upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1376481600">- Update to 2.8.0
  VERSION 2.8
  * FEATURES:
  * Tracks from Recently Played List widget can now directly be
    added to the playlist. (kde#279263, kde#296090)
  * CHANGES:
  * The Jamendo service now uses a higher quality MP3 format
    instead of Ogg Vorbis.
  * Added an option whether adding tracks to playlist should
    start playing. (kde#322428)
  * Amarok now depends on Qt 4.8.3.
  * Amarok now uses FindFFMpeg.cmake from kdelibs
  * BUGFIXES:
  * Don't reload Wikipedia applet content if artist/album have
    not changed. (kde#112044)
  * Jamendo service: Albums are now downloaded directly instead
    of going via BitTorrent. This is far more reliable and also
    supports on-the-fly transcoding. (kde#299434)
  * Work-around Solid UDisks2 backend bug that caused
    USB Mass Storage devices and iPods not being recognized when
    connected before Amarok was started. Also fixes a bug where
    blank devices would appear in Play Media dialog.
    (kde#322980)
  * Definitely fix a bug where storing Last.fm credentials in
    plain-text isn't offered when KWallet is disabled.
    (kde#315306)
  * Radio streams from scripted services are now
    instantly playable. (kde#320718)
  * Recently Played List widget now keeps its own time for
    tracks instead of relying on the Last Played statistic.
    (kde#302485)
  * Prevent hitting an assertion failure if just removed track
    from the Local Collection is edited. (kde#322474)
  * Fixed a regression introduced in 2.8 Beta where tracks in
    the Local Collection were sometimes forgotten and then
    found again. (kde#322603)
  * Fixed invalid SQL queries when you have files or folders
    with an apostrophe in your collection. (kde#322415)
  * Fixed organizing/copying/moving tracks to Local
    Collection on Windows. (kde#279560, kde#302251)
  * Various usability improvements for the applet toolbar.
    (kde#197948)
  * Removed broken Apply button in applets' settings dialog.
    (kde#322015)
  * Fix incorrect colors in Context View toolbar when
    switching themes. (kde#301305)
  * Many fixes for various bugs with switching desktop color
    themes at runtime, including OSD, spectrum analyzer,
    collection browser.
  * Avoid updating the MPRIS2 Metadata between tracks.
    (kde#321602)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377086400">- Added Don-t-add-the-analyzer-applet-when-Phonon-doesn-t-su.patch
  from upstream, avoids adding the analyzer applet on phonon backends
  that don't support it (e.g. vlc)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added patches from upstream:
  0002-Don-t-allow-adding-Analyzer-applet-when-not-supporte.patch,
  0003-Optimization-Don-t-draw-more-than-necessary.patch,
  0004-Fix-reading-Album-Artist-Compilation-Disc-Number-in-.patch,
  0005-Sync-playlist-search-config-instantly.patch,
  0006-Don-t-suppress-html-tag-like-characters.patch and
  0007-Fix-performance-issue-with-large-podcast-feeds.patch
  which resolve kde#323735, kde#324295, kde#324614, kde#283022 and
  kde#323119
- Renamed Don-t-add-the-analyzer-applet-when-Phonon-doesn-t-su.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380628800">- Explicitly require phonon-backend, as it's possible that in certain
  conditions users would have none installed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394193600">- Remove nepomuk-core from the buildrequires</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1399464000">- Added libxml2-devel BuildRequires, was pulled in via
  libkde4-devel previously</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
<changelog author="olaf@aepfle.de" date="1418904000">- Require correct libtag.so to avoid undefined symbols at runtime</changelog>
<changelog author="lbeltrame@kde.org" date="1420891200">- Add 0008-Clean-up-the-leftover-of-strigi-removal.patch:
  remove unneeded Strigi reference in the Ampache plugin build
  system
- Add 0009-Fix-Ampache-plugin-connections.patch: unbreak Ampache
  plugin connection due to wrong hashing algorithm being used</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm can be rebuild</changelog>
<changelog author="wbauer@tmo.at" date="1436443200">- Add Enable_Wikipedia_over_SSL.patch to make the Wikipedia applet
  work again (boo#934730, kde#349313)</changelog>

</package>
<package pkgid="7af6d553a3f15c87a1b6354b25a8061ab89fe4ec069da6970f829691c2836385" name="amarok" arch="src">
    <version epoch="0" ver="2.8.0" rel="4.4.2"/>

<changelog author="ctrippe@opensuse.org" date="1351857600">- Install the english handbook only with the lang-package as otherwise
  translations will not be displayed when they are provided by
  bundle-lang-kde-* (bnc#695108)
- No longer Build-require libksuseinstall-devel as the corresponding
  patch was removed</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1355659200">- fix broken signal/slot signatures caused by SR:130759</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358510400">- Update to 2.7
  * FEATURES:
  * Track dragging support in Unique Tracks tab of the Synchronize
    Statistics action; allows you to do a "diff" between collections
    and transfer missing tracks. (kde#237266)
  * Amarok now scrobbles tracks in streams if the stream correctly
    updates meta-data. (kde#240732)
  * When scrobbling to Last.fm, Amarok announces suggested tag
    corrections (configurable). (kde#309697)
  * Ability to scrobble recently played tracks from iPod (and
    the like) to Last.fm.
  * Synchronization of labels and rating between Last.fm and
    Amarok collections; play count can be synchronized one-way
    from Last.fm to Amarok. (kde#206249)
  * Statistics synchronization between collections, supports
    rating, first / last played time, play count and labels.
  * New APG constraint: Specify a total file size for playlist.
    (kde#283618)
  * Amazon store: Added support for Amazon MP3 in Italy and
    Spain. (kde#307981)
  * Mark downloaded podcast episodes to keep, even when purge
    is enabled. (kde#261062)
  * Nepomuk plugin: Play and manage tracks using the Nepomuk
    database.
  * Support for reading and writing tags from/to mod, s3m,
    it and xm files.
  * Amazon store: It is now possible to add items to your
    shopping cart using amarok:// URLs.
  * Amazon store: Use the context info applet to show further
    infos about a selected item.
  * New argument --debug-audio to enable Phonon debugging.
  * Amazon store: We now ship a utility to handle downloads
    from Amazon.
- Removed patch liblastfm1-support.diff (fixed upstream)
- Added build require for nepomuk-core-devel for the Nepomuk plugin</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1360929600">- Added trackNumber-typo-fix.diff, fixes kde#311847, track number
  not shown in Nepomuk collection</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1368100800">- Added fix-crashes-on-track-change.patch, fixes frequent crashes
  when changing tracks (kde#319371)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1368619200">- Update to 2.7.1
  * CHANGES:
  * Problematic support for treating MusicBrainz ids as track
    unique ids was dropped; should avoid surprising
    "Duplicate Tracks Found" errors. (315329)
  * BUGFIXES:
  * Fix inability to reverse "Use Music Location" decision and
    inability to clear database once all collection directories
    have been unset. (kde#316216)
  * Fix frequent crashes on Linux when starting to play a track.
    (kde#319371)
  * Fix compilation error on systems with gcc-4.2 (kde#314528)
  * Fix inability to create database when home directory contains
    non-ASCII characters. (kde#313914)
  * Fix typo in Nepomuk query which did not let track numbers of
    Nepomuk Collection tracks show up in Amarok. (kde#311847)
- Drop fix-crashes-on-track-change.patch and trackNumber-typo-fix.diff
  these patches are included in this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371124800">- Added kill-amarok-mockup.patch which removes usage of non-existant
  Amarok-Mockup plasma theme, that casues crashes with KDE 4.11
  (kde#320855)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1371988800">- Added clamz as recommended runtime requirement.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1372939200">- Update to 2.7.90
  * FEATURES:
  * Ctrl+C copies the currently playing artist &amp; title to the
    clipboard. (kde#228872)
  * Volume fade-out is now also available for pause.
  * The Files browser now has a Refresh button. (kde#213666)
  * The active playlist item is animated with a soft glow effect.
  * Added an audio analyzer visualization applet.
  * Added a function for resetting the GUI layout back to default
    state. (kde#300753)
  * Pressing enter when searching collections now adds found
    tracks to the playlist and clears the search bar, this is a
    very convenient way to populate your playlist.
  * Allow to transcode only certain (different format,
    playability) tracks when transferring them to a
    collection (kde#312407)
  * On-Screen-Display fades in/out smoothly.
  * Added support for .asx playlists; (kde#170207)
  * Add Radio GFM radio streams to Cool Stream Script.
    (kde#317978)
  * Added options to pause playback on system suspend and to
    inhibit automatic suspend  if playing a track (enabled by
    default); (kde#259862) (kde#222571)
  * Playlist files are now read asynchronously when possible;
    (kde#291934)
  * Added support to filter tracks to scrobble to Last.fm by
    label. (kde#140198)
  * Added transcoding support for Opus codec if ffmpeg is
    compiled with support for the libopus library
  * Added keyboard shortcuts for small 2 s seeks
    (Ctrl + Left/Right) and long 1 minute  seeks
    (Shift + Left/Right) in addition to standard 10 s seeks.
    Durations are now configurable in amarokrc, see
    Amarok Handbook (kde#177258)
  * Added support for files in Opus codec if Amarok is compiled
    against recent enough TagLib (post 1.8) (kde#312905)
  * Added Ctrl+H shortcut to randomize playlist (kde#208061)
  * CHANGES:
  * Removed LikeBack (a development feature in debug builds).
    (kde#312498) (kde#252323)
  * Collection Browser: Artist level was renamed to Track Artist
    and replaced by Album Artist by default. Various Artists
    item is no longer shown under Track Artist level.
  * Removed the splash screen.
  * Playlist-related actions were harmonized, double-clicking
    or pressing enter will append tracks to playlist, using any
    "play media" action will prepend tracks to queue and
    immediately start playing; middle-clicking or will append
    &amp; play while other append or replace actions will no longer
    start playback. (kde#145468, kde#145490, kde#194549)
  * When a new collection plugin is enabled, its collections
    appear immediately without a need for restart.
  * Update the MusicBrainz tagger to MusicBrainz web service 2,
    make it show some more good suggestions for tagging, and add
    some options to help choosing the best results.
  * Add note about generating .mood files into Moodbar Options;
    (kde#289483)
  * Amarok now depends on Qt 4.8.2.
  * Add prepareToQuit() signal to Amarok.Window script bindings;
    (kde#241066)
  * Data CDs are now recognized in Amarok; (kde#316128)
  * On-Screen-Display now uses the system font instead of
    hardcoded sans-serif. (kde#248707)
  * Fancy behavior of some context menus showing different
    actions when Shift key is held has been reverted.
    All entries are now shown all the time.
  * The dynamic playlist behavior has changed. It will no longer
    generate "pretty good" playlists that do not fulfill the
    given biases. Instead it might add no song at all if given
    impossible-to-fulfill conditions.
  * The "tracks have been hidden in the playlist" warning when
    filtering the playlist is now displayed inside the playlist.
    (kde#260352)
  * Update tag widget for Layout edit, filter edit, organize
    collection and guess tag dialog.
  * When fadeout and/or Replay Gain isn't possible, gray-out
    related UI elements in order not to fool users.
  * BUGFIXES:
  * When you remove whole directories from the Local Collection
    and have Watch Folders for Changes enabled, the tracks now
    disappear from Collection Browser. (kde#311078)
  * Fix dynamic playlist bug: When "Automatically scroll playlist
    to current track" was enabled, Amarok would keep scrolling
    to the bottom. (kde#284214)
  * Fix a problem where ghost tracks would remain in the Local
    Collection until the  database is wiped. (kde#319084)
  * Added missing CMake check for QtWebKit. (kde#321598)
  * Definitely fix a bug where Local Collection wouldn't update
    in browser. (kde#262504)
  * Fix crashed caused by race conditions at the end of the
    track scanning. (kde#319835)
  * Fix crash when disabling the Free Music Charts script.
    (kde#321329)
  * Albums having same name but different album artist won't be
    mixed together on the playlist if sorting by album is enabled.
  * Fix crash on startup with KDE 4.11. (kde#320855)
  * Fix tracks not able to be dragged around when playlist
    is shuffled. (kde#320129)
  * Prevent Last.fm scrobbles not being submitted until restart
    due to change in liblastfm 1.0.7. (kde#320219)
  * Resume Playback on Start will correctly restore paused state,
    instead of always starting in playing state. (kde#313330)
  * Optimize removal of tens of thousands of tracks from
    playlist. (kde#316242)
  * Fix `amarok --queue` which didn't actually queue the
    tracks. (kde#317385)
  * Fix suboptimal initial MusicBrainz tag dialog size by
    remembering it. (kde#269454)
  * Fix file-browser becoming empty when a file was moved to
    trash. (kde#317944)
  * Fix `amarok --play file.mp3` option didn't actually start
    playback.
  * Reason why a particular track is not playable is now shown
    in playlist tooltip; (kde#313649)
  * Pre-apmlifier in equalizer is now only enabled if it is
    actually supported; (kde#301311)
  * Fix Amarok crashed while doing "Organize Files" (kde#317980)
  * Fix Amarok erroneously merges two albums.
    (kde#216759, kde#272802)
  * Fix Crash on very long artist names. (kde#276894)
  * Fix Move tracks to rubbish and the current track cover
    changes to the deleted cover. (kde#306735)
  * Fix theoretical configwidget leak in services. (kde#301352)
  * Fix "Local collection" text label is truncated with
    large font. (kde#282561)
  * Fix crash by putting a broadcast in the playlist.
    (kde#313718)
  * Fix Keyboard navigates context menu in collection will move
    two items. (kde#307794)
  * Fix add track to playlist by double click on arrow in the
    collection. (kde#279513)
  * Fix VFAT safe names missing a couple of idiosyncrasies.
    (kde#312574)
  * Clarify message when Last.fm streams are not available.
    (kde#315771)
  * Fix crash when Dynamic Playlist based on last.fm is aborted.
    (kde#314243)
  * Fix Group by directory doesn't work in main playlist.
    (kde#265415)
  * Don't remove common labels when editing the tags of multiple
    tracks. (kde#316043)
  * Fix vertical positioning of On-Screen-Display. (kde#269788)
  * Fix OSD sometimes misplaces the font and the font's shadow.
    (kde#257643)
  * Prevent inability to save Last.fm password in corner cases.
    (kde#315306)
  * Fix "Copy to Collection" window doesn't fit on small screens.
    (kde#283361)
  * Fix crash when quitting Amarok with Statistics Synchronization
    open. (kde#315525)
  * Fix items moving around when expanded in collection browser.
    (kde#305602)
  * Fix Organize collection folder deletion going 'too far'.
    (kde#314348)
  * Fix %albumartist% placeholder translates to some strange unicode
    symbol. (kde#314351)
  * Fix bumpy fade-out when first used. (kde#312062)
  * Fix crash when switching/removing organize collection presets.
    (kde#314344)
  * Fix crash on start if a playlist source is unavailable.
    (kde#313460)
  * Fix Copy/Move to collection picks up wrong destination path
    and fails silently. (kde#314460)
  * Cleanup TrackOrganizer. (kde#305291)
  * Fix Editing Playist Layout Editor. (kde#250594)
  * Fix Display glitch for rating in verbose playlist. (kde#300118)
  * Refactoring Ampache service, fix Albums with multiple disks not
    listed correctly. (kde#249857)
  * Fix playlist sorting by type. (kde#249338)
  * Fix subtle bugs when a long fade-out is initiated near the
    song end.
  * Don't try to fade-out with phonon backends that don't
    support it. (vlc)
  * Fix Can't edit &amp; save an existing equalizer preset.
    (kde#241874)
  * Clean up Equalizer Dialog. (kde#274972)
- Drop kill-amarok-mockup.patch, included in this release
- Added oxygen-icon-theme BuildRequires, needed for amzdownloader icon
- Explicitly BuildRequire Qt4 &gt;= 4.8.2, as per upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1376481600">- Update to 2.8.0
  VERSION 2.8
  * FEATURES:
  * Tracks from Recently Played List widget can now directly be
    added to the playlist. (kde#279263, kde#296090)
  * CHANGES:
  * The Jamendo service now uses a higher quality MP3 format
    instead of Ogg Vorbis.
  * Added an option whether adding tracks to playlist should
    start playing. (kde#322428)
  * Amarok now depends on Qt 4.8.3.
  * Amarok now uses FindFFMpeg.cmake from kdelibs
  * BUGFIXES:
  * Don't reload Wikipedia applet content if artist/album have
    not changed. (kde#112044)
  * Jamendo service: Albums are now downloaded directly instead
    of going via BitTorrent. This is far more reliable and also
    supports on-the-fly transcoding. (kde#299434)
  * Work-around Solid UDisks2 backend bug that caused
    USB Mass Storage devices and iPods not being recognized when
    connected before Amarok was started. Also fixes a bug where
    blank devices would appear in Play Media dialog.
    (kde#322980)
  * Definitely fix a bug where storing Last.fm credentials in
    plain-text isn't offered when KWallet is disabled.
    (kde#315306)
  * Radio streams from scripted services are now
    instantly playable. (kde#320718)
  * Recently Played List widget now keeps its own time for
    tracks instead of relying on the Last Played statistic.
    (kde#302485)
  * Prevent hitting an assertion failure if just removed track
    from the Local Collection is edited. (kde#322474)
  * Fixed a regression introduced in 2.8 Beta where tracks in
    the Local Collection were sometimes forgotten and then
    found again. (kde#322603)
  * Fixed invalid SQL queries when you have files or folders
    with an apostrophe in your collection. (kde#322415)
  * Fixed organizing/copying/moving tracks to Local
    Collection on Windows. (kde#279560, kde#302251)
  * Various usability improvements for the applet toolbar.
    (kde#197948)
  * Removed broken Apply button in applets' settings dialog.
    (kde#322015)
  * Fix incorrect colors in Context View toolbar when
    switching themes. (kde#301305)
  * Many fixes for various bugs with switching desktop color
    themes at runtime, including OSD, spectrum analyzer,
    collection browser.
  * Avoid updating the MPRIS2 Metadata between tracks.
    (kde#321602)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377086400">- Added Don-t-add-the-analyzer-applet-when-Phonon-doesn-t-su.patch
  from upstream, avoids adding the analyzer applet on phonon backends
  that don't support it (e.g. vlc)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added patches from upstream:
  0002-Don-t-allow-adding-Analyzer-applet-when-not-supporte.patch,
  0003-Optimization-Don-t-draw-more-than-necessary.patch,
  0004-Fix-reading-Album-Artist-Compilation-Disc-Number-in-.patch,
  0005-Sync-playlist-search-config-instantly.patch,
  0006-Don-t-suppress-html-tag-like-characters.patch and
  0007-Fix-performance-issue-with-large-podcast-feeds.patch
  which resolve kde#323735, kde#324295, kde#324614, kde#283022 and
  kde#323119
- Renamed Don-t-add-the-analyzer-applet-when-Phonon-doesn-t-su.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380628800">- Explicitly require phonon-backend, as it's possible that in certain
  conditions users would have none installed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394193600">- Remove nepomuk-core from the buildrequires</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1399464000">- Added libxml2-devel BuildRequires, was pulled in via
  libkde4-devel previously</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
<changelog author="olaf@aepfle.de" date="1418904000">- Require correct libtag.so to avoid undefined symbols at runtime</changelog>
<changelog author="lbeltrame@kde.org" date="1420891200">- Add 0008-Clean-up-the-leftover-of-strigi-removal.patch:
  remove unneeded Strigi reference in the Ampache plugin build
  system
- Add 0009-Fix-Ampache-plugin-connections.patch: unbreak Ampache
  plugin connection due to wrong hashing algorithm being used</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm can be rebuild</changelog>
<changelog author="wbauer@tmo.at" date="1436443200">- Add Enable_Wikipedia_over_SSL.patch to make the Wikipedia applet
  work again (boo#934730, kde#349313)</changelog>

</package>
<package pkgid="b490b9562c538290e33ec7d717db539a9b88e5d5a1fcb9b090581bb0aafe9d5d" name="amarok" arch="x86_64">
    <version epoch="0" ver="2.8.0" rel="4.4.2"/>

<changelog author="ctrippe@opensuse.org" date="1351857600">- Install the english handbook only with the lang-package as otherwise
  translations will not be displayed when they are provided by
  bundle-lang-kde-* (bnc#695108)
- No longer Build-require libksuseinstall-devel as the corresponding
  patch was removed</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1355659200">- fix broken signal/slot signatures caused by SR:130759</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358510400">- Update to 2.7
  * FEATURES:
  * Track dragging support in Unique Tracks tab of the Synchronize
    Statistics action; allows you to do a "diff" between collections
    and transfer missing tracks. (kde#237266)
  * Amarok now scrobbles tracks in streams if the stream correctly
    updates meta-data. (kde#240732)
  * When scrobbling to Last.fm, Amarok announces suggested tag
    corrections (configurable). (kde#309697)
  * Ability to scrobble recently played tracks from iPod (and
    the like) to Last.fm.
  * Synchronization of labels and rating between Last.fm and
    Amarok collections; play count can be synchronized one-way
    from Last.fm to Amarok. (kde#206249)
  * Statistics synchronization between collections, supports
    rating, first / last played time, play count and labels.
  * New APG constraint: Specify a total file size for playlist.
    (kde#283618)
  * Amazon store: Added support for Amazon MP3 in Italy and
    Spain. (kde#307981)
  * Mark downloaded podcast episodes to keep, even when purge
    is enabled. (kde#261062)
  * Nepomuk plugin: Play and manage tracks using the Nepomuk
    database.
  * Support for reading and writing tags from/to mod, s3m,
    it and xm files.
  * Amazon store: It is now possible to add items to your
    shopping cart using amarok:// URLs.
  * Amazon store: Use the context info applet to show further
    infos about a selected item.
  * New argument --debug-audio to enable Phonon debugging.
  * Amazon store: We now ship a utility to handle downloads
    from Amazon.
- Removed patch liblastfm1-support.diff (fixed upstream)
- Added build require for nepomuk-core-devel for the Nepomuk plugin</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1360929600">- Added trackNumber-typo-fix.diff, fixes kde#311847, track number
  not shown in Nepomuk collection</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1368100800">- Added fix-crashes-on-track-change.patch, fixes frequent crashes
  when changing tracks (kde#319371)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1368619200">- Update to 2.7.1
  * CHANGES:
  * Problematic support for treating MusicBrainz ids as track
    unique ids was dropped; should avoid surprising
    "Duplicate Tracks Found" errors. (315329)
  * BUGFIXES:
  * Fix inability to reverse "Use Music Location" decision and
    inability to clear database once all collection directories
    have been unset. (kde#316216)
  * Fix frequent crashes on Linux when starting to play a track.
    (kde#319371)
  * Fix compilation error on systems with gcc-4.2 (kde#314528)
  * Fix inability to create database when home directory contains
    non-ASCII characters. (kde#313914)
  * Fix typo in Nepomuk query which did not let track numbers of
    Nepomuk Collection tracks show up in Amarok. (kde#311847)
- Drop fix-crashes-on-track-change.patch and trackNumber-typo-fix.diff
  these patches are included in this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371124800">- Added kill-amarok-mockup.patch which removes usage of non-existant
  Amarok-Mockup plasma theme, that casues crashes with KDE 4.11
  (kde#320855)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1371988800">- Added clamz as recommended runtime requirement.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1372939200">- Update to 2.7.90
  * FEATURES:
  * Ctrl+C copies the currently playing artist &amp; title to the
    clipboard. (kde#228872)
  * Volume fade-out is now also available for pause.
  * The Files browser now has a Refresh button. (kde#213666)
  * The active playlist item is animated with a soft glow effect.
  * Added an audio analyzer visualization applet.
  * Added a function for resetting the GUI layout back to default
    state. (kde#300753)
  * Pressing enter when searching collections now adds found
    tracks to the playlist and clears the search bar, this is a
    very convenient way to populate your playlist.
  * Allow to transcode only certain (different format,
    playability) tracks when transferring them to a
    collection (kde#312407)
  * On-Screen-Display fades in/out smoothly.
  * Added support for .asx playlists; (kde#170207)
  * Add Radio GFM radio streams to Cool Stream Script.
    (kde#317978)
  * Added options to pause playback on system suspend and to
    inhibit automatic suspend  if playing a track (enabled by
    default); (kde#259862) (kde#222571)
  * Playlist files are now read asynchronously when possible;
    (kde#291934)
  * Added support to filter tracks to scrobble to Last.fm by
    label. (kde#140198)
  * Added transcoding support for Opus codec if ffmpeg is
    compiled with support for the libopus library
  * Added keyboard shortcuts for small 2 s seeks
    (Ctrl + Left/Right) and long 1 minute  seeks
    (Shift + Left/Right) in addition to standard 10 s seeks.
    Durations are now configurable in amarokrc, see
    Amarok Handbook (kde#177258)
  * Added support for files in Opus codec if Amarok is compiled
    against recent enough TagLib (post 1.8) (kde#312905)
  * Added Ctrl+H shortcut to randomize playlist (kde#208061)
  * CHANGES:
  * Removed LikeBack (a development feature in debug builds).
    (kde#312498) (kde#252323)
  * Collection Browser: Artist level was renamed to Track Artist
    and replaced by Album Artist by default. Various Artists
    item is no longer shown under Track Artist level.
  * Removed the splash screen.
  * Playlist-related actions were harmonized, double-clicking
    or pressing enter will append tracks to playlist, using any
    "play media" action will prepend tracks to queue and
    immediately start playing; middle-clicking or will append
    &amp; play while other append or replace actions will no longer
    start playback. (kde#145468, kde#145490, kde#194549)
  * When a new collection plugin is enabled, its collections
    appear immediately without a need for restart.
  * Update the MusicBrainz tagger to MusicBrainz web service 2,
    make it show some more good suggestions for tagging, and add
    some options to help choosing the best results.
  * Add note about generating .mood files into Moodbar Options;
    (kde#289483)
  * Amarok now depends on Qt 4.8.2.
  * Add prepareToQuit() signal to Amarok.Window script bindings;
    (kde#241066)
  * Data CDs are now recognized in Amarok; (kde#316128)
  * On-Screen-Display now uses the system font instead of
    hardcoded sans-serif. (kde#248707)
  * Fancy behavior of some context menus showing different
    actions when Shift key is held has been reverted.
    All entries are now shown all the time.
  * The dynamic playlist behavior has changed. It will no longer
    generate "pretty good" playlists that do not fulfill the
    given biases. Instead it might add no song at all if given
    impossible-to-fulfill conditions.
  * The "tracks have been hidden in the playlist" warning when
    filtering the playlist is now displayed inside the playlist.
    (kde#260352)
  * Update tag widget for Layout edit, filter edit, organize
    collection and guess tag dialog.
  * When fadeout and/or Replay Gain isn't possible, gray-out
    related UI elements in order not to fool users.
  * BUGFIXES:
  * When you remove whole directories from the Local Collection
    and have Watch Folders for Changes enabled, the tracks now
    disappear from Collection Browser. (kde#311078)
  * Fix dynamic playlist bug: When "Automatically scroll playlist
    to current track" was enabled, Amarok would keep scrolling
    to the bottom. (kde#284214)
  * Fix a problem where ghost tracks would remain in the Local
    Collection until the  database is wiped. (kde#319084)
  * Added missing CMake check for QtWebKit. (kde#321598)
  * Definitely fix a bug where Local Collection wouldn't update
    in browser. (kde#262504)
  * Fix crashed caused by race conditions at the end of the
    track scanning. (kde#319835)
  * Fix crash when disabling the Free Music Charts script.
    (kde#321329)
  * Albums having same name but different album artist won't be
    mixed together on the playlist if sorting by album is enabled.
  * Fix crash on startup with KDE 4.11. (kde#320855)
  * Fix tracks not able to be dragged around when playlist
    is shuffled. (kde#320129)
  * Prevent Last.fm scrobbles not being submitted until restart
    due to change in liblastfm 1.0.7. (kde#320219)
  * Resume Playback on Start will correctly restore paused state,
    instead of always starting in playing state. (kde#313330)
  * Optimize removal of tens of thousands of tracks from
    playlist. (kde#316242)
  * Fix `amarok --queue` which didn't actually queue the
    tracks. (kde#317385)
  * Fix suboptimal initial MusicBrainz tag dialog size by
    remembering it. (kde#269454)
  * Fix file-browser becoming empty when a file was moved to
    trash. (kde#317944)
  * Fix `amarok --play file.mp3` option didn't actually start
    playback.
  * Reason why a particular track is not playable is now shown
    in playlist tooltip; (kde#313649)
  * Pre-apmlifier in equalizer is now only enabled if it is
    actually supported; (kde#301311)
  * Fix Amarok crashed while doing "Organize Files" (kde#317980)
  * Fix Amarok erroneously merges two albums.
    (kde#216759, kde#272802)
  * Fix Crash on very long artist names. (kde#276894)
  * Fix Move tracks to rubbish and the current track cover
    changes to the deleted cover. (kde#306735)
  * Fix theoretical configwidget leak in services. (kde#301352)
  * Fix "Local collection" text label is truncated with
    large font. (kde#282561)
  * Fix crash by putting a broadcast in the playlist.
    (kde#313718)
  * Fix Keyboard navigates context menu in collection will move
    two items. (kde#307794)
  * Fix add track to playlist by double click on arrow in the
    collection. (kde#279513)
  * Fix VFAT safe names missing a couple of idiosyncrasies.
    (kde#312574)
  * Clarify message when Last.fm streams are not available.
    (kde#315771)
  * Fix crash when Dynamic Playlist based on last.fm is aborted.
    (kde#314243)
  * Fix Group by directory doesn't work in main playlist.
    (kde#265415)
  * Don't remove common labels when editing the tags of multiple
    tracks. (kde#316043)
  * Fix vertical positioning of On-Screen-Display. (kde#269788)
  * Fix OSD sometimes misplaces the font and the font's shadow.
    (kde#257643)
  * Prevent inability to save Last.fm password in corner cases.
    (kde#315306)
  * Fix "Copy to Collection" window doesn't fit on small screens.
    (kde#283361)
  * Fix crash when quitting Amarok with Statistics Synchronization
    open. (kde#315525)
  * Fix items moving around when expanded in collection browser.
    (kde#305602)
  * Fix Organize collection folder deletion going 'too far'.
    (kde#314348)
  * Fix %albumartist% placeholder translates to some strange unicode
    symbol. (kde#314351)
  * Fix bumpy fade-out when first used. (kde#312062)
  * Fix crash when switching/removing organize collection presets.
    (kde#314344)
  * Fix crash on start if a playlist source is unavailable.
    (kde#313460)
  * Fix Copy/Move to collection picks up wrong destination path
    and fails silently. (kde#314460)
  * Cleanup TrackOrganizer. (kde#305291)
  * Fix Editing Playist Layout Editor. (kde#250594)
  * Fix Display glitch for rating in verbose playlist. (kde#300118)
  * Refactoring Ampache service, fix Albums with multiple disks not
    listed correctly. (kde#249857)
  * Fix playlist sorting by type. (kde#249338)
  * Fix subtle bugs when a long fade-out is initiated near the
    song end.
  * Don't try to fade-out with phonon backends that don't
    support it. (vlc)
  * Fix Can't edit &amp; save an existing equalizer preset.
    (kde#241874)
  * Clean up Equalizer Dialog. (kde#274972)
- Drop kill-amarok-mockup.patch, included in this release
- Added oxygen-icon-theme BuildRequires, needed for amzdownloader icon
- Explicitly BuildRequire Qt4 &gt;= 4.8.2, as per upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1376481600">- Update to 2.8.0
  VERSION 2.8
  * FEATURES:
  * Tracks from Recently Played List widget can now directly be
    added to the playlist. (kde#279263, kde#296090)
  * CHANGES:
  * The Jamendo service now uses a higher quality MP3 format
    instead of Ogg Vorbis.
  * Added an option whether adding tracks to playlist should
    start playing. (kde#322428)
  * Amarok now depends on Qt 4.8.3.
  * Amarok now uses FindFFMpeg.cmake from kdelibs
  * BUGFIXES:
  * Don't reload Wikipedia applet content if artist/album have
    not changed. (kde#112044)
  * Jamendo service: Albums are now downloaded directly instead
    of going via BitTorrent. This is far more reliable and also
    supports on-the-fly transcoding. (kde#299434)
  * Work-around Solid UDisks2 backend bug that caused
    USB Mass Storage devices and iPods not being recognized when
    connected before Amarok was started. Also fixes a bug where
    blank devices would appear in Play Media dialog.
    (kde#322980)
  * Definitely fix a bug where storing Last.fm credentials in
    plain-text isn't offered when KWallet is disabled.
    (kde#315306)
  * Radio streams from scripted services are now
    instantly playable. (kde#320718)
  * Recently Played List widget now keeps its own time for
    tracks instead of relying on the Last Played statistic.
    (kde#302485)
  * Prevent hitting an assertion failure if just removed track
    from the Local Collection is edited. (kde#322474)
  * Fixed a regression introduced in 2.8 Beta where tracks in
    the Local Collection were sometimes forgotten and then
    found again. (kde#322603)
  * Fixed invalid SQL queries when you have files or folders
    with an apostrophe in your collection. (kde#322415)
  * Fixed organizing/copying/moving tracks to Local
    Collection on Windows. (kde#279560, kde#302251)
  * Various usability improvements for the applet toolbar.
    (kde#197948)
  * Removed broken Apply button in applets' settings dialog.
    (kde#322015)
  * Fix incorrect colors in Context View toolbar when
    switching themes. (kde#301305)
  * Many fixes for various bugs with switching desktop color
    themes at runtime, including OSD, spectrum analyzer,
    collection browser.
  * Avoid updating the MPRIS2 Metadata between tracks.
    (kde#321602)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377086400">- Added Don-t-add-the-analyzer-applet-when-Phonon-doesn-t-su.patch
  from upstream, avoids adding the analyzer applet on phonon backends
  that don't support it (e.g. vlc)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added patches from upstream:
  0002-Don-t-allow-adding-Analyzer-applet-when-not-supporte.patch,
  0003-Optimization-Don-t-draw-more-than-necessary.patch,
  0004-Fix-reading-Album-Artist-Compilation-Disc-Number-in-.patch,
  0005-Sync-playlist-search-config-instantly.patch,
  0006-Don-t-suppress-html-tag-like-characters.patch and
  0007-Fix-performance-issue-with-large-podcast-feeds.patch
  which resolve kde#323735, kde#324295, kde#324614, kde#283022 and
  kde#323119
- Renamed Don-t-add-the-analyzer-applet-when-Phonon-doesn-t-su.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380628800">- Explicitly require phonon-backend, as it's possible that in certain
  conditions users would have none installed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394193600">- Remove nepomuk-core from the buildrequires</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1399464000">- Added libxml2-devel BuildRequires, was pulled in via
  libkde4-devel previously</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
<changelog author="olaf@aepfle.de" date="1418904000">- Require correct libtag.so to avoid undefined symbols at runtime</changelog>
<changelog author="lbeltrame@kde.org" date="1420891200">- Add 0008-Clean-up-the-leftover-of-strigi-removal.patch:
  remove unneeded Strigi reference in the Ampache plugin build
  system
- Add 0009-Fix-Ampache-plugin-connections.patch: unbreak Ampache
  plugin connection due to wrong hashing algorithm being used</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm can be rebuild</changelog>
<changelog author="wbauer@tmo.at" date="1436443200">- Add Enable_Wikipedia_over_SSL.patch to make the Wikipedia applet
  work again (boo#934730, kde#349313)</changelog>

</package>
<package pkgid="36061d92329199ed0fe571cb96bae22bb2aa8799cb6469b92dc80b33d316e47a" name="amarok-lang" arch="noarch">
    <version epoch="0" ver="2.8.0" rel="4.4.2"/>

<changelog author="ctrippe@opensuse.org" date="1351857600">- Install the english handbook only with the lang-package as otherwise
  translations will not be displayed when they are provided by
  bundle-lang-kde-* (bnc#695108)
- No longer Build-require libksuseinstall-devel as the corresponding
  patch was removed</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1355659200">- fix broken signal/slot signatures caused by SR:130759</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358510400">- Update to 2.7
  * FEATURES:
  * Track dragging support in Unique Tracks tab of the Synchronize
    Statistics action; allows you to do a "diff" between collections
    and transfer missing tracks. (kde#237266)
  * Amarok now scrobbles tracks in streams if the stream correctly
    updates meta-data. (kde#240732)
  * When scrobbling to Last.fm, Amarok announces suggested tag
    corrections (configurable). (kde#309697)
  * Ability to scrobble recently played tracks from iPod (and
    the like) to Last.fm.
  * Synchronization of labels and rating between Last.fm and
    Amarok collections; play count can be synchronized one-way
    from Last.fm to Amarok. (kde#206249)
  * Statistics synchronization between collections, supports
    rating, first / last played time, play count and labels.
  * New APG constraint: Specify a total file size for playlist.
    (kde#283618)
  * Amazon store: Added support for Amazon MP3 in Italy and
    Spain. (kde#307981)
  * Mark downloaded podcast episodes to keep, even when purge
    is enabled. (kde#261062)
  * Nepomuk plugin: Play and manage tracks using the Nepomuk
    database.
  * Support for reading and writing tags from/to mod, s3m,
    it and xm files.
  * Amazon store: It is now possible to add items to your
    shopping cart using amarok:// URLs.
  * Amazon store: Use the context info applet to show further
    infos about a selected item.
  * New argument --debug-audio to enable Phonon debugging.
  * Amazon store: We now ship a utility to handle downloads
    from Amazon.
- Removed patch liblastfm1-support.diff (fixed upstream)
- Added build require for nepomuk-core-devel for the Nepomuk plugin</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1360929600">- Added trackNumber-typo-fix.diff, fixes kde#311847, track number
  not shown in Nepomuk collection</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1368100800">- Added fix-crashes-on-track-change.patch, fixes frequent crashes
  when changing tracks (kde#319371)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1368619200">- Update to 2.7.1
  * CHANGES:
  * Problematic support for treating MusicBrainz ids as track
    unique ids was dropped; should avoid surprising
    "Duplicate Tracks Found" errors. (315329)
  * BUGFIXES:
  * Fix inability to reverse "Use Music Location" decision and
    inability to clear database once all collection directories
    have been unset. (kde#316216)
  * Fix frequent crashes on Linux when starting to play a track.
    (kde#319371)
  * Fix compilation error on systems with gcc-4.2 (kde#314528)
  * Fix inability to create database when home directory contains
    non-ASCII characters. (kde#313914)
  * Fix typo in Nepomuk query which did not let track numbers of
    Nepomuk Collection tracks show up in Amarok. (kde#311847)
- Drop fix-crashes-on-track-change.patch and trackNumber-typo-fix.diff
  these patches are included in this release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371124800">- Added kill-amarok-mockup.patch which removes usage of non-existant
  Amarok-Mockup plasma theme, that casues crashes with KDE 4.11
  (kde#320855)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1371988800">- Added clamz as recommended runtime requirement.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1372939200">- Update to 2.7.90
  * FEATURES:
  * Ctrl+C copies the currently playing artist &amp; title to the
    clipboard. (kde#228872)
  * Volume fade-out is now also available for pause.
  * The Files browser now has a Refresh button. (kde#213666)
  * The active playlist item is animated with a soft glow effect.
  * Added an audio analyzer visualization applet.
  * Added a function for resetting the GUI layout back to default
    state. (kde#300753)
  * Pressing enter when searching collections now adds found
    tracks to the playlist and clears the search bar, this is a
    very convenient way to populate your playlist.
  * Allow to transcode only certain (different format,
    playability) tracks when transferring them to a
    collection (kde#312407)
  * On-Screen-Display fades in/out smoothly.
  * Added support for .asx playlists; (kde#170207)
  * Add Radio GFM radio streams to Cool Stream Script.
    (kde#317978)
  * Added options to pause playback on system suspend and to
    inhibit automatic suspend  if playing a track (enabled by
    default); (kde#259862) (kde#222571)
  * Playlist files are now read asynchronously when possible;
    (kde#291934)
  * Added support to filter tracks to scrobble to Last.fm by
    label. (kde#140198)
  * Added transcoding support for Opus codec if ffmpeg is
    compiled with support for the libopus library
  * Added keyboard shortcuts for small 2 s seeks
    (Ctrl + Left/Right) and long 1 minute  seeks
    (Shift + Left/Right) in addition to standard 10 s seeks.
    Durations are now configurable in amarokrc, see
    Amarok Handbook (kde#177258)
  * Added support for files in Opus codec if Amarok is compiled
    against recent enough TagLib (post 1.8) (kde#312905)
  * Added Ctrl+H shortcut to randomize playlist (kde#208061)
  * CHANGES:
  * Removed LikeBack (a development feature in debug builds).
    (kde#312498) (kde#252323)
  * Collection Browser: Artist level was renamed to Track Artist
    and replaced by Album Artist by default. Various Artists
    item is no longer shown under Track Artist level.
  * Removed the splash screen.
  * Playlist-related actions were harmonized, double-clicking
    or pressing enter will append tracks to playlist, using any
    "play media" action will prepend tracks to queue and
    immediately start playing; middle-clicking or will append
    &amp; play while other append or replace actions will no longer
    start playback. (kde#145468, kde#145490, kde#194549)
  * When a new collection plugin is enabled, its collections
    appear immediately without a need for restart.
  * Update the MusicBrainz tagger to MusicBrainz web service 2,
    make it show some more good suggestions for tagging, and add
    some options to help choosing the best results.
  * Add note about generating .mood files into Moodbar Options;
    (kde#289483)
  * Amarok now depends on Qt 4.8.2.
  * Add prepareToQuit() signal to Amarok.Window script bindings;
    (kde#241066)
  * Data CDs are now recognized in Amarok; (kde#316128)
  * On-Screen-Display now uses the system font instead of
    hardcoded sans-serif. (kde#248707)
  * Fancy behavior of some context menus showing different
    actions when Shift key is held has been reverted.
    All entries are now shown all the time.
  * The dynamic playlist behavior has changed. It will no longer
    generate "pretty good" playlists that do not fulfill the
    given biases. Instead it might add no song at all if given
    impossible-to-fulfill conditions.
  * The "tracks have been hidden in the playlist" warning when
    filtering the playlist is now displayed inside the playlist.
    (kde#260352)
  * Update tag widget for Layout edit, filter edit, organize
    collection and guess tag dialog.
  * When fadeout and/or Replay Gain isn't possible, gray-out
    related UI elements in order not to fool users.
  * BUGFIXES:
  * When you remove whole directories from the Local Collection
    and have Watch Folders for Changes enabled, the tracks now
    disappear from Collection Browser. (kde#311078)
  * Fix dynamic playlist bug: When "Automatically scroll playlist
    to current track" was enabled, Amarok would keep scrolling
    to the bottom. (kde#284214)
  * Fix a problem where ghost tracks would remain in the Local
    Collection until the  database is wiped. (kde#319084)
  * Added missing CMake check for QtWebKit. (kde#321598)
  * Definitely fix a bug where Local Collection wouldn't update
    in browser. (kde#262504)
  * Fix crashed caused by race conditions at the end of the
    track scanning. (kde#319835)
  * Fix crash when disabling the Free Music Charts script.
    (kde#321329)
  * Albums having same name but different album artist won't be
    mixed together on the playlist if sorting by album is enabled.
  * Fix crash on startup with KDE 4.11. (kde#320855)
  * Fix tracks not able to be dragged around when playlist
    is shuffled. (kde#320129)
  * Prevent Last.fm scrobbles not being submitted until restart
    due to change in liblastfm 1.0.7. (kde#320219)
  * Resume Playback on Start will correctly restore paused state,
    instead of always starting in playing state. (kde#313330)
  * Optimize removal of tens of thousands of tracks from
    playlist. (kde#316242)
  * Fix `amarok --queue` which didn't actually queue the
    tracks. (kde#317385)
  * Fix suboptimal initial MusicBrainz tag dialog size by
    remembering it. (kde#269454)
  * Fix file-browser becoming empty when a file was moved to
    trash. (kde#317944)
  * Fix `amarok --play file.mp3` option didn't actually start
    playback.
  * Reason why a particular track is not playable is now shown
    in playlist tooltip; (kde#313649)
  * Pre-apmlifier in equalizer is now only enabled if it is
    actually supported; (kde#301311)
  * Fix Amarok crashed while doing "Organize Files" (kde#317980)
  * Fix Amarok erroneously merges two albums.
    (kde#216759, kde#272802)
  * Fix Crash on very long artist names. (kde#276894)
  * Fix Move tracks to rubbish and the current track cover
    changes to the deleted cover. (kde#306735)
  * Fix theoretical configwidget leak in services. (kde#301352)
  * Fix "Local collection" text label is truncated with
    large font. (kde#282561)
  * Fix crash by putting a broadcast in the playlist.
    (kde#313718)
  * Fix Keyboard navigates context menu in collection will move
    two items. (kde#307794)
  * Fix add track to playlist by double click on arrow in the
    collection. (kde#279513)
  * Fix VFAT safe names missing a couple of idiosyncrasies.
    (kde#312574)
  * Clarify message when Last.fm streams are not available.
    (kde#315771)
  * Fix crash when Dynamic Playlist based on last.fm is aborted.
    (kde#314243)
  * Fix Group by directory doesn't work in main playlist.
    (kde#265415)
  * Don't remove common labels when editing the tags of multiple
    tracks. (kde#316043)
  * Fix vertical positioning of On-Screen-Display. (kde#269788)
  * Fix OSD sometimes misplaces the font and the font's shadow.
    (kde#257643)
  * Prevent inability to save Last.fm password in corner cases.
    (kde#315306)
  * Fix "Copy to Collection" window doesn't fit on small screens.
    (kde#283361)
  * Fix crash when quitting Amarok with Statistics Synchronization
    open. (kde#315525)
  * Fix items moving around when expanded in collection browser.
    (kde#305602)
  * Fix Organize collection folder deletion going 'too far'.
    (kde#314348)
  * Fix %albumartist% placeholder translates to some strange unicode
    symbol. (kde#314351)
  * Fix bumpy fade-out when first used. (kde#312062)
  * Fix crash when switching/removing organize collection presets.
    (kde#314344)
  * Fix crash on start if a playlist source is unavailable.
    (kde#313460)
  * Fix Copy/Move to collection picks up wrong destination path
    and fails silently. (kde#314460)
  * Cleanup TrackOrganizer. (kde#305291)
  * Fix Editing Playist Layout Editor. (kde#250594)
  * Fix Display glitch for rating in verbose playlist. (kde#300118)
  * Refactoring Ampache service, fix Albums with multiple disks not
    listed correctly. (kde#249857)
  * Fix playlist sorting by type. (kde#249338)
  * Fix subtle bugs when a long fade-out is initiated near the
    song end.
  * Don't try to fade-out with phonon backends that don't
    support it. (vlc)
  * Fix Can't edit &amp; save an existing equalizer preset.
    (kde#241874)
  * Clean up Equalizer Dialog. (kde#274972)
- Drop kill-amarok-mockup.patch, included in this release
- Added oxygen-icon-theme BuildRequires, needed for amzdownloader icon
- Explicitly BuildRequire Qt4 &gt;= 4.8.2, as per upstream change</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1376481600">- Update to 2.8.0
  VERSION 2.8
  * FEATURES:
  * Tracks from Recently Played List widget can now directly be
    added to the playlist. (kde#279263, kde#296090)
  * CHANGES:
  * The Jamendo service now uses a higher quality MP3 format
    instead of Ogg Vorbis.
  * Added an option whether adding tracks to playlist should
    start playing. (kde#322428)
  * Amarok now depends on Qt 4.8.3.
  * Amarok now uses FindFFMpeg.cmake from kdelibs
  * BUGFIXES:
  * Don't reload Wikipedia applet content if artist/album have
    not changed. (kde#112044)
  * Jamendo service: Albums are now downloaded directly instead
    of going via BitTorrent. This is far more reliable and also
    supports on-the-fly transcoding. (kde#299434)
  * Work-around Solid UDisks2 backend bug that caused
    USB Mass Storage devices and iPods not being recognized when
    connected before Amarok was started. Also fixes a bug where
    blank devices would appear in Play Media dialog.
    (kde#322980)
  * Definitely fix a bug where storing Last.fm credentials in
    plain-text isn't offered when KWallet is disabled.
    (kde#315306)
  * Radio streams from scripted services are now
    instantly playable. (kde#320718)
  * Recently Played List widget now keeps its own time for
    tracks instead of relying on the Last Played statistic.
    (kde#302485)
  * Prevent hitting an assertion failure if just removed track
    from the Local Collection is edited. (kde#322474)
  * Fixed a regression introduced in 2.8 Beta where tracks in
    the Local Collection were sometimes forgotten and then
    found again. (kde#322603)
  * Fixed invalid SQL queries when you have files or folders
    with an apostrophe in your collection. (kde#322415)
  * Fixed organizing/copying/moving tracks to Local
    Collection on Windows. (kde#279560, kde#302251)
  * Various usability improvements for the applet toolbar.
    (kde#197948)
  * Removed broken Apply button in applets' settings dialog.
    (kde#322015)
  * Fix incorrect colors in Context View toolbar when
    switching themes. (kde#301305)
  * Many fixes for various bugs with switching desktop color
    themes at runtime, including OSD, spectrum analyzer,
    collection browser.
  * Avoid updating the MPRIS2 Metadata between tracks.
    (kde#321602)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377086400">- Added Don-t-add-the-analyzer-applet-when-Phonon-doesn-t-su.patch
  from upstream, avoids adding the analyzer applet on phonon backends
  that don't support it (e.g. vlc)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added patches from upstream:
  0002-Don-t-allow-adding-Analyzer-applet-when-not-supporte.patch,
  0003-Optimization-Don-t-draw-more-than-necessary.patch,
  0004-Fix-reading-Album-Artist-Compilation-Disc-Number-in-.patch,
  0005-Sync-playlist-search-config-instantly.patch,
  0006-Don-t-suppress-html-tag-like-characters.patch and
  0007-Fix-performance-issue-with-large-podcast-feeds.patch
  which resolve kde#323735, kde#324295, kde#324614, kde#283022 and
  kde#323119
- Renamed Don-t-add-the-analyzer-applet-when-Phonon-doesn-t-su.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380628800">- Explicitly require phonon-backend, as it's possible that in certain
  conditions users would have none installed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394193600">- Remove nepomuk-core from the buildrequires</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1399464000">- Added libxml2-devel BuildRequires, was pulled in via
  libkde4-devel previously</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
<changelog author="olaf@aepfle.de" date="1418904000">- Require correct libtag.so to avoid undefined symbols at runtime</changelog>
<changelog author="lbeltrame@kde.org" date="1420891200">- Add 0008-Clean-up-the-leftover-of-strigi-removal.patch:
  remove unneeded Strigi reference in the Ampache plugin build
  system
- Add 0009-Fix-Ampache-plugin-connections.patch: unbreak Ampache
  plugin connection due to wrong hashing algorithm being used</changelog>
<changelog author="coolo@suse.com" date="1423051200">- add the changes file as source so the .src.rpm can be rebuild</changelog>
<changelog author="wbauer@tmo.at" date="1436443200">- Add Enable_Wikipedia_over_SSL.patch to make the Wikipedia applet
  work again (boo#934730, kde#349313)</changelog>

</package>
<package pkgid="5bb3905185a7e0db002df48e7de5dcea56e3fcdabe2ab26c24b79c6d3e7b793c" name="amavisd-new" arch="i586">
    <version epoch="0" ver="2.8.1" rel="2.8.1"/>

<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="varkoly@suse.com" date="1318334400">- bnc#718025 - amavisd-new 2.7.0 fails to start</changelog>
<changelog author="varkoly@suse.com" date="1318507200">- Integrate amavisd-milter</changelog>
<changelog author="wr@rosenauer.org" date="1319630400">- obsolete amavisd-milter package</changelog>
<changelog author="varkoly@suse.com" date="1320235200">- Fix amavisd-milter binary name</changelog>
<changelog author="varkoly@suse.com" date="1320408000">- Add systemd scripts</changelog>
<changelog author="varkoly@suse.com" date="1325678400">- bnc#706257 - amavis failed to start during boot, however it is active</changelog>
<changelog author="chris@computersalat.de" date="1335441600">- fix build for &lt; 1210</changelog>
<changelog author="varkoly@suse.com" date="1340625600">- fix the systemd service file</changelog>
<changelog author="dmueller@suse.com" date="1346068800">- unarj was dropped from Factory, remove dependency to it</changelog>
<changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
<changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
<changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
<changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
<changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
<changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
<changelog author="varkoly@suse.com" date="1385640000">- bnc#852611 - openSUSE 13.1 shipped with buggy amavisd-new!
  Fixing false IPv4-mapping in code.
  + added bnc#852611.diff</changelog>

</package>
<package pkgid="07084465dbbf3f79ea38c13efad5be2c0d693800525eb34b31cfd6c986cfa08f" name="amavisd-new" arch="src">
    <version epoch="0" ver="2.8.1" rel="2.8.1"/>

<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="varkoly@suse.com" date="1318334400">- bnc#718025 - amavisd-new 2.7.0 fails to start</changelog>
<changelog author="varkoly@suse.com" date="1318507200">- Integrate amavisd-milter</changelog>
<changelog author="wr@rosenauer.org" date="1319630400">- obsolete amavisd-milter package</changelog>
<changelog author="varkoly@suse.com" date="1320235200">- Fix amavisd-milter binary name</changelog>
<changelog author="varkoly@suse.com" date="1320408000">- Add systemd scripts</changelog>
<changelog author="varkoly@suse.com" date="1325678400">- bnc#706257 - amavis failed to start during boot, however it is active</changelog>
<changelog author="chris@computersalat.de" date="1335441600">- fix build for &lt; 1210</changelog>
<changelog author="varkoly@suse.com" date="1340625600">- fix the systemd service file</changelog>
<changelog author="dmueller@suse.com" date="1346068800">- unarj was dropped from Factory, remove dependency to it</changelog>
<changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
<changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
<changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
<changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
<changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
<changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
<changelog author="varkoly@suse.com" date="1385640000">- bnc#852611 - openSUSE 13.1 shipped with buggy amavisd-new!
  Fixing false IPv4-mapping in code.
  + added bnc#852611.diff</changelog>

</package>
<package pkgid="623d40442827b31b5d47a290745f139746ed597a58207a1c0507b6c6843a757e" name="amavisd-new" arch="x86_64">
    <version epoch="0" ver="2.8.1" rel="2.8.1"/>

<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="varkoly@suse.com" date="1318334400">- bnc#718025 - amavisd-new 2.7.0 fails to start</changelog>
<changelog author="varkoly@suse.com" date="1318507200">- Integrate amavisd-milter</changelog>
<changelog author="wr@rosenauer.org" date="1319630400">- obsolete amavisd-milter package</changelog>
<changelog author="varkoly@suse.com" date="1320235200">- Fix amavisd-milter binary name</changelog>
<changelog author="varkoly@suse.com" date="1320408000">- Add systemd scripts</changelog>
<changelog author="varkoly@suse.com" date="1325678400">- bnc#706257 - amavis failed to start during boot, however it is active</changelog>
<changelog author="chris@computersalat.de" date="1335441600">- fix build for &lt; 1210</changelog>
<changelog author="varkoly@suse.com" date="1340625600">- fix the systemd service file</changelog>
<changelog author="dmueller@suse.com" date="1346068800">- unarj was dropped from Factory, remove dependency to it</changelog>
<changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
<changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
<changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
<changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
<changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
<changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
<changelog author="varkoly@suse.com" date="1385640000">- bnc#852611 - openSUSE 13.1 shipped with buggy amavisd-new!
  Fixing false IPv4-mapping in code.
  + added bnc#852611.diff</changelog>

</package>
<package pkgid="d1bd0ae66efb43d0eb3c5bd733f68bb6e8ae3bc9e45167725311ed4e53a253a3" name="amavisd-new-docs" arch="i586">
    <version epoch="0" ver="2.8.1" rel="2.8.1"/>

<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="varkoly@suse.com" date="1318334400">- bnc#718025 - amavisd-new 2.7.0 fails to start</changelog>
<changelog author="varkoly@suse.com" date="1318507200">- Integrate amavisd-milter</changelog>
<changelog author="wr@rosenauer.org" date="1319630400">- obsolete amavisd-milter package</changelog>
<changelog author="varkoly@suse.com" date="1320235200">- Fix amavisd-milter binary name</changelog>
<changelog author="varkoly@suse.com" date="1320408000">- Add systemd scripts</changelog>
<changelog author="varkoly@suse.com" date="1325678400">- bnc#706257 - amavis failed to start during boot, however it is active</changelog>
<changelog author="chris@computersalat.de" date="1335441600">- fix build for &lt; 1210</changelog>
<changelog author="varkoly@suse.com" date="1340625600">- fix the systemd service file</changelog>
<changelog author="dmueller@suse.com" date="1346068800">- unarj was dropped from Factory, remove dependency to it</changelog>
<changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
<changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
<changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
<changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
<changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
<changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
<changelog author="varkoly@suse.com" date="1385640000">- bnc#852611 - openSUSE 13.1 shipped with buggy amavisd-new!
  Fixing false IPv4-mapping in code.
  + added bnc#852611.diff</changelog>

</package>
<package pkgid="c60e9654004375dd97241dd07b5b652beb81206873d85831d9083a32842e086b" name="amavisd-new-docs" arch="x86_64">
    <version epoch="0" ver="2.8.1" rel="2.8.1"/>

<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="varkoly@suse.com" date="1318334400">- bnc#718025 - amavisd-new 2.7.0 fails to start</changelog>
<changelog author="varkoly@suse.com" date="1318507200">- Integrate amavisd-milter</changelog>
<changelog author="wr@rosenauer.org" date="1319630400">- obsolete amavisd-milter package</changelog>
<changelog author="varkoly@suse.com" date="1320235200">- Fix amavisd-milter binary name</changelog>
<changelog author="varkoly@suse.com" date="1320408000">- Add systemd scripts</changelog>
<changelog author="varkoly@suse.com" date="1325678400">- bnc#706257 - amavis failed to start during boot, however it is active</changelog>
<changelog author="chris@computersalat.de" date="1335441600">- fix build for &lt; 1210</changelog>
<changelog author="varkoly@suse.com" date="1340625600">- fix the systemd service file</changelog>
<changelog author="dmueller@suse.com" date="1346068800">- unarj was dropped from Factory, remove dependency to it</changelog>
<changelog author="wr@rosenauer.org" date="1356609600">- update to version 2.7.2
  * a generated Received header field was missing the 'IPv6:' prefix
    in the TCP-info component of a 'by' subfield (as required by RFC 5321,
    section 4.1.3) when amavisd received a message over an IPv6 protocol;
    (btw, the TCP-info component of a 'from' subfield was correct);
  * changed data type of an SNMP variable LogRetries from C32 to C64
    for consistency with the MIB;
  * updated AV entry 'AVG Anti-Virus' to consider status 403 continuation
    lines when searching for a virus name; suggested by Ralf Hildebrandt;
  * reduce a log level to 5 on a log message:
    Amavis::IO::RW: Error flushing on close: ...
    to avoid an innocent but sinister-looking warning when a pipe
    to a virus scanner is broken and needs to be re-established;
    reported by Stefan Jakobs
  * updated an AV entry for 'F-Secure Linux Security' to version 9.14;
    options updated by Mika Ilmaranta, a patch by Tuomo Soini;
  * fix a Unix socket compatibility issue with Net::Server versions 2.000,
    2.001 and 2.002, where a method NS_unix_path no longer exists.
    This method was re-introduced for compatibility reasons in 2.003.
    Reported by Paul MacKenzie;</changelog>
<changelog author="aj@ajaissle.de" date="1360152000">- update to version 2.8.0
- COMPATIBILITY 2.8.0
  * removed an old compatibility measure: default value of @banned_admin_maps
    was changed from:
    @banned_admin_maps = (\$banned_admin, \%virus_admin, \$virus_admin);
    to a more consistent:
    @banned_admin_maps = (\$banned_admin);
    The previous default value of @banned_admin_maps tried to maintain
    compatibility with versions before the setting was separated from
    its companion @virus_admin_maps. Now this compatibility is no longer
    considered necessary and contributes to some confusion, so it was dropped.
    See 2.4.0 and 2.2.1 release notes for previous changes to this setting.
  * quarantining to an mbox format file used to include a local time in an
    mbox separator line, which differs from RFC 4155 and common practices
    of using an UTC timestamp; a time zone of a timestamp in separator lines
    is now changed to UTC;
- BUG FIXES 2.8.0
  * fixed initial evaluation of dynamic (i.e. per policy bank) values of
    $enable_dkim_verification, $enable_dkim_signing and $bypass_decode_parts
    across all declared policy banks; these policy bank entries may be scalars
    of references to such;
  * finely adjust a message size for de-stuffed dots according to a size
    definition in RFC 1870; avoids occasional message size mismatch when
    using an antispam interface module SpamdClient (implementing client-side
    of a spamc/spamd protocol);
  * updated LDAP.ldif to match LDAP.schema; provided by Quanah Gibson-Mount;
  * updated AMAVIS-MIB.txt and amavisd-snmp-subagent: changed type of
    SNMP variables *MsgsSize* in the group amavisStats 7 from Counter32
    to Counter64 for consistency with other *MsgsSize* variables in groups
    amavisStats 3 and amavisStats 9;
- NEW FEATURES SUMMARY 2.8.0
  * For monitoring and statistics gathering purposes a new set of utilities
    and service processes is available based on a message passing paradigm,
    using a 0MQ (a.k.a. ZMQ, ZeroMQ, or Crossroads I/O) library. This
    replaces a functionally similar set of utilities based on a shared
    BerkeleyDB database, with a benefit of avoiding lock contention
    altogether. This can bring sigificant speedups, most pronounced on
    a host with many busy amavisd child processes.
  * Applied numerous fine-grained optimizations based on a NYTProf profiler
    results. Optimizations include a reduction in a number of generated
    Perl opcodes and similar micro-optimizations. This accounts for a large
    amount of small changes in the code.
  * Our current statistics (Q4 2011) shows that 80 % of messages are below
    30.000 bytes, and 90 % of mail messages are below 100.000 bytes in
    size. As an optimization, messages below 100 KiB in size are now kept
    and processed in memory, including passing them more optimally to
    SpamAssassin 3.4.0. Some file activity is still there, but is much
    reduced. If $TEMPBASE also resides on an SSD disk (or a RAM disk),
    observed speedup between 2.7.2 and 2.8.0 was 3 to 8 percent on a
    busy host (with monitoring disabled, so as not to skew a measurement).
  * Use a module IO::Socket::IP if available, instead of dealing directly
    with low-level modules IO::Socket::INET and IO::Socket::INET6;
  * choose more appropriate defaults if running on an IPv6-only host
    (like connecting to ::1 instead of 127.0.0.1 which may not exist);
  * amavisd-release now also supports connecting to amavisd over IPv6;
  * as a debugging aid it is now possible that a late event triggers full
    logging of earlier events that occurred during processing of a current
    mail message;
  * $enable_ldap setting is now dynamic, i.e. can be changed by a policy
    bank, which makes it possible to selectively disable LDAP lookups
    per policy bank;
  * optionally avoid persistent connections to SQL and LDAP servers;
  * it is now possible to disable calling an external file(1) utility
    but still have MIME parts decoding enabled;
  * added support in Amavis::SpamControl::ExtProg for an external spam scanner
    Bogofilter;
  * added locking options to @spam_scanners entries, to be used with external
    scanners which need but do not implement locking of their resources
    by themselves;
  * added a global configuration setting $sa_userprefs_file, which is passed
    on to SpamAssassin as a 'userprefs_filename' parameter at initialization;
  * added a subroutine iso8601_weekday(), potentially useful with partitioning;
  * added several new macros available to logging and notification templates;</changelog>
<changelog author="mlin@suse.com" date="1361793600">- Install amavisd.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="meissner@suse.com" date="1367496000">- use %defattr correctly to make /var/spool/amavis not worldreadable.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1369828800">- Fix multiple bugs in systemd unit, syslog.target should
  not be used and Wants must be used instead of requires in most
  cases.</changelog>
<changelog author="wr@rosenauer.org" date="1379160000">- update to version 2.8.1
  COMPATIBILITY
  when 0MQ (a.k.a. ZeroMQ) is used between Amavis components as an
  internal messaging protocol, make sure to replace all 0MQ-enabled
  Amavis components on upgrading amavisd, as the internal protocol
  has changed slightly, taking advantage of 0MQ multi-part messages
  for better performance. Affected programs are: amavis-services,
  amavisd-status, amavisd-snmp-subagent-zmq, and amavisd.
  NOTE: The Crossroads I/O project (libxs) ceased development on
    July 2012, to be replaced by nanomsg eventually by the same author.
    The 0MQ library (libzmq) is currently (2013) the best choice,
    the preferred library version is 3.2.2 or later along with
    the ZMQ::LibZMQ3 Perl interface module and ZMQ::Constants.
    The older version 2 of the library, along with an older perl
    module ZeroMQ, should be fine too, but lacks support for IPv6.
  amavisd is compatible with perl 5.18.0 and with SpamAssassin 3.4.0
  NEW FEATURES SUMMARY
  * new Redis storage for the "pen pals" feature;
  * improved IPv6 support;
  * support for p0f v3;
  * new macros ip_trace_all and ip_trace_public;
  * amavisd-status now shows a bar graph display
    of the number of active processes;
  * the timing report log entry can show CPU usage
    at log level 2 if a module Unix::Getrusage is available;</changelog>
<changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
<changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
<changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
<changelog author="varkoly@suse.com" date="1385640000">- bnc#852611 - openSUSE 13.1 shipped with buggy amavisd-new!
  Fixing false IPv4-mapping in code.
  + added bnc#852611.diff</changelog>

</package>
<package pkgid="a190a5aee82c31bc289c68e1b538e11a973d1650ca768299c2d4d55a3b22d2d6" name="amor" arch="i586">
    <version epoch="0" ver="4.11.3" rel="10.6"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdetoys4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="0d6bd855c97ea1c9345d01a773df7d9423a055a488f51bb9cc4cb03a1f5a8a20" name="amor" arch="i586">
    <version epoch="0" ver="4.11.4" rel="104.19"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdetoys4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="2277bc3d727c46f6a9aba029260ed61c87a449187a2b31ba47c35b3e3293fb22" name="amor" arch="i586">
    <version epoch="0" ver="4.11.5" rel="112.9"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdetoys4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="440d25f21207b57f537831e4f821f041523ebdce6ea518502fb6b1f8c626ea14" name="amor" arch="src">
    <version epoch="0" ver="4.11.3" rel="10.6"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdetoys4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="7a86b64a3a4c816855d5e898915594cdd063e6fc33d971f47d887e9c751d262a" name="amor" arch="src">
    <version epoch="0" ver="4.11.4" rel="104.19"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdetoys4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="bbe37605d6d90eb556552e27fee7354cd0f8f89c794bb15cdf7c6a57811c592c" name="amor" arch="src">
    <version epoch="0" ver="4.11.5" rel="112.9"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdetoys4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="9d119b637d94ad469df4bd1b381e7319447f2e0d5afc012c07a9bfde30d58d93" name="amor" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="10.6"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdetoys4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="da853b4c1f6972778ffff0f0cf8b29a5ceda73ccfa15701297a272a62ae1ce1a" name="amor" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="104.19"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdetoys4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="f710e9cc53f9d92a4884098469ba763d40e8efb079a7c2de28cc780a006b9435" name="amor" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="112.9"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdetoys4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="26105163fa5af8cb94c24ac18a4b8e8209cbaaca93ea62839f6ae683cedb0179" name="analitza" arch="i586">
    <version epoch="0" ver="4.11.3" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="c3bdfd912ebf301a3e80879854a3448191622a8d5709ea93f3e8085a62af1ec1" name="analitza" arch="i586">
    <version epoch="0" ver="4.11.4" rel="512.3"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="22bf5bd1c1543ae13befc7c79fcb30cbae6e0bf748e6fd68d817b15ef6ebb59a" name="analitza" arch="i586">
    <version epoch="0" ver="4.11.5" rel="528.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="3793c13205c9c970ed8bf4bbdcdabf00d9e7024152571e9755f4f3575f547c14" name="analitza" arch="src">
    <version epoch="0" ver="4.11.3" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="6a60bea0efd20c0c41c513d643e55e47fde4a81483b4d47a82c6259759bcbfa1" name="analitza" arch="src">
    <version epoch="0" ver="4.11.4" rel="512.3"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="c0a86a91ed998144f53ae6a611ab58991b9f24d6df08de55edbedea31b590a9f" name="analitza" arch="src">
    <version epoch="0" ver="4.11.5" rel="528.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="b0c5ed57c9199c8312f98d667b0e70bc883eec28eecf85d050751ab1ec2181d1" name="analitza" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="e6283677ec7d13c62fe4b15b640826dde61cd8b516f69292afb65a0bdbfdd1c4" name="analitza" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="512.3"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="e5917b293fbdb7b51933b2e74fc2f715c09a4958a3747ac9de7112276d43b7be" name="analitza" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="528.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="a63e1670bd9e0607c39976ac6f71fb8a84916ca8d819791d23c98559b30a8ad9" name="analitza-devel" arch="i586">
    <version epoch="0" ver="4.11.3" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="01008f55d81ded0e47b6f2d43d6f6547622d54a0c3b5402fc82937c5c647cfc9" name="analitza-devel" arch="i586">
    <version epoch="0" ver="4.11.4" rel="512.3"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="53523e45e1638a69980ea1b51a5cf67681b831bb444f67770263c18b2dbe02ab" name="analitza-devel" arch="i586">
    <version epoch="0" ver="4.11.5" rel="528.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="b2089baa30d86687d4c3596e34945ea80d6cba9eebe9e2dd2e6752e28387af89" name="analitza-devel" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="a520761c28436e3c855c9538fc5c7af09b2efcb4752f2fe7e7c75008e6a639b0" name="analitza-devel" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="512.3"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="71774949cbd98815eaea76ef43b2eadb75805ebe368db8a61aef73f3a2b69972" name="analitza-devel" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="528.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * New plotting Framework</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="cc09c8f05e83fb673c87d73c51f97a47fbb0ff56b266d99375692715be201ae7" name="android-tools" arch="i586">
    <version epoch="0" ver="4.2.2_r1" rel="2.4.1"/>

<changelog author="dmitry_r@opensuse.org" date="1354881600">- Initial package
- Version 4.2.1_r1</changelog>
<changelog author="dmitry_r@opensuse.org" date="1358337600">- Fix udev rules</changelog>
<changelog author="dmitry_r@opensuse.org" date="1358337601">- Move udev rules to correct place</changelog>
<changelog author="dvaleev@suse.com" date="1359374400">- fix wrong types for ppc64 (android-tools-ppc64-types.patch)</changelog>
<changelog author="dmitry_r@opensuse.org" date="1360843200">- Update to version 4.2.2_r2
  * no changelog available
- Remove provide section from package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1399032000">- Fix overflow in adb CVE-2014-1909 [bnc#863074]
  * fix-overflow-in-adb_client.patch</changelog>

</package>
<package pkgid="5a7e5c666992234c00fdd84674d3936bf91474916661e43f272dde9dcec27170" name="android-tools" arch="src">
    <version epoch="0" ver="4.2.2_r1" rel="2.4.1"/>

<changelog author="dmitry_r@opensuse.org" date="1354881600">- Initial package
- Version 4.2.1_r1</changelog>
<changelog author="dmitry_r@opensuse.org" date="1358337600">- Fix udev rules</changelog>
<changelog author="dmitry_r@opensuse.org" date="1358337601">- Move udev rules to correct place</changelog>
<changelog author="dvaleev@suse.com" date="1359374400">- fix wrong types for ppc64 (android-tools-ppc64-types.patch)</changelog>
<changelog author="dmitry_r@opensuse.org" date="1360843200">- Update to version 4.2.2_r2
  * no changelog available
- Remove provide section from package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1399032000">- Fix overflow in adb CVE-2014-1909 [bnc#863074]
  * fix-overflow-in-adb_client.patch</changelog>

</package>
<package pkgid="e90ed1b5c609395c904a42b36c3ecb38d9b89da23dffb89dd598fffd95c8d6aa" name="android-tools" arch="x86_64">
    <version epoch="0" ver="4.2.2_r1" rel="2.4.1"/>

<changelog author="dmitry_r@opensuse.org" date="1354881600">- Initial package
- Version 4.2.1_r1</changelog>
<changelog author="dmitry_r@opensuse.org" date="1358337600">- Fix udev rules</changelog>
<changelog author="dmitry_r@opensuse.org" date="1358337601">- Move udev rules to correct place</changelog>
<changelog author="dvaleev@suse.com" date="1359374400">- fix wrong types for ppc64 (android-tools-ppc64-types.patch)</changelog>
<changelog author="dmitry_r@opensuse.org" date="1360843200">- Update to version 4.2.2_r2
  * no changelog available
- Remove provide section from package</changelog>
<changelog author="dmitry_r@opensuse.org" date="1399032000">- Fix overflow in adb CVE-2014-1909 [bnc#863074]
  * fix-overflow-in-adb_client.patch</changelog>

</package>
<package pkgid="0591e736c21cddb295b6c870224395fb5ccab00828bc75c9ad349c4d3d804d87" name="anjuta" arch="i586">
    <version epoch="0" ver="3.10.2" rel="14.9"/>

<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 3.7.1:
  + am-project:
  - Avoid critical warnings when a group does not have a
    Makefile.am
  - Double click on folder in project view open properties window
    (bgo#681050)
  - Folder properties dialog can't be close with ESC (bgo#681051)
  - Project browser is not updated when files are added or removed
    (bgo#683728)
  - Adding a "Miscelaneous Data" objective ignores the given name
    (bgo#684770)
  - Check a copy of anjuta project in regression instead of the
    real project
  - Do not store files as binary in anjuta shar archive used in
    regression test
  + anjuta:
  - Do not use GDL members deprecated in version 3.6
  - Move command line parsing in AnjutaApplication
  - Remove custom filtering for debugging message as this is
    provided by GLib &gt;= 2.32
  - Rename AnjutaApp as AnjutaWindow
  - Rename Anjuta as AnjutaApplication
  + build-basic-autotools:
  - Configuration name combo box should be editable
  - Fix alignment of some text broken by the previous patch
  - Update environment variables when the build configuration is
    changed
  + build: anjuta-3.5.91 fails to configure due to ac_ct_CXX check
  (bgo#684758)
  + glade: Fix make file some files were not installed
  + jhbuild:
  - new plugin to build/run program inside the jhbuild environment
  - Provide a fallback for G_DEFINE_QUARK to allow compilation
    with GLib 2.32
  + run-program: use AnjutaEnvironmentEditor instead of implementing
  our own version.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 3.7.2:
  + anjuta: Allow to abort loading of a session
  + anjuta-window: Don't call gtk_widget_show_all when setting up
    widget.
  + debug-manager:
  - Fix accessing of invalid tree models.
  - use g_spawn_sync() instead of fork() and waitpid()
  + document-manager:
  - Add search_box to document manager box directly.
  - Fix various compile warnings.
  - hide search box when pressing escape inside the document
    widget.
  - Never disable "find in files" action.
  - Remove obsolete code for tabbing between documents.
  - Show dirty character "*" and "[read-only]" in combo filename.
  - Support showing open documents in a combobox.
  - Update combo filenames when the project changes.
  - use on_close_file_activate() when closing file using combo
    close button.
  + file-manager: Fix invalid unref of NULL pointer.
  + Fix compile errors regarding undeclared functions.
  + git:
  - Fix assertion when running g_hash_table_unref() on a NULL
    pointer.
  - Fix assertion when running g_signal_handlers_disconnect on
    already destroyed widget.
  - Fix bgo 687145 - Critical warning when switching git pane
  + glade:
  - Fix the images in the palette toggles used for choosing the
    edit mode.
  - Fix the palette not being shown.
  + indentation-c-style:
  - Add option whether paranthesis alignment should only use
    spaces.
  - be more picky when completing braces.
  - Change plugin.c modeline to spaces
  - Enable the plugin for JavaScript source files.
  - Fix get_line_indentation().
  - Fix modeline in plugin.c
  - Fix "parenthesis" typos
  - remove java_indentation() method
  - Rename action group to "C Indentation" and remove it on
    deactivation.
  - Update preferences UI file to gtk+-3
  - When removing opening bracket also remove the closing one.
  + indentation-python-style: Rename action group to "Python
    Indentation".
  + language-support-cpp-java: Remove
    org.gnome.anjuta.plugins.cpp.gschema.valid from git
  + language-support-vala: Don't clean config.vapi
  + libanjuta:
  - Improve documentation of AnjutaSession
  - use g_spawn_sync instead of fork() and waitpid()
  + project-wizard: Fix vala ui path (bgo#686718)
  + python:
  - Auto-completion causes a segfault in Anjuta 3.6.1
    (bgo#687646)
  - Fix crash during auto-indentation
  + sourceview: don't emit change events after doing an undo
  + Fixed compile warnings and a real bug in the gdbmi plugin</changelog>
<changelog author="zaitor@opensuse.org" date="1357473600">- Update to version 3.7.3:
  + Added keywords in desktop file.
  + anjuta:
  - Fix destruction of the AnjutaUI instance.
  - Fix destruction of AnjutaPreferences instance.
  - Unload all plugins before closing a window.
  - Remove "exiting" signal from AnjutaShell.
  + anjuta-plugin-handle: Use g_hash_table_remove_all instead of
    g_hash_table_foreach_remove.
  + am-project: Change the "Dependencies loop in variables"
    warning to a debug print.
  + build: disable -Werror to workaround flex(1) issue.
  + build-basic-autotools:
  - Disconnect all signals on editors when the plugin is
    deactivated.
  - Remove idle for updating indicators when plugin is
    deactivated.
  + document-manager:
  - Remove autosave timeout when the plugin is deactivated.
  - Fix disconnection of GtkNotebook "switch-page" signal.
  + file-manager:
  - Keep a weak reference to the IAnjutaVcs object in FileModel.
  - Unref the FileModel reference when the FileView gets
    finalized.
  + git: Fix compile warnings.
  + glade: Add toggle buttons for margin and align editing.
  + indentation-c-style: Fix logic error.
  + libanjuta: Set "relative-path" property of AnjutaFileDropEntry
    as readwrite.
  + plugin-manager:
  - Fix dependents checking on wrong object in should_unload().
  - Don't destroy available_plugins order in
    populate_plugin_model().
  - Clean up memory management.
  - Directly use anjuta_plugin_deactivate in unload_all_plugins()
  + profile-manager: Add new close() function.
  + project-wizard:
  - Allow to start a new project from the command line.
  - Remove trailing spaces.
  - Remove compilation warnings.
  - hide breakpoints and watches windows on new project
    bgo#616728.
  + run-program:
  - Keep a weak reference to the IAnjutaTerminal we run the
    program in.
  - Fix a crash when destroying the plugin.
  + sourceview: Don't store the builder for the preferences in a
    global variable.
  + symbol-db:
  - Keep a reference to the SymbolDBQuery when running it in a
    thread.
  - Use a vertical box for the search view.
  - Remove buffer update timeout when plugin gets deactivated.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 3.7.4:
  + file-loader:
  - Fix leak of GtkRecentInfos in the RecentChooserMenu.
  - file-loader: Fix leak of plugin names in sort_wizards()
  + file-manager: Fix compile warning.
  + git: Fix destruction of GitLogPane.
  + libanjuta:
  - Actually free stuff in AnjutaPkgConfigChooser::finalize.
  - Add "document-[added|removed]" signals to
    IAnjutaDocumentManager.
  - Allow to set indentation and tab size separately
  - Clean up and bug fix in plugin manager
  - Fix a few compiler warnings
  - Fix IAnjutaFile::opened signal documentation.
  + project-manager:
  - Allow to change project backend
  - Display current project backend
  - Fix leak of the nodes GList in gbf_project_view_update_tree().
  + run-program: Default to Yes in "The program is already running"
    dialog.
  + snippets-manager: Fix faulty assertion in snippets_db_dispose().
  + sourceview:
  - Add marks to an unloaded document the same way we reload
    marks.
  - Detect that a ifile_open() is a reload and save marks and
    position.
  - Don't check if objects are not NULL before calling
    g_clear_object().
  - keep ref on SourceViewIO during call to
    input_stream_read_async().
  + starter: Fix leak of GtkRecentInfo.
  + symbol-db:
  - Add update_flag to the symbol unique constraint.
  - Fix leaks
  - Fix "parenthesis" typos
  - rename sdb_engine_get_tuple_id_by_unique_name4()...
  - When updating a symbol try to update the closest one.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 3.7.90:
  + Add new quick-open plugin.
  + am-project: Fix a crash when changing target properties.
  + Anjuta:
  - Saved dock positions not applied when opening a project
    (bgo#688609)
  - Make sure the starter widget is visible on startup.
  + build-basic-autotools:
  - don't let build directory button expand.
  - Fix selection of build directory.
  + class-gen:
  - Always generate GObject private structure.
  - generate license the same way as project-wizard.
  - output filename instead of project name before copyright.
  + devhelp: Port to webkitgtk2.
  + document-manager:
  - connect to toplevel SearchBox keypress to handle closing.
  - Save search box settings.
  + file-manager:
  - Add option for showing the currently edited file in the file
    manager.
  - Add "Show in File manager" action to document popup.
  - Enable typeahead search.
  + glade: Add a menu item for glade properties dialog.
  + indentation-c-style: enable the plugin for IDL files.
  + jhbuild:
  - Extract libdir from newly added JHBUILD_LIBDIR environment
    variable.
  - Translate error messages.
  + language-support-cp-java: fix crasher when swapping
    header/source
  + libanjuta:
  - Add basic tests for AnjutaCompletion.
  - Add new AnjutaCompletion object for prefix matching.
  - Avoid the name Anjuta in libanjuta messages (bgo#693916)
  + parser-cxx:
  - remove unused ParserCxxAssistContext
  - use AnjutaCompletion instead of deprecated GCompletion
  + patch: Replace deprecated GtkTable by GtkGrid
  + project-import:
  - Open a directory with Anjuta.
  - Try to fill project name automatically in import project
    dialog
  + project-manager: Remove New Library menu item.
  + project-wizard: move license templates to data/
  + sourceview:
  - connect settings notifications with g_signal_connect_object()
  - Fix wrong assignment when saving markers
  - mark clearing of buffer as a not undoable action
  - use etag to only emit "changed" when file was externally
    modified
  - use G_PRIORITY_DEFAULT for IO
  - use gtk_widget_preferred_size instead of gtk_widget_size_request
  + starter: Fix a warning
  + symbol-db:
  - fix compile warnings
  - fix symbols view label box to be horizontal
  + Updated translations.
- Replace pkgconfig(libvala-0.18) BuildRequires with
  pkgconfig(libvala-0.20), following the GNOME 3.8 release plans.</changelog>
<changelog author="dimstar@opensuse.org" date="1363780800">- Update to version 3.7.92:
  + document-manager:
  - Allow to search starting from the current position.
  - Highlight search text in background.
  - Move common code in a function.
  + file-manager: make file_view_show_extended_data() more robust.
  + Fix desktop file syntax errors.
  + Fixed needlessly marked label for translation.
  + git:
  - fix up memory management of log model.
  - properly unset the log command in the case the command failed
  - Unset the log model view before refreshing the log.
  - use g_signal_connect_object() in GitLogCommand.
  - use g_signal_connect_object() to connect to commands in
    GitLogPane.
  + libanjuta: keep a ref on the AnjutaAsyncCommand when its thread
    is run.
  + Make the glade catalog an optional feature.
  + message-view: use g_type_class_add_private() to add private
    struct.
  + parser-cxx: use g_signal_connect_object() to connect to query
    signals.
  + sourceview:
  - add checks to SourceviewIO that the parent Sourceview is
    alive.
  - don't take extra refs during open/save.
  - keep a separate reference to AnjutaShell in SourceviewIO.
  - move all construction of Sourceview into constructed.
  - only cancel open operations when closing editor.
  - only update stored etag if save was succesful.
  - use g_signal_connect_object() to connect to io signals.
  + symbol-db: don't allow or set null scope_definition_id and
    scope_id.
  + Updated translations.
- Pass --enable-glade-catalog to configure to ensure the catalogs
  are being installed.
- Add anjuta-glade.xml to sources, which is missing in the tarball.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Updated translations.</changelog>
<changelog author="dmueller@suse.com" date="1364299200">- Do not BuildRequire valgrind for aarch64.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.8.1:
  + git: Log path entry should be editable.
  + project-wizard: Creating new project using wizard fails due to
    license files missing (bgo#696672).
  + Bugs fixed: bgo#696023.
  + Updated translations.
- Re-add anjuta-glade.xml: bgo#696023 seems not entirely fixed.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + anjuta_language_provider: add proposals() function.
  + anjuta-tabber:
  - Always use the padding of an active tab in y-direction size
    allocation.
  - don't iterate list to check if node is first/last.
  - fix calculation of region flags.
  - implement gtk_container_get_path_for_child().
  - remove call to gtk_widget_style_attach().
  - remove the total padding from total width.
  - rework size allocation.
  - take focus-padding into account when rendering focus.
  - use tab_curvature for left/right space of first/last tab.
  + dir-project:
  - check for NULL groups in dir_project_is_loaded().
  - fix compile error.
  + document-manager:
  - don't allocate AnjutaDocmanPriv ourselves.
  - don't free AnjutaDocmanPriv ourselves.
  - fix compile warning.
  - pack notebook with width 1.
  - remove margin around the document combo box.
  + git:
  - Add a stash button to the Status command bar.
  - Fix more names in the glade file.
  - Fix setting of a custom author in the commit panel.
  - Fix widget names.
  - Implement adding files by dragging them onto the status view.
  - Implement branch switching by double-click.
  - More glade file name fixes.
  - Pack the dock and the command bar together.
  - Use actions for recurring items in the glade file.
  - Use a toggle button to show and hide the command bar.
  - Widget name fixes.
  + language-support-js:
  - replace one more use of ianjuta_editor_assist_proposals().
  - use anjuta_language_provider_proposals().
  + language-support-python:
  - replace one more use of ianjuta_editor_assist_proposals().
  - use anjuta_language_provider_proposals().
  + libanjuta: Improve editor modeline support.
  + libanjuta/manuals: Update documentation sections.
  + message-view:
  - Use AnjutaCloseButton in tabs.
  - use a single box for the tab widget.
  + mk-project:
  - Ignore conditional directives in makefile.
  - Prevent a crash.
  + parser-cxx:
  - fix compilation warning.
  - use anjuta_language_provider_proposals().
  + project-wizard: Use dist_doc_DATA for documentation text files.
  + sourceview: remove filtering of single proposals matching
    pre_word.
  + symbol-db-query: change order of property installation in
    SymbolDBQuery.
  + Update doap file.
  + Use dist_doc_DATA for documentation text files.
  + Bugs fixed: bgo#680770, bgo#688611, bgo#696023, bgo#696984,
    bgo#696990, bgo#697030, bgo#698011.
  + Updated translations.
- Drop anjuta-glade.xml source: it's included in the tarball.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + subversion: convert builder file to gtk+-3.0.
  + starter: guard for NULL document manager or project manager.
  + Fix deprecation warnings.
  + Bugs fixed: bgo#699323, bgo#699329, bgo#699327, bgo#699330,
    bgo#699326, bgo#698705, bgo#699316, bgo#700615, bgo#696991,
    bgo#698158, bgo#700318, bgo#694644.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1371902400">- Update to version 3.9.3:
  + sourceview:
  - fix compile warnings.
  + message-view: don't manually free private structure.
  + snippets-manager: fix compile warnings.
  + git:
  - Add a context menu to the log pane.
  - Add a context menu to the Branches pane.
  - Add a popup menu to the Remotes pane.
  - Check box action fixes in Push and Pull panes.
  - Add a popup menu to the Stash pane.
  - Fix a warning.
  + libanjuta:
  - Improve symbol-db behavior on cut, paste, undo, redo and
    when multiple files are modified.
  - Move scoped and descoped signal on AnjutaProfile object.
  - Replace AnjutaPluginDescription by AnjutaPluginHandle in API.
  - Move anjuta_profile_manager_load_profile function in
    anjuta_profile.
  - Always keep plugins in the system profile.
  - Allow to enable only a set of plugins defined in the profile
    file.
  - Keep dynamic allocation data in AnjutaPluginDescription.
  - Allow to change plugin description key from profile.
  + Allow to select different profile on the command line.
  + Add a sample custom profile keeping only the editor.
  + document-manager: Automatically open an empty file if starter
    plugin is not used.
  + symbol-db: Update symbol database on editor changes without
    saving.
  + language-support-cpp-jave: Fix memory leak.
  + Bugs fixed: bgo#701443, bgo#701207, bgo#700383
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373371200">- Update to version 3.9.4:
  + anjuta: Add application menu.
  + git: Fix the Do Not Commit option in the Revert pane.
  + libanjuta/anjuta-entry: Don't use CSS for help text styles.
  + Keep using loaded plugin even if they are marked as disabled.
  + Register GApplication with a different name if a profile is
    used.
  + document-manager: Make use of symbol-db plugin optional.
  + language-support-python: Remove critical warnings.
  + language-manager: Support symbols in more programming
    languages.
  + Need at least glib 2.34 for g_spawn_check_exit_status.
  + dir-project: Load big project faster.
  + dir-project: Decrease project load priority to avoid blocking
    GUI.
  + am-project: data target are not distributed by default in
    automake.
  + project-manager: Add a function in the interface to remove a
    file from a project.
  + Bugs fixed: bgo#703637, bgo#702576
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + anjuta: Only show app-menu if supported by environment.
  + libanjuta: Make AnjutaCommandBar easier to use on small
    screens.
  + Bugs fixed: bgo#699544.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375790400">- Add anjuta-vala-0.22.patch: Allow building with vala 0.22.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.
- Change pkgconfig(libvala-0.20) BuildRequires to
  pkgconfig(libvala-0.22) in order to perform the switch to Vala
  0.22.
- Stop passing obsolete --disable-scrollkeeper to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Update to version 3.9.90:
  + document-manager: Fix icon size in document manager tabs.
  + git:
  - Widget name fixes.
  - Show diffs of uncommitted changes in the status view.
  - Show stash diffs in the stash pane.
  - Don't show the command bar if the Tasks button isn't active.
  - Don't show stash numbers on diff rows.
  + libanjuta:
  - Add AnjutaCellRendererDiff.
  - Update the glade catalog.
  + libanjuta/anjuta-command-bar:
  - Resect GTK button image settings.
  - Don't use a shadow for the scrolled window.
  + symbol-db:
  - link with librt on Linux (bgo#704985).
  - Use a GtkSearchEntry for the search entry in the search view.
  + libanjuta/anjuta-file-list: Fix the help text color.
  + libanjuta/anjuta-cell-renderer-diff: Detect diff headers.
  + build: add support for libvala-0.22.
  + Use program icon on about dialog.
  + Fix column number on lines with tabs.
  + help: fix broken images.
  + Bugs fixed: bgo#689384, bgo#701419.
- Drop anjuta-vala-0.22.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh,
  as we don't carry any patch anymore.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 3.9.91:
  + git:
  - Fix removed files status display.
  - Expand the status view tree when all diff commands are
    finished.
  + project-manager: The 'Can not add source files' dialog is too
    long and his buttons and bottom side are out of the screen
    (bgo#501230).
  + Fix incorrect MimeType in .desktop file (bgo#706630).
  + Remove a critical warning when closing a project.
  + glade: Fix a critical warning when opening a project with a .ui
    file opened.
  + document-manager: Close all documents when closing a project.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 3.9.92:
  + git: Run diff commands after the status commands finish.
  + libanjuta/git: Render diffs one line at a time.
  + project-manager: Plural forms for "%d elements" (bgo#707562).
  + project-wizard: Auto completion code when you click in the
    widget tree is broken (bgo#707943).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 3.10.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384689600">- Update to version 3.10.2 (bnc#849913):
  + bgo#711722: C-Makefile project template broken.
  + document-manager: Fix bgo#711512.
  + Updated translations.</changelog>

</package>
<package pkgid="0e5f8c80f5756fe775b890d740191e2a0eb46452ce5015626360be7b0d7548a7" name="anjuta" arch="src">
    <version epoch="0" ver="3.10.2" rel="14.9"/>

<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 3.7.1:
  + am-project:
  - Avoid critical warnings when a group does not have a
    Makefile.am
  - Double click on folder in project view open properties window
    (bgo#681050)
  - Folder properties dialog can't be close with ESC (bgo#681051)
  - Project browser is not updated when files are added or removed
    (bgo#683728)
  - Adding a "Miscelaneous Data" objective ignores the given name
    (bgo#684770)
  - Check a copy of anjuta project in regression instead of the
    real project
  - Do not store files as binary in anjuta shar archive used in
    regression test
  + anjuta:
  - Do not use GDL members deprecated in version 3.6
  - Move command line parsing in AnjutaApplication
  - Remove custom filtering for debugging message as this is
    provided by GLib &gt;= 2.32
  - Rename AnjutaApp as AnjutaWindow
  - Rename Anjuta as AnjutaApplication
  + build-basic-autotools:
  - Configuration name combo box should be editable
  - Fix alignment of some text broken by the previous patch
  - Update environment variables when the build configuration is
    changed
  + build: anjuta-3.5.91 fails to configure due to ac_ct_CXX check
  (bgo#684758)
  + glade: Fix make file some files were not installed
  + jhbuild:
  - new plugin to build/run program inside the jhbuild environment
  - Provide a fallback for G_DEFINE_QUARK to allow compilation
    with GLib 2.32
  + run-program: use AnjutaEnvironmentEditor instead of implementing
  our own version.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 3.7.2:
  + anjuta: Allow to abort loading of a session
  + anjuta-window: Don't call gtk_widget_show_all when setting up
    widget.
  + debug-manager:
  - Fix accessing of invalid tree models.
  - use g_spawn_sync() instead of fork() and waitpid()
  + document-manager:
  - Add search_box to document manager box directly.
  - Fix various compile warnings.
  - hide search box when pressing escape inside the document
    widget.
  - Never disable "find in files" action.
  - Remove obsolete code for tabbing between documents.
  - Show dirty character "*" and "[read-only]" in combo filename.
  - Support showing open documents in a combobox.
  - Update combo filenames when the project changes.
  - use on_close_file_activate() when closing file using combo
    close button.
  + file-manager: Fix invalid unref of NULL pointer.
  + Fix compile errors regarding undeclared functions.
  + git:
  - Fix assertion when running g_hash_table_unref() on a NULL
    pointer.
  - Fix assertion when running g_signal_handlers_disconnect on
    already destroyed widget.
  - Fix bgo 687145 - Critical warning when switching git pane
  + glade:
  - Fix the images in the palette toggles used for choosing the
    edit mode.
  - Fix the palette not being shown.
  + indentation-c-style:
  - Add option whether paranthesis alignment should only use
    spaces.
  - be more picky when completing braces.
  - Change plugin.c modeline to spaces
  - Enable the plugin for JavaScript source files.
  - Fix get_line_indentation().
  - Fix modeline in plugin.c
  - Fix "parenthesis" typos
  - remove java_indentation() method
  - Rename action group to "C Indentation" and remove it on
    deactivation.
  - Update preferences UI file to gtk+-3
  - When removing opening bracket also remove the closing one.
  + indentation-python-style: Rename action group to "Python
    Indentation".
  + language-support-cpp-java: Remove
    org.gnome.anjuta.plugins.cpp.gschema.valid from git
  + language-support-vala: Don't clean config.vapi
  + libanjuta:
  - Improve documentation of AnjutaSession
  - use g_spawn_sync instead of fork() and waitpid()
  + project-wizard: Fix vala ui path (bgo#686718)
  + python:
  - Auto-completion causes a segfault in Anjuta 3.6.1
    (bgo#687646)
  - Fix crash during auto-indentation
  + sourceview: don't emit change events after doing an undo
  + Fixed compile warnings and a real bug in the gdbmi plugin</changelog>
<changelog author="zaitor@opensuse.org" date="1357473600">- Update to version 3.7.3:
  + Added keywords in desktop file.
  + anjuta:
  - Fix destruction of the AnjutaUI instance.
  - Fix destruction of AnjutaPreferences instance.
  - Unload all plugins before closing a window.
  - Remove "exiting" signal from AnjutaShell.
  + anjuta-plugin-handle: Use g_hash_table_remove_all instead of
    g_hash_table_foreach_remove.
  + am-project: Change the "Dependencies loop in variables"
    warning to a debug print.
  + build: disable -Werror to workaround flex(1) issue.
  + build-basic-autotools:
  - Disconnect all signals on editors when the plugin is
    deactivated.
  - Remove idle for updating indicators when plugin is
    deactivated.
  + document-manager:
  - Remove autosave timeout when the plugin is deactivated.
  - Fix disconnection of GtkNotebook "switch-page" signal.
  + file-manager:
  - Keep a weak reference to the IAnjutaVcs object in FileModel.
  - Unref the FileModel reference when the FileView gets
    finalized.
  + git: Fix compile warnings.
  + glade: Add toggle buttons for margin and align editing.
  + indentation-c-style: Fix logic error.
  + libanjuta: Set "relative-path" property of AnjutaFileDropEntry
    as readwrite.
  + plugin-manager:
  - Fix dependents checking on wrong object in should_unload().
  - Don't destroy available_plugins order in
    populate_plugin_model().
  - Clean up memory management.
  - Directly use anjuta_plugin_deactivate in unload_all_plugins()
  + profile-manager: Add new close() function.
  + project-wizard:
  - Allow to start a new project from the command line.
  - Remove trailing spaces.
  - Remove compilation warnings.
  - hide breakpoints and watches windows on new project
    bgo#616728.
  + run-program:
  - Keep a weak reference to the IAnjutaTerminal we run the
    program in.
  - Fix a crash when destroying the plugin.
  + sourceview: Don't store the builder for the preferences in a
    global variable.
  + symbol-db:
  - Keep a reference to the SymbolDBQuery when running it in a
    thread.
  - Use a vertical box for the search view.
  - Remove buffer update timeout when plugin gets deactivated.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 3.7.4:
  + file-loader:
  - Fix leak of GtkRecentInfos in the RecentChooserMenu.
  - file-loader: Fix leak of plugin names in sort_wizards()
  + file-manager: Fix compile warning.
  + git: Fix destruction of GitLogPane.
  + libanjuta:
  - Actually free stuff in AnjutaPkgConfigChooser::finalize.
  - Add "document-[added|removed]" signals to
    IAnjutaDocumentManager.
  - Allow to set indentation and tab size separately
  - Clean up and bug fix in plugin manager
  - Fix a few compiler warnings
  - Fix IAnjutaFile::opened signal documentation.
  + project-manager:
  - Allow to change project backend
  - Display current project backend
  - Fix leak of the nodes GList in gbf_project_view_update_tree().
  + run-program: Default to Yes in "The program is already running"
    dialog.
  + snippets-manager: Fix faulty assertion in snippets_db_dispose().
  + sourceview:
  - Add marks to an unloaded document the same way we reload
    marks.
  - Detect that a ifile_open() is a reload and save marks and
    position.
  - Don't check if objects are not NULL before calling
    g_clear_object().
  - keep ref on SourceViewIO during call to
    input_stream_read_async().
  + starter: Fix leak of GtkRecentInfo.
  + symbol-db:
  - Add update_flag to the symbol unique constraint.
  - Fix leaks
  - Fix "parenthesis" typos
  - rename sdb_engine_get_tuple_id_by_unique_name4()...
  - When updating a symbol try to update the closest one.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 3.7.90:
  + Add new quick-open plugin.
  + am-project: Fix a crash when changing target properties.
  + Anjuta:
  - Saved dock positions not applied when opening a project
    (bgo#688609)
  - Make sure the starter widget is visible on startup.
  + build-basic-autotools:
  - don't let build directory button expand.
  - Fix selection of build directory.
  + class-gen:
  - Always generate GObject private structure.
  - generate license the same way as project-wizard.
  - output filename instead of project name before copyright.
  + devhelp: Port to webkitgtk2.
  + document-manager:
  - connect to toplevel SearchBox keypress to handle closing.
  - Save search box settings.
  + file-manager:
  - Add option for showing the currently edited file in the file
    manager.
  - Add "Show in File manager" action to document popup.
  - Enable typeahead search.
  + glade: Add a menu item for glade properties dialog.
  + indentation-c-style: enable the plugin for IDL files.
  + jhbuild:
  - Extract libdir from newly added JHBUILD_LIBDIR environment
    variable.
  - Translate error messages.
  + language-support-cp-java: fix crasher when swapping
    header/source
  + libanjuta:
  - Add basic tests for AnjutaCompletion.
  - Add new AnjutaCompletion object for prefix matching.
  - Avoid the name Anjuta in libanjuta messages (bgo#693916)
  + parser-cxx:
  - remove unused ParserCxxAssistContext
  - use AnjutaCompletion instead of deprecated GCompletion
  + patch: Replace deprecated GtkTable by GtkGrid
  + project-import:
  - Open a directory with Anjuta.
  - Try to fill project name automatically in import project
    dialog
  + project-manager: Remove New Library menu item.
  + project-wizard: move license templates to data/
  + sourceview:
  - connect settings notifications with g_signal_connect_object()
  - Fix wrong assignment when saving markers
  - mark clearing of buffer as a not undoable action
  - use etag to only emit "changed" when file was externally
    modified
  - use G_PRIORITY_DEFAULT for IO
  - use gtk_widget_preferred_size instead of gtk_widget_size_request
  + starter: Fix a warning
  + symbol-db:
  - fix compile warnings
  - fix symbols view label box to be horizontal
  + Updated translations.
- Replace pkgconfig(libvala-0.18) BuildRequires with
  pkgconfig(libvala-0.20), following the GNOME 3.8 release plans.</changelog>
<changelog author="dimstar@opensuse.org" date="1363780800">- Update to version 3.7.92:
  + document-manager:
  - Allow to search starting from the current position.
  - Highlight search text in background.
  - Move common code in a function.
  + file-manager: make file_view_show_extended_data() more robust.
  + Fix desktop file syntax errors.
  + Fixed needlessly marked label for translation.
  + git:
  - fix up memory management of log model.
  - properly unset the log command in the case the command failed
  - Unset the log model view before refreshing the log.
  - use g_signal_connect_object() in GitLogCommand.
  - use g_signal_connect_object() to connect to commands in
    GitLogPane.
  + libanjuta: keep a ref on the AnjutaAsyncCommand when its thread
    is run.
  + Make the glade catalog an optional feature.
  + message-view: use g_type_class_add_private() to add private
    struct.
  + parser-cxx: use g_signal_connect_object() to connect to query
    signals.
  + sourceview:
  - add checks to SourceviewIO that the parent Sourceview is
    alive.
  - don't take extra refs during open/save.
  - keep a separate reference to AnjutaShell in SourceviewIO.
  - move all construction of Sourceview into constructed.
  - only cancel open operations when closing editor.
  - only update stored etag if save was succesful.
  - use g_signal_connect_object() to connect to io signals.
  + symbol-db: don't allow or set null scope_definition_id and
    scope_id.
  + Updated translations.
- Pass --enable-glade-catalog to configure to ensure the catalogs
  are being installed.
- Add anjuta-glade.xml to sources, which is missing in the tarball.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Updated translations.</changelog>
<changelog author="dmueller@suse.com" date="1364299200">- Do not BuildRequire valgrind for aarch64.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.8.1:
  + git: Log path entry should be editable.
  + project-wizard: Creating new project using wizard fails due to
    license files missing (bgo#696672).
  + Bugs fixed: bgo#696023.
  + Updated translations.
- Re-add anjuta-glade.xml: bgo#696023 seems not entirely fixed.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + anjuta_language_provider: add proposals() function.
  + anjuta-tabber:
  - Always use the padding of an active tab in y-direction size
    allocation.
  - don't iterate list to check if node is first/last.
  - fix calculation of region flags.
  - implement gtk_container_get_path_for_child().
  - remove call to gtk_widget_style_attach().
  - remove the total padding from total width.
  - rework size allocation.
  - take focus-padding into account when rendering focus.
  - use tab_curvature for left/right space of first/last tab.
  + dir-project:
  - check for NULL groups in dir_project_is_loaded().
  - fix compile error.
  + document-manager:
  - don't allocate AnjutaDocmanPriv ourselves.
  - don't free AnjutaDocmanPriv ourselves.
  - fix compile warning.
  - pack notebook with width 1.
  - remove margin around the document combo box.
  + git:
  - Add a stash button to the Status command bar.
  - Fix more names in the glade file.
  - Fix setting of a custom author in the commit panel.
  - Fix widget names.
  - Implement adding files by dragging them onto the status view.
  - Implement branch switching by double-click.
  - More glade file name fixes.
  - Pack the dock and the command bar together.
  - Use actions for recurring items in the glade file.
  - Use a toggle button to show and hide the command bar.
  - Widget name fixes.
  + language-support-js:
  - replace one more use of ianjuta_editor_assist_proposals().
  - use anjuta_language_provider_proposals().
  + language-support-python:
  - replace one more use of ianjuta_editor_assist_proposals().
  - use anjuta_language_provider_proposals().
  + libanjuta: Improve editor modeline support.
  + libanjuta/manuals: Update documentation sections.
  + message-view:
  - Use AnjutaCloseButton in tabs.
  - use a single box for the tab widget.
  + mk-project:
  - Ignore conditional directives in makefile.
  - Prevent a crash.
  + parser-cxx:
  - fix compilation warning.
  - use anjuta_language_provider_proposals().
  + project-wizard: Use dist_doc_DATA for documentation text files.
  + sourceview: remove filtering of single proposals matching
    pre_word.
  + symbol-db-query: change order of property installation in
    SymbolDBQuery.
  + Update doap file.
  + Use dist_doc_DATA for documentation text files.
  + Bugs fixed: bgo#680770, bgo#688611, bgo#696023, bgo#696984,
    bgo#696990, bgo#697030, bgo#698011.
  + Updated translations.
- Drop anjuta-glade.xml source: it's included in the tarball.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + subversion: convert builder file to gtk+-3.0.
  + starter: guard for NULL document manager or project manager.
  + Fix deprecation warnings.
  + Bugs fixed: bgo#699323, bgo#699329, bgo#699327, bgo#699330,
    bgo#699326, bgo#698705, bgo#699316, bgo#700615, bgo#696991,
    bgo#698158, bgo#700318, bgo#694644.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1371902400">- Update to version 3.9.3:
  + sourceview:
  - fix compile warnings.
  + message-view: don't manually free private structure.
  + snippets-manager: fix compile warnings.
  + git:
  - Add a context menu to the log pane.
  - Add a context menu to the Branches pane.
  - Add a popup menu to the Remotes pane.
  - Check box action fixes in Push and Pull panes.
  - Add a popup menu to the Stash pane.
  - Fix a warning.
  + libanjuta:
  - Improve symbol-db behavior on cut, paste, undo, redo and
    when multiple files are modified.
  - Move scoped and descoped signal on AnjutaProfile object.
  - Replace AnjutaPluginDescription by AnjutaPluginHandle in API.
  - Move anjuta_profile_manager_load_profile function in
    anjuta_profile.
  - Always keep plugins in the system profile.
  - Allow to enable only a set of plugins defined in the profile
    file.
  - Keep dynamic allocation data in AnjutaPluginDescription.
  - Allow to change plugin description key from profile.
  + Allow to select different profile on the command line.
  + Add a sample custom profile keeping only the editor.
  + document-manager: Automatically open an empty file if starter
    plugin is not used.
  + symbol-db: Update symbol database on editor changes without
    saving.
  + language-support-cpp-jave: Fix memory leak.
  + Bugs fixed: bgo#701443, bgo#701207, bgo#700383
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373371200">- Update to version 3.9.4:
  + anjuta: Add application menu.
  + git: Fix the Do Not Commit option in the Revert pane.
  + libanjuta/anjuta-entry: Don't use CSS for help text styles.
  + Keep using loaded plugin even if they are marked as disabled.
  + Register GApplication with a different name if a profile is
    used.
  + document-manager: Make use of symbol-db plugin optional.
  + language-support-python: Remove critical warnings.
  + language-manager: Support symbols in more programming
    languages.
  + Need at least glib 2.34 for g_spawn_check_exit_status.
  + dir-project: Load big project faster.
  + dir-project: Decrease project load priority to avoid blocking
    GUI.
  + am-project: data target are not distributed by default in
    automake.
  + project-manager: Add a function in the interface to remove a
    file from a project.
  + Bugs fixed: bgo#703637, bgo#702576
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + anjuta: Only show app-menu if supported by environment.
  + libanjuta: Make AnjutaCommandBar easier to use on small
    screens.
  + Bugs fixed: bgo#699544.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375790400">- Add anjuta-vala-0.22.patch: Allow building with vala 0.22.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.
- Change pkgconfig(libvala-0.20) BuildRequires to
  pkgconfig(libvala-0.22) in order to perform the switch to Vala
  0.22.
- Stop passing obsolete --disable-scrollkeeper to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Update to version 3.9.90:
  + document-manager: Fix icon size in document manager tabs.
  + git:
  - Widget name fixes.
  - Show diffs of uncommitted changes in the status view.
  - Show stash diffs in the stash pane.
  - Don't show the command bar if the Tasks button isn't active.
  - Don't show stash numbers on diff rows.
  + libanjuta:
  - Add AnjutaCellRendererDiff.
  - Update the glade catalog.
  + libanjuta/anjuta-command-bar:
  - Resect GTK button image settings.
  - Don't use a shadow for the scrolled window.
  + symbol-db:
  - link with librt on Linux (bgo#704985).
  - Use a GtkSearchEntry for the search entry in the search view.
  + libanjuta/anjuta-file-list: Fix the help text color.
  + libanjuta/anjuta-cell-renderer-diff: Detect diff headers.
  + build: add support for libvala-0.22.
  + Use program icon on about dialog.
  + Fix column number on lines with tabs.
  + help: fix broken images.
  + Bugs fixed: bgo#689384, bgo#701419.
- Drop anjuta-vala-0.22.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh,
  as we don't carry any patch anymore.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 3.9.91:
  + git:
  - Fix removed files status display.
  - Expand the status view tree when all diff commands are
    finished.
  + project-manager: The 'Can not add source files' dialog is too
    long and his buttons and bottom side are out of the screen
    (bgo#501230).
  + Fix incorrect MimeType in .desktop file (bgo#706630).
  + Remove a critical warning when closing a project.
  + glade: Fix a critical warning when opening a project with a .ui
    file opened.
  + document-manager: Close all documents when closing a project.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 3.9.92:
  + git: Run diff commands after the status commands finish.
  + libanjuta/git: Render diffs one line at a time.
  + project-manager: Plural forms for "%d elements" (bgo#707562).
  + project-wizard: Auto completion code when you click in the
    widget tree is broken (bgo#707943).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 3.10.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384689600">- Update to version 3.10.2 (bnc#849913):
  + bgo#711722: C-Makefile project template broken.
  + document-manager: Fix bgo#711512.
  + Updated translations.</changelog>

</package>
<package pkgid="f0fcf8b1b3c232214f827a8f355d321c9658c46f6b11a95e35193a1f9b33c3e0" name="anjuta" arch="x86_64">
    <version epoch="0" ver="3.10.2" rel="14.9"/>

<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 3.7.1:
  + am-project:
  - Avoid critical warnings when a group does not have a
    Makefile.am
  - Double click on folder in project view open properties window
    (bgo#681050)
  - Folder properties dialog can't be close with ESC (bgo#681051)
  - Project browser is not updated when files are added or removed
    (bgo#683728)
  - Adding a "Miscelaneous Data" objective ignores the given name
    (bgo#684770)
  - Check a copy of anjuta project in regression instead of the
    real project
  - Do not store files as binary in anjuta shar archive used in
    regression test
  + anjuta:
  - Do not use GDL members deprecated in version 3.6
  - Move command line parsing in AnjutaApplication
  - Remove custom filtering for debugging message as this is
    provided by GLib &gt;= 2.32
  - Rename AnjutaApp as AnjutaWindow
  - Rename Anjuta as AnjutaApplication
  + build-basic-autotools:
  - Configuration name combo box should be editable
  - Fix alignment of some text broken by the previous patch
  - Update environment variables when the build configuration is
    changed
  + build: anjuta-3.5.91 fails to configure due to ac_ct_CXX check
  (bgo#684758)
  + glade: Fix make file some files were not installed
  + jhbuild:
  - new plugin to build/run program inside the jhbuild environment
  - Provide a fallback for G_DEFINE_QUARK to allow compilation
    with GLib 2.32
  + run-program: use AnjutaEnvironmentEditor instead of implementing
  our own version.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 3.7.2:
  + anjuta: Allow to abort loading of a session
  + anjuta-window: Don't call gtk_widget_show_all when setting up
    widget.
  + debug-manager:
  - Fix accessing of invalid tree models.
  - use g_spawn_sync() instead of fork() and waitpid()
  + document-manager:
  - Add search_box to document manager box directly.
  - Fix various compile warnings.
  - hide search box when pressing escape inside the document
    widget.
  - Never disable "find in files" action.
  - Remove obsolete code for tabbing between documents.
  - Show dirty character "*" and "[read-only]" in combo filename.
  - Support showing open documents in a combobox.
  - Update combo filenames when the project changes.
  - use on_close_file_activate() when closing file using combo
    close button.
  + file-manager: Fix invalid unref of NULL pointer.
  + Fix compile errors regarding undeclared functions.
  + git:
  - Fix assertion when running g_hash_table_unref() on a NULL
    pointer.
  - Fix assertion when running g_signal_handlers_disconnect on
    already destroyed widget.
  - Fix bgo 687145 - Critical warning when switching git pane
  + glade:
  - Fix the images in the palette toggles used for choosing the
    edit mode.
  - Fix the palette not being shown.
  + indentation-c-style:
  - Add option whether paranthesis alignment should only use
    spaces.
  - be more picky when completing braces.
  - Change plugin.c modeline to spaces
  - Enable the plugin for JavaScript source files.
  - Fix get_line_indentation().
  - Fix modeline in plugin.c
  - Fix "parenthesis" typos
  - remove java_indentation() method
  - Rename action group to "C Indentation" and remove it on
    deactivation.
  - Update preferences UI file to gtk+-3
  - When removing opening bracket also remove the closing one.
  + indentation-python-style: Rename action group to "Python
    Indentation".
  + language-support-cpp-java: Remove
    org.gnome.anjuta.plugins.cpp.gschema.valid from git
  + language-support-vala: Don't clean config.vapi
  + libanjuta:
  - Improve documentation of AnjutaSession
  - use g_spawn_sync instead of fork() and waitpid()
  + project-wizard: Fix vala ui path (bgo#686718)
  + python:
  - Auto-completion causes a segfault in Anjuta 3.6.1
    (bgo#687646)
  - Fix crash during auto-indentation
  + sourceview: don't emit change events after doing an undo
  + Fixed compile warnings and a real bug in the gdbmi plugin</changelog>
<changelog author="zaitor@opensuse.org" date="1357473600">- Update to version 3.7.3:
  + Added keywords in desktop file.
  + anjuta:
  - Fix destruction of the AnjutaUI instance.
  - Fix destruction of AnjutaPreferences instance.
  - Unload all plugins before closing a window.
  - Remove "exiting" signal from AnjutaShell.
  + anjuta-plugin-handle: Use g_hash_table_remove_all instead of
    g_hash_table_foreach_remove.
  + am-project: Change the "Dependencies loop in variables"
    warning to a debug print.
  + build: disable -Werror to workaround flex(1) issue.
  + build-basic-autotools:
  - Disconnect all signals on editors when the plugin is
    deactivated.
  - Remove idle for updating indicators when plugin is
    deactivated.
  + document-manager:
  - Remove autosave timeout when the plugin is deactivated.
  - Fix disconnection of GtkNotebook "switch-page" signal.
  + file-manager:
  - Keep a weak reference to the IAnjutaVcs object in FileModel.
  - Unref the FileModel reference when the FileView gets
    finalized.
  + git: Fix compile warnings.
  + glade: Add toggle buttons for margin and align editing.
  + indentation-c-style: Fix logic error.
  + libanjuta: Set "relative-path" property of AnjutaFileDropEntry
    as readwrite.
  + plugin-manager:
  - Fix dependents checking on wrong object in should_unload().
  - Don't destroy available_plugins order in
    populate_plugin_model().
  - Clean up memory management.
  - Directly use anjuta_plugin_deactivate in unload_all_plugins()
  + profile-manager: Add new close() function.
  + project-wizard:
  - Allow to start a new project from the command line.
  - Remove trailing spaces.
  - Remove compilation warnings.
  - hide breakpoints and watches windows on new project
    bgo#616728.
  + run-program:
  - Keep a weak reference to the IAnjutaTerminal we run the
    program in.
  - Fix a crash when destroying the plugin.
  + sourceview: Don't store the builder for the preferences in a
    global variable.
  + symbol-db:
  - Keep a reference to the SymbolDBQuery when running it in a
    thread.
  - Use a vertical box for the search view.
  - Remove buffer update timeout when plugin gets deactivated.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 3.7.4:
  + file-loader:
  - Fix leak of GtkRecentInfos in the RecentChooserMenu.
  - file-loader: Fix leak of plugin names in sort_wizards()
  + file-manager: Fix compile warning.
  + git: Fix destruction of GitLogPane.
  + libanjuta:
  - Actually free stuff in AnjutaPkgConfigChooser::finalize.
  - Add "document-[added|removed]" signals to
    IAnjutaDocumentManager.
  - Allow to set indentation and tab size separately
  - Clean up and bug fix in plugin manager
  - Fix a few compiler warnings
  - Fix IAnjutaFile::opened signal documentation.
  + project-manager:
  - Allow to change project backend
  - Display current project backend
  - Fix leak of the nodes GList in gbf_project_view_update_tree().
  + run-program: Default to Yes in "The program is already running"
    dialog.
  + snippets-manager: Fix faulty assertion in snippets_db_dispose().
  + sourceview:
  - Add marks to an unloaded document the same way we reload
    marks.
  - Detect that a ifile_open() is a reload and save marks and
    position.
  - Don't check if objects are not NULL before calling
    g_clear_object().
  - keep ref on SourceViewIO during call to
    input_stream_read_async().
  + starter: Fix leak of GtkRecentInfo.
  + symbol-db:
  - Add update_flag to the symbol unique constraint.
  - Fix leaks
  - Fix "parenthesis" typos
  - rename sdb_engine_get_tuple_id_by_unique_name4()...
  - When updating a symbol try to update the closest one.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 3.7.90:
  + Add new quick-open plugin.
  + am-project: Fix a crash when changing target properties.
  + Anjuta:
  - Saved dock positions not applied when opening a project
    (bgo#688609)
  - Make sure the starter widget is visible on startup.
  + build-basic-autotools:
  - don't let build directory button expand.
  - Fix selection of build directory.
  + class-gen:
  - Always generate GObject private structure.
  - generate license the same way as project-wizard.
  - output filename instead of project name before copyright.
  + devhelp: Port to webkitgtk2.
  + document-manager:
  - connect to toplevel SearchBox keypress to handle closing.
  - Save search box settings.
  + file-manager:
  - Add option for showing the currently edited file in the file
    manager.
  - Add "Show in File manager" action to document popup.
  - Enable typeahead search.
  + glade: Add a menu item for glade properties dialog.
  + indentation-c-style: enable the plugin for IDL files.
  + jhbuild:
  - Extract libdir from newly added JHBUILD_LIBDIR environment
    variable.
  - Translate error messages.
  + language-support-cp-java: fix crasher when swapping
    header/source
  + libanjuta:
  - Add basic tests for AnjutaCompletion.
  - Add new AnjutaCompletion object for prefix matching.
  - Avoid the name Anjuta in libanjuta messages (bgo#693916)
  + parser-cxx:
  - remove unused ParserCxxAssistContext
  - use AnjutaCompletion instead of deprecated GCompletion
  + patch: Replace deprecated GtkTable by GtkGrid
  + project-import:
  - Open a directory with Anjuta.
  - Try to fill project name automatically in import project
    dialog
  + project-manager: Remove New Library menu item.
  + project-wizard: move license templates to data/
  + sourceview:
  - connect settings notifications with g_signal_connect_object()
  - Fix wrong assignment when saving markers
  - mark clearing of buffer as a not undoable action
  - use etag to only emit "changed" when file was externally
    modified
  - use G_PRIORITY_DEFAULT for IO
  - use gtk_widget_preferred_size instead of gtk_widget_size_request
  + starter: Fix a warning
  + symbol-db:
  - fix compile warnings
  - fix symbols view label box to be horizontal
  + Updated translations.
- Replace pkgconfig(libvala-0.18) BuildRequires with
  pkgconfig(libvala-0.20), following the GNOME 3.8 release plans.</changelog>
<changelog author="dimstar@opensuse.org" date="1363780800">- Update to version 3.7.92:
  + document-manager:
  - Allow to search starting from the current position.
  - Highlight search text in background.
  - Move common code in a function.
  + file-manager: make file_view_show_extended_data() more robust.
  + Fix desktop file syntax errors.
  + Fixed needlessly marked label for translation.
  + git:
  - fix up memory management of log model.
  - properly unset the log command in the case the command failed
  - Unset the log model view before refreshing the log.
  - use g_signal_connect_object() in GitLogCommand.
  - use g_signal_connect_object() to connect to commands in
    GitLogPane.
  + libanjuta: keep a ref on the AnjutaAsyncCommand when its thread
    is run.
  + Make the glade catalog an optional feature.
  + message-view: use g_type_class_add_private() to add private
    struct.
  + parser-cxx: use g_signal_connect_object() to connect to query
    signals.
  + sourceview:
  - add checks to SourceviewIO that the parent Sourceview is
    alive.
  - don't take extra refs during open/save.
  - keep a separate reference to AnjutaShell in SourceviewIO.
  - move all construction of Sourceview into constructed.
  - only cancel open operations when closing editor.
  - only update stored etag if save was succesful.
  - use g_signal_connect_object() to connect to io signals.
  + symbol-db: don't allow or set null scope_definition_id and
    scope_id.
  + Updated translations.
- Pass --enable-glade-catalog to configure to ensure the catalogs
  are being installed.
- Add anjuta-glade.xml to sources, which is missing in the tarball.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Updated translations.</changelog>
<changelog author="dmueller@suse.com" date="1364299200">- Do not BuildRequire valgrind for aarch64.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.8.1:
  + git: Log path entry should be editable.
  + project-wizard: Creating new project using wizard fails due to
    license files missing (bgo#696672).
  + Bugs fixed: bgo#696023.
  + Updated translations.
- Re-add anjuta-glade.xml: bgo#696023 seems not entirely fixed.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + anjuta_language_provider: add proposals() function.
  + anjuta-tabber:
  - Always use the padding of an active tab in y-direction size
    allocation.
  - don't iterate list to check if node is first/last.
  - fix calculation of region flags.
  - implement gtk_container_get_path_for_child().
  - remove call to gtk_widget_style_attach().
  - remove the total padding from total width.
  - rework size allocation.
  - take focus-padding into account when rendering focus.
  - use tab_curvature for left/right space of first/last tab.
  + dir-project:
  - check for NULL groups in dir_project_is_loaded().
  - fix compile error.
  + document-manager:
  - don't allocate AnjutaDocmanPriv ourselves.
  - don't free AnjutaDocmanPriv ourselves.
  - fix compile warning.
  - pack notebook with width 1.
  - remove margin around the document combo box.
  + git:
  - Add a stash button to the Status command bar.
  - Fix more names in the glade file.
  - Fix setting of a custom author in the commit panel.
  - Fix widget names.
  - Implement adding files by dragging them onto the status view.
  - Implement branch switching by double-click.
  - More glade file name fixes.
  - Pack the dock and the command bar together.
  - Use actions for recurring items in the glade file.
  - Use a toggle button to show and hide the command bar.
  - Widget name fixes.
  + language-support-js:
  - replace one more use of ianjuta_editor_assist_proposals().
  - use anjuta_language_provider_proposals().
  + language-support-python:
  - replace one more use of ianjuta_editor_assist_proposals().
  - use anjuta_language_provider_proposals().
  + libanjuta: Improve editor modeline support.
  + libanjuta/manuals: Update documentation sections.
  + message-view:
  - Use AnjutaCloseButton in tabs.
  - use a single box for the tab widget.
  + mk-project:
  - Ignore conditional directives in makefile.
  - Prevent a crash.
  + parser-cxx:
  - fix compilation warning.
  - use anjuta_language_provider_proposals().
  + project-wizard: Use dist_doc_DATA for documentation text files.
  + sourceview: remove filtering of single proposals matching
    pre_word.
  + symbol-db-query: change order of property installation in
    SymbolDBQuery.
  + Update doap file.
  + Use dist_doc_DATA for documentation text files.
  + Bugs fixed: bgo#680770, bgo#688611, bgo#696023, bgo#696984,
    bgo#696990, bgo#697030, bgo#698011.
  + Updated translations.
- Drop anjuta-glade.xml source: it's included in the tarball.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + subversion: convert builder file to gtk+-3.0.
  + starter: guard for NULL document manager or project manager.
  + Fix deprecation warnings.
  + Bugs fixed: bgo#699323, bgo#699329, bgo#699327, bgo#699330,
    bgo#699326, bgo#698705, bgo#699316, bgo#700615, bgo#696991,
    bgo#698158, bgo#700318, bgo#694644.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1371902400">- Update to version 3.9.3:
  + sourceview:
  - fix compile warnings.
  + message-view: don't manually free private structure.
  + snippets-manager: fix compile warnings.
  + git:
  - Add a context menu to the log pane.
  - Add a context menu to the Branches pane.
  - Add a popup menu to the Remotes pane.
  - Check box action fixes in Push and Pull panes.
  - Add a popup menu to the Stash pane.
  - Fix a warning.
  + libanjuta:
  - Improve symbol-db behavior on cut, paste, undo, redo and
    when multiple files are modified.
  - Move scoped and descoped signal on AnjutaProfile object.
  - Replace AnjutaPluginDescription by AnjutaPluginHandle in API.
  - Move anjuta_profile_manager_load_profile function in
    anjuta_profile.
  - Always keep plugins in the system profile.
  - Allow to enable only a set of plugins defined in the profile
    file.
  - Keep dynamic allocation data in AnjutaPluginDescription.
  - Allow to change plugin description key from profile.
  + Allow to select different profile on the command line.
  + Add a sample custom profile keeping only the editor.
  + document-manager: Automatically open an empty file if starter
    plugin is not used.
  + symbol-db: Update symbol database on editor changes without
    saving.
  + language-support-cpp-jave: Fix memory leak.
  + Bugs fixed: bgo#701443, bgo#701207, bgo#700383
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373371200">- Update to version 3.9.4:
  + anjuta: Add application menu.
  + git: Fix the Do Not Commit option in the Revert pane.
  + libanjuta/anjuta-entry: Don't use CSS for help text styles.
  + Keep using loaded plugin even if they are marked as disabled.
  + Register GApplication with a different name if a profile is
    used.
  + document-manager: Make use of symbol-db plugin optional.
  + language-support-python: Remove critical warnings.
  + language-manager: Support symbols in more programming
    languages.
  + Need at least glib 2.34 for g_spawn_check_exit_status.
  + dir-project: Load big project faster.
  + dir-project: Decrease project load priority to avoid blocking
    GUI.
  + am-project: data target are not distributed by default in
    automake.
  + project-manager: Add a function in the interface to remove a
    file from a project.
  + Bugs fixed: bgo#703637, bgo#702576
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + anjuta: Only show app-menu if supported by environment.
  + libanjuta: Make AnjutaCommandBar easier to use on small
    screens.
  + Bugs fixed: bgo#699544.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375790400">- Add anjuta-vala-0.22.patch: Allow building with vala 0.22.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.
- Change pkgconfig(libvala-0.20) BuildRequires to
  pkgconfig(libvala-0.22) in order to perform the switch to Vala
  0.22.
- Stop passing obsolete --disable-scrollkeeper to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Update to version 3.9.90:
  + document-manager: Fix icon size in document manager tabs.
  + git:
  - Widget name fixes.
  - Show diffs of uncommitted changes in the status view.
  - Show stash diffs in the stash pane.
  - Don't show the command bar if the Tasks button isn't active.
  - Don't show stash numbers on diff rows.
  + libanjuta:
  - Add AnjutaCellRendererDiff.
  - Update the glade catalog.
  + libanjuta/anjuta-command-bar:
  - Resect GTK button image settings.
  - Don't use a shadow for the scrolled window.
  + symbol-db:
  - link with librt on Linux (bgo#704985).
  - Use a GtkSearchEntry for the search entry in the search view.
  + libanjuta/anjuta-file-list: Fix the help text color.
  + libanjuta/anjuta-cell-renderer-diff: Detect diff headers.
  + build: add support for libvala-0.22.
  + Use program icon on about dialog.
  + Fix column number on lines with tabs.
  + help: fix broken images.
  + Bugs fixed: bgo#689384, bgo#701419.
- Drop anjuta-vala-0.22.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh,
  as we don't carry any patch anymore.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 3.9.91:
  + git:
  - Fix removed files status display.
  - Expand the status view tree when all diff commands are
    finished.
  + project-manager: The 'Can not add source files' dialog is too
    long and his buttons and bottom side are out of the screen
    (bgo#501230).
  + Fix incorrect MimeType in .desktop file (bgo#706630).
  + Remove a critical warning when closing a project.
  + glade: Fix a critical warning when opening a project with a .ui
    file opened.
  + document-manager: Close all documents when closing a project.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 3.9.92:
  + git: Run diff commands after the status commands finish.
  + libanjuta/git: Render diffs one line at a time.
  + project-manager: Plural forms for "%d elements" (bgo#707562).
  + project-wizard: Auto completion code when you click in the
    widget tree is broken (bgo#707943).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 3.10.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384689600">- Update to version 3.10.2 (bnc#849913):
  + bgo#711722: C-Makefile project template broken.
  + document-manager: Fix bgo#711512.
  + Updated translations.</changelog>

</package>
<package pkgid="31a63a8c74bb3b64221f49b4608b25bf374bb5a7a12126ad86f615c39a42e274" name="anjuta-devel" arch="i586">
    <version epoch="0" ver="3.10.2" rel="14.9"/>

<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 3.7.1:
  + am-project:
  - Avoid critical warnings when a group does not have a
    Makefile.am
  - Double click on folder in project view open properties window
    (bgo#681050)
  - Folder properties dialog can't be close with ESC (bgo#681051)
  - Project browser is not updated when files are added or removed
    (bgo#683728)
  - Adding a "Miscelaneous Data" objective ignores the given name
    (bgo#684770)
  - Check a copy of anjuta project in regression instead of the
    real project
  - Do not store files as binary in anjuta shar archive used in
    regression test
  + anjuta:
  - Do not use GDL members deprecated in version 3.6
  - Move command line parsing in AnjutaApplication
  - Remove custom filtering for debugging message as this is
    provided by GLib &gt;= 2.32
  - Rename AnjutaApp as AnjutaWindow
  - Rename Anjuta as AnjutaApplication
  + build-basic-autotools:
  - Configuration name combo box should be editable
  - Fix alignment of some text broken by the previous patch
  - Update environment variables when the build configuration is
    changed
  + build: anjuta-3.5.91 fails to configure due to ac_ct_CXX check
  (bgo#684758)
  + glade: Fix make file some files were not installed
  + jhbuild:
  - new plugin to build/run program inside the jhbuild environment
  - Provide a fallback for G_DEFINE_QUARK to allow compilation
    with GLib 2.32
  + run-program: use AnjutaEnvironmentEditor instead of implementing
  our own version.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 3.7.2:
  + anjuta: Allow to abort loading of a session
  + anjuta-window: Don't call gtk_widget_show_all when setting up
    widget.
  + debug-manager:
  - Fix accessing of invalid tree models.
  - use g_spawn_sync() instead of fork() and waitpid()
  + document-manager:
  - Add search_box to document manager box directly.
  - Fix various compile warnings.
  - hide search box when pressing escape inside the document
    widget.
  - Never disable "find in files" action.
  - Remove obsolete code for tabbing between documents.
  - Show dirty character "*" and "[read-only]" in combo filename.
  - Support showing open documents in a combobox.
  - Update combo filenames when the project changes.
  - use on_close_file_activate() when closing file using combo
    close button.
  + file-manager: Fix invalid unref of NULL pointer.
  + Fix compile errors regarding undeclared functions.
  + git:
  - Fix assertion when running g_hash_table_unref() on a NULL
    pointer.
  - Fix assertion when running g_signal_handlers_disconnect on
    already destroyed widget.
  - Fix bgo 687145 - Critical warning when switching git pane
  + glade:
  - Fix the images in the palette toggles used for choosing the
    edit mode.
  - Fix the palette not being shown.
  + indentation-c-style:
  - Add option whether paranthesis alignment should only use
    spaces.
  - be more picky when completing braces.
  - Change plugin.c modeline to spaces
  - Enable the plugin for JavaScript source files.
  - Fix get_line_indentation().
  - Fix modeline in plugin.c
  - Fix "parenthesis" typos
  - remove java_indentation() method
  - Rename action group to "C Indentation" and remove it on
    deactivation.
  - Update preferences UI file to gtk+-3
  - When removing opening bracket also remove the closing one.
  + indentation-python-style: Rename action group to "Python
    Indentation".
  + language-support-cpp-java: Remove
    org.gnome.anjuta.plugins.cpp.gschema.valid from git
  + language-support-vala: Don't clean config.vapi
  + libanjuta:
  - Improve documentation of AnjutaSession
  - use g_spawn_sync instead of fork() and waitpid()
  + project-wizard: Fix vala ui path (bgo#686718)
  + python:
  - Auto-completion causes a segfault in Anjuta 3.6.1
    (bgo#687646)
  - Fix crash during auto-indentation
  + sourceview: don't emit change events after doing an undo
  + Fixed compile warnings and a real bug in the gdbmi plugin</changelog>
<changelog author="zaitor@opensuse.org" date="1357473600">- Update to version 3.7.3:
  + Added keywords in desktop file.
  + anjuta:
  - Fix destruction of the AnjutaUI instance.
  - Fix destruction of AnjutaPreferences instance.
  - Unload all plugins before closing a window.
  - Remove "exiting" signal from AnjutaShell.
  + anjuta-plugin-handle: Use g_hash_table_remove_all instead of
    g_hash_table_foreach_remove.
  + am-project: Change the "Dependencies loop in variables"
    warning to a debug print.
  + build: disable -Werror to workaround flex(1) issue.
  + build-basic-autotools:
  - Disconnect all signals on editors when the plugin is
    deactivated.
  - Remove idle for updating indicators when plugin is
    deactivated.
  + document-manager:
  - Remove autosave timeout when the plugin is deactivated.
  - Fix disconnection of GtkNotebook "switch-page" signal.
  + file-manager:
  - Keep a weak reference to the IAnjutaVcs object in FileModel.
  - Unref the FileModel reference when the FileView gets
    finalized.
  + git: Fix compile warnings.
  + glade: Add toggle buttons for margin and align editing.
  + indentation-c-style: Fix logic error.
  + libanjuta: Set "relative-path" property of AnjutaFileDropEntry
    as readwrite.
  + plugin-manager:
  - Fix dependents checking on wrong object in should_unload().
  - Don't destroy available_plugins order in
    populate_plugin_model().
  - Clean up memory management.
  - Directly use anjuta_plugin_deactivate in unload_all_plugins()
  + profile-manager: Add new close() function.
  + project-wizard:
  - Allow to start a new project from the command line.
  - Remove trailing spaces.
  - Remove compilation warnings.
  - hide breakpoints and watches windows on new project
    bgo#616728.
  + run-program:
  - Keep a weak reference to the IAnjutaTerminal we run the
    program in.
  - Fix a crash when destroying the plugin.
  + sourceview: Don't store the builder for the preferences in a
    global variable.
  + symbol-db:
  - Keep a reference to the SymbolDBQuery when running it in a
    thread.
  - Use a vertical box for the search view.
  - Remove buffer update timeout when plugin gets deactivated.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 3.7.4:
  + file-loader:
  - Fix leak of GtkRecentInfos in the RecentChooserMenu.
  - file-loader: Fix leak of plugin names in sort_wizards()
  + file-manager: Fix compile warning.
  + git: Fix destruction of GitLogPane.
  + libanjuta:
  - Actually free stuff in AnjutaPkgConfigChooser::finalize.
  - Add "document-[added|removed]" signals to
    IAnjutaDocumentManager.
  - Allow to set indentation and tab size separately
  - Clean up and bug fix in plugin manager
  - Fix a few compiler warnings
  - Fix IAnjutaFile::opened signal documentation.
  + project-manager:
  - Allow to change project backend
  - Display current project backend
  - Fix leak of the nodes GList in gbf_project_view_update_tree().
  + run-program: Default to Yes in "The program is already running"
    dialog.
  + snippets-manager: Fix faulty assertion in snippets_db_dispose().
  + sourceview:
  - Add marks to an unloaded document the same way we reload
    marks.
  - Detect that a ifile_open() is a reload and save marks and
    position.
  - Don't check if objects are not NULL before calling
    g_clear_object().
  - keep ref on SourceViewIO during call to
    input_stream_read_async().
  + starter: Fix leak of GtkRecentInfo.
  + symbol-db:
  - Add update_flag to the symbol unique constraint.
  - Fix leaks
  - Fix "parenthesis" typos
  - rename sdb_engine_get_tuple_id_by_unique_name4()...
  - When updating a symbol try to update the closest one.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 3.7.90:
  + Add new quick-open plugin.
  + am-project: Fix a crash when changing target properties.
  + Anjuta:
  - Saved dock positions not applied when opening a project
    (bgo#688609)
  - Make sure the starter widget is visible on startup.
  + build-basic-autotools:
  - don't let build directory button expand.
  - Fix selection of build directory.
  + class-gen:
  - Always generate GObject private structure.
  - generate license the same way as project-wizard.
  - output filename instead of project name before copyright.
  + devhelp: Port to webkitgtk2.
  + document-manager:
  - connect to toplevel SearchBox keypress to handle closing.
  - Save search box settings.
  + file-manager:
  - Add option for showing the currently edited file in the file
    manager.
  - Add "Show in File manager" action to document popup.
  - Enable typeahead search.
  + glade: Add a menu item for glade properties dialog.
  + indentation-c-style: enable the plugin for IDL files.
  + jhbuild:
  - Extract libdir from newly added JHBUILD_LIBDIR environment
    variable.
  - Translate error messages.
  + language-support-cp-java: fix crasher when swapping
    header/source
  + libanjuta:
  - Add basic tests for AnjutaCompletion.
  - Add new AnjutaCompletion object for prefix matching.
  - Avoid the name Anjuta in libanjuta messages (bgo#693916)
  + parser-cxx:
  - remove unused ParserCxxAssistContext
  - use AnjutaCompletion instead of deprecated GCompletion
  + patch: Replace deprecated GtkTable by GtkGrid
  + project-import:
  - Open a directory with Anjuta.
  - Try to fill project name automatically in import project
    dialog
  + project-manager: Remove New Library menu item.
  + project-wizard: move license templates to data/
  + sourceview:
  - connect settings notifications with g_signal_connect_object()
  - Fix wrong assignment when saving markers
  - mark clearing of buffer as a not undoable action
  - use etag to only emit "changed" when file was externally
    modified
  - use G_PRIORITY_DEFAULT for IO
  - use gtk_widget_preferred_size instead of gtk_widget_size_request
  + starter: Fix a warning
  + symbol-db:
  - fix compile warnings
  - fix symbols view label box to be horizontal
  + Updated translations.
- Replace pkgconfig(libvala-0.18) BuildRequires with
  pkgconfig(libvala-0.20), following the GNOME 3.8 release plans.</changelog>
<changelog author="dimstar@opensuse.org" date="1363780800">- Update to version 3.7.92:
  + document-manager:
  - Allow to search starting from the current position.
  - Highlight search text in background.
  - Move common code in a function.
  + file-manager: make file_view_show_extended_data() more robust.
  + Fix desktop file syntax errors.
  + Fixed needlessly marked label for translation.
  + git:
  - fix up memory management of log model.
  - properly unset the log command in the case the command failed
  - Unset the log model view before refreshing the log.
  - use g_signal_connect_object() in GitLogCommand.
  - use g_signal_connect_object() to connect to commands in
    GitLogPane.
  + libanjuta: keep a ref on the AnjutaAsyncCommand when its thread
    is run.
  + Make the glade catalog an optional feature.
  + message-view: use g_type_class_add_private() to add private
    struct.
  + parser-cxx: use g_signal_connect_object() to connect to query
    signals.
  + sourceview:
  - add checks to SourceviewIO that the parent Sourceview is
    alive.
  - don't take extra refs during open/save.
  - keep a separate reference to AnjutaShell in SourceviewIO.
  - move all construction of Sourceview into constructed.
  - only cancel open operations when closing editor.
  - only update stored etag if save was succesful.
  - use g_signal_connect_object() to connect to io signals.
  + symbol-db: don't allow or set null scope_definition_id and
    scope_id.
  + Updated translations.
- Pass --enable-glade-catalog to configure to ensure the catalogs
  are being installed.
- Add anjuta-glade.xml to sources, which is missing in the tarball.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Updated translations.</changelog>
<changelog author="dmueller@suse.com" date="1364299200">- Do not BuildRequire valgrind for aarch64.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.8.1:
  + git: Log path entry should be editable.
  + project-wizard: Creating new project using wizard fails due to
    license files missing (bgo#696672).
  + Bugs fixed: bgo#696023.
  + Updated translations.
- Re-add anjuta-glade.xml: bgo#696023 seems not entirely fixed.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + anjuta_language_provider: add proposals() function.
  + anjuta-tabber:
  - Always use the padding of an active tab in y-direction size
    allocation.
  - don't iterate list to check if node is first/last.
  - fix calculation of region flags.
  - implement gtk_container_get_path_for_child().
  - remove call to gtk_widget_style_attach().
  - remove the total padding from total width.
  - rework size allocation.
  - take focus-padding into account when rendering focus.
  - use tab_curvature for left/right space of first/last tab.
  + dir-project:
  - check for NULL groups in dir_project_is_loaded().
  - fix compile error.
  + document-manager:
  - don't allocate AnjutaDocmanPriv ourselves.
  - don't free AnjutaDocmanPriv ourselves.
  - fix compile warning.
  - pack notebook with width 1.
  - remove margin around the document combo box.
  + git:
  - Add a stash button to the Status command bar.
  - Fix more names in the glade file.
  - Fix setting of a custom author in the commit panel.
  - Fix widget names.
  - Implement adding files by dragging them onto the status view.
  - Implement branch switching by double-click.
  - More glade file name fixes.
  - Pack the dock and the command bar together.
  - Use actions for recurring items in the glade file.
  - Use a toggle button to show and hide the command bar.
  - Widget name fixes.
  + language-support-js:
  - replace one more use of ianjuta_editor_assist_proposals().
  - use anjuta_language_provider_proposals().
  + language-support-python:
  - replace one more use of ianjuta_editor_assist_proposals().
  - use anjuta_language_provider_proposals().
  + libanjuta: Improve editor modeline support.
  + libanjuta/manuals: Update documentation sections.
  + message-view:
  - Use AnjutaCloseButton in tabs.
  - use a single box for the tab widget.
  + mk-project:
  - Ignore conditional directives in makefile.
  - Prevent a crash.
  + parser-cxx:
  - fix compilation warning.
  - use anjuta_language_provider_proposals().
  + project-wizard: Use dist_doc_DATA for documentation text files.
  + sourceview: remove filtering of single proposals matching
    pre_word.
  + symbol-db-query: change order of property installation in
    SymbolDBQuery.
  + Update doap file.
  + Use dist_doc_DATA for documentation text files.
  + Bugs fixed: bgo#680770, bgo#688611, bgo#696023, bgo#696984,
    bgo#696990, bgo#697030, bgo#698011.
  + Updated translations.
- Drop anjuta-glade.xml source: it's included in the tarball.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + subversion: convert builder file to gtk+-3.0.
  + starter: guard for NULL document manager or project manager.
  + Fix deprecation warnings.
  + Bugs fixed: bgo#699323, bgo#699329, bgo#699327, bgo#699330,
    bgo#699326, bgo#698705, bgo#699316, bgo#700615, bgo#696991,
    bgo#698158, bgo#700318, bgo#694644.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1371902400">- Update to version 3.9.3:
  + sourceview:
  - fix compile warnings.
  + message-view: don't manually free private structure.
  + snippets-manager: fix compile warnings.
  + git:
  - Add a context menu to the log pane.
  - Add a context menu to the Branches pane.
  - Add a popup menu to the Remotes pane.
  - Check box action fixes in Push and Pull panes.
  - Add a popup menu to the Stash pane.
  - Fix a warning.
  + libanjuta:
  - Improve symbol-db behavior on cut, paste, undo, redo and
    when multiple files are modified.
  - Move scoped and descoped signal on AnjutaProfile object.
  - Replace AnjutaPluginDescription by AnjutaPluginHandle in API.
  - Move anjuta_profile_manager_load_profile function in
    anjuta_profile.
  - Always keep plugins in the system profile.
  - Allow to enable only a set of plugins defined in the profile
    file.
  - Keep dynamic allocation data in AnjutaPluginDescription.
  - Allow to change plugin description key from profile.
  + Allow to select different profile on the command line.
  + Add a sample custom profile keeping only the editor.
  + document-manager: Automatically open an empty file if starter
    plugin is not used.
  + symbol-db: Update symbol database on editor changes without
    saving.
  + language-support-cpp-jave: Fix memory leak.
  + Bugs fixed: bgo#701443, bgo#701207, bgo#700383
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373371200">- Update to version 3.9.4:
  + anjuta: Add application menu.
  + git: Fix the Do Not Commit option in the Revert pane.
  + libanjuta/anjuta-entry: Don't use CSS for help text styles.
  + Keep using loaded plugin even if they are marked as disabled.
  + Register GApplication with a different name if a profile is
    used.
  + document-manager: Make use of symbol-db plugin optional.
  + language-support-python: Remove critical warnings.
  + language-manager: Support symbols in more programming
    languages.
  + Need at least glib 2.34 for g_spawn_check_exit_status.
  + dir-project: Load big project faster.
  + dir-project: Decrease project load priority to avoid blocking
    GUI.
  + am-project: data target are not distributed by default in
    automake.
  + project-manager: Add a function in the interface to remove a
    file from a project.
  + Bugs fixed: bgo#703637, bgo#702576
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + anjuta: Only show app-menu if supported by environment.
  + libanjuta: Make AnjutaCommandBar easier to use on small
    screens.
  + Bugs fixed: bgo#699544.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375790400">- Add anjuta-vala-0.22.patch: Allow building with vala 0.22.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.
- Change pkgconfig(libvala-0.20) BuildRequires to
  pkgconfig(libvala-0.22) in order to perform the switch to Vala
  0.22.
- Stop passing obsolete --disable-scrollkeeper to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Update to version 3.9.90:
  + document-manager: Fix icon size in document manager tabs.
  + git:
  - Widget name fixes.
  - Show diffs of uncommitted changes in the status view.
  - Show stash diffs in the stash pane.
  - Don't show the command bar if the Tasks button isn't active.
  - Don't show stash numbers on diff rows.
  + libanjuta:
  - Add AnjutaCellRendererDiff.
  - Update the glade catalog.
  + libanjuta/anjuta-command-bar:
  - Resect GTK button image settings.
  - Don't use a shadow for the scrolled window.
  + symbol-db:
  - link with librt on Linux (bgo#704985).
  - Use a GtkSearchEntry for the search entry in the search view.
  + libanjuta/anjuta-file-list: Fix the help text color.
  + libanjuta/anjuta-cell-renderer-diff: Detect diff headers.
  + build: add support for libvala-0.22.
  + Use program icon on about dialog.
  + Fix column number on lines with tabs.
  + help: fix broken images.
  + Bugs fixed: bgo#689384, bgo#701419.
- Drop anjuta-vala-0.22.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh,
  as we don't carry any patch anymore.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 3.9.91:
  + git:
  - Fix removed files status display.
  - Expand the status view tree when all diff commands are
    finished.
  + project-manager: The 'Can not add source files' dialog is too
    long and his buttons and bottom side are out of the screen
    (bgo#501230).
  + Fix incorrect MimeType in .desktop file (bgo#706630).
  + Remove a critical warning when closing a project.
  + glade: Fix a critical warning when opening a project with a .ui
    file opened.
  + document-manager: Close all documents when closing a project.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 3.9.92:
  + git: Run diff commands after the status commands finish.
  + libanjuta/git: Render diffs one line at a time.
  + project-manager: Plural forms for "%d elements" (bgo#707562).
  + project-wizard: Auto completion code when you click in the
    widget tree is broken (bgo#707943).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 3.10.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384689600">- Update to version 3.10.2 (bnc#849913):
  + bgo#711722: C-Makefile project template broken.
  + document-manager: Fix bgo#711512.
  + Updated translations.</changelog>

</package>
<package pkgid="30cbf5f2e8c922740e9c0f1773ee071b41a2ffef24b8fce8d21a248e5c2306d6" name="anjuta-devel" arch="x86_64">
    <version epoch="0" ver="3.10.2" rel="14.9"/>

<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 3.7.1:
  + am-project:
  - Avoid critical warnings when a group does not have a
    Makefile.am
  - Double click on folder in project view open properties window
    (bgo#681050)
  - Folder properties dialog can't be close with ESC (bgo#681051)
  - Project browser is not updated when files are added or removed
    (bgo#683728)
  - Adding a "Miscelaneous Data" objective ignores the given name
    (bgo#684770)
  - Check a copy of anjuta project in regression instead of the
    real project
  - Do not store files as binary in anjuta shar archive used in
    regression test
  + anjuta:
  - Do not use GDL members deprecated in version 3.6
  - Move command line parsing in AnjutaApplication
  - Remove custom filtering for debugging message as this is
    provided by GLib &gt;= 2.32
  - Rename AnjutaApp as AnjutaWindow
  - Rename Anjuta as AnjutaApplication
  + build-basic-autotools:
  - Configuration name combo box should be editable
  - Fix alignment of some text broken by the previous patch
  - Update environment variables when the build configuration is
    changed
  + build: anjuta-3.5.91 fails to configure due to ac_ct_CXX check
  (bgo#684758)
  + glade: Fix make file some files were not installed
  + jhbuild:
  - new plugin to build/run program inside the jhbuild environment
  - Provide a fallback for G_DEFINE_QUARK to allow compilation
    with GLib 2.32
  + run-program: use AnjutaEnvironmentEditor instead of implementing
  our own version.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 3.7.2:
  + anjuta: Allow to abort loading of a session
  + anjuta-window: Don't call gtk_widget_show_all when setting up
    widget.
  + debug-manager:
  - Fix accessing of invalid tree models.
  - use g_spawn_sync() instead of fork() and waitpid()
  + document-manager:
  - Add search_box to document manager box directly.
  - Fix various compile warnings.
  - hide search box when pressing escape inside the document
    widget.
  - Never disable "find in files" action.
  - Remove obsolete code for tabbing between documents.
  - Show dirty character "*" and "[read-only]" in combo filename.
  - Support showing open documents in a combobox.
  - Update combo filenames when the project changes.
  - use on_close_file_activate() when closing file using combo
    close button.
  + file-manager: Fix invalid unref of NULL pointer.
  + Fix compile errors regarding undeclared functions.
  + git:
  - Fix assertion when running g_hash_table_unref() on a NULL
    pointer.
  - Fix assertion when running g_signal_handlers_disconnect on
    already destroyed widget.
  - Fix bgo 687145 - Critical warning when switching git pane
  + glade:
  - Fix the images in the palette toggles used for choosing the
    edit mode.
  - Fix the palette not being shown.
  + indentation-c-style:
  - Add option whether paranthesis alignment should only use
    spaces.
  - be more picky when completing braces.
  - Change plugin.c modeline to spaces
  - Enable the plugin for JavaScript source files.
  - Fix get_line_indentation().
  - Fix modeline in plugin.c
  - Fix "parenthesis" typos
  - remove java_indentation() method
  - Rename action group to "C Indentation" and remove it on
    deactivation.
  - Update preferences UI file to gtk+-3
  - When removing opening bracket also remove the closing one.
  + indentation-python-style: Rename action group to "Python
    Indentation".
  + language-support-cpp-java: Remove
    org.gnome.anjuta.plugins.cpp.gschema.valid from git
  + language-support-vala: Don't clean config.vapi
  + libanjuta:
  - Improve documentation of AnjutaSession
  - use g_spawn_sync instead of fork() and waitpid()
  + project-wizard: Fix vala ui path (bgo#686718)
  + python:
  - Auto-completion causes a segfault in Anjuta 3.6.1
    (bgo#687646)
  - Fix crash during auto-indentation
  + sourceview: don't emit change events after doing an undo
  + Fixed compile warnings and a real bug in the gdbmi plugin</changelog>
<changelog author="zaitor@opensuse.org" date="1357473600">- Update to version 3.7.3:
  + Added keywords in desktop file.
  + anjuta:
  - Fix destruction of the AnjutaUI instance.
  - Fix destruction of AnjutaPreferences instance.
  - Unload all plugins before closing a window.
  - Remove "exiting" signal from AnjutaShell.
  + anjuta-plugin-handle: Use g_hash_table_remove_all instead of
    g_hash_table_foreach_remove.
  + am-project: Change the "Dependencies loop in variables"
    warning to a debug print.
  + build: disable -Werror to workaround flex(1) issue.
  + build-basic-autotools:
  - Disconnect all signals on editors when the plugin is
    deactivated.
  - Remove idle for updating indicators when plugin is
    deactivated.
  + document-manager:
  - Remove autosave timeout when the plugin is deactivated.
  - Fix disconnection of GtkNotebook "switch-page" signal.
  + file-manager:
  - Keep a weak reference to the IAnjutaVcs object in FileModel.
  - Unref the FileModel reference when the FileView gets
    finalized.
  + git: Fix compile warnings.
  + glade: Add toggle buttons for margin and align editing.
  + indentation-c-style: Fix logic error.
  + libanjuta: Set "relative-path" property of AnjutaFileDropEntry
    as readwrite.
  + plugin-manager:
  - Fix dependents checking on wrong object in should_unload().
  - Don't destroy available_plugins order in
    populate_plugin_model().
  - Clean up memory management.
  - Directly use anjuta_plugin_deactivate in unload_all_plugins()
  + profile-manager: Add new close() function.
  + project-wizard:
  - Allow to start a new project from the command line.
  - Remove trailing spaces.
  - Remove compilation warnings.
  - hide breakpoints and watches windows on new project
    bgo#616728.
  + run-program:
  - Keep a weak reference to the IAnjutaTerminal we run the
    program in.
  - Fix a crash when destroying the plugin.
  + sourceview: Don't store the builder for the preferences in a
    global variable.
  + symbol-db:
  - Keep a reference to the SymbolDBQuery when running it in a
    thread.
  - Use a vertical box for the search view.
  - Remove buffer update timeout when plugin gets deactivated.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 3.7.4:
  + file-loader:
  - Fix leak of GtkRecentInfos in the RecentChooserMenu.
  - file-loader: Fix leak of plugin names in sort_wizards()
  + file-manager: Fix compile warning.
  + git: Fix destruction of GitLogPane.
  + libanjuta:
  - Actually free stuff in AnjutaPkgConfigChooser::finalize.
  - Add "document-[added|removed]" signals to
    IAnjutaDocumentManager.
  - Allow to set indentation and tab size separately
  - Clean up and bug fix in plugin manager
  - Fix a few compiler warnings
  - Fix IAnjutaFile::opened signal documentation.
  + project-manager:
  - Allow to change project backend
  - Display current project backend
  - Fix leak of the nodes GList in gbf_project_view_update_tree().
  + run-program: Default to Yes in "The program is already running"
    dialog.
  + snippets-manager: Fix faulty assertion in snippets_db_dispose().
  + sourceview:
  - Add marks to an unloaded document the same way we reload
    marks.
  - Detect that a ifile_open() is a reload and save marks and
    position.
  - Don't check if objects are not NULL before calling
    g_clear_object().
  - keep ref on SourceViewIO during call to
    input_stream_read_async().
  + starter: Fix leak of GtkRecentInfo.
  + symbol-db:
  - Add update_flag to the symbol unique constraint.
  - Fix leaks
  - Fix "parenthesis" typos
  - rename sdb_engine_get_tuple_id_by_unique_name4()...
  - When updating a symbol try to update the closest one.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 3.7.90:
  + Add new quick-open plugin.
  + am-project: Fix a crash when changing target properties.
  + Anjuta:
  - Saved dock positions not applied when opening a project
    (bgo#688609)
  - Make sure the starter widget is visible on startup.
  + build-basic-autotools:
  - don't let build directory button expand.
  - Fix selection of build directory.
  + class-gen:
  - Always generate GObject private structure.
  - generate license the same way as project-wizard.
  - output filename instead of project name before copyright.
  + devhelp: Port to webkitgtk2.
  + document-manager:
  - connect to toplevel SearchBox keypress to handle closing.
  - Save search box settings.
  + file-manager:
  - Add option for showing the currently edited file in the file
    manager.
  - Add "Show in File manager" action to document popup.
  - Enable typeahead search.
  + glade: Add a menu item for glade properties dialog.
  + indentation-c-style: enable the plugin for IDL files.
  + jhbuild:
  - Extract libdir from newly added JHBUILD_LIBDIR environment
    variable.
  - Translate error messages.
  + language-support-cp-java: fix crasher when swapping
    header/source
  + libanjuta:
  - Add basic tests for AnjutaCompletion.
  - Add new AnjutaCompletion object for prefix matching.
  - Avoid the name Anjuta in libanjuta messages (bgo#693916)
  + parser-cxx:
  - remove unused ParserCxxAssistContext
  - use AnjutaCompletion instead of deprecated GCompletion
  + patch: Replace deprecated GtkTable by GtkGrid
  + project-import:
  - Open a directory with Anjuta.
  - Try to fill project name automatically in import project
    dialog
  + project-manager: Remove New Library menu item.
  + project-wizard: move license templates to data/
  + sourceview:
  - connect settings notifications with g_signal_connect_object()
  - Fix wrong assignment when saving markers
  - mark clearing of buffer as a not undoable action
  - use etag to only emit "changed" when file was externally
    modified
  - use G_PRIORITY_DEFAULT for IO
  - use gtk_widget_preferred_size instead of gtk_widget_size_request
  + starter: Fix a warning
  + symbol-db:
  - fix compile warnings
  - fix symbols view label box to be horizontal
  + Updated translations.
- Replace pkgconfig(libvala-0.18) BuildRequires with
  pkgconfig(libvala-0.20), following the GNOME 3.8 release plans.</changelog>
<changelog author="dimstar@opensuse.org" date="1363780800">- Update to version 3.7.92:
  + document-manager:
  - Allow to search starting from the current position.
  - Highlight search text in background.
  - Move common code in a function.
  + file-manager: make file_view_show_extended_data() more robust.
  + Fix desktop file syntax errors.
  + Fixed needlessly marked label for translation.
  + git:
  - fix up memory management of log model.
  - properly unset the log command in the case the command failed
  - Unset the log model view before refreshing the log.
  - use g_signal_connect_object() in GitLogCommand.
  - use g_signal_connect_object() to connect to commands in
    GitLogPane.
  + libanjuta: keep a ref on the AnjutaAsyncCommand when its thread
    is run.
  + Make the glade catalog an optional feature.
  + message-view: use g_type_class_add_private() to add private
    struct.
  + parser-cxx: use g_signal_connect_object() to connect to query
    signals.
  + sourceview:
  - add checks to SourceviewIO that the parent Sourceview is
    alive.
  - don't take extra refs during open/save.
  - keep a separate reference to AnjutaShell in SourceviewIO.
  - move all construction of Sourceview into constructed.
  - only cancel open operations when closing editor.
  - only update stored etag if save was succesful.
  - use g_signal_connect_object() to connect to io signals.
  + symbol-db: don't allow or set null scope_definition_id and
    scope_id.
  + Updated translations.
- Pass --enable-glade-catalog to configure to ensure the catalogs
  are being installed.
- Add anjuta-glade.xml to sources, which is missing in the tarball.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Updated translations.</changelog>
<changelog author="dmueller@suse.com" date="1364299200">- Do not BuildRequire valgrind for aarch64.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.8.1:
  + git: Log path entry should be editable.
  + project-wizard: Creating new project using wizard fails due to
    license files missing (bgo#696672).
  + Bugs fixed: bgo#696023.
  + Updated translations.
- Re-add anjuta-glade.xml: bgo#696023 seems not entirely fixed.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + anjuta_language_provider: add proposals() function.
  + anjuta-tabber:
  - Always use the padding of an active tab in y-direction size
    allocation.
  - don't iterate list to check if node is first/last.
  - fix calculation of region flags.
  - implement gtk_container_get_path_for_child().
  - remove call to gtk_widget_style_attach().
  - remove the total padding from total width.
  - rework size allocation.
  - take focus-padding into account when rendering focus.
  - use tab_curvature for left/right space of first/last tab.
  + dir-project:
  - check for NULL groups in dir_project_is_loaded().
  - fix compile error.
  + document-manager:
  - don't allocate AnjutaDocmanPriv ourselves.
  - don't free AnjutaDocmanPriv ourselves.
  - fix compile warning.
  - pack notebook with width 1.
  - remove margin around the document combo box.
  + git:
  - Add a stash button to the Status command bar.
  - Fix more names in the glade file.
  - Fix setting of a custom author in the commit panel.
  - Fix widget names.
  - Implement adding files by dragging them onto the status view.
  - Implement branch switching by double-click.
  - More glade file name fixes.
  - Pack the dock and the command bar together.
  - Use actions for recurring items in the glade file.
  - Use a toggle button to show and hide the command bar.
  - Widget name fixes.
  + language-support-js:
  - replace one more use of ianjuta_editor_assist_proposals().
  - use anjuta_language_provider_proposals().
  + language-support-python:
  - replace one more use of ianjuta_editor_assist_proposals().
  - use anjuta_language_provider_proposals().
  + libanjuta: Improve editor modeline support.
  + libanjuta/manuals: Update documentation sections.
  + message-view:
  - Use AnjutaCloseButton in tabs.
  - use a single box for the tab widget.
  + mk-project:
  - Ignore conditional directives in makefile.
  - Prevent a crash.
  + parser-cxx:
  - fix compilation warning.
  - use anjuta_language_provider_proposals().
  + project-wizard: Use dist_doc_DATA for documentation text files.
  + sourceview: remove filtering of single proposals matching
    pre_word.
  + symbol-db-query: change order of property installation in
    SymbolDBQuery.
  + Update doap file.
  + Use dist_doc_DATA for documentation text files.
  + Bugs fixed: bgo#680770, bgo#688611, bgo#696023, bgo#696984,
    bgo#696990, bgo#697030, bgo#698011.
  + Updated translations.
- Drop anjuta-glade.xml source: it's included in the tarball.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + subversion: convert builder file to gtk+-3.0.
  + starter: guard for NULL document manager or project manager.
  + Fix deprecation warnings.
  + Bugs fixed: bgo#699323, bgo#699329, bgo#699327, bgo#699330,
    bgo#699326, bgo#698705, bgo#699316, bgo#700615, bgo#696991,
    bgo#698158, bgo#700318, bgo#694644.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1371902400">- Update to version 3.9.3:
  + sourceview:
  - fix compile warnings.
  + message-view: don't manually free private structure.
  + snippets-manager: fix compile warnings.
  + git:
  - Add a context menu to the log pane.
  - Add a context menu to the Branches pane.
  - Add a popup menu to the Remotes pane.
  - Check box action fixes in Push and Pull panes.
  - Add a popup menu to the Stash pane.
  - Fix a warning.
  + libanjuta:
  - Improve symbol-db behavior on cut, paste, undo, redo and
    when multiple files are modified.
  - Move scoped and descoped signal on AnjutaProfile object.
  - Replace AnjutaPluginDescription by AnjutaPluginHandle in API.
  - Move anjuta_profile_manager_load_profile function in
    anjuta_profile.
  - Always keep plugins in the system profile.
  - Allow to enable only a set of plugins defined in the profile
    file.
  - Keep dynamic allocation data in AnjutaPluginDescription.
  - Allow to change plugin description key from profile.
  + Allow to select different profile on the command line.
  + Add a sample custom profile keeping only the editor.
  + document-manager: Automatically open an empty file if starter
    plugin is not used.
  + symbol-db: Update symbol database on editor changes without
    saving.
  + language-support-cpp-jave: Fix memory leak.
  + Bugs fixed: bgo#701443, bgo#701207, bgo#700383
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373371200">- Update to version 3.9.4:
  + anjuta: Add application menu.
  + git: Fix the Do Not Commit option in the Revert pane.
  + libanjuta/anjuta-entry: Don't use CSS for help text styles.
  + Keep using loaded plugin even if they are marked as disabled.
  + Register GApplication with a different name if a profile is
    used.
  + document-manager: Make use of symbol-db plugin optional.
  + language-support-python: Remove critical warnings.
  + language-manager: Support symbols in more programming
    languages.
  + Need at least glib 2.34 for g_spawn_check_exit_status.
  + dir-project: Load big project faster.
  + dir-project: Decrease project load priority to avoid blocking
    GUI.
  + am-project: data target are not distributed by default in
    automake.
  + project-manager: Add a function in the interface to remove a
    file from a project.
  + Bugs fixed: bgo#703637, bgo#702576
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + anjuta: Only show app-menu if supported by environment.
  + libanjuta: Make AnjutaCommandBar easier to use on small
    screens.
  + Bugs fixed: bgo#699544.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375790400">- Add anjuta-vala-0.22.patch: Allow building with vala 0.22.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.
- Change pkgconfig(libvala-0.20) BuildRequires to
  pkgconfig(libvala-0.22) in order to perform the switch to Vala
  0.22.
- Stop passing obsolete --disable-scrollkeeper to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Update to version 3.9.90:
  + document-manager: Fix icon size in document manager tabs.
  + git:
  - Widget name fixes.
  - Show diffs of uncommitted changes in the status view.
  - Show stash diffs in the stash pane.
  - Don't show the command bar if the Tasks button isn't active.
  - Don't show stash numbers on diff rows.
  + libanjuta:
  - Add AnjutaCellRendererDiff.
  - Update the glade catalog.
  + libanjuta/anjuta-command-bar:
  - Resect GTK button image settings.
  - Don't use a shadow for the scrolled window.
  + symbol-db:
  - link with librt on Linux (bgo#704985).
  - Use a GtkSearchEntry for the search entry in the search view.
  + libanjuta/anjuta-file-list: Fix the help text color.
  + libanjuta/anjuta-cell-renderer-diff: Detect diff headers.
  + build: add support for libvala-0.22.
  + Use program icon on about dialog.
  + Fix column number on lines with tabs.
  + help: fix broken images.
  + Bugs fixed: bgo#689384, bgo#701419.
- Drop anjuta-vala-0.22.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh,
  as we don't carry any patch anymore.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 3.9.91:
  + git:
  - Fix removed files status display.
  - Expand the status view tree when all diff commands are
    finished.
  + project-manager: The 'Can not add source files' dialog is too
    long and his buttons and bottom side are out of the screen
    (bgo#501230).
  + Fix incorrect MimeType in .desktop file (bgo#706630).
  + Remove a critical warning when closing a project.
  + glade: Fix a critical warning when opening a project with a .ui
    file opened.
  + document-manager: Close all documents when closing a project.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 3.9.92:
  + git: Run diff commands after the status commands finish.
  + libanjuta/git: Render diffs one line at a time.
  + project-manager: Plural forms for "%d elements" (bgo#707562).
  + project-wizard: Auto completion code when you click in the
    widget tree is broken (bgo#707943).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 3.10.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384689600">- Update to version 3.10.2 (bnc#849913):
  + bgo#711722: C-Makefile project template broken.
  + document-manager: Fix bgo#711512.
  + Updated translations.</changelog>

</package>
<package pkgid="0d736235e8fe3376ae9ad51ca4e33c75bac1be233db759962c9f27a10a4e60ba" name="anjuta-lang" arch="noarch">
    <version epoch="0" ver="3.10.2" rel="14.9"/>

<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 3.7.1:
  + am-project:
  - Avoid critical warnings when a group does not have a
    Makefile.am
  - Double click on folder in project view open properties window
    (bgo#681050)
  - Folder properties dialog can't be close with ESC (bgo#681051)
  - Project browser is not updated when files are added or removed
    (bgo#683728)
  - Adding a "Miscelaneous Data" objective ignores the given name
    (bgo#684770)
  - Check a copy of anjuta project in regression instead of the
    real project
  - Do not store files as binary in anjuta shar archive used in
    regression test
  + anjuta:
  - Do not use GDL members deprecated in version 3.6
  - Move command line parsing in AnjutaApplication
  - Remove custom filtering for debugging message as this is
    provided by GLib &gt;= 2.32
  - Rename AnjutaApp as AnjutaWindow
  - Rename Anjuta as AnjutaApplication
  + build-basic-autotools:
  - Configuration name combo box should be editable
  - Fix alignment of some text broken by the previous patch
  - Update environment variables when the build configuration is
    changed
  + build: anjuta-3.5.91 fails to configure due to ac_ct_CXX check
  (bgo#684758)
  + glade: Fix make file some files were not installed
  + jhbuild:
  - new plugin to build/run program inside the jhbuild environment
  - Provide a fallback for G_DEFINE_QUARK to allow compilation
    with GLib 2.32
  + run-program: use AnjutaEnvironmentEditor instead of implementing
  our own version.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 3.7.2:
  + anjuta: Allow to abort loading of a session
  + anjuta-window: Don't call gtk_widget_show_all when setting up
    widget.
  + debug-manager:
  - Fix accessing of invalid tree models.
  - use g_spawn_sync() instead of fork() and waitpid()
  + document-manager:
  - Add search_box to document manager box directly.
  - Fix various compile warnings.
  - hide search box when pressing escape inside the document
    widget.
  - Never disable "find in files" action.
  - Remove obsolete code for tabbing between documents.
  - Show dirty character "*" and "[read-only]" in combo filename.
  - Support showing open documents in a combobox.
  - Update combo filenames when the project changes.
  - use on_close_file_activate() when closing file using combo
    close button.
  + file-manager: Fix invalid unref of NULL pointer.
  + Fix compile errors regarding undeclared functions.
  + git:
  - Fix assertion when running g_hash_table_unref() on a NULL
    pointer.
  - Fix assertion when running g_signal_handlers_disconnect on
    already destroyed widget.
  - Fix bgo 687145 - Critical warning when switching git pane
  + glade:
  - Fix the images in the palette toggles used for choosing the
    edit mode.
  - Fix the palette not being shown.
  + indentation-c-style:
  - Add option whether paranthesis alignment should only use
    spaces.
  - be more picky when completing braces.
  - Change plugin.c modeline to spaces
  - Enable the plugin for JavaScript source files.
  - Fix get_line_indentation().
  - Fix modeline in plugin.c
  - Fix "parenthesis" typos
  - remove java_indentation() method
  - Rename action group to "C Indentation" and remove it on
    deactivation.
  - Update preferences UI file to gtk+-3
  - When removing opening bracket also remove the closing one.
  + indentation-python-style: Rename action group to "Python
    Indentation".
  + language-support-cpp-java: Remove
    org.gnome.anjuta.plugins.cpp.gschema.valid from git
  + language-support-vala: Don't clean config.vapi
  + libanjuta:
  - Improve documentation of AnjutaSession
  - use g_spawn_sync instead of fork() and waitpid()
  + project-wizard: Fix vala ui path (bgo#686718)
  + python:
  - Auto-completion causes a segfault in Anjuta 3.6.1
    (bgo#687646)
  - Fix crash during auto-indentation
  + sourceview: don't emit change events after doing an undo
  + Fixed compile warnings and a real bug in the gdbmi plugin</changelog>
<changelog author="zaitor@opensuse.org" date="1357473600">- Update to version 3.7.3:
  + Added keywords in desktop file.
  + anjuta:
  - Fix destruction of the AnjutaUI instance.
  - Fix destruction of AnjutaPreferences instance.
  - Unload all plugins before closing a window.
  - Remove "exiting" signal from AnjutaShell.
  + anjuta-plugin-handle: Use g_hash_table_remove_all instead of
    g_hash_table_foreach_remove.
  + am-project: Change the "Dependencies loop in variables"
    warning to a debug print.
  + build: disable -Werror to workaround flex(1) issue.
  + build-basic-autotools:
  - Disconnect all signals on editors when the plugin is
    deactivated.
  - Remove idle for updating indicators when plugin is
    deactivated.
  + document-manager:
  - Remove autosave timeout when the plugin is deactivated.
  - Fix disconnection of GtkNotebook "switch-page" signal.
  + file-manager:
  - Keep a weak reference to the IAnjutaVcs object in FileModel.
  - Unref the FileModel reference when the FileView gets
    finalized.
  + git: Fix compile warnings.
  + glade: Add toggle buttons for margin and align editing.
  + indentation-c-style: Fix logic error.
  + libanjuta: Set "relative-path" property of AnjutaFileDropEntry
    as readwrite.
  + plugin-manager:
  - Fix dependents checking on wrong object in should_unload().
  - Don't destroy available_plugins order in
    populate_plugin_model().
  - Clean up memory management.
  - Directly use anjuta_plugin_deactivate in unload_all_plugins()
  + profile-manager: Add new close() function.
  + project-wizard:
  - Allow to start a new project from the command line.
  - Remove trailing spaces.
  - Remove compilation warnings.
  - hide breakpoints and watches windows on new project
    bgo#616728.
  + run-program:
  - Keep a weak reference to the IAnjutaTerminal we run the
    program in.
  - Fix a crash when destroying the plugin.
  + sourceview: Don't store the builder for the preferences in a
    global variable.
  + symbol-db:
  - Keep a reference to the SymbolDBQuery when running it in a
    thread.
  - Use a vertical box for the search view.
  - Remove buffer update timeout when plugin gets deactivated.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 3.7.4:
  + file-loader:
  - Fix leak of GtkRecentInfos in the RecentChooserMenu.
  - file-loader: Fix leak of plugin names in sort_wizards()
  + file-manager: Fix compile warning.
  + git: Fix destruction of GitLogPane.
  + libanjuta:
  - Actually free stuff in AnjutaPkgConfigChooser::finalize.
  - Add "document-[added|removed]" signals to
    IAnjutaDocumentManager.
  - Allow to set indentation and tab size separately
  - Clean up and bug fix in plugin manager
  - Fix a few compiler warnings
  - Fix IAnjutaFile::opened signal documentation.
  + project-manager:
  - Allow to change project backend
  - Display current project backend
  - Fix leak of the nodes GList in gbf_project_view_update_tree().
  + run-program: Default to Yes in "The program is already running"
    dialog.
  + snippets-manager: Fix faulty assertion in snippets_db_dispose().
  + sourceview:
  - Add marks to an unloaded document the same way we reload
    marks.
  - Detect that a ifile_open() is a reload and save marks and
    position.
  - Don't check if objects are not NULL before calling
    g_clear_object().
  - keep ref on SourceViewIO during call to
    input_stream_read_async().
  + starter: Fix leak of GtkRecentInfo.
  + symbol-db:
  - Add update_flag to the symbol unique constraint.
  - Fix leaks
  - Fix "parenthesis" typos
  - rename sdb_engine_get_tuple_id_by_unique_name4()...
  - When updating a symbol try to update the closest one.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 3.7.90:
  + Add new quick-open plugin.
  + am-project: Fix a crash when changing target properties.
  + Anjuta:
  - Saved dock positions not applied when opening a project
    (bgo#688609)
  - Make sure the starter widget is visible on startup.
  + build-basic-autotools:
  - don't let build directory button expand.
  - Fix selection of build directory.
  + class-gen:
  - Always generate GObject private structure.
  - generate license the same way as project-wizard.
  - output filename instead of project name before copyright.
  + devhelp: Port to webkitgtk2.
  + document-manager:
  - connect to toplevel SearchBox keypress to handle closing.
  - Save search box settings.
  + file-manager:
  - Add option for showing the currently edited file in the file
    manager.
  - Add "Show in File manager" action to document popup.
  - Enable typeahead search.
  + glade: Add a menu item for glade properties dialog.
  + indentation-c-style: enable the plugin for IDL files.
  + jhbuild:
  - Extract libdir from newly added JHBUILD_LIBDIR environment
    variable.
  - Translate error messages.
  + language-support-cp-java: fix crasher when swapping
    header/source
  + libanjuta:
  - Add basic tests for AnjutaCompletion.
  - Add new AnjutaCompletion object for prefix matching.
  - Avoid the name Anjuta in libanjuta messages (bgo#693916)
  + parser-cxx:
  - remove unused ParserCxxAssistContext
  - use AnjutaCompletion instead of deprecated GCompletion
  + patch: Replace deprecated GtkTable by GtkGrid
  + project-import:
  - Open a directory with Anjuta.
  - Try to fill project name automatically in import project
    dialog
  + project-manager: Remove New Library menu item.
  + project-wizard: move license templates to data/
  + sourceview:
  - connect settings notifications with g_signal_connect_object()
  - Fix wrong assignment when saving markers
  - mark clearing of buffer as a not undoable action
  - use etag to only emit "changed" when file was externally
    modified
  - use G_PRIORITY_DEFAULT for IO
  - use gtk_widget_preferred_size instead of gtk_widget_size_request
  + starter: Fix a warning
  + symbol-db:
  - fix compile warnings
  - fix symbols view label box to be horizontal
  + Updated translations.
- Replace pkgconfig(libvala-0.18) BuildRequires with
  pkgconfig(libvala-0.20), following the GNOME 3.8 release plans.</changelog>
<changelog author="dimstar@opensuse.org" date="1363780800">- Update to version 3.7.92:
  + document-manager:
  - Allow to search starting from the current position.
  - Highlight search text in background.
  - Move common code in a function.
  + file-manager: make file_view_show_extended_data() more robust.
  + Fix desktop file syntax errors.
  + Fixed needlessly marked label for translation.
  + git:
  - fix up memory management of log model.
  - properly unset the log command in the case the command failed
  - Unset the log model view before refreshing the log.
  - use g_signal_connect_object() in GitLogCommand.
  - use g_signal_connect_object() to connect to commands in
    GitLogPane.
  + libanjuta: keep a ref on the AnjutaAsyncCommand when its thread
    is run.
  + Make the glade catalog an optional feature.
  + message-view: use g_type_class_add_private() to add private
    struct.
  + parser-cxx: use g_signal_connect_object() to connect to query
    signals.
  + sourceview:
  - add checks to SourceviewIO that the parent Sourceview is
    alive.
  - don't take extra refs during open/save.
  - keep a separate reference to AnjutaShell in SourceviewIO.
  - move all construction of Sourceview into constructed.
  - only cancel open operations when closing editor.
  - only update stored etag if save was succesful.
  - use g_signal_connect_object() to connect to io signals.
  + symbol-db: don't allow or set null scope_definition_id and
    scope_id.
  + Updated translations.
- Pass --enable-glade-catalog to configure to ensure the catalogs
  are being installed.
- Add anjuta-glade.xml to sources, which is missing in the tarball.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Updated translations.</changelog>
<changelog author="dmueller@suse.com" date="1364299200">- Do not BuildRequire valgrind for aarch64.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.8.1:
  + git: Log path entry should be editable.
  + project-wizard: Creating new project using wizard fails due to
    license files missing (bgo#696672).
  + Bugs fixed: bgo#696023.
  + Updated translations.
- Re-add anjuta-glade.xml: bgo#696023 seems not entirely fixed.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + anjuta_language_provider: add proposals() function.
  + anjuta-tabber:
  - Always use the padding of an active tab in y-direction size
    allocation.
  - don't iterate list to check if node is first/last.
  - fix calculation of region flags.
  - implement gtk_container_get_path_for_child().
  - remove call to gtk_widget_style_attach().
  - remove the total padding from total width.
  - rework size allocation.
  - take focus-padding into account when rendering focus.
  - use tab_curvature for left/right space of first/last tab.
  + dir-project:
  - check for NULL groups in dir_project_is_loaded().
  - fix compile error.
  + document-manager:
  - don't allocate AnjutaDocmanPriv ourselves.
  - don't free AnjutaDocmanPriv ourselves.
  - fix compile warning.
  - pack notebook with width 1.
  - remove margin around the document combo box.
  + git:
  - Add a stash button to the Status command bar.
  - Fix more names in the glade file.
  - Fix setting of a custom author in the commit panel.
  - Fix widget names.
  - Implement adding files by dragging them onto the status view.
  - Implement branch switching by double-click.
  - More glade file name fixes.
  - Pack the dock and the command bar together.
  - Use actions for recurring items in the glade file.
  - Use a toggle button to show and hide the command bar.
  - Widget name fixes.
  + language-support-js:
  - replace one more use of ianjuta_editor_assist_proposals().
  - use anjuta_language_provider_proposals().
  + language-support-python:
  - replace one more use of ianjuta_editor_assist_proposals().
  - use anjuta_language_provider_proposals().
  + libanjuta: Improve editor modeline support.
  + libanjuta/manuals: Update documentation sections.
  + message-view:
  - Use AnjutaCloseButton in tabs.
  - use a single box for the tab widget.
  + mk-project:
  - Ignore conditional directives in makefile.
  - Prevent a crash.
  + parser-cxx:
  - fix compilation warning.
  - use anjuta_language_provider_proposals().
  + project-wizard: Use dist_doc_DATA for documentation text files.
  + sourceview: remove filtering of single proposals matching
    pre_word.
  + symbol-db-query: change order of property installation in
    SymbolDBQuery.
  + Update doap file.
  + Use dist_doc_DATA for documentation text files.
  + Bugs fixed: bgo#680770, bgo#688611, bgo#696023, bgo#696984,
    bgo#696990, bgo#697030, bgo#698011.
  + Updated translations.
- Drop anjuta-glade.xml source: it's included in the tarball.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + subversion: convert builder file to gtk+-3.0.
  + starter: guard for NULL document manager or project manager.
  + Fix deprecation warnings.
  + Bugs fixed: bgo#699323, bgo#699329, bgo#699327, bgo#699330,
    bgo#699326, bgo#698705, bgo#699316, bgo#700615, bgo#696991,
    bgo#698158, bgo#700318, bgo#694644.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1371902400">- Update to version 3.9.3:
  + sourceview:
  - fix compile warnings.
  + message-view: don't manually free private structure.
  + snippets-manager: fix compile warnings.
  + git:
  - Add a context menu to the log pane.
  - Add a context menu to the Branches pane.
  - Add a popup menu to the Remotes pane.
  - Check box action fixes in Push and Pull panes.
  - Add a popup menu to the Stash pane.
  - Fix a warning.
  + libanjuta:
  - Improve symbol-db behavior on cut, paste, undo, redo and
    when multiple files are modified.
  - Move scoped and descoped signal on AnjutaProfile object.
  - Replace AnjutaPluginDescription by AnjutaPluginHandle in API.
  - Move anjuta_profile_manager_load_profile function in
    anjuta_profile.
  - Always keep plugins in the system profile.
  - Allow to enable only a set of plugins defined in the profile
    file.
  - Keep dynamic allocation data in AnjutaPluginDescription.
  - Allow to change plugin description key from profile.
  + Allow to select different profile on the command line.
  + Add a sample custom profile keeping only the editor.
  + document-manager: Automatically open an empty file if starter
    plugin is not used.
  + symbol-db: Update symbol database on editor changes without
    saving.
  + language-support-cpp-jave: Fix memory leak.
  + Bugs fixed: bgo#701443, bgo#701207, bgo#700383
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373371200">- Update to version 3.9.4:
  + anjuta: Add application menu.
  + git: Fix the Do Not Commit option in the Revert pane.
  + libanjuta/anjuta-entry: Don't use CSS for help text styles.
  + Keep using loaded plugin even if they are marked as disabled.
  + Register GApplication with a different name if a profile is
    used.
  + document-manager: Make use of symbol-db plugin optional.
  + language-support-python: Remove critical warnings.
  + language-manager: Support symbols in more programming
    languages.
  + Need at least glib 2.34 for g_spawn_check_exit_status.
  + dir-project: Load big project faster.
  + dir-project: Decrease project load priority to avoid blocking
    GUI.
  + am-project: data target are not distributed by default in
    automake.
  + project-manager: Add a function in the interface to remove a
    file from a project.
  + Bugs fixed: bgo#703637, bgo#702576
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + anjuta: Only show app-menu if supported by environment.
  + libanjuta: Make AnjutaCommandBar easier to use on small
    screens.
  + Bugs fixed: bgo#699544.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375790400">- Add anjuta-vala-0.22.patch: Allow building with vala 0.22.
- Add gnome-common BuildRequires and call to gnome-autogen.sh, as
  above patch touches the build system.
- Change pkgconfig(libvala-0.20) BuildRequires to
  pkgconfig(libvala-0.22) in order to perform the switch to Vala
  0.22.
- Stop passing obsolete --disable-scrollkeeper to configure.</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Update to version 3.9.90:
  + document-manager: Fix icon size in document manager tabs.
  + git:
  - Widget name fixes.
  - Show diffs of uncommitted changes in the status view.
  - Show stash diffs in the stash pane.
  - Don't show the command bar if the Tasks button isn't active.
  - Don't show stash numbers on diff rows.
  + libanjuta:
  - Add AnjutaCellRendererDiff.
  - Update the glade catalog.
  + libanjuta/anjuta-command-bar:
  - Resect GTK button image settings.
  - Don't use a shadow for the scrolled window.
  + symbol-db:
  - link with librt on Linux (bgo#704985).
  - Use a GtkSearchEntry for the search entry in the search view.
  + libanjuta/anjuta-file-list: Fix the help text color.
  + libanjuta/anjuta-cell-renderer-diff: Detect diff headers.
  + build: add support for libvala-0.22.
  + Use program icon on about dialog.
  + Fix column number on lines with tabs.
  + help: fix broken images.
  + Bugs fixed: bgo#689384, bgo#701419.
- Drop anjuta-vala-0.22.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh,
  as we don't carry any patch anymore.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 3.9.91:
  + git:
  - Fix removed files status display.
  - Expand the status view tree when all diff commands are
    finished.
  + project-manager: The 'Can not add source files' dialog is too
    long and his buttons and bottom side are out of the screen
    (bgo#501230).
  + Fix incorrect MimeType in .desktop file (bgo#706630).
  + Remove a critical warning when closing a project.
  + glade: Fix a critical warning when opening a project with a .ui
    file opened.
  + document-manager: Close all documents when closing a project.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 3.9.92:
  + git: Run diff commands after the status commands finish.
  + libanjuta/git: Render diffs one line at a time.
  + project-manager: Plural forms for "%d elements" (bgo#707562).
  + project-wizard: Auto completion code when you click in the
    widget tree is broken (bgo#707943).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 3.10.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384689600">- Update to version 3.10.2 (bnc#849913):
  + bgo#711722: C-Makefile project template broken.
  + document-manager: Fix bgo#711512.
  + Updated translations.</changelog>

</package>
<package pkgid="000f7dadb3ec843a442d144e4499ac33cfbe8509d6d87e3545e61f4a317fe1ae" name="ant-phone" arch="i586">
    <version epoch="0" ver="2011.8.29" rel="17.3.1"/>

<changelog author="jengelh@medozas.de" date="1264939200">- package baselibs.conf</changelog>
<changelog author="ro@suse.de" date="1280232000">- drop glitz-devel from buildrequires (glitz backend was dropped
  from cairo two years ago)</changelog>
<changelog author="coolo@novell.com" date="1289217600">- remove support for pre-9.1</changelog>
<changelog author="andrea.turrini@gmail.com" date="1314619200">- fixed typos in i4l-base.spec</changelog>
<changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dmueller@suse.de" date="1324555200">- fix build on arm (fix va_list usage)</changelog>
<changelog author="jengelh@medozas.de" date="1325592000">- Use desired interpreter properly in %post
- Remove redundant sections</changelog>
<changelog author="dlovasko@suse.com" date="1328702400">- fixed bnc#743146 - added -fPIE/-pie/-fPIC flags to compilation and linking of isdnctrl and vboxbeep</changelog>
<changelog author="jengelh@medozas.de" date="1331380800">- Employ shlib policy for libcapi20.so
- Remove .la files in standard directories</changelog>
<changelog author="aj@suse.de" date="1340107200">- Use set_permissions instead of run_permissions.
- Add proper verify_permission usage.
- Compile with -fno-strict-aliasing due to aliasing issues.
- Use versioned provides/obsoletes.
- Use Group Hardware/ISDN everywhere.</changelog>
<changelog author="coolo@suse.com" date="1347710400">- replace ; with 'and' in license string</changelog>
<changelog author="cfarrell@suse.com" date="1347883200">- license update: GPL-2.0+ and SUSE-Firmware
  SPDX format for firmware package</changelog>
<changelog author="aj@suse.de" date="1349697600">- Use tmpfiles.d instead of obsolete /lib/udev/devices for static
  device nodes</changelog>
<changelog author="max@suse.com" date="1350561600">- Make SuSEconfig.isdn a standalone script and rename/move it to
  /etc/sysconfig/isdn/scripts/postprocess.isdn .
- Move the MODIFY_SECRETS variable from /etc/sysconfig/suseconfig
  to the new /etc/sysconfig/isdn file.
- Add divactrl_2.1-dialog.patch to keep the precompiled dialog
  binary from getting installed under /usr/share.
- Add i4l-base-rpmlintrc to silence false positive
  devel-file-in-non-devel-package errors.</changelog>
<changelog author="max@suse.com" date="1353499200">- Remove "set -x" from %post (bnc#790326).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362225600">- add isdn4k-utils-automake-1_13.diff, fix build with new automake</changelog>
<changelog author="fcrozat@suse.com" date="1366372800">- Do not own udev directories</changelog>
<changelog author="fcrozat@suse.com" date="1366632000">- Move udev rules to /usr/lib/udev/rules.d, they shouldn't live in
  /etc/udev/rules.d
- Move isdn.sh script to /usr/lib/udev and fix udev rules
  accordingly.</changelog>
<changelog author="max@suse.com" date="1375963200">- Fix build with Tcl 8.6.
- Remove unneeded requirement on tk-devel.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- rebuild with ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="259ad117888966b772f647cb1753a4a231d63eef511818f1792b18fc82141d47" name="ant-phone" arch="x86_64">
    <version epoch="0" ver="2011.8.29" rel="17.3.1"/>

<changelog author="jengelh@medozas.de" date="1264939200">- package baselibs.conf</changelog>
<changelog author="ro@suse.de" date="1280232000">- drop glitz-devel from buildrequires (glitz backend was dropped
  from cairo two years ago)</changelog>
<changelog author="coolo@novell.com" date="1289217600">- remove support for pre-9.1</changelog>
<changelog author="andrea.turrini@gmail.com" date="1314619200">- fixed typos in i4l-base.spec</changelog>
<changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dmueller@suse.de" date="1324555200">- fix build on arm (fix va_list usage)</changelog>
<changelog author="jengelh@medozas.de" date="1325592000">- Use desired interpreter properly in %post
- Remove redundant sections</changelog>
<changelog author="dlovasko@suse.com" date="1328702400">- fixed bnc#743146 - added -fPIE/-pie/-fPIC flags to compilation and linking of isdnctrl and vboxbeep</changelog>
<changelog author="jengelh@medozas.de" date="1331380800">- Employ shlib policy for libcapi20.so
- Remove .la files in standard directories</changelog>
<changelog author="aj@suse.de" date="1340107200">- Use set_permissions instead of run_permissions.
- Add proper verify_permission usage.
- Compile with -fno-strict-aliasing due to aliasing issues.
- Use versioned provides/obsoletes.
- Use Group Hardware/ISDN everywhere.</changelog>
<changelog author="coolo@suse.com" date="1347710400">- replace ; with 'and' in license string</changelog>
<changelog author="cfarrell@suse.com" date="1347883200">- license update: GPL-2.0+ and SUSE-Firmware
  SPDX format for firmware package</changelog>
<changelog author="aj@suse.de" date="1349697600">- Use tmpfiles.d instead of obsolete /lib/udev/devices for static
  device nodes</changelog>
<changelog author="max@suse.com" date="1350561600">- Make SuSEconfig.isdn a standalone script and rename/move it to
  /etc/sysconfig/isdn/scripts/postprocess.isdn .
- Move the MODIFY_SECRETS variable from /etc/sysconfig/suseconfig
  to the new /etc/sysconfig/isdn file.
- Add divactrl_2.1-dialog.patch to keep the precompiled dialog
  binary from getting installed under /usr/share.
- Add i4l-base-rpmlintrc to silence false positive
  devel-file-in-non-devel-package errors.</changelog>
<changelog author="max@suse.com" date="1353499200">- Remove "set -x" from %post (bnc#790326).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362225600">- add isdn4k-utils-automake-1_13.diff, fix build with new automake</changelog>
<changelog author="fcrozat@suse.com" date="1366372800">- Do not own udev directories</changelog>
<changelog author="fcrozat@suse.com" date="1366632000">- Move udev rules to /usr/lib/udev/rules.d, they shouldn't live in
  /etc/udev/rules.d
- Move isdn.sh script to /usr/lib/udev and fix udev rules
  accordingly.</changelog>
<changelog author="max@suse.com" date="1375963200">- Fix build with Tcl 8.6.
- Remove unneeded requirement on tk-devel.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- rebuild with ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="f38b2bc9faa533800498498a970932cfcec54a0d7a66708856255e4cbfe7c475" name="anthy" arch="i586">
    <version epoch="0" ver="9100h" rel="25.4.1"/>

<changelog author="crrodriguez@suse.de" date="1231502400">- remove static libraries and "la" files</changelog>
<changelog author="tiwai@suse.de" date="1244116800">- updated to anthy-9100h
  * auto-tools fixes
  * corpus updates
  * alt-cannadic updates
  * other many fixes; see ChangeLog</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.de" date="1323604800">- does not need openldap2 direct dependency, libraries are enough</changelog>
<changelog author="i@marguerite.su" date="1338724800">- fix sles builds.</changelog>
<changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
<changelog author="tiwai@suse.de" date="1373630400">- work around the build error with xemacs 21.5.33</changelog>
<changelog author="tiwai@suse.de" date="1383739200">- Fix breakage on GNU Emacs on openSUSE 13.1 (bnc#849211)
- Added patch: anthy-use-last-command-event.diff</changelog>

</package>
<package pkgid="17342a54970f356ffe40be84649159834cf7f8eae00e29e969357c5210433aa6" name="anthy" arch="src">
    <version epoch="0" ver="9100h" rel="25.4.1"/>

<changelog author="mfabian@suse.de" date="1137153600">- update to 7307.</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="mfabian@suse.de" date="1141128000">- add Provides:     locale(...).</changelog>
<changelog author="mfabian@suse.de" date="1154088000">- update to 7917.
  •dictionary of place names added
  •memory leak when the emacs key-map was changed fixed
  •add a dictionary of postal codes</changelog>
<changelog author="mfabian@suse.de" date="1166529600">- update to 8419.
- fix bugzilla #224463.</changelog>
<changelog author="mfabian@suse.de" date="1177502400">- update to 8813.</changelog>
<changelog author="mfabian@suse.de" date="1186056000">- update to 9100.
- add ldconfig post scripts.</changelog>
<changelog author="mfabian@suse.de" date="1196769600">- remove openldap2 from BuildRequires.
- use fdupes.</changelog>
<changelog author="mfabian@suse.de" date="1200052800">- use fdupes only for openSUSE &gt;= 10.3 to make it work for the
  older versions in the openSUSE build service.</changelog>
<changelog author="ro@suse.de" date="1228132800">- added baselibs.conf for anthy (needed by uim)</changelog>
<changelog author="crrodriguez@suse.de" date="1231502400">- remove static libraries and "la" files</changelog>
<changelog author="tiwai@suse.de" date="1244116800">- updated to anthy-9100h
  * auto-tools fixes
  * corpus updates
  * alt-cannadic updates
  * other many fixes; see ChangeLog</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.de" date="1323604800">- does not need openldap2 direct dependency, libraries are enough</changelog>
<changelog author="i@marguerite.su" date="1338724800">- fix sles builds.</changelog>
<changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
<changelog author="tiwai@suse.de" date="1373630400">- work around the build error with xemacs 21.5.33</changelog>
<changelog author="tiwai@suse.de" date="1383739200">- Fix breakage on GNU Emacs on openSUSE 13.1 (bnc#849211)
- Added patch: anthy-use-last-command-event.diff</changelog>

</package>
<package pkgid="e7fdcf34d56cbb74429eb798226904bdcb5a734942d38156fba3a72f9d59b837" name="anthy" arch="x86_64">
    <version epoch="0" ver="9100h" rel="25.4.1"/>

<changelog author="crrodriguez@suse.de" date="1231502400">- remove static libraries and "la" files</changelog>
<changelog author="tiwai@suse.de" date="1244116800">- updated to anthy-9100h
  * auto-tools fixes
  * corpus updates
  * alt-cannadic updates
  * other many fixes; see ChangeLog</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.de" date="1323604800">- does not need openldap2 direct dependency, libraries are enough</changelog>
<changelog author="i@marguerite.su" date="1338724800">- fix sles builds.</changelog>
<changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
<changelog author="tiwai@suse.de" date="1373630400">- work around the build error with xemacs 21.5.33</changelog>
<changelog author="tiwai@suse.de" date="1383739200">- Fix breakage on GNU Emacs on openSUSE 13.1 (bnc#849211)
- Added patch: anthy-use-last-command-event.diff</changelog>

</package>
<package pkgid="30d9a9d99333290b0ac9648053e86607ca37c87ff8365f487bc0dad9739e1946" name="anthy-32bit" arch="x86_64">
    <version epoch="0" ver="9100h" rel="25.4.1"/>

<changelog author="crrodriguez@suse.de" date="1231502400">- remove static libraries and "la" files</changelog>
<changelog author="tiwai@suse.de" date="1244116800">- updated to anthy-9100h
  * auto-tools fixes
  * corpus updates
  * alt-cannadic updates
  * other many fixes; see ChangeLog</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.de" date="1323604800">- does not need openldap2 direct dependency, libraries are enough</changelog>
<changelog author="i@marguerite.su" date="1338724800">- fix sles builds.</changelog>
<changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
<changelog author="tiwai@suse.de" date="1373630400">- work around the build error with xemacs 21.5.33</changelog>
<changelog author="tiwai@suse.de" date="1383739200">- Fix breakage on GNU Emacs on openSUSE 13.1 (bnc#849211)
- Added patch: anthy-use-last-command-event.diff</changelog>

</package>
<package pkgid="38d628fc4535ee391f52dd8f0abff99c276559098954fad02f393307cfa94dea" name="anthy-devel" arch="i586">
    <version epoch="0" ver="9100h" rel="25.4.1"/>

<changelog author="crrodriguez@suse.de" date="1231502400">- remove static libraries and "la" files</changelog>
<changelog author="tiwai@suse.de" date="1244116800">- updated to anthy-9100h
  * auto-tools fixes
  * corpus updates
  * alt-cannadic updates
  * other many fixes; see ChangeLog</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.de" date="1323604800">- does not need openldap2 direct dependency, libraries are enough</changelog>
<changelog author="i@marguerite.su" date="1338724800">- fix sles builds.</changelog>
<changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
<changelog author="tiwai@suse.de" date="1373630400">- work around the build error with xemacs 21.5.33</changelog>
<changelog author="tiwai@suse.de" date="1383739200">- Fix breakage on GNU Emacs on openSUSE 13.1 (bnc#849211)
- Added patch: anthy-use-last-command-event.diff</changelog>

</package>
<package pkgid="bfcaec504a34df6829a48c005cc9a74ab1e27046b97c50f01aceed1fa95392b0" name="anthy-devel" arch="x86_64">
    <version epoch="0" ver="9100h" rel="25.4.1"/>

<changelog author="crrodriguez@suse.de" date="1231502400">- remove static libraries and "la" files</changelog>
<changelog author="tiwai@suse.de" date="1244116800">- updated to anthy-9100h
  * auto-tools fixes
  * corpus updates
  * alt-cannadic updates
  * other many fixes; see ChangeLog</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.de" date="1323604800">- does not need openldap2 direct dependency, libraries are enough</changelog>
<changelog author="i@marguerite.su" date="1338724800">- fix sles builds.</changelog>
<changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
<changelog author="tiwai@suse.de" date="1373630400">- work around the build error with xemacs 21.5.33</changelog>
<changelog author="tiwai@suse.de" date="1383739200">- Fix breakage on GNU Emacs on openSUSE 13.1 (bnc#849211)
- Added patch: anthy-use-last-command-event.diff</changelog>

</package>
<package pkgid="b62abcbb3b41520df7b7ea6eb7b24877d6a82f6f6be715af0f6ace5e71718a39" name="apache2" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="0a785f23655797147b8b5b182256e96413a3b1440247eb9b042a5e304e031e1e" name="apache2" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="dae7fe7bc3c9ed30ebc73297e075020604cfef6c8d984072e5933e25f7a70e96" name="apache2" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="9563d763312c72409c6e946f2ebbe5df2f9349110202d547585a905c157980d6" name="apache2" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="dee62a50495266b843ac1cedeb330c1ffe7a3ebab53cbc580be462bbff12dd12" name="apache2" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="8b77308a4be5dc8d5d4f27682f3d34293f64feaae1de6607e19a2dabe0772035" name="apache2" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="744704834002e0672b5451a17fdef48bb94b7108b1d4239f718ea2ac17d23ebe" name="apache2" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="7ccb29ec9a9d9c10e7f6a3e00ed28accba90343814eb3f3d26c5a156ba318f23" name="apache2" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="ec7f55f44781ada99d575457ed05c5bb36359ec645a2374310fdd73dbf6ac397" name="apache2" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="af85c3dfe81ff38c0ebe7b4f6471cb7263c695d280f10038dd85e3eaa145b299" name="apache2" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="d1fbb04e1bc7a0822daf00094ae0737c1e90299e0c87a4b068172588038cf813" name="apache2" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="7a65d4877e38086978ec8bf6ea9c2cfbd6a1e7fe9fefc0d819f80d02b396cd1e" name="apache2" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="f47b156a486b9f9508d5300d05fe6abe244fb82d62ccfe7f40678e526e20ca0e" name="apache2" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="1ff5bcfc6f1b7d97accbd005825d5644cc0145c832fd0e2ce5212ea622b03903" name="apache2" arch="src">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="32f30ab3d69e2168997bf5f84123a6a466a4e2c6af04ca04f0f777d4d668718a" name="apache2" arch="src">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="7559926fbe4e92e4602079e22bfa7c22babc7974ab5413db45fe58ad1e7f1c07" name="apache2" arch="src">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="5bce6d568af5ffd78b164fe9720af2bd7a90d5f04401f09e83113dce25e8c157" name="apache2" arch="src">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="0c1e968288eed2ba4757928f88256f9b89ad8a217f18733236282f48d3604b3d" name="apache2" arch="src">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="fa510d428a7685875fd5fbedc9981127c2949fba8fb3867ea261b5cc10b66013" name="apache2" arch="src">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="95faadcf70b8a28ae25f5530f2427b5d3f3b7518e869bb1e74b74a92815fe619" name="apache2" arch="src">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="19cd24da0bb3f4b1f5a9f082face2874169a1597be92e51579bc23f30f315426" name="apache2" arch="src">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="edada07f5501ebe8c7026291f49d4bf52ce4881014f6573d132585087bda4cf2" name="apache2" arch="src">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="db6bc4a5acfd345e3d07d490f3ce72f5b9d3a530a4f3817b8ff195400d813784" name="apache2" arch="src">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="2652e649ccd1931be352853a75e0038fcdc264243575619621971a2db5a25815" name="apache2" arch="src">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="a916dba634a1b366cbade5e3750ae1ec44a6790b51961c28c38a5c0539b512ba" name="apache2" arch="src">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="a5f6623dc26b34f872c486e14bae1d0e69eaebdd7b3c35295112740e3159aaad" name="apache2" arch="src">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="069ff263048420b520fec65906daf2d994aef85a6a69b9055cd2bf28d39647ba" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="82092da9be56a7a3975f5ab2f4611ed3f438a5b5cd5ea1c848c6904440252aba" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="b9a184ab74e39fbbda1e4df3c0080b544b3c6ba17727d6062a35db03f4286f69" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="2c42fb5ab09cb253af4a506ce69a3629b6ce1f495bff4cb7184c280d2708e443" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="cb25a01591f3b7b1a403f0af4d745d757cd3a2299561ca3735bba00563b82d42" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="4d0f5f618dcf2b6dabacb23df1b38b83b9b8ba364f208782bf8b393eb086cc5a" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="464fa458e075176576d87152d04c4c6c3cefa3462a35bf3d537434e69415b010" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="005a0858200b461ed0766d2b7421922830195f2101fbf4e5cb03de7b4470fe0c" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="ec89d744e4f2634e1f2cd2b84d47561bf235bd973d987cb19f797b538030b5af" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="142c0b685f530cb58b22aab45d17453d1e13edab58e58b246905bf749fa740f8" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="68abe94df81013a804d34c89dd5f89bebc994f78270012c5ab5d9962107a9305" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="185de0076a10f5aa2a418fe6e5a114ae204ebc6407f016cfbe15c6f0ae7ad7c5" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="e9f8d872f2150e0b142da364dcff4775509006b1239815de8038e2cba38fcd68" name="apache2" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="85a2fc3fa86c6eb3385536a6bef81f5d82dd1eb09143bc22ebea53738a6e00ea" name="apache2-devel" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="8d06321ba75bf3ce35a10b007fd712b554f40722c01565fa1152ae69a5d36b7c" name="apache2-devel" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="ecedc9014dd38b0b979d9dd89d78ef4ba4d2c3715c26dfacd2dbcb8fe1385676" name="apache2-devel" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="9d1c26208388bfed84a0063d83fc9662d01db95d391c76954ccfd90d6daeec8c" name="apache2-devel" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="9b559c97504c6fd11f8e8b660bc461d233c7df1c6570025be1e5785416ba5207" name="apache2-devel" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="eebd47522e494b473c779b8e88bd6f08be325b0b7ae18eecb3bccdd33583e9e2" name="apache2-devel" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="5d059b4607c2464dce0a5326304daf7c6dff23234d1d2261cfff25058c751c92" name="apache2-devel" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="1ca17a0c64bd0b3567be301ed437448c61a6305bff6dd0d1bbb511b0502fb87d" name="apache2-devel" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="ffab57b1fa3ad86a82eb4f1f93d6143bf6dd9dbacf388b323ecd52924c2def84" name="apache2-devel" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="d84772817fa04daeaad3f708eac797a7921e8b6443d7d99664f422148b560ff6" name="apache2-devel" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="593ad901838b7a8bba5aaacc143f10007ff227b1e90e4743f18cc1beb3725536" name="apache2-devel" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="0be8fd68cc7b832d1ea7b50a7994ad0614c65b219f3410f53e9aaefcafb7d3d4" name="apache2-devel" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="d76614e3f8ee21e5c701a727402a6a58fc8e57c5f59994dfe81b6b7007f03c4e" name="apache2-devel" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="2ee2e6fa7644467c454bf4235e6109d6b3f788bf77234dc0362ce5491db05b5d" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="bd3fcc89803ec25eacd28d44c66e1f4d59c9db580b8aab7b8b4dc6474dbc0818" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="fc040ba1173c6ed8faad65ee37870abf6c8a56302903aa6c9805f32458b86b8f" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="b9ad51ed25b513671808231b6ac35e655723324686d290dd05c65af369dea89b" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="fdbed842f002c8aa32b2d972e6794e4e8a3e7beb3731dd83e04dc2610ea58747" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="9ec1b63ef21a5b6a19b3bcd43a0e319fd36e83fd8246098ce955e8cacda93afc" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="d0f4854a6cb2b697a858589f2971a115798be0027c986d69b9fe2f056b5f674d" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="1b6d40f7b8c5670483158406f4ccbb22d123d50004dcabade02c4529ff06dd92" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="3d495c3e512f3ad2809890835a61ec4674b21b09fdb713a60c02240888b4703c" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="4887386b60fa7364bea554f2ac1177d4cc7bb8ab578e1fc0dab4720b86640383" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="68341ca92eee4a4622af94f72da192fd5bde6389620ae78de181ec220fe78947" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="e3fd95a4cdc7c42117cd3598a9263f56a7532b626a2ba3fbeb8e93b251893585" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="18499fb7499c598b0a0d5f401b218fb66ab310076b05911d564075d691c46840" name="apache2-devel" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="380b9cf305d277fb778c1081ce430e22fda3abe9b75703083eae391e0a7d3887" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="65eae68cd147438ab784f0e74638d3008c5c64d58a53d2eb9413e156d733753f" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="0162d46aee099dd8313cb45ddfbaac988779bd4adfdc528b3756f03cad2299e7" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="3b9060b14735177e14f54658ebeb8ad7c26cf6d839ee3dcd1ca2714ad0d14b86" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="f166ebac0f01c8c50d8d8e2491627aac1d978a042fd55353ef2cf73b0f300489" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="e593a7d1b7571009d2562751575e40efa85044c74d0f52e1ff0e802a730aaca7" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="a742003e144453b8acd321b2da7d0e2bb14fea2c7c2d0efedc751aa5ea920366" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="75e20188c67d1442f1f283b09ec9ab4d449b785c2ccd8bd5aebc165b5a78b8bc" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="e6771e2f0d56b368f329d8bb59c2f4b71cc4440a8512e0819808558d12694bf8" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="7e577cb3a16639009bcbb9384b33b55a7e65e716bce98db1196265f26a9096cc" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="5ba948fd48893a9c6c11e6afbf8d68e2c6b25113915676fec13544a0e4dde9a0" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="9c0a1574927671433d192a046077e2dc89e188dc9882b27cc066d75973f4d57c" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="21ed5ae7ecb741151c9204ca0761b68ec6635c44019afb84a1ece181158f24f3" name="apache2-doc" arch="noarch">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="9c3d0a2ecc2812f0f722237d793b23ad163bafc29974703c0b8b6f642f5f7826" name="apache2-event" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="6cd581fed99e1602ac72a2f65eeed2495d7d6c3100ade94a83d114bd9fe5a92a" name="apache2-event" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="3fade40b20f26bd42d0903cfeb34ac31340729574e8d38ccfef74b49ef9296f5" name="apache2-event" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="4f701b4849f23d278190ca6728b5717c87f73ce9c575f97a252cb9995ca74054" name="apache2-event" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="0b41b2e2968a7f4e1839ba183bc8055825ac1e6cebcf8037e6fa2f4e29dc58a5" name="apache2-event" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="43ff8c4686e2afd1ecdb1122e6093e237d8bb861c37440fcb832239b66065439" name="apache2-event" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="227cadd02b85f9aed0f7f444c2632fbed80e10a37ecb346dc1e076a9bcd60ccc" name="apache2-event" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="bce1d8975751f22a9f69ee3ebb157549a21bf9ebc4df3259424459c5797fe244" name="apache2-event" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="7e7ff47f789ec62fb91e0f4ed43c6a593d38838bc1da2e33b4a5829620c6282d" name="apache2-event" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="911605e4c053b5a9ddc31a2e0a86bcc9ba1d6492689d34ae3bf2ee78972089c2" name="apache2-event" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="fa919564a9798918a2b46781a229a950dfd211b777ef0eba863ea867d33cc766" name="apache2-event" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="5b73bdab7082a827939b9c9c5acc6dcc3ab081e442b135b5e7c2e11a42ef6aff" name="apache2-event" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="7082971c024fff239fab5dce82ff6b9ce5c45f11a888b9bf883829246c3e3ef6" name="apache2-event" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="02aae2bd6a096851728a43de24bfb5a96c2f17ee8fed23ed1e03eb84d54809f3" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="8929c7529a2a33057ae2bacf93f246fe508fd4618e732aa4b4ec361813ee3155" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="61302493d4029cbdba4a9aa8f8f2b0154f5e2e2fd03d070aacbe47430fb49fad" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="9d55b5720e7fa1a4843fe67f5115a160e1b9f14fc1bea638b76a1ca95a288456" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="920480b4236bfe31ac470607c76dbc9d558432430957c1c8ca02a6d893fab51a" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="3f0e46b56a660b1a7ca39897b9d1ecd4be0eac6497daf1d4a5d1b88c21d75891" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="a9aa364698313350f8ad576dcaeecd2ab49287026af82bbc29a51db7d10a754e" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="3004daf1c9259ae9020a232f78add0f7426bf3af1a4f2a1c1dcd22849cc69534" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="23d6115b56464f52daa2747c80704212b769e6822c367b96ab0117568104d876" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="97c14596103bd95a22efa7655733efbb9aaff6ab18699047e04ab97e10d65baa" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="f9615df1929f3c8db057ba13dae1d802a08723920e94a89af0efa91ed209f51c" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="a6719c418a986b9aea2ac898fabb1121e9717116ecc8c77c5ffc9b239d57554f" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="202ace40349a2918bb353e99e851229980bbbf29c61e3e05d1ced439c06d85b8" name="apache2-event" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="36eea481f6bc139adbd1c562f3cbe2a913533741230a2c47fc68ab265878e86e" name="apache2-example-pages" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="6c7a03df6354a56f19f4d68c19d26aa071885260ff6d69b1edfe33104642dba0" name="apache2-example-pages" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="e12c83416a18a465c014f3b61ebe7f557341e1cf29619f8f0b21307bc7ef8fe1" name="apache2-example-pages" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="61d6d9443923d754e4534a11f24cffd4bfc1c6d6d38e2e196956656ab454ee7d" name="apache2-example-pages" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="45be0fd51004bd8700c7b9265deb5c2c53f544d2c620001528b9a18b8ad2630c" name="apache2-example-pages" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="934626cdb22684063ad7da9c2e28de53f7829b98451e00dc511a82cdacc0cdae" name="apache2-example-pages" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="c3cb5dc7f9de18a17f61cf2f1c70887b46a9d826aa2d33ec944312d1649fc08c" name="apache2-example-pages" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="75c9319f6119537fbcc84be4f7261a91e213f2907d9d85939f302ecaf15653b9" name="apache2-example-pages" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="061001e86a44286cfe0c27c4bbb93676981e8ad887a78bb3027cb7674a6ae66b" name="apache2-example-pages" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="fa457d554e38606871b5e86c881e106e901be0ef82a631f7a139fac3c372d321" name="apache2-example-pages" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="f0dcb0a4f986de61a86e64e7ebc13498618cb5020dbd1a787161282d6a30ff48" name="apache2-example-pages" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="3af53d03218163f7cdd5d4e6d91d418471170f454014d8f57da5e2a5c0714c7d" name="apache2-example-pages" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="43c045135003ea0c3449a334224e728246aa0f8214fac39f5ba14436e6d9dd10" name="apache2-example-pages" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="233a21ebbaeef68970296300fa7e20a001777c6a3b7e1f939b8b3bf0c9cbe517" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="67fc2a0cb623643920cdaf0aca634fc3931d63a976d4a850d1aca9d3cb9bb8a3" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="0f58a805f518de80bf39185422bc26ac306f6f889ca42698a4fea047bad8f6b5" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="7d1bed4ae886595f874581eab16ad599ca0fd5722e0906e1077a61504a4d2bc3" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="28c09a1478e7d960754d83cda53d7ca5804470648c536f62903558f632a05a1c" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="32ece56ecc4c62d9ada1a1fb0fb345e6d861234b8f378395329873bef45f7b60" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="7db9ca913fc7da4fbc15d88445e0dfd5a31062e3f02de36969013150d6d8726f" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="5aa3082189c55bd390c93d5d32573cdedf1f3ca38b959a62e111ec34387c305f" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="b2f7816c8f8859301dbf8294f0a55a37f588936723130d27fe799e220d25e494" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="dde7954b55fabf0f43c7bb84859f7f3049403410e0ccc60aae0f45107251cb21" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="9c1cc901376ed7e67ac319a1f5c4c35983b9fd6777a0ddc58c1081905fc2b19e" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="6368747540e00a4eb3f3db5fa55edcefd4b328109f9475f4ad89af5b1169e5e1" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="b19396a98b84edd4cb64f358e83b8ee3fbf24423e31ffb355f37b8ecb96e30a1" name="apache2-example-pages" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="abdebb8d926aa0df616735ceedc976f06d8198971a295d22f31f624c901672ef" name="apache2-mod_apparmor" arch="i586">
    <version epoch="0" ver="2.8.2" rel="4.13.1"/>

<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>
<changelog author="opensuse@cboltz.de" date="1384430400">- add apparmor-profiles-ntpd-r2103.diff with updated driftfile
  location for ntpd (bnc#850374)</changelog>
<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>

</package>
<package pkgid="b7539221d872e468791ebb71866d5c41cbdb7bffdf26bdc7153bfe54e2066a07" name="apache2-mod_apparmor" arch="i586">
    <version epoch="0" ver="2.8.2" rel="4.8.1"/>

<changelog author="opensuse@cboltz.de" date="1358078400">- update abstractions/mysql with correct paths and add MariaDB paths
  (bnc#798183)</changelog>
<changelog author="jengelh@inai.de" date="1361102400">- Add missing files to SRPM (bnc#777471)</changelog>
<changelog author="opensuse@cboltz.de" date="1362484800">- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104, apparmor-profiles-nscd.diff)</changelog>
<changelog author="opensuse@cboltz.de" date="1364904000">- add Requires: insserv to parser package (needed by initscript)</changelog>
<changelog author="opensuse@cboltz.de" date="1366718400">- enable python and ruby subpackages (using %bcond_without)
- update/fix paths in %files for python and ruby subpackages</changelog>
<changelog author="coolo@suse.com" date="1368446400">- do not package directories as %config - especially not as noreplace</changelog>
<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>

</package>
<package pkgid="fff5b63425b569f47e0f380f2aa3e02da81a99c0395a37058357808358bbeb55" name="apache2-mod_apparmor" arch="i586">
    <version epoch="0" ver="2.8.4" rel="4.17.1"/>

<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>

</package>
<package pkgid="d67a33b21f80cbc2d97bb106f7e0fc73aeda3a8f0acbf8b28dc531766d38d7e9" name="apache2-mod_apparmor" arch="i586">
    <version epoch="0" ver="2.8.4" rel="4.20.1"/>

<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>
<changelog author="suse-beta@cboltz.de" date="1460721600">- add apparmor_2_8_bzr_changes_2148_2153.diff with upstream changes
  since the 2.8.4 release:
  - backport various profile updates from the 2.9 branch r3004 (hand-picked):
    profile updates:
  - sbin.syslog-ng
  - usr.sbin.identd
  - usr.sbin.nscd (allows nscd paranoia mode)
  - usr.sbin.smbd
  - usr.sbin.smbldap-useradd
  - apache2.d/phpsysinfo
    updated abstractions:
  - aspell
  - base
  - cups-client
  - fonts
  - freedesktop.org
  - nameservice
  - p11-kit
  - php5
  - samba (including the changes needed for Samba 4.2.x)
  - ssl_certs
  - ssl_keys
  - ubuntu-browsers.d/java
  - ubuntu-browsers.d/multimedia
  - ubuntu-browsers.d/plugins-common
  - ubuntu-browsers.d/ubuntu-integration
  - ubuntu-email
  - ubuntu-helpers
  - user-mail
  - X
    Note: there's no detailed changelog available because this was done as
    mass-backport. If you are interested in details, check the upstream
    2.9.x changelog on apparmor.net.
  - add support for more log formats (lp#1399027, debian#771400,
    boo#905368)</changelog>

</package>
<package pkgid="2cac77cbb798e096ca33bfe32b32e15ab7e8f336b8d51b525ca8530d8e7400ce" name="apache2-mod_apparmor" arch="x86_64">
    <version epoch="0" ver="2.8.2" rel="4.13.1"/>

<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>
<changelog author="opensuse@cboltz.de" date="1384430400">- add apparmor-profiles-ntpd-r2103.diff with updated driftfile
  location for ntpd (bnc#850374)</changelog>
<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>

</package>
<package pkgid="6f33aaa5db3b17dc903ad336ebc41b390d7cdf451e373374dd9145a6e46e040e" name="apache2-mod_apparmor" arch="x86_64">
    <version epoch="0" ver="2.8.2" rel="4.8.1"/>

<changelog author="opensuse@cboltz.de" date="1358078400">- update abstractions/mysql with correct paths and add MariaDB paths
  (bnc#798183)</changelog>
<changelog author="jengelh@inai.de" date="1361102400">- Add missing files to SRPM (bnc#777471)</changelog>
<changelog author="opensuse@cboltz.de" date="1362484800">- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104, apparmor-profiles-nscd.diff)</changelog>
<changelog author="opensuse@cboltz.de" date="1364904000">- add Requires: insserv to parser package (needed by initscript)</changelog>
<changelog author="opensuse@cboltz.de" date="1366718400">- enable python and ruby subpackages (using %bcond_without)
- update/fix paths in %files for python and ruby subpackages</changelog>
<changelog author="coolo@suse.com" date="1368446400">- do not package directories as %config - especially not as noreplace</changelog>
<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>

</package>
<package pkgid="79f3844a901cfa7c894765f059b6f44362811e78ed5ef9c7c3e319f1dcf91601" name="apache2-mod_apparmor" arch="x86_64">
    <version epoch="0" ver="2.8.4" rel="4.17.1"/>

<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>

</package>
<package pkgid="a65383ad55b204c81a7c3d27e9b9c54188d4f2a135b8eba22eca02cf2649d723" name="apache2-mod_apparmor" arch="x86_64">
    <version epoch="0" ver="2.8.4" rel="4.20.1"/>

<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>
<changelog author="suse-beta@cboltz.de" date="1460721600">- add apparmor_2_8_bzr_changes_2148_2153.diff with upstream changes
  since the 2.8.4 release:
  - backport various profile updates from the 2.9 branch r3004 (hand-picked):
    profile updates:
  - sbin.syslog-ng
  - usr.sbin.identd
  - usr.sbin.nscd (allows nscd paranoia mode)
  - usr.sbin.smbd
  - usr.sbin.smbldap-useradd
  - apache2.d/phpsysinfo
    updated abstractions:
  - aspell
  - base
  - cups-client
  - fonts
  - freedesktop.org
  - nameservice
  - p11-kit
  - php5
  - samba (including the changes needed for Samba 4.2.x)
  - ssl_certs
  - ssl_keys
  - ubuntu-browsers.d/java
  - ubuntu-browsers.d/multimedia
  - ubuntu-browsers.d/plugins-common
  - ubuntu-browsers.d/ubuntu-integration
  - ubuntu-email
  - ubuntu-helpers
  - user-mail
  - X
    Note: there's no detailed changelog available because this was done as
    mass-backport. If you are interested in details, check the upstream
    2.9.x changelog on apparmor.net.
  - add support for more log formats (lp#1399027, debian#771400,
    boo#905368)</changelog>

</package>
<package pkgid="5c6107dde9679c6d9980b12832042a5d5f140b46216289077bfb5f5e5dad5546" name="apache2-mod_auth_ntlm_winbind" arch="i586">
    <version epoch="0" ver="0.0.0.lorikeet_svn_785" rel="191.3.1"/>

<changelog author="lars@samba.org" date="1162814400">- Initial RPM package.</changelog>
<changelog author="lars@samba.org" date="1163592000">- Update to svn revision 682.
  + Fix content length in auth reply.
  + Rename to mod_auth_ntlm_winbind at all places.
  + Documentation cleanup.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="lars@samba.org" date="1393934400">- Update to svn revision 785.
  + Only send "Proxy-Authenticate" replies when we are in a forward proxy.
  + Clean up compile warnings on 64-bit architectures; (bnc#866921).
  + Ensure that the authenticated user context is set to NULL when freed.
  + Add a workaround for proxy authorization in IE.
  + Fix a typo in strcmp usage in process_msg().
- Remove no longer included AUTHORS file.</changelog>

</package>
<package pkgid="f25b299c1f4eb084e72649f3eaff79f864b142f40cfa84f304f18767e661c447" name="apache2-mod_auth_ntlm_winbind" arch="src">
    <version epoch="0" ver="0.0.0.lorikeet_svn_785" rel="191.3.1"/>

<changelog author="lars@samba.org" date="1162814400">- Initial RPM package.</changelog>
<changelog author="lars@samba.org" date="1163592000">- Update to svn revision 682.
  + Fix content length in auth reply.
  + Rename to mod_auth_ntlm_winbind at all places.
  + Documentation cleanup.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="lars@samba.org" date="1393934400">- Update to svn revision 785.
  + Only send "Proxy-Authenticate" replies when we are in a forward proxy.
  + Clean up compile warnings on 64-bit architectures; (bnc#866921).
  + Ensure that the authenticated user context is set to NULL when freed.
  + Add a workaround for proxy authorization in IE.
  + Fix a typo in strcmp usage in process_msg().
- Remove no longer included AUTHORS file.</changelog>

</package>
<package pkgid="246600e681204ce85589c647732f7dab1273d083b1083565a706578b6bf49454" name="apache2-mod_auth_ntlm_winbind" arch="x86_64">
    <version epoch="0" ver="0.0.0.lorikeet_svn_785" rel="191.3.1"/>

<changelog author="lars@samba.org" date="1162814400">- Initial RPM package.</changelog>
<changelog author="lars@samba.org" date="1163592000">- Update to svn revision 682.
  + Fix content length in auth reply.
  + Rename to mod_auth_ntlm_winbind at all places.
  + Documentation cleanup.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="lars@samba.org" date="1393934400">- Update to svn revision 785.
  + Only send "Proxy-Authenticate" replies when we are in a forward proxy.
  + Clean up compile warnings on 64-bit architectures; (bnc#866921).
  + Ensure that the authenticated user context is set to NULL when freed.
  + Add a workaround for proxy authorization in IE.
  + Fix a typo in strcmp usage in process_msg().
- Remove no longer included AUTHORS file.</changelog>

</package>
<package pkgid="1c6eff1b17fcda133cb267395bf7489a5c9ab8b9df855ed45704a60c9063b066" name="apache2-mod_dnssd" arch="i586">
    <version epoch="0" ver="0.6" rel="20.4.1"/>

<changelog author="dominique-obs@leuenberger.net" date="1242129600">-  Initial package during Community Week 1</changelog>
<changelog author="dominique-obs@leuenberger.net" date="1242734400">- Cleanup of the specfile.
- --disable-lynx to remove the lynx BuildRequires.</changelog>
<changelog author="vuntz@novell.com" date="1242734401">- Add Supplements for gnome-user-share and
  {apache2-prefork,apache2-worker} since gnome-user-share requires
  this apache module to have webdav file sharing.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="pgajdos@suse.com" date="1413374400">- fixed loading for apache 2.4 [bnc#850825]</changelog>

</package>
<package pkgid="97fc00c68b3f52987a7e5fe8bfe27370ee491108393b63ba004808906e8335e4" name="apache2-mod_dnssd" arch="src">
    <version epoch="0" ver="0.6" rel="20.4.1"/>

<changelog author="dominique-obs@leuenberger.net" date="1242129600">-  Initial package during Community Week 1</changelog>
<changelog author="dominique-obs@leuenberger.net" date="1242734400">- Cleanup of the specfile.
- --disable-lynx to remove the lynx BuildRequires.</changelog>
<changelog author="vuntz@novell.com" date="1242734401">- Add Supplements for gnome-user-share and
  {apache2-prefork,apache2-worker} since gnome-user-share requires
  this apache module to have webdav file sharing.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="pgajdos@suse.com" date="1413374400">- fixed loading for apache 2.4 [bnc#850825]</changelog>

</package>
<package pkgid="89bd63a3d095971fe1ff18cf0d7ecf95e12756e1b846502999e212b2550e3f9c" name="apache2-mod_dnssd" arch="x86_64">
    <version epoch="0" ver="0.6" rel="20.4.1"/>

<changelog author="dominique-obs@leuenberger.net" date="1242129600">-  Initial package during Community Week 1</changelog>
<changelog author="dominique-obs@leuenberger.net" date="1242734400">- Cleanup of the specfile.
- --disable-lynx to remove the lynx BuildRequires.</changelog>
<changelog author="vuntz@novell.com" date="1242734401">- Add Supplements for gnome-user-share and
  {apache2-prefork,apache2-worker} since gnome-user-share requires
  this apache module to have webdav file sharing.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="pgajdos@suse.com" date="1413374400">- fixed loading for apache 2.4 [bnc#850825]</changelog>

</package>
<package pkgid="182c571600f50bdcb6c655b27b9beca28a4f5e94ab233b4c0ae3637f767027f3" name="apache2-mod_evasive" arch="i586">
    <version epoch="0" ver="1.10.1" rel="5.4.1"/>

<changelog author="jengelh@inai.de" date="1345809600">- Initial package (version 1.10.1) for build.opensuse.org</changelog>
<changelog author="jengelh@inai.de" date="1346673600">- License clarification in specfile comment</changelog>
<changelog author="dimstar@opensuse.org" date="1359374400">- Introduce compatibility with Apache 2.4 (changed API: remote_ip
  was renamed to client_ip):
  + apxs2 was moved from %{_sbindir} to %{_bindir}: use "which" to
    actually find it.
  + Set apache_branch to $major.$minor, so it can be used for
    evaluation further down.
  + set ap_suffix and rename the .so modules to mod_evasive24.so
    when building for apache 2.4.x API.
- Fix the requires on apache_mmn: this only worked becuase the
  Requires was on one line.. but %apache_mmn was always empty.</changelog>
<changelog author="pgajdos@suse.com" date="1413288000">- fixed module loading [bnc#865567], [bnc#867984]</changelog>

</package>
<package pkgid="e1c4d77aa7dfb7d9729fc1a8639998f5b61347246990eb2267d06280933eb5ac" name="apache2-mod_evasive" arch="src">
    <version epoch="0" ver="1.10.1" rel="5.4.1"/>

<changelog author="jengelh@inai.de" date="1345809600">- Initial package (version 1.10.1) for build.opensuse.org</changelog>
<changelog author="jengelh@inai.de" date="1346673600">- License clarification in specfile comment</changelog>
<changelog author="dimstar@opensuse.org" date="1359374400">- Introduce compatibility with Apache 2.4 (changed API: remote_ip
  was renamed to client_ip):
  + apxs2 was moved from %{_sbindir} to %{_bindir}: use "which" to
    actually find it.
  + Set apache_branch to $major.$minor, so it can be used for
    evaluation further down.
  + set ap_suffix and rename the .so modules to mod_evasive24.so
    when building for apache 2.4.x API.
- Fix the requires on apache_mmn: this only worked becuase the
  Requires was on one line.. but %apache_mmn was always empty.</changelog>
<changelog author="pgajdos@suse.com" date="1413288000">- fixed module loading [bnc#865567], [bnc#867984]</changelog>

</package>
<package pkgid="deed12d2bb35ecd2a109e210601d469fb45cff6a531cbd9810c6623406df1a2d" name="apache2-mod_evasive" arch="x86_64">
    <version epoch="0" ver="1.10.1" rel="5.4.1"/>

<changelog author="jengelh@inai.de" date="1345809600">- Initial package (version 1.10.1) for build.opensuse.org</changelog>
<changelog author="jengelh@inai.de" date="1346673600">- License clarification in specfile comment</changelog>
<changelog author="dimstar@opensuse.org" date="1359374400">- Introduce compatibility with Apache 2.4 (changed API: remote_ip
  was renamed to client_ip):
  + apxs2 was moved from %{_sbindir} to %{_bindir}: use "which" to
    actually find it.
  + Set apache_branch to $major.$minor, so it can be used for
    evaluation further down.
  + set ap_suffix and rename the .so modules to mod_evasive24.so
    when building for apache 2.4.x API.
- Fix the requires on apache_mmn: this only worked becuase the
  Requires was on one line.. but %apache_mmn was always empty.</changelog>
<changelog author="pgajdos@suse.com" date="1413288000">- fixed module loading [bnc#865567], [bnc#867984]</changelog>

</package>
<package pkgid="3b75968f2ad0163e2dea52d71dfd419670508f631b519517358c9327f2e76407" name="apache2-mod_nss" arch="i586">
    <version epoch="0" ver="1.0.8" rel="0.4.6.4.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>

</package>
<package pkgid="a4c433456d0a1d5067d02b2d5cb77eb27c61919e25c0f2be5087ec8364325bde" name="apache2-mod_nss" arch="i586">
    <version epoch="0" ver="1.0.8" rel="6.1.6.9.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>

</package>
<package pkgid="935bfad1c9d22ef37225ca12a7d564fc80c6cee3a869ef8e3b7375037eccfd49" name="apache2-mod_nss" arch="i586">
    <version epoch="0" ver="1.0.8" rel="6.13.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>

</package>
<package pkgid="3d60116860de0b70ff797b26da81a8f013d27149db290ad6afaaeb3fff8a58a5" name="apache2-mod_nss" arch="i586">
    <version epoch="0" ver="1.0.8" rel="6.17.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>
<changelog author="kstreitova@suse.com" date="1414584000">- bnc#897712: added mod_nss-compare_subject_CN_and_VS_hostname.patch
  that compare CN and VS hostname (use NSS library). Removed
  following patches:
  * mod_nss-SNI-checks.patch
  * mod_nss-SNI-callback.patch</changelog>
<changelog author="kstreitova@suse.com" date="1415102400">- bnc#902068: added mod_nss-add_support_for_enabling_TLS_v1.2.patch
  that adding small fixes for support of TLS v1.2</changelog>

</package>
<package pkgid="64cf8fc048ec91f2ca08d57f49bd0e6255b285218fffe59ccc19a594c2d682fe" name="apache2-mod_nss" arch="i586">
    <version epoch="0" ver="1.0.8" rel="6.17.2"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>
<changelog author="kstreitova@suse.com" date="1414584000">- bnc#897712: added mod_nss-compare_subject_CN_and_VS_hostname.patch
  that compare CN and VS hostname (use NSS library). Removed
  following patches:
  * mod_nss-SNI-checks.patch
  * mod_nss-SNI-callback.patch</changelog>

</package>
<package pkgid="4079bb074da2d13c2c44cc46afc8228b85f1c26a83683ff87ab92bc8c85d2794" name="apache2-mod_nss" arch="i586">
    <version epoch="0" ver="1.0.8" rel="6.26.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>
<changelog author="kstreitova@suse.com" date="1414584000">- bnc#897712: added mod_nss-compare_subject_CN_and_VS_hostname.patch
  that compare CN and VS hostname (use NSS library). Removed
  following patches:
  * mod_nss-SNI-checks.patch
  * mod_nss-SNI-callback.patch</changelog>
<changelog author="kstreitova@suse.com" date="1415102400">- bnc#902068: added mod_nss-add_support_for_enabling_TLS_v1.2.patch
  that adding small fixes for support of TLS v1.2</changelog>
<changelog author="kstreitova@suse.com" date="1425297600">- add mod_nss-SNI_support.patch that brings Server Name Indication
  support that allows to have multiple HTTPS websites with multiple
  certificates on the same IP address and port.
  [fate#318331], [bnc#897712]</changelog>

</package>
<package pkgid="bbc13e2b9123a6fb9c16cafccfb0969818b65445b5941382cfc9219c25ddfacf" name="apache2-mod_nss" arch="i586">
    <version epoch="0" ver="1.0.8" rel="6.29.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>
<changelog author="kstreitova@suse.com" date="1414584000">- bnc#897712: added mod_nss-compare_subject_CN_and_VS_hostname.patch
  that compare CN and VS hostname (use NSS library). Removed
  following patches:
  * mod_nss-SNI-checks.patch
  * mod_nss-SNI-callback.patch</changelog>
<changelog author="kstreitova@suse.com" date="1415102400">- bnc#902068: added mod_nss-add_support_for_enabling_TLS_v1.2.patch
  that adding small fixes for support of TLS v1.2</changelog>
<changelog author="kstreitova@suse.com" date="1425297600">- add mod_nss-SNI_support.patch that brings Server Name Indication
  support that allows to have multiple HTTPS websites with multiple
  certificates on the same IP address and port.
  [fate#318331], [bnc#897712]</changelog>
<changelog author="stokos@suse.de" date="1435492800">- update-ciphers.patch
  (bsc#928039)
  merge changes from the mod_nss-SNI_support.patch to:
  0001-SNI-check-with-NameVirtualHosts.patch
  (bnc#927402)
  abstract hash for NSSNickname and ServerName, add ServerAliases and Wild
  Cards for vhost
  (bsc#927402, bsc#928039, bsc#930922)
  replace SSL_SNI_SEND_ALERT by nss_die (cleaner solution for virtual hosts)
  (bsc#930186)
  add alert about permission on the certificate database
  (bsc#933265)</changelog>
<changelog author="vcizek@suse.com" date="1441627200">- send TLS server name extension on proxy connections (bsc#933832)
  * added mod_nss-reverse_proxy_send_SNI.patch</changelog>
<changelog author="vcizek@suse.com" date="1441627201">- unified ciphers with SLE-11
  * modified patches:
    mod_nss-cipherlist_update_for_tls12-doc.diff
    mod_nss-cipherlist_update_for_tls12.diff
    update-ciphers.patch</changelog>

</package>
<package pkgid="9b8a409977ca2790368aa1d953232a6403d9dd7dbefd192f154cf2a05f80bb8b" name="apache2-mod_nss" arch="src">
    <version epoch="0" ver="1.0.8" rel="0.4.6.4.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>

</package>
<package pkgid="6c3cc24f7ba73703c73111d2fb8256512d9d3452c8f40a03087cbcc7db890487" name="apache2-mod_nss" arch="src">
    <version epoch="0" ver="1.0.8" rel="6.1.6.9.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>

</package>
<package pkgid="c75a601fb986da2ce2d5772dd94bac85f6ffdc2df3d83f05dec57aa39ca1cd7c" name="apache2-mod_nss" arch="src">
    <version epoch="0" ver="1.0.8" rel="6.13.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>

</package>
<package pkgid="404e32cfd4a72e3ca6b3e458d1c5486e7700abe4e250c95e7457480453d9dc8e" name="apache2-mod_nss" arch="src">
    <version epoch="0" ver="1.0.8" rel="6.17.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>
<changelog author="kstreitova@suse.com" date="1414584000">- bnc#897712: added mod_nss-compare_subject_CN_and_VS_hostname.patch
  that compare CN and VS hostname (use NSS library). Removed
  following patches:
  * mod_nss-SNI-checks.patch
  * mod_nss-SNI-callback.patch</changelog>
<changelog author="kstreitova@suse.com" date="1415102400">- bnc#902068: added mod_nss-add_support_for_enabling_TLS_v1.2.patch
  that adding small fixes for support of TLS v1.2</changelog>

</package>
<package pkgid="ba881689fad551c4b66222a3658ff0228855d1afba6d92e628b028461fff8979" name="apache2-mod_nss" arch="src">
    <version epoch="0" ver="1.0.8" rel="6.17.2"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>
<changelog author="kstreitova@suse.com" date="1414584000">- bnc#897712: added mod_nss-compare_subject_CN_and_VS_hostname.patch
  that compare CN and VS hostname (use NSS library). Removed
  following patches:
  * mod_nss-SNI-checks.patch
  * mod_nss-SNI-callback.patch</changelog>

</package>
<package pkgid="8ed333b3844ee05bee832d99648513fdb6cf7662583549f2722cb0052e254015" name="apache2-mod_nss" arch="src">
    <version epoch="0" ver="1.0.8" rel="6.26.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>
<changelog author="kstreitova@suse.com" date="1414584000">- bnc#897712: added mod_nss-compare_subject_CN_and_VS_hostname.patch
  that compare CN and VS hostname (use NSS library). Removed
  following patches:
  * mod_nss-SNI-checks.patch
  * mod_nss-SNI-callback.patch</changelog>
<changelog author="kstreitova@suse.com" date="1415102400">- bnc#902068: added mod_nss-add_support_for_enabling_TLS_v1.2.patch
  that adding small fixes for support of TLS v1.2</changelog>
<changelog author="kstreitova@suse.com" date="1425297600">- add mod_nss-SNI_support.patch that brings Server Name Indication
  support that allows to have multiple HTTPS websites with multiple
  certificates on the same IP address and port.
  [fate#318331], [bnc#897712]</changelog>

</package>
<package pkgid="8b1e768f5f51430b33257347d63704281aee40b73ba94f39782acf6dda2dcff6" name="apache2-mod_nss" arch="src">
    <version epoch="0" ver="1.0.8" rel="6.29.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>
<changelog author="kstreitova@suse.com" date="1414584000">- bnc#897712: added mod_nss-compare_subject_CN_and_VS_hostname.patch
  that compare CN and VS hostname (use NSS library). Removed
  following patches:
  * mod_nss-SNI-checks.patch
  * mod_nss-SNI-callback.patch</changelog>
<changelog author="kstreitova@suse.com" date="1415102400">- bnc#902068: added mod_nss-add_support_for_enabling_TLS_v1.2.patch
  that adding small fixes for support of TLS v1.2</changelog>
<changelog author="kstreitova@suse.com" date="1425297600">- add mod_nss-SNI_support.patch that brings Server Name Indication
  support that allows to have multiple HTTPS websites with multiple
  certificates on the same IP address and port.
  [fate#318331], [bnc#897712]</changelog>
<changelog author="stokos@suse.de" date="1435492800">- update-ciphers.patch
  (bsc#928039)
  merge changes from the mod_nss-SNI_support.patch to:
  0001-SNI-check-with-NameVirtualHosts.patch
  (bnc#927402)
  abstract hash for NSSNickname and ServerName, add ServerAliases and Wild
  Cards for vhost
  (bsc#927402, bsc#928039, bsc#930922)
  replace SSL_SNI_SEND_ALERT by nss_die (cleaner solution for virtual hosts)
  (bsc#930186)
  add alert about permission on the certificate database
  (bsc#933265)</changelog>
<changelog author="vcizek@suse.com" date="1441627200">- send TLS server name extension on proxy connections (bsc#933832)
  * added mod_nss-reverse_proxy_send_SNI.patch</changelog>
<changelog author="vcizek@suse.com" date="1441627201">- unified ciphers with SLE-11
  * modified patches:
    mod_nss-cipherlist_update_for_tls12-doc.diff
    mod_nss-cipherlist_update_for_tls12.diff
    update-ciphers.patch</changelog>

</package>
<package pkgid="8a0d0e0517ac3d47e6362d7ca2cd0491e978f09ca4fbe323de2bae5943786768" name="apache2-mod_nss" arch="x86_64">
    <version epoch="0" ver="1.0.8" rel="0.4.6.4.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>

</package>
<package pkgid="8ea1b935c4e85d636eb5a057326bc8033383a13a9966269fd5217a43c293e50f" name="apache2-mod_nss" arch="x86_64">
    <version epoch="0" ver="1.0.8" rel="6.1.6.9.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>

</package>
<package pkgid="60c982b7be40825d73bcd8de2ab197c17637ab5d205578f96acfa3e6e2e05588" name="apache2-mod_nss" arch="x86_64">
    <version epoch="0" ver="1.0.8" rel="6.13.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>

</package>
<package pkgid="85fcbd73ebac1d97fa0ee56a993927dc38bbe37c9316d2f5667ce4b5ab03954d" name="apache2-mod_nss" arch="x86_64">
    <version epoch="0" ver="1.0.8" rel="6.17.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>
<changelog author="kstreitova@suse.com" date="1414584000">- bnc#897712: added mod_nss-compare_subject_CN_and_VS_hostname.patch
  that compare CN and VS hostname (use NSS library). Removed
  following patches:
  * mod_nss-SNI-checks.patch
  * mod_nss-SNI-callback.patch</changelog>
<changelog author="kstreitova@suse.com" date="1415102400">- bnc#902068: added mod_nss-add_support_for_enabling_TLS_v1.2.patch
  that adding small fixes for support of TLS v1.2</changelog>

</package>
<package pkgid="90a49eb2005ee1702006c8cd01858f13b921b55ce75c86a2103b83c8de634dd4" name="apache2-mod_nss" arch="x86_64">
    <version epoch="0" ver="1.0.8" rel="6.17.2"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>
<changelog author="kstreitova@suse.com" date="1414584000">- bnc#897712: added mod_nss-compare_subject_CN_and_VS_hostname.patch
  that compare CN and VS hostname (use NSS library). Removed
  following patches:
  * mod_nss-SNI-checks.patch
  * mod_nss-SNI-callback.patch</changelog>

</package>
<package pkgid="a5f55bdfd2d0bfe74345ebf7efef713df19904ef3945463c631266dc816841c2" name="apache2-mod_nss" arch="x86_64">
    <version epoch="0" ver="1.0.8" rel="6.26.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>
<changelog author="kstreitova@suse.com" date="1414584000">- bnc#897712: added mod_nss-compare_subject_CN_and_VS_hostname.patch
  that compare CN and VS hostname (use NSS library). Removed
  following patches:
  * mod_nss-SNI-checks.patch
  * mod_nss-SNI-callback.patch</changelog>
<changelog author="kstreitova@suse.com" date="1415102400">- bnc#902068: added mod_nss-add_support_for_enabling_TLS_v1.2.patch
  that adding small fixes for support of TLS v1.2</changelog>
<changelog author="kstreitova@suse.com" date="1425297600">- add mod_nss-SNI_support.patch that brings Server Name Indication
  support that allows to have multiple HTTPS websites with multiple
  certificates on the same IP address and port.
  [fate#318331], [bnc#897712]</changelog>

</package>
<package pkgid="a72eba5d8da97c55089d8601f4e7522948c0c2ce3eb3c3c26e8d04d0a0bc96d8" name="apache2-mod_nss" arch="x86_64">
    <version epoch="0" ver="1.0.8" rel="6.29.1"/>

<changelog author="nix@opensuse.org" date="1266408000">- Fix mod_nss-conf.patch to work on SUSE
- Rename package from mod_nss to apache2-mod_nss</changelog>
<changelog author="wr@rosenauer.org" date="1334491200">- import some patches from Fedora
- removed autoreconf call</changelog>
<changelog author="aj@ajaissle.de" date="1358856000">-  Changed mod_nss-conf.patch to adjust mod_nss.conf to match SUSE
  dir layout [bnc#799483]
-  Cleaned up license tag</changelog>
<changelog author="aj@ajaissle.de" date="1373544000">- Added mod_nns-httpd24.patch to support build with apache 2.4</changelog>
<changelog author="aj@ajaissle.de" date="1373630400">- Changed source to original tar.gz</changelog>
<changelog author="meissner@suse.com" date="1375358400">- Add support for TLS v1.1 and TLS v1.2
  (TLS v1.2 requires mozilla nss 3.15.1 or newer.)
  - merged in mod_nss-proxyvariables.patch and mod_nss-tlsv1_1.patch
    from redhat to allow tls v1.1 too.
  - ported the tls v1.1 patch to be tls v1.2 aware
  - added mod_nss-proxyvariables.patch (from RHEL6 package)
  - added mod_nss-tlsv1_1.patch (from RHEL6 package, enhanced with TLS 1.2)
- mod_nss-array_overrun.patch: from RHEL6 package, fixed a array index overrun</changelog>
<changelog author="meissner@suse.com" date="1375444800">- mod_nss-tlsv1_1.patch: nss.conf.in missed for TLSv1.2 default.
- mod_nss-clientauth.patch: merged from RHEL6 pkg
- mod_nss-PK11_ListCerts_2.patch: merged from RHEL6 pkg
- mod_nss-no_shutdown_if_not_init_2.patch: merged from RHEL6 pkg
- mod_nss-sslmultiproxy.patch: merged from RHEL6 pkg
- make it build on both Apache2 2.4 and 2.2 systems</changelog>
<changelog author="draht@suse.de" date="1383652800">- generic cleanup of the package:
- explicit Requires: to mozilla-nss &gt;= 3.15.1, as TLS-1.2 support
  came with this version - this is the objective behind this
  version update of apache2-mod_nss. Tracker bug [bnc#847216]
- change path /etc/apache2/alias to /etc/apache2/mod_nss.d to avoid
  ambiguously interpreted name of directory.
- merge content of /etc/apache2/alias to /etc/apache2/mod_nss.d if
  /etc/apache2/alias exists.
- set explicit filemodes 640 for %post generated *.db files in
  /etc/apache2/mod_nss.d</changelog>
<changelog author="draht@suse.de" date="1383912000">- glue documentation added to /etc/apache2/conf.d/mod_nss.conf:
  * simultaneaous usage of mod_ssl and mod_nss
  * SNI concurrency
  * SUSE framework for apache configuration, Listen directive
  * module initialization
- mod_nss-conf.patch obsoleted by scratch-version of nss.conf.in
  or mod_nss.conf, respectively. This also leads to the removal of
  nss.conf.in specific chunks in mod_nss-negotiate.patch and
  mod_nss-tlsv1_1.patch .
- mod_nss_migrate.pl conversion script added; not patched from
  source, but partially rewritten.
- README-SUSE.txt added with step-by-step instructions on how to
  convert and manage certificates and keys, as well as a rationale
  about why mod_nss was included in SLES.
- package ready for submission [bnc#847216]</changelog>
<changelog author="draht@suse.de" date="1385726400">- mod_nss-CVE-2013-4566-NSSVerifyClient.diff fixes CVE-2013-4566:
  If 'NSSVerifyClient none' is set in the server / vhost context
  (i.e. when server is configured to not request or require client
  certificate authentication on the initial connection), and client
  certificate authentication is expected to be required for a
  specific directory via 'NSSVerifyClient require' setting,
  mod_nss fails to properly require certificate authentication.
  Remote attacker can use this to access content of the restricted
  directories. [bnc#853039]</changelog>
<changelog author="draht@suse.de" date="1392724800">- mod_nss-cipherlist_update_for_tls12-doc.diff
  mod_nss-cipherlist_update_for_tls12.diff
  GCM mode and Camellia ciphers added to the supported ciphers list.
  The additional ciphers are:
  rsa_aes_128_gcm_sha == TLS_RSA_WITH_AES_128_GCM_SHA256
  rsa_camellia_128_sha == TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
  rsa_camellia_256_sha == TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
  ecdh_ecdsa_aes_128_gcm_sha == TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
  ecdhe_ecdsa_aes_128_gcm_sha == TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  ecdh_rsa_aes_128_gcm_sha == TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
  ecdhe_rsa_aes_128_gcm_sha == TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
  [bnc#863035]</changelog>
<changelog author="draht@suse.de" date="1403870400">- mod_nss-SNI-callback.patch, mod_nss-SNI-checks.patch:
  server side SNI was not implemented when mod_nss was made;
  patches implement SNI with checks if SNI provided hostname
  equals Host: field in http request header.</changelog>
<changelog author="draht@suse.de" date="1406203200">- mod_nss-bnc863518-reopen_dev_tty.diff: close(0) and
  open("/dev/tty", ...) to make sure that stdin can be read from.
  startproc may inherit wrongly opened file descriptors to httpd.
  (Note: An analogous fix exists in startproc(8), too.)
  [bnc#863518]
- VirtualHost part in /etc/apache2/conf.d/mod_nss.conf is now
  externalized to /etc/apache2/conf.d/vhost-nss.template and not
  activated/read by default. [bnc#878681]
- NSSCipherSuite update following additional ciphers of Feb 18
  change. [bnc#878681]</changelog>
<changelog author="kstreitova@suse.com" date="1414584000">- bnc#897712: added mod_nss-compare_subject_CN_and_VS_hostname.patch
  that compare CN and VS hostname (use NSS library). Removed
  following patches:
  * mod_nss-SNI-checks.patch
  * mod_nss-SNI-callback.patch</changelog>
<changelog author="kstreitova@suse.com" date="1415102400">- bnc#902068: added mod_nss-add_support_for_enabling_TLS_v1.2.patch
  that adding small fixes for support of TLS v1.2</changelog>
<changelog author="kstreitova@suse.com" date="1425297600">- add mod_nss-SNI_support.patch that brings Server Name Indication
  support that allows to have multiple HTTPS websites with multiple
  certificates on the same IP address and port.
  [fate#318331], [bnc#897712]</changelog>
<changelog author="stokos@suse.de" date="1435492800">- update-ciphers.patch
  (bsc#928039)
  merge changes from the mod_nss-SNI_support.patch to:
  0001-SNI-check-with-NameVirtualHosts.patch
  (bnc#927402)
  abstract hash for NSSNickname and ServerName, add ServerAliases and Wild
  Cards for vhost
  (bsc#927402, bsc#928039, bsc#930922)
  replace SSL_SNI_SEND_ALERT by nss_die (cleaner solution for virtual hosts)
  (bsc#930186)
  add alert about permission on the certificate database
  (bsc#933265)</changelog>
<changelog author="vcizek@suse.com" date="1441627200">- send TLS server name extension on proxy connections (bsc#933832)
  * added mod_nss-reverse_proxy_send_SNI.patch</changelog>
<changelog author="vcizek@suse.com" date="1441627201">- unified ciphers with SLE-11
  * modified patches:
    mod_nss-cipherlist_update_for_tls12-doc.diff
    mod_nss-cipherlist_update_for_tls12.diff
    update-ciphers.patch</changelog>

</package>
<package pkgid="43842d7dad82c7362c58d6a286faa8e36a11a220bb1b88a863d5e5e7434de3ab" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="12.1"/>

<changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800], see
  https://bugs.php.net/bug.php?id=44522
  * 64bit-post-large-files.patch</changelog>
<changelog author="pgajdos@suse.com" date="1366027200">- libc-client.so needs -lssl</changelog>
<changelog author="pgajdos@suse.com" date="1366027201">- updated to 5.4.14:
    Core:
    Fixed bug #64529 (Ran out of opcode space).
    Fixed bug #64515 (Memoryleak when using the same variablename
    two times in function declaration).
    Fixed bug #64432 (more empty delimiter warning in strX methods).
    Fixed bug #64417 (ArrayAccess::&amp;offsetGet() in a trait causes
    fatal error).
    Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
    Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10
    or 5.4.11).
    Fixed bug #63976 (Parent class incorrectly using child constant
    in class property).
    Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not
    handle exceptions properly).
    Fixed bug #62343 (Show class_alias In get_declared_classes()).
    PCRE:
    Merged PCRE 8.32.
    SNMP:
    Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly).
    Zip:
    Fixed bug #64452 (Zip crash intermittently). (Anatol)</changelog>
<changelog author="slavb18@gmail.com" date="1366200000">- add php5-firebird providing php5-interbase and php5-pdo_firebird</changelog>
<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>

</package>
<package pkgid="4fd45b70e11640bde070a16d6abd667e7cd1cfb83d465a9a9008515421f06b17" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="16.1"/>

<changelog author="pgajdos@suse.com" date="1366027200">- libc-client.so needs -lssl</changelog>
<changelog author="pgajdos@suse.com" date="1366027201">- updated to 5.4.14:
    Core:
    Fixed bug #64529 (Ran out of opcode space).
    Fixed bug #64515 (Memoryleak when using the same variablename
    two times in function declaration).
    Fixed bug #64432 (more empty delimiter warning in strX methods).
    Fixed bug #64417 (ArrayAccess::&amp;offsetGet() in a trait causes
    fatal error).
    Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
    Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10
    or 5.4.11).
    Fixed bug #63976 (Parent class incorrectly using child constant
    in class property).
    Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not
    handle exceptions properly).
    Fixed bug #62343 (Show class_alias In get_declared_classes()).
    PCRE:
    Merged PCRE 8.32.
    SNMP:
    Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly).
    Zip:
    Fixed bug #64452 (Zip crash intermittently). (Anatol)</changelog>
<changelog author="slavb18@gmail.com" date="1366200000">- add php5-firebird providing php5-interbase and php5-pdo_firebird</changelog>
<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>

</package>
<package pkgid="4c051bc6313bcf684fdee13b14a0f49973a840411fffe493b6e5ea338856bb74" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="21.1"/>

<changelog author="pgajdos@suse.com" date="1366027200">- updated to 5.4.14:
    Core:
    Fixed bug #64529 (Ran out of opcode space).
    Fixed bug #64515 (Memoryleak when using the same variablename
    two times in function declaration).
    Fixed bug #64432 (more empty delimiter warning in strX methods).
    Fixed bug #64417 (ArrayAccess::&amp;offsetGet() in a trait causes
    fatal error).
    Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
    Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10
    or 5.4.11).
    Fixed bug #63976 (Parent class incorrectly using child constant
    in class property).
    Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not
    handle exceptions properly).
    Fixed bug #62343 (Show class_alias In get_declared_classes()).
    PCRE:
    Merged PCRE 8.32.
    SNMP:
    Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly).
    Zip:
    Fixed bug #64452 (Zip crash intermittently). (Anatol)</changelog>
<changelog author="slavb18@gmail.com" date="1366200000">- add php5-firebird providing php5-interbase and php5-pdo_firebird</changelog>
<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>

</package>
<package pkgid="6730b30fb8c36d0c6f1a09e6d90c7cf460a98f374e08932ed4a93c93641f10bd" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="30.1"/>

<changelog author="slavb18@gmail.com" date="1366200000">- add php5-firebird providing php5-interbase and php5-pdo_firebird</changelog>
<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>

</package>
<package pkgid="5c1b883278736f3238c786234df6f3ed4e487e0866b390811c310b4e9e312b85" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="34.3"/>

<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>

</package>
<package pkgid="651c369581237b1757313d2b488ff64c9b201aeb2cc9e499937e644df8767731" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="38.1"/>

<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>

</package>
<package pkgid="59d6866888c8e574fee74ff4e4c19845e18c721d2992fc758b328406f1100525" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="4.1"/>

<changelog author="pgajdos@suse.com" date="1361793600">- updated to 5.3.22:
  . Fixed bug #64099 (Wrong TSRM usage in zend_Register_class alias). (Johannes)
  . Fixed bug #63899 (Use after scope error in zend_compile). (Laruence)
  . Fixed bug #63943 (Bad warning text from strpos() on empty needle).
    (Laruence)
  . Fixed bug #55397 (comparsion of incomplete DateTime causes SIGSEGV).
    (Laruence, Derick)
  . Fixed bug #63999 (php with fpm fails to build on Solaris 10 or 11). (Adam)
  . Added check that soap.wsdl_cache_dir conforms to open_basedir
    (CVE-2013-1635). (Dmitry)
  . Disabled external entities loading (CVE-2013-1643). (Dmitry)
  . Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended). (Nikita Popov)</changelog>
<changelog author="pgajdos@suse.com" date="1363867200">- updated to 5.4.12:
  * dropped sqlite.so (no longer shipped with 5.4)
  * dropped t1lib support
  * dropped %{suse_version} 10.x support
  * see /usr/share/doc/packages/php5/UPGRADING or
    http://svn.php.net/viewvc/php/php-src/branches/PHP_5_4/UPGRADING
    for details
  * source changes:
    D    php-5.2.9-BNC-457056.patch -- renamed to php5-BNC-457056.patch
    D    php-5.3.0-bnc513080.patch -- there's no relevant code in exif.c
    D    php-5.3.1-systzdata-v7.patch -- renamed to php5-systzdata-v7.patch
    D    php-5.3.2-aconf26x.patch -- dropped, it is not needed yet
    D    php-5.3.2-ini.patch -- renamed to php5-ini.patch
    D    php-5.3.2-no-build-date.patch -- renamed to php5-no-build-date.patch
    D    php-5.3.22.tar.bz2 -- old tarball
    D    php-5.3.4-format-string-issues.patch -- renamed to php5-format-string-issues.patch
    D    php-5.3.4-pts.patch -- renamed to php5-pts.patch
    D    php-5.3.6-gcc_builtins.patch -- renamed to php5-gcc_builtins.patch
    D    php-5.3.6-ini-date.timezone.patch -- part of php5-ini.patch
    D    php-5.3.8-CVE-2011-4153.patch -- fixed in 5.4 branch
    D    php-5.3.8-crypt-tests.patch -- renamed to php5-crypt-tests.patch
    D    php-5.3.8-no-reentrant-crypt.patch -- renamed to php5-no-reentrant-crypt.patch
    A    php-5.4.13.tar.bz2 -- new version tarball
    D    php-cloexec.patch -- renamed to php5-cloexec.patch
    M    php-suse-addons.tar.bz2 -- content of tar balls are actualy equal
    A    php5-BNC-457056.patch -- renamed from php-5.2.9-BNC-457056.patch, not rebased
    A    php5-cloexec.patch -- renamed from php-cloexec.patch, rebased
    A    php5-sytzdata-v7.patch -- renamed from sytzdata-v7.pach, not rebased
    A    php-format-string-issues.patch -- renamed from php5-5.3.4-format-string-issues.patch, not rebased
    A    php5-crypt-tests.patch -- renamed from php-5.3.8-crypt-tests.patch, not rebased
    A    php5-gcc_builtins.patch -- renamed from php-5.3.6-gcc_builtins.patch, not rebased
    A    php5-ini.patch -- renamed from php-5.3.2-ini.patch, rebased
    A    php5-mbstring-missing-return.patch -- new patch, missing return
    M    php5-missing-extdeps.patch -- rebased
    A    php5-no-build-date.patch -- renamed from php-5.3.2-no-build-date.patch, rebased
    A    php5-no-reentrant-crypt.patch -- renamed from php-5.3.8-no-reentrant-crypt.patch, not rebased
    M    php5-openssl.patch -- rebased
    M    php5-phpize.patch -- rebased
    A    php5-pts.patch -- renamed from php-5.3.4-pts.patch, not rebased
    A    php5-suhosin-php54.patch -- patch on top of suhosin-0.9.33.tgz to work with php 5.4
    M    php5.changes -- this change log
    M    php5.spec -- new version, etc
    D    suhosin-patch-5.3.3-0.9.10.patch.gz -- dropped, seems not be used for some time</changelog>
<changelog author="pgajdos@suse.com" date="1363867201">- updated to 5.4.13:
    Core:
    Fixed bug #64235 (Insteadof not work for class method in 5.4.11).
    Implemented FR #64175 (Added HTTP codes as of RFC 6585).
    Fixed bug #64142 (dval to lval different behavior on ppc64).
    Fixed bug #64070 (Inheritance with Traits failed with error).
    CLI server:
    Fixed bug #64128 (buit-in web server is broken on ppc64).
    Mbstring:
    mb_split() can now handle empty matches like preg_split() does.
    OpenSSL:
    Fixed bug #61930 (openssl corrupts ssl key resource when using openssl_get_publickey()).
    PDO_mysql:
    Fixed bug #60840 (undefined symbol: mysqlnd_debug_std_no_trace_funcs).
    Phar:
    Fixed timestamp update on Phar contents modification.
    SOAP
    Added check that soap.wsdl_cache_dir conforms to open_basedir (CVE-2013-1635).
    Disabled external entities loading (CVE-2013-1643, CVE-2013-1824).
    SPL:
    Fixed bug #64264 (SPLFixedArray toArray problem).
    Fixed bug #64228 (RecursiveDirectoryIterator always assumes SKIP_DOTS).
    Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended).
    Fixed bug #52861 (unset fails with ArrayObject and deep arrays).
    SNMP:
    Fixed bug #64124 (IPv6 malformed).</changelog>
<changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800], see
  https://bugs.php.net/bug.php?id=44522
  * 64bit-post-large-files.patch</changelog>
<changelog author="pgajdos@suse.com" date="1366027200">- libc-client.so needs -lssl</changelog>
<changelog author="pgajdos@suse.com" date="1366027201">- updated to 5.4.14:
    Core:
    Fixed bug #64529 (Ran out of opcode space).
    Fixed bug #64515 (Memoryleak when using the same variablename
    two times in function declaration).
    Fixed bug #64432 (more empty delimiter warning in strX methods).
    Fixed bug #64417 (ArrayAccess::&amp;offsetGet() in a trait causes
    fatal error).
    Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
    Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10
    or 5.4.11).
    Fixed bug #63976 (Parent class incorrectly using child constant
    in class property).
    Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not
    handle exceptions properly).
    Fixed bug #62343 (Show class_alias In get_declared_classes()).
    PCRE:
    Merged PCRE 8.32.
    SNMP:
    Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly).
    Zip:
    Fixed bug #64452 (Zip crash intermittently). (Anatol)</changelog>
<changelog author="slavb18@gmail.com" date="1366200000">- add php5-firebird providing php5-interbase and php5-pdo_firebird</changelog>
<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>

</package>
<package pkgid="caafad988dc81f4a43f8e98478399c288ea4541f98ed735ca0ee409ea8446861" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="42.1"/>

<changelog author="adaugherity@tamu.edu" date="1366977600">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>

</package>
<package pkgid="c25bbef8f811f85df291646c56e206525aa8f807d3c5acd81a64d0842c36bb9b" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="45.1"/>

<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>

</package>
<package pkgid="0df598a1086054efbc274439583e4f76eadcd4300982a2d470db0b1f25ee2d25" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="49.1"/>

<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>

</package>
<package pkgid="91d5c2707aa70571e180946f0769770bd86e3dbe25adea3583892728e15da239" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="52.1"/>

<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>

</package>
<package pkgid="e4795ed3bd37b4bf62aab3e14dcec0bf4c67418e6d1a49eb7640d738bc6226d5" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="55.2"/>

<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>

</package>
<package pkgid="b31f6a67e82d9fae65a0bade9ec970a7e6366cd72fd3d5cbdc28df1b7cb2e576" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="58.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>

</package>
<package pkgid="b279e563c523e95384caad231c2fa9069bd0330ba032143fca528713702e4aea" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="61.5"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935227],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>

</package>
<package pkgid="345ed5f1dce17b5da9bcc7d7067d41bb3b335b73ffff2336b92b15a7ebc93823" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="64.1"/>

<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935227],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>

</package>
<package pkgid="e6b8313f1dedeb7e61cdb86b6e9bd25d7dde66e2f9621684eb4d880d87af8c85" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="67.1"/>

<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935227],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">- security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch</changelog>

</package>
<package pkgid="31e7668beedda97183686e37b7d11e6fc310cb52f90a1d726bfacc31f4c5936a" name="apache2-mod_php5" arch="i586">
    <version epoch="0" ver="5.4.20" rel="8.2"/>

<changelog author="pgajdos@suse.com" date="1363867200">- updated to 5.4.13:
    Core:
    Fixed bug #64235 (Insteadof not work for class method in 5.4.11).
    Implemented FR #64175 (Added HTTP codes as of RFC 6585).
    Fixed bug #64142 (dval to lval different behavior on ppc64).
    Fixed bug #64070 (Inheritance with Traits failed with error).
    CLI server:
    Fixed bug #64128 (buit-in web server is broken on ppc64).
    Mbstring:
    mb_split() can now handle empty matches like preg_split() does.
    OpenSSL:
    Fixed bug #61930 (openssl corrupts ssl key resource when using openssl_get_publickey()).
    PDO_mysql:
    Fixed bug #60840 (undefined symbol: mysqlnd_debug_std_no_trace_funcs).
    Phar:
    Fixed timestamp update on Phar contents modification.
    SOAP
    Added check that soap.wsdl_cache_dir conforms to open_basedir (CVE-2013-1635).
    Disabled external entities loading (CVE-2013-1643, CVE-2013-1824).
    SPL:
    Fixed bug #64264 (SPLFixedArray toArray problem).
    Fixed bug #64228 (RecursiveDirectoryIterator always assumes SKIP_DOTS).
    Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended).
    Fixed bug #52861 (unset fails with ArrayObject and deep arrays).
    SNMP:
    Fixed bug #64124 (IPv6 malformed).</changelog>
<changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800], see
  https://bugs.php.net/bug.php?id=44522
  * 64bit-post-large-files.patch</changelog>
<changelog author="pgajdos@suse.com" date="1366027200">- libc-client.so needs -lssl</changelog>
<changelog author="pgajdos@suse.com" date="1366027201">- updated to 5.4.14:
    Core:
    Fixed bug #64529 (Ran out of opcode space).
    Fixed bug #64515 (Memoryleak when using the same variablename
    two times in function declaration).
    Fixed bug #64432 (more empty delimiter warning in strX methods).
    Fixed bug #64417 (ArrayAccess::&amp;offsetGet() in a trait causes
    fatal error).
    Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
    Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10
    or 5.4.11).
    Fixed bug #63976 (Parent class incorrectly using child constant
    in class property).
    Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not
    handle exceptions properly).
    Fixed bug #62343 (Show class_alias In get_declared_classes()).
    PCRE:
    Merged PCRE 8.32.
    SNMP:
    Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly).
    Zip:
    Fixed bug #64452 (Zip crash intermittently). (Anatol)</changelog>
<changelog author="slavb18@gmail.com" date="1366200000">- add php5-firebird providing php5-interbase and php5-pdo_firebird</changelog>
<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>

</package>
<package pkgid="7b8d4bea813e91257c296d31285ed4325edb417f14e68ed0174afdd08be95eda" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="12.1"/>

<changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800], see
  https://bugs.php.net/bug.php?id=44522
  * 64bit-post-large-files.patch</changelog>
<changelog author="pgajdos@suse.com" date="1366027200">- libc-client.so needs -lssl</changelog>
<changelog author="pgajdos@suse.com" date="1366027201">- updated to 5.4.14:
    Core:
    Fixed bug #64529 (Ran out of opcode space).
    Fixed bug #64515 (Memoryleak when using the same variablename
    two times in function declaration).
    Fixed bug #64432 (more empty delimiter warning in strX methods).
    Fixed bug #64417 (ArrayAccess::&amp;offsetGet() in a trait causes
    fatal error).
    Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
    Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10
    or 5.4.11).
    Fixed bug #63976 (Parent class incorrectly using child constant
    in class property).
    Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not
    handle exceptions properly).
    Fixed bug #62343 (Show class_alias In get_declared_classes()).
    PCRE:
    Merged PCRE 8.32.
    SNMP:
    Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly).
    Zip:
    Fixed bug #64452 (Zip crash intermittently). (Anatol)</changelog>
<changelog author="slavb18@gmail.com" date="1366200000">- add php5-firebird providing php5-interbase and php5-pdo_firebird</changelog>
<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>

</package>
<package pkgid="381ea9c0a9e80d72782c01268722b50f76e179de5bc0986c27c64254960df722" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="16.1"/>

<changelog author="pgajdos@suse.com" date="1366027200">- libc-client.so needs -lssl</changelog>
<changelog author="pgajdos@suse.com" date="1366027201">- updated to 5.4.14:
    Core:
    Fixed bug #64529 (Ran out of opcode space).
    Fixed bug #64515 (Memoryleak when using the same variablename
    two times in function declaration).
    Fixed bug #64432 (more empty delimiter warning in strX methods).
    Fixed bug #64417 (ArrayAccess::&amp;offsetGet() in a trait causes
    fatal error).
    Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
    Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10
    or 5.4.11).
    Fixed bug #63976 (Parent class incorrectly using child constant
    in class property).
    Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not
    handle exceptions properly).
    Fixed bug #62343 (Show class_alias In get_declared_classes()).
    PCRE:
    Merged PCRE 8.32.
    SNMP:
    Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly).
    Zip:
    Fixed bug #64452 (Zip crash intermittently). (Anatol)</changelog>
<changelog author="slavb18@gmail.com" date="1366200000">- add php5-firebird providing php5-interbase and php5-pdo_firebird</changelog>
<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>

</package>
<package pkgid="03d512be391fdcfd0b31308a906130a99850c07862f18fe08322cf1347bc3e0a" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="21.1"/>

<changelog author="pgajdos@suse.com" date="1366027200">- updated to 5.4.14:
    Core:
    Fixed bug #64529 (Ran out of opcode space).
    Fixed bug #64515 (Memoryleak when using the same variablename
    two times in function declaration).
    Fixed bug #64432 (more empty delimiter warning in strX methods).
    Fixed bug #64417 (ArrayAccess::&amp;offsetGet() in a trait causes
    fatal error).
    Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
    Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10
    or 5.4.11).
    Fixed bug #63976 (Parent class incorrectly using child constant
    in class property).
    Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not
    handle exceptions properly).
    Fixed bug #62343 (Show class_alias In get_declared_classes()).
    PCRE:
    Merged PCRE 8.32.
    SNMP:
    Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly).
    Zip:
    Fixed bug #64452 (Zip crash intermittently). (Anatol)</changelog>
<changelog author="slavb18@gmail.com" date="1366200000">- add php5-firebird providing php5-interbase and php5-pdo_firebird</changelog>
<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>

</package>
<package pkgid="1e622d4ab88c04a135c0061097b061b9f3389cbbc3927beefa01f20b04113d75" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="30.1"/>

<changelog author="slavb18@gmail.com" date="1366200000">- add php5-firebird providing php5-interbase and php5-pdo_firebird</changelog>
<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>

</package>
<package pkgid="300ddec551d6caa3680cc1b796e94fad2fca5f30f5c992daee0ef33248e50c24" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="34.3"/>

<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>

</package>
<package pkgid="42d60e2eef7ff6f289645b53cde523d0121700b5cbf7e7c2873d051adf1d207b" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="38.1"/>

<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>

</package>
<package pkgid="5aaaaa155260fa9d1bad0f38360a256c056a238c3eb5cec408f96e1abeb64bb2" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="4.1"/>

<changelog author="pgajdos@suse.com" date="1361793600">- updated to 5.3.22:
  . Fixed bug #64099 (Wrong TSRM usage in zend_Register_class alias). (Johannes)
  . Fixed bug #63899 (Use after scope error in zend_compile). (Laruence)
  . Fixed bug #63943 (Bad warning text from strpos() on empty needle).
    (Laruence)
  . Fixed bug #55397 (comparsion of incomplete DateTime causes SIGSEGV).
    (Laruence, Derick)
  . Fixed bug #63999 (php with fpm fails to build on Solaris 10 or 11). (Adam)
  . Added check that soap.wsdl_cache_dir conforms to open_basedir
    (CVE-2013-1635). (Dmitry)
  . Disabled external entities loading (CVE-2013-1643). (Dmitry)
  . Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended). (Nikita Popov)</changelog>
<changelog author="pgajdos@suse.com" date="1363867200">- updated to 5.4.12:
  * dropped sqlite.so (no longer shipped with 5.4)
  * dropped t1lib support
  * dropped %{suse_version} 10.x support
  * see /usr/share/doc/packages/php5/UPGRADING or
    http://svn.php.net/viewvc/php/php-src/branches/PHP_5_4/UPGRADING
    for details
  * source changes:
    D    php-5.2.9-BNC-457056.patch -- renamed to php5-BNC-457056.patch
    D    php-5.3.0-bnc513080.patch -- there's no relevant code in exif.c
    D    php-5.3.1-systzdata-v7.patch -- renamed to php5-systzdata-v7.patch
    D    php-5.3.2-aconf26x.patch -- dropped, it is not needed yet
    D    php-5.3.2-ini.patch -- renamed to php5-ini.patch
    D    php-5.3.2-no-build-date.patch -- renamed to php5-no-build-date.patch
    D    php-5.3.22.tar.bz2 -- old tarball
    D    php-5.3.4-format-string-issues.patch -- renamed to php5-format-string-issues.patch
    D    php-5.3.4-pts.patch -- renamed to php5-pts.patch
    D    php-5.3.6-gcc_builtins.patch -- renamed to php5-gcc_builtins.patch
    D    php-5.3.6-ini-date.timezone.patch -- part of php5-ini.patch
    D    php-5.3.8-CVE-2011-4153.patch -- fixed in 5.4 branch
    D    php-5.3.8-crypt-tests.patch -- renamed to php5-crypt-tests.patch
    D    php-5.3.8-no-reentrant-crypt.patch -- renamed to php5-no-reentrant-crypt.patch
    A    php-5.4.13.tar.bz2 -- new version tarball
    D    php-cloexec.patch -- renamed to php5-cloexec.patch
    M    php-suse-addons.tar.bz2 -- content of tar balls are actualy equal
    A    php5-BNC-457056.patch -- renamed from php-5.2.9-BNC-457056.patch, not rebased
    A    php5-cloexec.patch -- renamed from php-cloexec.patch, rebased
    A    php5-sytzdata-v7.patch -- renamed from sytzdata-v7.pach, not rebased
    A    php-format-string-issues.patch -- renamed from php5-5.3.4-format-string-issues.patch, not rebased
    A    php5-crypt-tests.patch -- renamed from php-5.3.8-crypt-tests.patch, not rebased
    A    php5-gcc_builtins.patch -- renamed from php-5.3.6-gcc_builtins.patch, not rebased
    A    php5-ini.patch -- renamed from php-5.3.2-ini.patch, rebased
    A    php5-mbstring-missing-return.patch -- new patch, missing return
    M    php5-missing-extdeps.patch -- rebased
    A    php5-no-build-date.patch -- renamed from php-5.3.2-no-build-date.patch, rebased
    A    php5-no-reentrant-crypt.patch -- renamed from php-5.3.8-no-reentrant-crypt.patch, not rebased
    M    php5-openssl.patch -- rebased
    M    php5-phpize.patch -- rebased
    A    php5-pts.patch -- renamed from php-5.3.4-pts.patch, not rebased
    A    php5-suhosin-php54.patch -- patch on top of suhosin-0.9.33.tgz to work with php 5.4
    M    php5.changes -- this change log
    M    php5.spec -- new version, etc
    D    suhosin-patch-5.3.3-0.9.10.patch.gz -- dropped, seems not be used for some time</changelog>
<changelog author="pgajdos@suse.com" date="1363867201">- updated to 5.4.13:
    Core:
    Fixed bug #64235 (Insteadof not work for class method in 5.4.11).
    Implemented FR #64175 (Added HTTP codes as of RFC 6585).
    Fixed bug #64142 (dval to lval different behavior on ppc64).
    Fixed bug #64070 (Inheritance with Traits failed with error).
    CLI server:
    Fixed bug #64128 (buit-in web server is broken on ppc64).
    Mbstring:
    mb_split() can now handle empty matches like preg_split() does.
    OpenSSL:
    Fixed bug #61930 (openssl corrupts ssl key resource when using openssl_get_publickey()).
    PDO_mysql:
    Fixed bug #60840 (undefined symbol: mysqlnd_debug_std_no_trace_funcs).
    Phar:
    Fixed timestamp update on Phar contents modification.
    SOAP
    Added check that soap.wsdl_cache_dir conforms to open_basedir (CVE-2013-1635).
    Disabled external entities loading (CVE-2013-1643, CVE-2013-1824).
    SPL:
    Fixed bug #64264 (SPLFixedArray toArray problem).
    Fixed bug #64228 (RecursiveDirectoryIterator always assumes SKIP_DOTS).
    Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended).
    Fixed bug #52861 (unset fails with ArrayObject and deep arrays).
    SNMP:
    Fixed bug #64124 (IPv6 malformed).</changelog>
<changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800], see
  https://bugs.php.net/bug.php?id=44522
  * 64bit-post-large-files.patch</changelog>
<changelog author="pgajdos@suse.com" date="1366027200">- libc-client.so needs -lssl</changelog>
<changelog author="pgajdos@suse.com" date="1366027201">- updated to 5.4.14:
    Core:
    Fixed bug #64529 (Ran out of opcode space).
    Fixed bug #64515 (Memoryleak when using the same variablename
    two times in function declaration).
    Fixed bug #64432 (more empty delimiter warning in strX methods).
    Fixed bug #64417 (ArrayAccess::&amp;offsetGet() in a trait causes
    fatal error).
    Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
    Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10
    or 5.4.11).
    Fixed bug #63976 (Parent class incorrectly using child constant
    in class property).
    Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not
    handle exceptions properly).
    Fixed bug #62343 (Show class_alias In get_declared_classes()).
    PCRE:
    Merged PCRE 8.32.
    SNMP:
    Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly).
    Zip:
    Fixed bug #64452 (Zip crash intermittently). (Anatol)</changelog>
<changelog author="slavb18@gmail.com" date="1366200000">- add php5-firebird providing php5-interbase and php5-pdo_firebird</changelog>
<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>

</package>
<package pkgid="938cea5cda781c27190fea947be05ee4df04db49733ef77364bf3113baa29084" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="42.1"/>

<changelog author="adaugherity@tamu.edu" date="1366977600">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>

</package>
<package pkgid="f44b7d57558589d3dc48c443950be7ab93e7dbd1ceebee4c943e6e49a3a8a203" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="45.1"/>

<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>

</package>
<package pkgid="7f210bef2137f6e6246bc4d5dde01b0db6495a32d1bc81da11ddf8011a3b698e" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="49.1"/>

<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>

</package>
<package pkgid="c4dd274a80f2019af75c3f2fe2acbc8351527ced7b668ac60a937e29f9c17fcc" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="52.1"/>

<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>

</package>
<package pkgid="9084d641f2507c4c75381088341c6a8cd7e96735f9fa00a7ebaef176ab3743ca" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="55.2"/>

<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>

</package>
<package pkgid="e2e39afa528fcc38a18894a8141dc6b11ad86edd4bb0261ab0322362d7677059" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="58.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>

</package>
<package pkgid="f2e1836bd28711042025e90406a8a8c062965a7414460d7a88aca5361944f16e" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="61.5"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935227],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>

</package>
<package pkgid="e5764ee884eb9acd9bd01fce737ca7d9cd664d6350bf25e048b9c16d7e36236a" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="64.1"/>

<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935227],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>

</package>
<package pkgid="b3752f99b323e83218a5d36777902e0327276db2aadad74a1121c30411709a8e" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="67.1"/>

<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>
<changelog author="pgajdos@suse.com" date="1403006400">- security update:
  * php-5.4.20-CVE-2014-4049.patch [bnc#882992]</changelog>
<changelog author="pgajdos@suse.cz" date="1404129600">- security update [bnc#884986], [bnc#884987], [bnc#884989],
    [bnc#884990], [bnc#884991], [bnc#884992]
- added patches:
  * php-5.4.20-CVE-2014-0207.patch
  * php-5.4.20-CVE-2014-3478.patch
  * php-5.4.20-CVE-2014-3479.patch
  * php-5.4.20-CVE-2014-3480.patch
  * php-5.4.20-CVE-2014-3487.patch
  * php-5.4.20-CVE-2014-3515.patch</changelog>
<changelog author="pgajdos@suse.com" date="1405598400">- security update:
  * php-CVE-2014-4670.patch [bnc#886059]
  * php-CVE-2014-4698.patch [bnc#886060]
  * php-CVE-2014-4721.patch [bnc#885961]</changelog>
<changelog author="pgajdos@suse.com" date="1410350400">- security update:
  * CVE-2014-5459 [bnc#893849]
  * CVE-2014-3597 [bnc#893853]
  * CVE-2014-5120 [bnc#893855]
- fixed suhosin crash if used with php session_set_save_handler()
  [bnc#895658]
- added patches:
  * php-CVE-2014-3597.patch
  * php-CVE-2014-5120.patch
  * php5-suhosin-crash.patch</changelog>
<changelog author="pgajdos@suse.com" date="1414411200">- security update:
  * CVE-2014-3670 [bnc#902357]
  * CVE-2014-3669 [bnc#902360]
  * CVE-2014-3668 [bnc#902368]
- added patches:
  * php-CVE-2014-3670.patch
  * php-CVE-2014-3669.patch
  * php-CVE-2014-3668.patch</changelog>
<changelog author="pgajdos@suse.com" date="1419940800">- security update:
  * CVE-2014-8142 [bnc#910659]
    + php-CVE-2014-8142.patch
  * CVE-2015-0231 [bnc#910659]
    + php-CVE-2015-0231.patch
  * null ptr deref [bnc#910659]
    + php-unserialize-null-ptr-deref.patch
  * CVE-2014-9427 [bnc#911664]
    + php-CVE-2014-9427.patch
  * CVE-2015-0232 [bnc#914690]
    + php-CVE-2015-0232.patch
- added added README.default_socket_timeout [bnc#907519]</changelog>
<changelog author="pgajdos@suse.com" date="1424865600">- security update:
  * CVE-2015-0273 [bnc#918768]
    + php-CVE-2015-0273.patch
  * CVE-2014-9652 [bnc#917150]
    + php-CVE-2014-9652.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427198400">- security update:
  * CVE-2014-9709 [bnc#923946]
    + php-CVE-2014-9709.patch
  * CVE-2015-2301 [bnc#922022]
    + php-CVE-2015-2301.patch
  * CVE-2015-2305 [bnc#922452]
    + php-CVE-2015-2305.patch
  * CVE-2014-9705 [bnc#922451]
    + php-CVE-2014-9705.patch</changelog>
<changelog author="pgajdos@suse.com" date="1427889600">- security update:
  * CVE-2015-2787 [bnc#924972]
    + php-CVE-2015-2787.patch
  * unserialize SoapClient type confusion [bnc#925109]
    + php-unserialize-soap-type-confusion.patch
  * CVE-2015-2348 [bnc#924970]
    + php-CVE-2015-2348.patch</changelog>
<changelog author="pgajdos@suse.com" date="1429876800">- security update:
  * CVE-2015-3330 [bnc#928408]
    + php-CVE-2015-3330.patch
  * CVE-2015-3329 [bnc#928506]
    + php-CVE-2015-3329.patch
  * CVE-2015-2783 [bnc#928511]
    + php-CVE-2015-2783.patch</changelog>
<changelog author="pgajdos@suse.com" date="1432296000">- security update:
  * CVE-2015-4024 [bnc#931421]
    + php-CVE-2015-4024.patch
  * CVE-2015-4026 [bnc#931776]
    + php-CVE-2015-4026.patch
  * CVE-2015-4022 [bnc#931772]
    + php-CVE-2015-4022.patch
  * CVE-2015-4021 [bnc#931769]
    + php-CVE-2015-4021.patch</changelog>
<changelog author="pgajdos@suse.com" date="1433419200">- security update:
  * CVE-2015-4148 [bnc#933227]</changelog>
<changelog author="pgajdos@suse.com" date="1434628800">- security update:
  * CVE-2015-4602 [bnc#935224]
    php-CVE-2015-4602.patch
  * CVE-2015-4599, CVE-2015-4600, CVE-2015-4601 [bnc#935226]
    + php-CVE-2015-4599,4600,4601.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4603 [bnc#935234]
    + php-CVE-2015-4603.patch
  * CVE-2015-4644 [bnc#935274]
    + php-CVE-2015-4644.patch
  * CVE-2015-4643 [bnc#935275]
    + php-CVE-2015-4643.patch
  * CVE-2015-3411, CVE-2015-3412, CVE-2015-4598 [bnc#935227],
    [bnc#935232], [bnc#935234]
    + php-CVE-2015-3411,3412,4598.patch</changelog>
<changelog author="pgajdos@suse.com" date="1438084800">- security update:
  * CVE-2015-5590 [bnc#938719]
    + php-CVE-2015-5590.patch
  * CVE-2015-5589 [bnc#938721]
    + php-CVE-2015-5589.patch</changelog>
<changelog author="pgajdos@suse.com" date="1441972800">- security update:
  * CVE-2015-6831 [bnc#942291] [bnc#942294] [bnc#942295]
    + php-CVE-2015-6831.patch
  * CVE-2015-6832 [bnc#942293]
    + php-CVE-2015-6832.patch
  * CVE-2015-6833 [bnc#942296]
    + php-CVE-2015-6833.patch
  * CVE-2015-6834 [bnc#945403]
    + php-CVE-2015-6834.patch
  * CVE-2015-6835 [bnc#945402]
    + php-CVE-2015-6835.patch
  * CVE-2015-6836 [bnc#945428]
    + php-CVE-2015-6836.patch
  * CVE-2015-6837 CVE-2015-6838 [bnc#945412]
    + php-CVE-2015-6837,6838.patch</changelog>

</package>
<package pkgid="525dbe319846f3b3f5427ea377a39b0d10172a723ea2c5cd5180a2682dd2b21f" name="apache2-mod_php5" arch="x86_64">
    <version epoch="0" ver="5.4.20" rel="8.2"/>

<changelog author="pgajdos@suse.com" date="1363867200">- updated to 5.4.13:
    Core:
    Fixed bug #64235 (Insteadof not work for class method in 5.4.11).
    Implemented FR #64175 (Added HTTP codes as of RFC 6585).
    Fixed bug #64142 (dval to lval different behavior on ppc64).
    Fixed bug #64070 (Inheritance with Traits failed with error).
    CLI server:
    Fixed bug #64128 (buit-in web server is broken on ppc64).
    Mbstring:
    mb_split() can now handle empty matches like preg_split() does.
    OpenSSL:
    Fixed bug #61930 (openssl corrupts ssl key resource when using openssl_get_publickey()).
    PDO_mysql:
    Fixed bug #60840 (undefined symbol: mysqlnd_debug_std_no_trace_funcs).
    Phar:
    Fixed timestamp update on Phar contents modification.
    SOAP
    Added check that soap.wsdl_cache_dir conforms to open_basedir (CVE-2013-1635).
    Disabled external entities loading (CVE-2013-1643, CVE-2013-1824).
    SPL:
    Fixed bug #64264 (SPLFixedArray toArray problem).
    Fixed bug #64228 (RecursiveDirectoryIterator always assumes SKIP_DOTS).
    Fixed bug #64106 (Segfault on SplFixedArray[][x] = y when extended).
    Fixed bug #52861 (unset fails with ArrayObject and deep arrays).
    SNMP:
    Fixed bug #64124 (IPv6 malformed).</changelog>
<changelog author="pgajdos@suse.com" date="1365163200">- fixed 'http limits uploads to 2GB' [bnc#812800], see
  https://bugs.php.net/bug.php?id=44522
  * 64bit-post-large-files.patch</changelog>
<changelog author="pgajdos@suse.com" date="1366027200">- libc-client.so needs -lssl</changelog>
<changelog author="pgajdos@suse.com" date="1366027201">- updated to 5.4.14:
    Core:
    Fixed bug #64529 (Ran out of opcode space).
    Fixed bug #64515 (Memoryleak when using the same variablename
    two times in function declaration).
    Fixed bug #64432 (more empty delimiter warning in strX methods).
    Fixed bug #64417 (ArrayAccess::&amp;offsetGet() in a trait causes
    fatal error).
    Fixed bug #64370 (microtime(true) less than $_SERVER['REQUEST_TIME_FLOAT']).
    Fixed bug #64239 (Debug backtrace changed behavior since 5.4.10
    or 5.4.11).
    Fixed bug #63976 (Parent class incorrectly using child constant
    in class property).
    Fixed bug #63914 (zend_do_fcall_common_helper_SPEC does not
    handle exceptions properly).
    Fixed bug #62343 (Show class_alias In get_declared_classes()).
    PCRE:
    Merged PCRE 8.32.
    SNMP:
    Fixed bug #61981 (OO API, walk: $suffix_as_key is not working correctly).
    Zip:
    Fixed bug #64452 (Zip crash intermittently). (Anatol)</changelog>
<changelog author="slavb18@gmail.com" date="1366200000">- add php5-firebird providing php5-interbase and php5-pdo_firebird</changelog>
<changelog author="pgajdos@suse.com" date="1366632000">- use current install-pear-nozlib.phar from
  http://pear.php.net/install-pear-nozlib.phar
- php5-pear package provides/obsoletes php5-pear-Archive_Tar,
  see explanation in the spec</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977600">- Fix build on SLES 11 (no firebird) and openSUSE &lt;= 12.1 (no separate
  libfbclient2-devel pkg).</changelog>
<changelog author="adaugherity@tamu.edu" date="1366977601">- Conflict with php53 packages so zypper doesn't suggest installing a
  mix of php53-* (from SLES 11) and php5-* (these 5.4 packages).</changelog>
<changelog author="pgajdos@suse.com" date="1368187200">- updated to 5.4.15:
    Core:
    Fixed bug #64578 (debug_backtrace in set_error_handler
    corrupts zend heap: segfault).
    Fixed bug #64458 (dns_get_record result with string of
    length -1).
    Fixed bug #64433 (follow_location parameter of context
    is ignored for most response codes).
    Fixed bug #47675 (fd leak on Solaris).
    Fixed bug #64577 (fd leak on Solaris).
    Fileinfo:
    Upgraded libmagic to 5.14.
    Streams:
    Fixed Windows x64 version of stream_socket_pair() and
    improved error handling.
    Zip:
    Fixed bug #64342 (ZipArchive::addFile() has to check
    for file existence).</changelog>
<changelog author="pgajdos@suse.com" date="1371124800">- updated to 5.4.16
- Core:
  . Fixed bug #64879 (Heap based buffer overflow in quoted_printable_encode,
    CVE 2013-2110). (Stas)
  . Fixed bug #64853 (Use of no longer available ini directives causes crash on
    TS build). (Anatol)
  . Fixed bug #64729 (compilation failure on x32). (Gustavo)
  . Fixed bug #64720 (SegFault on zend_deactivate). (Dmitry)
  . Fixed bug #64660 (Segfault on memory exhaustion within function definition).
    (Stas, reported by Juha Kylmänen)
- Calendar:
  . Fixed bug #64895 (Integer overflow in SndToJewish). (Remi)
- Fileinfo:
  . Fixed bug #64830 (mimetype detection segfaults on mp3 file). (Anatol)
- FPM:
  . Ignore QUERY_STRING when sent in SCRIPT_FILENAME. (Remi)
  . Fixed some possible memory or resource leaks and possible null dereference
    detected by code coverity scan. (Remi)
  . Log a warning when a syscall fails. (Remi)
  . Add --with-fpm-systemd option to report health to systemd, and
    systemd_interval option to configure this. The service can now use
    Type=notify in the systemd unit file. (Remi)
- MySQLi
  . Fixed bug #64726 (Segfault when calling fetch_object on a use_result and DB
    pointer has closed). (Laruence)
- Phar
  . Fixed bug #64214 (PHAR PHPTs intermittently crash when run on DFS, SMB or
    with non std tmp dir). (Pierre)
- SNMP:
  . Fixed bug #64765 (Some IPv6 addresses get interpreted wrong).
    (Boris Lytochkin)
  . Fixed bug #64159 (Truncated snmpget). (Boris Lytochkin)
- Streams:
  . Fixed bug #64770 (stream_select() fails with pipes returned by proc_open()
    on Windows x64). (Anatol)
- Zend Engine:
  . Fixed bug #64821 (Custom Exceptions crash when internal properties
    overridden). (Anatol)</changelog>
<changelog author="jengelh@inai.de" date="1371556800">- Explicitly specify cyrus-sasl build dependency</changelog>
<changelog author="pgajdos@suse.com" date="1373889600">- updated to 5.4.17:
    Core:
    Fixed bug #64988 (Class loading order affects E_STRICT warning).
    Fixed bug #64966 (segfault in zend_do_fcall_common_helper_SPEC).
    Fixed bug #64960 (Segfault in gc_zval_possible_root).
    Fixed bug #64936 (doc comments picked up from previous scanner run).
    Fixed bug #64934 (Apache2 TS crash with get_browser()).
    Fixed bug #64166 (quoted-printable-encode stream filter incorrectly
    discarding whitespace).
    DateTime:
    Fixed bug #53437 (Crash when using unserialized DatePeriod instance).
    FPM:
    Fixed bug #64915 (error_log ignored when daemonize=0).
    Implemented FR #64764 (add support for FPM init.d script).
    PDO:
    Fixed bug #63176 (Segmentation fault when instantiate 2 persistent
    PDO to the same db server).
    PDO_DBlib:
    Fixed bug #63638 (Cannot connect to SQL Server 2008 with PDO dblib).
    Fixed bug #64338 (pdo_dblib can't connect to Azure SQL).
    Fixed bug #64808 (FreeTDS PDO getColumnMeta on a prepared but not
    executed statement crashes).
    PDO_firebird:
    Fixed bug #64037 (Firebird return wrong value for numeric field).
    Fixed bug #62024 (Cannot insert second row with null using
    parametrized query).
    PDO_mysql:
    Fixed bug #48724 (getColumnMeta() doesn't return native_type for BIT,
    TINYINT and YEAR).
    PDO_pgsql:
    Fixed bug #64949 (Buffer overflow in _pdo_pgsql_error).
    pgsql:
    Fixed bug #64609 (pg_convert enum type support).
    Readline:
    Implement FR #55694 (Expose additional readline variable to prevent
    default filename completion).
    SPL:
    Fixed bug #64997 (Segfault while using RecursiveIteratorIterator
    on 64-bits systems).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375272000">- php5-per-mod-log.patch Support apache 2.4 per module logging
- php5-apache24-updates.patch Use proper API in apache 2.4
  to determine when the module has to be loaded.
  I made this patches at least a year ago, but for some reason
  they went out of my radar and were not applied to upstream
  Will be submitted again soon.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- php5-per-mod-log.patch: It turns out that requesting per-module
  logging support in 2.4 will not do a thing if the expansion
  of APLOG_USE_MODULE is not visible to all files of the module
  so place it in the header instead.</changelog>
<changelog author="pgajdos@suse.com" date="1377000000">- updated to 5.4.18:
  * About 30 bugs were fixed, including security issues CVE-2013-4113
    and CVE-2013-4248.</changelog>
<changelog author="pgajdos@suse.com" date="1378382400">- updated to 5.4.19:
  * These releases fix a bug in the patch for CVE-2013-4248 in
    OpenSSL module and compile failure with ZTS enabled in PHP 5.4.</changelog>
<changelog author="pgajdos@suse.com" date="1380110400">- updated to 5.4.20:
  * About 30 bugs were fixed.</changelog>
<changelog author="pgajdos@suse.com" date="1386936000">- security update
  * CVE-2013-6420.patch [bnc#854880]
  * CVE-2013-6712.patch [bnc#853045]</changelog>
<changelog author="pgajdos@suse.com" date="1399636800">- security update
  * CVE-2014-2497.patch [bnc#868624]
  * CVE-2014-0185.patch [bnc#875826]</changelog>
<changelog author="pgajdos@suse.com" date="1401796800">- security update
  * CVE-2014-0237 [bnc#880905]
  * CVE-2014-0238 [bnc#880904]</changelog>

</package>
<package pkgid="ee2477bbcf2e7a7663c562a393abacfdb39187202ca759bbb0934bcfefb235a4" name="apache2-mod_security2" arch="i586">
    <version epoch="0" ver="2.8.0" rel="4.4.1"/>

<changelog author="mrueckert@suse.de" date="1242302400">- update to version 2.5.9
  - Fixed parsing multipart content with a missing part header name
    which would crash Apache.  Discovered by "Internet Security
    Auditors" (isecauditors.com).
  - Added ability to specify the config script directly using
  - -with-apr and --with-apu.
  - Added macro expansion for append/prepend action.
  - Fixed race condition in concurrent updates of persistent
    counters.  Updates are now atomic.
  - Cleaned up build, adding an option for verbose configure output
    and making the mlogc build more portable.
- additional changes from 2.5.8
  - Fixed PDF XSS issue where a non-GET request for a PDF file
    would crash the Apache httpd process.  Discovered by Steve
    Grubb at Red Hat.
  - Removed an invalid "Internal error: Issuing "%s" for
    unspecified error." message that was logged when denying with
    nolog/noauditlog set and causing the request to be audited.
- additional changes from 2.5.7
  - Fixed XML DTD/Schema validation which will now fail after
    request body processing errors, even if the XML parser returns
    a document tree.
  - Added ctl:forceRequestBodyVariable=on|off which, when enabled,
    will force the REQUEST_BODY variable to be set when a request
    body processor is not set.  Previously the REQUEST_BODY target
    was only populated by the URLENCODED request body processor.
  - Integrated mlogc source.
  - Fixed logging the hostname in the error_log which was logging
    the request hostname instead of the Apache resolved hostname.
  - Allow for disabling request body limit checks in phase:1.
  - Added transformations for processing parity for legacy
    protocols ported to HTTP(S): t:parityEven7bit, t:parityOdd7bit,
    t:parityZero7bit
  - Added t:cssDecode transformation to decode CSS escapes.
  - Now log XML parsing/validation warnings and errors to be in the
    debug log at levels 3 and 4, respectivly.
- build and package mlogc
- remove --with-apxs from the configure args as it breaks the build
  configure now finds our apxs2</changelog>
<changelog author="draht@suse.de" date="1309953600">- update to version 2.6.1-rc1 for submission to SLE11-SP2 (fate#309433):
  - SecUnicodeCodePage and SecUnicodeMapFile directives added
  - fixed bug: SecRequestBodyLimit was truncating the real request
    body
  additional fixes from 2.6.0:
  - buffering filter problems fixed
  - memory leak fix when using MATCHED_VAR_NAMES
  - SecWriteStateLimit added against slow DoS
  additional fixes from 2.6.0 release candidates:
  - optimizations
  - bug in logging code fixed
  - cleanup
  - google safe browsing support</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1344254400">- Update to version 2.6.7, fixes build in apache 2.4
- Update spec file macros.</changelog>
<changelog author="cfarrell@suse.com" date="1346068800">- license update: Apache-2.0 and GPL-2.0
  Many of the files in the rules/ subdirectory are GPL-2.0 licensed</changelog>
<changelog author="draht@suse.de" date="1375444800">- complete overhaul of this package, with update to 2.7.5.
- ruleset update to 2.2.8-0-g0f07cbb.
- new configuration framework private to mod_security2:
  /etc/apache2/conf.d/mod_security2.conf loads
  /usr/share/apache2-mod_security2/rules/modsecurity_crs_10_setup.conf,
  then /etc/apache2/mod_security2.d/*.conf , as set up based on
  advice in /etc/apache2/conf.d/mod_security2.conf
  Your configuration starting point is
  /etc/apache2/conf.d/mod_security2.conf
- !!! Please note that mod_unique_id is needed for mod_security2 to run!
- modsecurity-apache_2.7.5-build_fix_pcre.diff changes erroneaous
  linker parameter, preventing rpath in shared object.
- fixes contained for the following bugs:
  * CVE-2009-5031, CVE-2012-2751 [bnc#768293] request parameter handling
  * [bnc#768293] multi-part bypass, minor threat
  * CVE-2013-1915 [bnc#813190] XML external entity vulnerability
  * CVE-2012-4528 [bnc#789393] rule bypass
  * CVE-2013-2765 [bnc#822664] null pointer dereference crash
- new from 2.5.9 to 2.7.5, only major changes:
  * GPLv2 replaced by Apache License v2
  * rules are not part of the source tarball any longer, but
    maintaned upstream externally, and included in this package.
  * documentation was externalized to a wiki. Package contains
    the FAQ and the reference manual in html form.
  * renamed the term "Encryption" in directives that actually refer
    to hashes. See CHANGES file for more details.
  * new directive SecXmlExternalEntity, default off
  * byte conversion issues on s390x when logging fixed.
  * many small issues fixed that were discovered by a Coverity scanner
  * updated reference manual
  * wrong time calculation when logging for some timezones fixed.
  * replaced time-measuring mechanism with finer granularity for
    measured request/answer phases. (Stopwatch remains for compat.)
  * cookie parser memory leak fix
  * parsing of quoted strings in multipart Content-Disposition
    headers fixed.
  * SDBM deadlock fix
  * @rsub memory leak fix
  * cookie separator code improvements
  * build failure fixes
  * compile time option --enable-htaccess-config (set)</changelog>
<changelog author="aj@ajaissle.de" date="1390478400">- Use correct source Url</changelog>
<changelog author="thomas.worm@sicsec.de" date="1390651200">- Raised to version 2.7.7.
  - modified patches:
  * modsecurity-apache_2.7.5-build_fix_pcre.diff,
    renamed to modsecurity-apache_2.7.7-build_fix_pcre.diff.</changelog>
<changelog author="thomas.worm@sicsec.de" date="1398945600">- Raised to version 2.8.0.
- updated patches:
  * modsecurity-apache_2.8.0-build_fix_pcre.diff
  - &gt; modsecurity-apache_2.7.7-build_fix_pcre.diff</changelog>
<changelog author="draht@suse.de" date="1402574400">- OWASP rule set. [bnc#876878]
  new in 2.8.0 (more complete changelog to add to last changelog):
  * Connection limits (SecConnReadStateLimit/SecConnWriteStateLimit)
    now support white and suspicious list
  * New variables: FULL_REQUEST and FULL_REQUEST_LENGTH
  * GPLv2 replaced by Apache License v2
  * rules are not part of the source tarball any longer, but
    maintaned upstream externally, and included in this package.
  * documentation was externalized to a wiki. Package contains
    the FAQ and the reference manual in html form.
  * renamed the term "Encryption" in directives that actually refer
    to hashes. See CHANGES file for more details.
  * byte conversion issues on s390x when logging fixed.
  * many small issues fixed that were discovered by a Coverity scanner
  * updated reference manual
  * wrong time calculation when logging for some timezones fixed.
  * replaced time-measuring mechanism with finer granularity for
    measured request/answer phases. (Stopwatch remains for compat.)
  * cookie parser memory leak fix
  * parsing of quoted strings in multipart Content-Disposition
    headers fixed.</changelog>
<changelog author="draht@suse.de" date="1402920000">- apache2-mod_security2-no_rpath.diff: avoid the usage of -rpath
  in autoconf m4 macros. Obsoletes patch
  modsecurity-apache_2.8.0-build_fix_pcre.diff
- use automake for build, add autoconf and automake to
  BuildRequires:. This fix is combined with [bnc#876878].
- turn on --enable-htaccess-config
- use %{?_smp_mflags} for build</changelog>
<changelog author="draht@suse.de" date="1402920001">- apache2-mod_security2-libtool-fix.diff: initialize libtool.</changelog>
<changelog author="draht@suse.de" date="1404734400">- BuildRequires: libtool missing
- apache2-mod_security2-libtool-fix.diff was obsoleted.</changelog>
<changelog author="draht@suse.de" date="1406808000">- apache2-mod_security2-2.7.x-bnc871309-CVE-2013-5705-chunked_requests_bypass.diff
  Fix for a flaw with which restrictions imposed by mod_security2
  could be bypassed with chunked requests.
  [bnc#871309] CVE-2013-5705</changelog>

</package>
<package pkgid="b6a721b502a26b0bdb3c7b868af155f2b641fad0190ee36166c89e99f350ddc8" name="apache2-mod_security2" arch="src">
    <version epoch="0" ver="2.8.0" rel="4.4.1"/>

<changelog author="mrueckert@suse.de" date="1176724800">- update to 2.1.1
- switched to perl based patching instead of cmdline params for make</changelog>
<changelog author="mrueckert@suse.de" date="1186574400">- update to 2.1.2</changelog>
<changelog author="jg@internetx.de" date="1202040000">-update to 2.1.6</changelog>
<changelog author="jg@internetx.de" date="1210593600">-update to 2.1.7</changelog>
<changelog author="skh@suse.de" date="1221480000">- update to version 2.5.6
- initial submit to FACTORY</changelog>
<changelog author="skh@suse.de" date="1232712000">- fix broken config [bnc#457200]</changelog>
<changelog author="mrueckert@suse.de" date="1242302400">- update to version 2.5.9
  - Fixed parsing multipart content with a missing part header name
    which would crash Apache.  Discovered by "Internet Security
    Auditors" (isecauditors.com).
  - Added ability to specify the config script directly using
  - -with-apr and --with-apu.
  - Added macro expansion for append/prepend action.
  - Fixed race condition in concurrent updates of persistent
    counters.  Updates are now atomic.
  - Cleaned up build, adding an option for verbose configure output
    and making the mlogc build more portable.
- additional changes from 2.5.8
  - Fixed PDF XSS issue where a non-GET request for a PDF file
    would crash the Apache httpd process.  Discovered by Steve
    Grubb at Red Hat.
  - Removed an invalid "Internal error: Issuing "%s" for
    unspecified error." message that was logged when denying with
    nolog/noauditlog set and causing the request to be audited.
- additional changes from 2.5.7
  - Fixed XML DTD/Schema validation which will now fail after
    request body processing errors, even if the XML parser returns
    a document tree.
  - Added ctl:forceRequestBodyVariable=on|off which, when enabled,
    will force the REQUEST_BODY variable to be set when a request
    body processor is not set.  Previously the REQUEST_BODY target
    was only populated by the URLENCODED request body processor.
  - Integrated mlogc source.
  - Fixed logging the hostname in the error_log which was logging
    the request hostname instead of the Apache resolved hostname.
  - Allow for disabling request body limit checks in phase:1.
  - Added transformations for processing parity for legacy
    protocols ported to HTTP(S): t:parityEven7bit, t:parityOdd7bit,
    t:parityZero7bit
  - Added t:cssDecode transformation to decode CSS escapes.
  - Now log XML parsing/validation warnings and errors to be in the
    debug log at levels 3 and 4, respectivly.
- build and package mlogc
- remove --with-apxs from the configure args as it breaks the build
  configure now finds our apxs2</changelog>
<changelog author="draht@suse.de" date="1309953600">- update to version 2.6.1-rc1 for submission to SLE11-SP2 (fate#309433):
  - SecUnicodeCodePage and SecUnicodeMapFile directives added
  - fixed bug: SecRequestBodyLimit was truncating the real request
    body
  additional fixes from 2.6.0:
  - buffering filter problems fixed
  - memory leak fix when using MATCHED_VAR_NAMES
  - SecWriteStateLimit added against slow DoS
  additional fixes from 2.6.0 release candidates:
  - optimizations
  - bug in logging code fixed
  - cleanup
  - google safe browsing support</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1344254400">- Update to version 2.6.7, fixes build in apache 2.4
- Update spec file macros.</changelog>
<changelog author="cfarrell@suse.com" date="1346068800">- license update: Apache-2.0 and GPL-2.0
  Many of the files in the rules/ subdirectory are GPL-2.0 licensed</changelog>
<changelog author="draht@suse.de" date="1375444800">- complete overhaul of this package, with update to 2.7.5.
- ruleset update to 2.2.8-0-g0f07cbb.
- new configuration framework private to mod_security2:
  /etc/apache2/conf.d/mod_security2.conf loads
  /usr/share/apache2-mod_security2/rules/modsecurity_crs_10_setup.conf,
  then /etc/apache2/mod_security2.d/*.conf , as set up based on
  advice in /etc/apache2/conf.d/mod_security2.conf
  Your configuration starting point is
  /etc/apache2/conf.d/mod_security2.conf
- !!! Please note that mod_unique_id is needed for mod_security2 to run!
- modsecurity-apache_2.7.5-build_fix_pcre.diff changes erroneaous
  linker parameter, preventing rpath in shared object.
- fixes contained for the following bugs:
  * CVE-2009-5031, CVE-2012-2751 [bnc#768293] request parameter handling
  * [bnc#768293] multi-part bypass, minor threat
  * CVE-2013-1915 [bnc#813190] XML external entity vulnerability
  * CVE-2012-4528 [bnc#789393] rule bypass
  * CVE-2013-2765 [bnc#822664] null pointer dereference crash
- new from 2.5.9 to 2.7.5, only major changes:
  * GPLv2 replaced by Apache License v2
  * rules are not part of the source tarball any longer, but
    maintaned upstream externally, and included in this package.
  * documentation was externalized to a wiki. Package contains
    the FAQ and the reference manual in html form.
  * renamed the term "Encryption" in directives that actually refer
    to hashes. See CHANGES file for more details.
  * new directive SecXmlExternalEntity, default off
  * byte conversion issues on s390x when logging fixed.
  * many small issues fixed that were discovered by a Coverity scanner
  * updated reference manual
  * wrong time calculation when logging for some timezones fixed.
  * replaced time-measuring mechanism with finer granularity for
    measured request/answer phases. (Stopwatch remains for compat.)
  * cookie parser memory leak fix
  * parsing of quoted strings in multipart Content-Disposition
    headers fixed.
  * SDBM deadlock fix
  * @rsub memory leak fix
  * cookie separator code improvements
  * build failure fixes
  * compile time option --enable-htaccess-config (set)</changelog>
<changelog author="aj@ajaissle.de" date="1390478400">- Use correct source Url</changelog>
<changelog author="thomas.worm@sicsec.de" date="1390651200">- Raised to version 2.7.7.
  - modified patches:
  * modsecurity-apache_2.7.5-build_fix_pcre.diff,
    renamed to modsecurity-apache_2.7.7-build_fix_pcre.diff.</changelog>
<changelog author="thomas.worm@sicsec.de" date="1398945600">- Raised to version 2.8.0.
- updated patches:
  * modsecurity-apache_2.8.0-build_fix_pcre.diff
  - &gt; modsecurity-apache_2.7.7-build_fix_pcre.diff</changelog>
<changelog author="draht@suse.de" date="1402574400">- OWASP rule set. [bnc#876878]
  new in 2.8.0 (more complete changelog to add to last changelog):
  * Connection limits (SecConnReadStateLimit/SecConnWriteStateLimit)
    now support white and suspicious list
  * New variables: FULL_REQUEST and FULL_REQUEST_LENGTH
  * GPLv2 replaced by Apache License v2
  * rules are not part of the source tarball any longer, but
    maintaned upstream externally, and included in this package.
  * documentation was externalized to a wiki. Package contains
    the FAQ and the reference manual in html form.
  * renamed the term "Encryption" in directives that actually refer
    to hashes. See CHANGES file for more details.
  * byte conversion issues on s390x when logging fixed.
  * many small issues fixed that were discovered by a Coverity scanner
  * updated reference manual
  * wrong time calculation when logging for some timezones fixed.
  * replaced time-measuring mechanism with finer granularity for
    measured request/answer phases. (Stopwatch remains for compat.)
  * cookie parser memory leak fix
  * parsing of quoted strings in multipart Content-Disposition
    headers fixed.</changelog>
<changelog author="draht@suse.de" date="1402920000">- apache2-mod_security2-no_rpath.diff: avoid the usage of -rpath
  in autoconf m4 macros. Obsoletes patch
  modsecurity-apache_2.8.0-build_fix_pcre.diff
- use automake for build, add autoconf and automake to
  BuildRequires:. This fix is combined with [bnc#876878].
- turn on --enable-htaccess-config
- use %{?_smp_mflags} for build</changelog>
<changelog author="draht@suse.de" date="1402920001">- apache2-mod_security2-libtool-fix.diff: initialize libtool.</changelog>
<changelog author="draht@suse.de" date="1404734400">- BuildRequires: libtool missing
- apache2-mod_security2-libtool-fix.diff was obsoleted.</changelog>
<changelog author="draht@suse.de" date="1406808000">- apache2-mod_security2-2.7.x-bnc871309-CVE-2013-5705-chunked_requests_bypass.diff
  Fix for a flaw with which restrictions imposed by mod_security2
  could be bypassed with chunked requests.
  [bnc#871309] CVE-2013-5705</changelog>

</package>
<package pkgid="b0a7a769be2d954f437c2e0f8bfbf5b9fe14ed0cea2da9efd8e864eb9e7b87cb" name="apache2-mod_security2" arch="x86_64">
    <version epoch="0" ver="2.8.0" rel="4.4.1"/>

<changelog author="mrueckert@suse.de" date="1242302400">- update to version 2.5.9
  - Fixed parsing multipart content with a missing part header name
    which would crash Apache.  Discovered by "Internet Security
    Auditors" (isecauditors.com).
  - Added ability to specify the config script directly using
  - -with-apr and --with-apu.
  - Added macro expansion for append/prepend action.
  - Fixed race condition in concurrent updates of persistent
    counters.  Updates are now atomic.
  - Cleaned up build, adding an option for verbose configure output
    and making the mlogc build more portable.
- additional changes from 2.5.8
  - Fixed PDF XSS issue where a non-GET request for a PDF file
    would crash the Apache httpd process.  Discovered by Steve
    Grubb at Red Hat.
  - Removed an invalid "Internal error: Issuing "%s" for
    unspecified error." message that was logged when denying with
    nolog/noauditlog set and causing the request to be audited.
- additional changes from 2.5.7
  - Fixed XML DTD/Schema validation which will now fail after
    request body processing errors, even if the XML parser returns
    a document tree.
  - Added ctl:forceRequestBodyVariable=on|off which, when enabled,
    will force the REQUEST_BODY variable to be set when a request
    body processor is not set.  Previously the REQUEST_BODY target
    was only populated by the URLENCODED request body processor.
  - Integrated mlogc source.
  - Fixed logging the hostname in the error_log which was logging
    the request hostname instead of the Apache resolved hostname.
  - Allow for disabling request body limit checks in phase:1.
  - Added transformations for processing parity for legacy
    protocols ported to HTTP(S): t:parityEven7bit, t:parityOdd7bit,
    t:parityZero7bit
  - Added t:cssDecode transformation to decode CSS escapes.
  - Now log XML parsing/validation warnings and errors to be in the
    debug log at levels 3 and 4, respectivly.
- build and package mlogc
- remove --with-apxs from the configure args as it breaks the build
  configure now finds our apxs2</changelog>
<changelog author="draht@suse.de" date="1309953600">- update to version 2.6.1-rc1 for submission to SLE11-SP2 (fate#309433):
  - SecUnicodeCodePage and SecUnicodeMapFile directives added
  - fixed bug: SecRequestBodyLimit was truncating the real request
    body
  additional fixes from 2.6.0:
  - buffering filter problems fixed
  - memory leak fix when using MATCHED_VAR_NAMES
  - SecWriteStateLimit added against slow DoS
  additional fixes from 2.6.0 release candidates:
  - optimizations
  - bug in logging code fixed
  - cleanup
  - google safe browsing support</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1344254400">- Update to version 2.6.7, fixes build in apache 2.4
- Update spec file macros.</changelog>
<changelog author="cfarrell@suse.com" date="1346068800">- license update: Apache-2.0 and GPL-2.0
  Many of the files in the rules/ subdirectory are GPL-2.0 licensed</changelog>
<changelog author="draht@suse.de" date="1375444800">- complete overhaul of this package, with update to 2.7.5.
- ruleset update to 2.2.8-0-g0f07cbb.
- new configuration framework private to mod_security2:
  /etc/apache2/conf.d/mod_security2.conf loads
  /usr/share/apache2-mod_security2/rules/modsecurity_crs_10_setup.conf,
  then /etc/apache2/mod_security2.d/*.conf , as set up based on
  advice in /etc/apache2/conf.d/mod_security2.conf
  Your configuration starting point is
  /etc/apache2/conf.d/mod_security2.conf
- !!! Please note that mod_unique_id is needed for mod_security2 to run!
- modsecurity-apache_2.7.5-build_fix_pcre.diff changes erroneaous
  linker parameter, preventing rpath in shared object.
- fixes contained for the following bugs:
  * CVE-2009-5031, CVE-2012-2751 [bnc#768293] request parameter handling
  * [bnc#768293] multi-part bypass, minor threat
  * CVE-2013-1915 [bnc#813190] XML external entity vulnerability
  * CVE-2012-4528 [bnc#789393] rule bypass
  * CVE-2013-2765 [bnc#822664] null pointer dereference crash
- new from 2.5.9 to 2.7.5, only major changes:
  * GPLv2 replaced by Apache License v2
  * rules are not part of the source tarball any longer, but
    maintaned upstream externally, and included in this package.
  * documentation was externalized to a wiki. Package contains
    the FAQ and the reference manual in html form.
  * renamed the term "Encryption" in directives that actually refer
    to hashes. See CHANGES file for more details.
  * new directive SecXmlExternalEntity, default off
  * byte conversion issues on s390x when logging fixed.
  * many small issues fixed that were discovered by a Coverity scanner
  * updated reference manual
  * wrong time calculation when logging for some timezones fixed.
  * replaced time-measuring mechanism with finer granularity for
    measured request/answer phases. (Stopwatch remains for compat.)
  * cookie parser memory leak fix
  * parsing of quoted strings in multipart Content-Disposition
    headers fixed.
  * SDBM deadlock fix
  * @rsub memory leak fix
  * cookie separator code improvements
  * build failure fixes
  * compile time option --enable-htaccess-config (set)</changelog>
<changelog author="aj@ajaissle.de" date="1390478400">- Use correct source Url</changelog>
<changelog author="thomas.worm@sicsec.de" date="1390651200">- Raised to version 2.7.7.
  - modified patches:
  * modsecurity-apache_2.7.5-build_fix_pcre.diff,
    renamed to modsecurity-apache_2.7.7-build_fix_pcre.diff.</changelog>
<changelog author="thomas.worm@sicsec.de" date="1398945600">- Raised to version 2.8.0.
- updated patches:
  * modsecurity-apache_2.8.0-build_fix_pcre.diff
  - &gt; modsecurity-apache_2.7.7-build_fix_pcre.diff</changelog>
<changelog author="draht@suse.de" date="1402574400">- OWASP rule set. [bnc#876878]
  new in 2.8.0 (more complete changelog to add to last changelog):
  * Connection limits (SecConnReadStateLimit/SecConnWriteStateLimit)
    now support white and suspicious list
  * New variables: FULL_REQUEST and FULL_REQUEST_LENGTH
  * GPLv2 replaced by Apache License v2
  * rules are not part of the source tarball any longer, but
    maintaned upstream externally, and included in this package.
  * documentation was externalized to a wiki. Package contains
    the FAQ and the reference manual in html form.
  * renamed the term "Encryption" in directives that actually refer
    to hashes. See CHANGES file for more details.
  * byte conversion issues on s390x when logging fixed.
  * many small issues fixed that were discovered by a Coverity scanner
  * updated reference manual
  * wrong time calculation when logging for some timezones fixed.
  * replaced time-measuring mechanism with finer granularity for
    measured request/answer phases. (Stopwatch remains for compat.)
  * cookie parser memory leak fix
  * parsing of quoted strings in multipart Content-Disposition
    headers fixed.</changelog>
<changelog author="draht@suse.de" date="1402920000">- apache2-mod_security2-no_rpath.diff: avoid the usage of -rpath
  in autoconf m4 macros. Obsoletes patch
  modsecurity-apache_2.8.0-build_fix_pcre.diff
- use automake for build, add autoconf and automake to
  BuildRequires:. This fix is combined with [bnc#876878].
- turn on --enable-htaccess-config
- use %{?_smp_mflags} for build</changelog>
<changelog author="draht@suse.de" date="1402920001">- apache2-mod_security2-libtool-fix.diff: initialize libtool.</changelog>
<changelog author="draht@suse.de" date="1404734400">- BuildRequires: libtool missing
- apache2-mod_security2-libtool-fix.diff was obsoleted.</changelog>
<changelog author="draht@suse.de" date="1406808000">- apache2-mod_security2-2.7.x-bnc871309-CVE-2013-5705-chunked_requests_bypass.diff
  Fix for a flaw with which restrictions imposed by mod_security2
  could be bypassed with chunked requests.
  [bnc#871309] CVE-2013-5705</changelog>

</package>
<package pkgid="03f395991ec74d7130b2460e46327bfbdc2e2b445beb17d6c76e317fca4e1cc0" name="apache2-mod_wsgi" arch="i586">
    <version epoch="0" ver="3.4" rel="2.12.1"/>

<changelog author="poeml@suse.de" date="1218196800">- update to 2.1. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0201</changelog>
<changelog author="poeml@suse.de" date="1221652800">- update to 2.3. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0202
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0203</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242216000">- update to 2.5:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0205
- minor spec file fixes (use %configure, -j%jobs)</changelog>
<changelog author="termim@gmail.com" date="1288180800">- update to 3.3:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0303</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="saschpe@suse.de" date="1353067200">- Require apache2, a module makes little sense without</changelog>
<changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
<changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>
<changelog author="mc@suse.com" date="1400932800">- fix Local privilege escalation (bnc#878550)
  CVE-2014-0240
  (mod_wsgi-setuid-patch.diff)</changelog>
<changelog author="mc@suse.de" date="1404907200">- fix off by one error (bnc#883229)
  (mod_wsgi-3.4-fix-off-by-one.diff)</changelog>

</package>
<package pkgid="6c6d3d66a1ea9ef3ea7ffb74e29e88c3943704d2b06e33b5d42b2e709c40582c" name="apache2-mod_wsgi" arch="i586">
    <version epoch="0" ver="3.4" rel="2.28.1"/>

<changelog author="poeml@suse.de" date="1221652800">- update to 2.3. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0202
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0203</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242216000">- update to 2.5:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0205
- minor spec file fixes (use %configure, -j%jobs)</changelog>
<changelog author="termim@gmail.com" date="1288180800">- update to 3.3:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0303</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="saschpe@suse.de" date="1353067200">- Require apache2, a module makes little sense without</changelog>
<changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
<changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>
<changelog author="mc@suse.com" date="1400932800">- fix Local privilege escalation (bnc#878550)
  CVE-2014-0240
  (mod_wsgi-setuid-patch.diff)</changelog>
<changelog author="mc@suse.de" date="1404907200">- fix off by one error (bnc#883229)
  (mod_wsgi-3.4-fix-off-by-one.diff)</changelog>
<changelog author="mc@suse.de" date="1417003200">- fix error handling when dropping group privileges
  CVE-2014-8583 (bsc#903961)
  * fix-error-handling-when-dropping-group-privileges.dif</changelog>

</package>
<package pkgid="e06729e07b563f5255ebd4d71cc210656fc37a82721144378f69c8ca783c96ff" name="apache2-mod_wsgi" arch="i586">
    <version epoch="0" ver="3.4" rel="2.4.1"/>

<changelog author="poeml@suse.de" date="1205236800">- initial package (version 1.3)</changelog>
<changelog author="poeml@suse.de" date="1218196800">- update to 2.1. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0201</changelog>
<changelog author="poeml@suse.de" date="1221652800">- update to 2.3. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0202
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0203</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242216000">- update to 2.5:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0205
- minor spec file fixes (use %configure, -j%jobs)</changelog>
<changelog author="termim@gmail.com" date="1288180800">- update to 3.3:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0303</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="saschpe@suse.de" date="1353067200">- Require apache2, a module makes little sense without</changelog>
<changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
<changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>

</package>
<package pkgid="3cc3909ebb64359a64c00095149bc014f77e0f6ed537aa1e9badea14beff8c2c" name="apache2-mod_wsgi" arch="i586">
    <version epoch="0" ver="3.4" rel="2.8.1"/>

<changelog author="poeml@suse.de" date="1205236800">- initial package (version 1.3)</changelog>
<changelog author="poeml@suse.de" date="1218196800">- update to 2.1. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0201</changelog>
<changelog author="poeml@suse.de" date="1221652800">- update to 2.3. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0202
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0203</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242216000">- update to 2.5:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0205
- minor spec file fixes (use %configure, -j%jobs)</changelog>
<changelog author="termim@gmail.com" date="1288180800">- update to 3.3:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0303</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="saschpe@suse.de" date="1353067200">- Require apache2, a module makes little sense without</changelog>
<changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
<changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>
<changelog author="mc@suse.com" date="1400932800">- fix Local privilege escalation (bnc#878550)
  CVE-2014-0240
  (mod_wsgi-setuid-patch.diff)</changelog>

</package>
<package pkgid="6875313330b2cdb0cd8b9ef73958b1729a96e108d94b61b2caaa3852ab417376" name="apache2-mod_wsgi" arch="src">
    <version epoch="0" ver="3.4" rel="2.12.1"/>

<changelog author="poeml@suse.de" date="1205236800">- initial package (version 1.3)</changelog>
<changelog author="poeml@suse.de" date="1218196800">- update to 2.1. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0201</changelog>
<changelog author="poeml@suse.de" date="1221652800">- update to 2.3. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0202
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0203</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242216000">- update to 2.5:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0205
- minor spec file fixes (use %configure, -j%jobs)</changelog>
<changelog author="termim@gmail.com" date="1288180800">- update to 3.3:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0303</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="saschpe@suse.de" date="1353067200">- Require apache2, a module makes little sense without</changelog>
<changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
<changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>
<changelog author="mc@suse.com" date="1400932800">- fix Local privilege escalation (bnc#878550)
  CVE-2014-0240
  (mod_wsgi-setuid-patch.diff)</changelog>
<changelog author="mc@suse.de" date="1404907200">- fix off by one error (bnc#883229)
  (mod_wsgi-3.4-fix-off-by-one.diff)</changelog>

</package>
<package pkgid="aa144236a11de4bbf76c5aa4dbaf5f5efcfdf54d89fe70356acbbc0a7ad8cc20" name="apache2-mod_wsgi" arch="src">
    <version epoch="0" ver="3.4" rel="2.28.1"/>

<changelog author="poeml@suse.de" date="1205236800">- initial package (version 1.3)</changelog>
<changelog author="poeml@suse.de" date="1218196800">- update to 2.1. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0201</changelog>
<changelog author="poeml@suse.de" date="1221652800">- update to 2.3. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0202
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0203</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242216000">- update to 2.5:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0205
- minor spec file fixes (use %configure, -j%jobs)</changelog>
<changelog author="termim@gmail.com" date="1288180800">- update to 3.3:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0303</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="saschpe@suse.de" date="1353067200">- Require apache2, a module makes little sense without</changelog>
<changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
<changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>
<changelog author="mc@suse.com" date="1400932800">- fix Local privilege escalation (bnc#878550)
  CVE-2014-0240
  (mod_wsgi-setuid-patch.diff)</changelog>
<changelog author="mc@suse.de" date="1404907200">- fix off by one error (bnc#883229)
  (mod_wsgi-3.4-fix-off-by-one.diff)</changelog>
<changelog author="mc@suse.de" date="1417003200">- fix error handling when dropping group privileges
  CVE-2014-8583 (bsc#903961)
  * fix-error-handling-when-dropping-group-privileges.dif</changelog>

</package>
<package pkgid="4fd6413a6439af354aa4cbbf3685bb1dddf1a6fba5065443fe7731a1a677d82c" name="apache2-mod_wsgi" arch="src">
    <version epoch="0" ver="3.4" rel="2.4.1"/>

<changelog author="poeml@suse.de" date="1205236800">- initial package (version 1.3)</changelog>
<changelog author="poeml@suse.de" date="1218196800">- update to 2.1. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0201</changelog>
<changelog author="poeml@suse.de" date="1221652800">- update to 2.3. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0202
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0203</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242216000">- update to 2.5:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0205
- minor spec file fixes (use %configure, -j%jobs)</changelog>
<changelog author="termim@gmail.com" date="1288180800">- update to 3.3:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0303</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="saschpe@suse.de" date="1353067200">- Require apache2, a module makes little sense without</changelog>
<changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
<changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>

</package>
<package pkgid="b528d894c1144448b43655eb449fc5c2fe2fe690bed07cdbdc44879c743f9e05" name="apache2-mod_wsgi" arch="src">
    <version epoch="0" ver="3.4" rel="2.8.1"/>

<changelog author="poeml@suse.de" date="1205236800">- initial package (version 1.3)</changelog>
<changelog author="poeml@suse.de" date="1218196800">- update to 2.1. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0201</changelog>
<changelog author="poeml@suse.de" date="1221652800">- update to 2.3. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0202
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0203</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242216000">- update to 2.5:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0205
- minor spec file fixes (use %configure, -j%jobs)</changelog>
<changelog author="termim@gmail.com" date="1288180800">- update to 3.3:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0303</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="saschpe@suse.de" date="1353067200">- Require apache2, a module makes little sense without</changelog>
<changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
<changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>
<changelog author="mc@suse.com" date="1400932800">- fix Local privilege escalation (bnc#878550)
  CVE-2014-0240
  (mod_wsgi-setuid-patch.diff)</changelog>

</package>
<package pkgid="255bed5d104d12d0f52614fe37e8a8357fbf00f53c64a6c3fbd8bbd71d398353" name="apache2-mod_wsgi" arch="x86_64">
    <version epoch="0" ver="3.4" rel="2.12.1"/>

<changelog author="poeml@suse.de" date="1218196800">- update to 2.1. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0201</changelog>
<changelog author="poeml@suse.de" date="1221652800">- update to 2.3. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0202
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0203</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242216000">- update to 2.5:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0205
- minor spec file fixes (use %configure, -j%jobs)</changelog>
<changelog author="termim@gmail.com" date="1288180800">- update to 3.3:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0303</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="saschpe@suse.de" date="1353067200">- Require apache2, a module makes little sense without</changelog>
<changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
<changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>
<changelog author="mc@suse.com" date="1400932800">- fix Local privilege escalation (bnc#878550)
  CVE-2014-0240
  (mod_wsgi-setuid-patch.diff)</changelog>
<changelog author="mc@suse.de" date="1404907200">- fix off by one error (bnc#883229)
  (mod_wsgi-3.4-fix-off-by-one.diff)</changelog>

</package>
<package pkgid="f7162fbc44fd8de74d12c6aeca89fbbfe65dcc991a4c1d439fbaad7c7584da12" name="apache2-mod_wsgi" arch="x86_64">
    <version epoch="0" ver="3.4" rel="2.28.1"/>

<changelog author="poeml@suse.de" date="1221652800">- update to 2.3. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0202
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0203</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242216000">- update to 2.5:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0205
- minor spec file fixes (use %configure, -j%jobs)</changelog>
<changelog author="termim@gmail.com" date="1288180800">- update to 3.3:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0303</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="saschpe@suse.de" date="1353067200">- Require apache2, a module makes little sense without</changelog>
<changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
<changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>
<changelog author="mc@suse.com" date="1400932800">- fix Local privilege escalation (bnc#878550)
  CVE-2014-0240
  (mod_wsgi-setuid-patch.diff)</changelog>
<changelog author="mc@suse.de" date="1404907200">- fix off by one error (bnc#883229)
  (mod_wsgi-3.4-fix-off-by-one.diff)</changelog>
<changelog author="mc@suse.de" date="1417003200">- fix error handling when dropping group privileges
  CVE-2014-8583 (bsc#903961)
  * fix-error-handling-when-dropping-group-privileges.dif</changelog>

</package>
<package pkgid="7795017ba8c8d45e8a2095d04fb3bbdcc09617562ce4953cf0363bd193c2970b" name="apache2-mod_wsgi" arch="x86_64">
    <version epoch="0" ver="3.4" rel="2.4.1"/>

<changelog author="poeml@suse.de" date="1205236800">- initial package (version 1.3)</changelog>
<changelog author="poeml@suse.de" date="1218196800">- update to 2.1. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0201</changelog>
<changelog author="poeml@suse.de" date="1221652800">- update to 2.3. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0202
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0203</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242216000">- update to 2.5:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0205
- minor spec file fixes (use %configure, -j%jobs)</changelog>
<changelog author="termim@gmail.com" date="1288180800">- update to 3.3:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0303</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="saschpe@suse.de" date="1353067200">- Require apache2, a module makes little sense without</changelog>
<changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
<changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>

</package>
<package pkgid="590cb04b53b30c94da85ea41b643a48f0f0e1412965c4a43fcd96c2c1dd38d65" name="apache2-mod_wsgi" arch="x86_64">
    <version epoch="0" ver="3.4" rel="2.8.1"/>

<changelog author="poeml@suse.de" date="1205236800">- initial package (version 1.3)</changelog>
<changelog author="poeml@suse.de" date="1218196800">- update to 2.1. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0201</changelog>
<changelog author="poeml@suse.de" date="1221652800">- update to 2.3. Changelog:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0202
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0203</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1242216000">- update to 2.5:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0205
- minor spec file fixes (use %configure, -j%jobs)</changelog>
<changelog author="termim@gmail.com" date="1288180800">- update to 3.3:
  http://code.google.com/p/modwsgi/wiki/ChangesInVersion0303</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="saschpe@suse.de" date="1353067200">- Require apache2, a module makes little sense without</changelog>
<changelog author="dimstar@opensuse.org" date="1359547200">- Update to version 3.4:
  + New support for Apache 2.4
  + Support for Python 3.2
  + Is now guaranteed that mod_ssl access handler is run before
    that for mod_wsgi so that any per request variables setup by
    mod_ssl are available in the mod_wsgi access handler as
    implemented by WSGIAccessScript directive.
  + Added 'python-home' option to WSGIDaemonProcess.
  + Added 'lang' and 'locale' options to WSGIDaemonProcess.
  + Split combined WWW-Authenticate header returned from daemon
    process back into separate headers.
- Introduce build compatibility with apache 2.4: apxs2 was moved
  from %{_sbindir} to %{_bindir}</changelog>
<changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>
<changelog author="mc@suse.com" date="1400932800">- fix Local privilege escalation (bnc#878550)
  CVE-2014-0240
  (mod_wsgi-setuid-patch.diff)</changelog>

</package>
<package pkgid="6bfe6ceee091e173b4cf130ffc01e43bc3c35b2b51ca2e52c48bbb947ae2aa97" name="apache2-prefork" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="04288af57afe8285c4dd78ab442a576682fca449e2a1ca186ce70503ca0adb65" name="apache2-prefork" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="c8e126e9200203ae702d6880c73e27470f2aab3e2c8af722bef39e6152973828" name="apache2-prefork" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="710856960cce1a3e72c7f7511b0c564042759e59ccd700cff0bfd8d74fbfc90a" name="apache2-prefork" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="c9428ada738046cf7106857f7d766d6bd6e066cba316566404dd15b36d0e2822" name="apache2-prefork" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="287d7d1d7fec25956d289555343bf1e99dd7464698a795f8699c091509524266" name="apache2-prefork" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="a99a166fecd4ec0625be8f14d5a1724e96061eafb330692f88dc7acd633cde93" name="apache2-prefork" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="d06895e0fdf0bf197743357eb1b3493d547a46358d78de95427142b4aacdd836" name="apache2-prefork" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="f8f92669180da41a8f9ed746ffab8f249c5388b2acf15097333be753652b1622" name="apache2-prefork" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="eff2faf227d5904638c5de0fc9348f4c08596a8cb2f0a010986532dfafe3ec44" name="apache2-prefork" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="d2c02fb8413d990e2a9d80e1fc2f19d23b2fac51608a34bc7fe0ac421c50ffff" name="apache2-prefork" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="39b0b9a4aedb020b2967f0e71728c02e609016347a66ff02fc74536c4e9da50c" name="apache2-prefork" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="733fddca6d67c10d8229541b392d1d1aa7758eb4e4d239891b8fb9e5f1e4545a" name="apache2-prefork" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="ea8e59a75bcfea40638691647d104f06975b6702ff99154d4ae98e477095786e" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="866dc8b484f91e34258147ca52f155e974f4a630af5247388dccbf08aa2434de" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="da31107692de3c292e662a77078301407fb4d46cb7930f58b4804b79a0361e60" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="dcc58e42a75bc78eb9e67d28cfa5bd05b1a3f85bd991737ab7fd6751323e2c33" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="4bc732f2dc9c33bd37c387153f4a55a0bf0321f691a97a51c7dee693e5ef0fa8" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="a711a46aec2b150a0b4eff00db4f2811d13b0a1ff195614811c84b9650d2e4c8" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="781dfba1a0d84cc183676aacec408bffcf8db7cbb8466c4b1d358c9b2ad8d4af" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="28e4b79709cde730daa59a669550722c633fedaefc927b9851e04fb34f581d00" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="a704d282cae16e9ae15d7645b75ac7a9fa40ae0802dd1ef2641f662cd8297b62" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="0c5518f2300e31317d0a28c9017fe14578778505f6363b991f6b9d4325034bdf" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="cdfbc5d498ce3bfbc9b90c49846900ee099fa515d324bf2cc1fdaa814de7330b" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="2441150768fa4eed0be36a553554ad5f4a87c349c5119ef26be10a9ab341732c" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="ba0767256cff0931c7b98570d47628404a58683c9458e71f39b0ee93812ca08b" name="apache2-prefork" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="4e8fc9c8e02f527a22846beff35ca8eeb243089fb0b186e149870bbe3dd527fc" name="apache2-utils" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="a53e51083841aa0d1c8acd3f6ac01d3f32d632e3329b2b348893909645bfca4a" name="apache2-utils" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="95ce3eeb7ab475ef7b85e16cc96727a6ad6f53249fdb1ea909df28a7efc017b9" name="apache2-utils" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="2380e499e3f9626a6874efed1e14ba286110364640f580f296b48be4fdd6e0cf" name="apache2-utils" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="cb111016be8d5373681d75470ace0d580f8ef9e7451fb681cba6567776612cff" name="apache2-utils" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="8dfdd85538cb844f60ce5d9af216e520ba08e05f4113d29d4e56123a59cfe1a0" name="apache2-utils" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="3e68bd6967adf67e11abd2f379f6f864ee7d338879c60fca7fefcf8ff2f8ffbe" name="apache2-utils" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="bb12533e557e6719dd6ace1392317b25fb1758e364c07183677714c967b6ff4b" name="apache2-utils" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="7362c7a03c982cd83d76363b93639343650ba159f611e8619bde66931fc319b5" name="apache2-utils" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="f8c1465ab1e6017be7939896a5b51dd98ba8bd97319c5db1df09d0115d64221d" name="apache2-utils" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="d32e34d8423d2223d35f32e989bcae575813e869c69a75ce4b9ab70897821974" name="apache2-utils" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="3dc1b034495d0aab5e104c3e8f5a287505d6a2f12abeae46100a83e3925c3738" name="apache2-utils" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="5605e8966e708e49e93001e1056261e063341e66b68ffa0f5fdbf438124b0cb9" name="apache2-utils" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="d2699bad8595c48214536005fab06b5f12c0df5dbee6c266f148cad9f407e81b" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="027bf010ec063e40b267267cd29148ec161be6a55e238c2fa19de6a5d5073ccd" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="aae2810aeb71c20807bdc85e95badc9bdcc2a3f42d37f77a9377513b03f87b34" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="7eb23adba12afb24fc586907f67f0e4bcd10ee6d0350b16a25cd83389a3a8395" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="bb8472150173cbf4bd9caad4a3ace4bf1572ffc517e6feea210e5bc4665730d9" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="92e1700854cfabe52dbd30f66dbe7a2ec95f9c3b118877a6c52459887876d5ca" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="941e07a86ccf3e653f7f43574d7b950d4553ce56dfb9c355be2cd1e4f63f6ce5" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="1793d2854151a0c80e5c41fb3cebee4a58bd04ce3ed257b6e15201582d191a78" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="5702be5c968b3a24d1d2256001ec5e2453e0d23751cecc9ae4e906f102c40555" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="dcc67ff8e307df1f861fd99852e5936be22fdbee20a8b70092aff70795aebbca" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="060e03b7a49191a7a2d28c2b960366bc34769b9385f66a8f325860c8a5e6a255" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="3c72f41e3b4bec22e944a1067c926beb3f2888bf61e7393c0fb0036583b2dae4" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="8f13d12e2a2687e32d121270c915fbd17e839186619ac474773a0c3ba83aea47" name="apache2-utils" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="e98abcea8456c9b8325553eeb6fa44afd3665a0ab003f0bc9e7c821fbadb7d23" name="apache2-worker" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="f9ec9391e0c835d47bb1b793cb156c6eb676f711430002748f9c4331434d10c1" name="apache2-worker" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="0dbfb8fe0c63c292b6fba226db23cb968c8fa2a4bf73b6812d0c53ffe77a031c" name="apache2-worker" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="e789abef42370463fbaa13ac575d2d40ee2140ff6ccc0a0f99cf49bc7324cb8d" name="apache2-worker" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="ecc96daa8c64ce10531a98434ae0dc1e39d536e5ee98e3241f864ac628107d54" name="apache2-worker" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="4d0e5b7e643fa9f6299acc9fffc57a9fdf5cde99d2ae5a498c658ca36d43ac07" name="apache2-worker" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="dc2f3003acf55745802f03cd81dda1ba9b8ca28844c071d84ee4373383f8ec16" name="apache2-worker" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="b4a4c66792bcd9d07c79ab78412fe59da15fdc518afffc5c058a3120e5a196a1" name="apache2-worker" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="729f1af7041c493a56426459f92fa171594a259eef8f52ade87941757ea3ee34" name="apache2-worker" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="dd354727fe25190f9f60bb49108f0d6884363fd835a7e2f5241033270d2d92cb" name="apache2-worker" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="6142bcbad7add7825d3dbcbaff43134c53ceba747d7e3e69e4961e652126032d" name="apache2-worker" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="974c1f021d3f70d5971cc89ebca854c02e58f3527af3794eff33200b4ea7e69b" name="apache2-worker" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="d12347c3bc5839d6a8fe647d3143fd8036a5b4e3629decb8822c4daf30e15fc5" name="apache2-worker" arch="i586">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="0d21003c1b2e368127813da7a00d9243ec8dc92acad4d58852206dca31c71dc7" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.10.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>

</package>
<package pkgid="cb9ef6b24ac2ce15ff0a7c835797fe2ac2da074bcb2ebc64ac3b675c544cb9ba" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.15.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>

</package>
<package pkgid="113d90349c80acfef025de6a05d663f01dd7de46e2072b1b9ce9833fe0cd6bd1" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.19.2"/>

<changelog author="crrodriguez@opensuse.org" date="1371556800">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>

</package>
<package pkgid="c573eeabea6c5d9ce87220f64487da70422121d1f03fd4027f6ce146d7dddff2" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.23.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>

</package>
<package pkgid="04d4ba7e8e6024a3a60b08dd9ec36a0f81961417830588c7b5ec340f84d41dc1" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1374494400">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443203">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443204">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393675200">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>

</package>
<package pkgid="523d727f1233ac88fc917c5f54fbf9a21785b9aa1eea32a70e819fecd63b6cae" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.33.1"/>

<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>

</package>
<package pkgid="a882911b2c1d07862a03415d1a33c3541fd8898363ffe673bf91761ce9842c7c" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.37.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>

</package>
<package pkgid="c3d19f6da38dbb502a078877195d02b349a7ed062b14d97beebc8ce6de2dd15a" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.41.1"/>

<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>

</package>
<package pkgid="d0f71d7ce3349aba72b28be736a63edb6265ef5bdcd5d34e151412db5288c80e" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.44.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>

</package>
<package pkgid="38407cae5f25fe528ea9a71aae799b7b95f14f6debf69950502353bda0cb738e" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.47.1"/>

<changelog author="crrodriguez@opensuse.org" date="1378209600">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>

</package>
<package pkgid="a13099c126f23062d3d62be120d23899f4011cfc9f33f15cb2f4dcb307955b78" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.50.1"/>

<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>

</package>
<package pkgid="8f4a2ec27736080a040102ec456405eb3cc831a1c66b029891ff8783fc438fa1" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.53.1"/>

<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>
<changelog author="draht@suse.de" date="1386417600">- revert last change about Require directive to avoid spurious 403
  errors due to conflicts with Require vs. Deny/Allow.
  The problem:
  In /etc/apache2/httpd.conf, the permissions are set for "/" using
  &lt;Directory /&gt; ... Require all denied &lt;/Directory&gt;. This overrides
  all subsequent Allow/Deny directives that may be present in an
  older confguration and leads to a 403 unless configured otherwise
  with a further "Require all granted" down in a directory or vhost.
  This cannot be guaranteed, though, and numerous configurations
  also from add-ons that bring their own /etc/apache2/conf.d config
  file make use of the Deny/Allow directives.
  This looks like we'll stick with the compiled-in mod_access_compat
  for a while. [bnc#854263]</changelog>
<changelog author="archie@dellroad.org" date="1393588800">- Fixed AuthnProviderAlias
  (https://issues.apache.org/bugzilla/show_bug.cgi?id=56203)
  + Added authprovideraliasmerge.patch</changelog>
<changelog author="andreas.stieger@gmx.de" date="1396440000">- fix multiple issues with mod_dav and, by extension, Subversion.
  [bnc#864308]:
  + fix parent validation when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-1-parent_validation.patch
  + fix lock tokens when handling COPY
    httpd-2.4.6-mod_dav-bnc864308-2-lock_token.patch
  + fix URI encoding in mod_dav
    httpd-2.4.6-mod_dav-bnc864308-3-encoding.patch</changelog>
<changelog author="draht@suse.de" date="1398600000">- service reload can cause log data to be lost with logrotate
  under some circumstances: remove "-t" from service reload.
  [bnc#859439] Thanks to bruno@ioda-net.ch!
- logrotate now uses systemctl semantics, not rcapache2 reload any
  more.
- cleanup of patches:
  httpd-2.2.x-bnc690734.patch re-worked into
    httpd-2.4.6-bnc690734.patch and enabled,
  Patch65: httpd-2.0.49-log_server_status.dif removed (obsolete),
  Patch112: mod_ssl-2.4.x-ekh.diff remains disabled but present.
- removed php5 and authz_default from /etc/sysconfig/apache2 upon
  fresh install - authz_default no longer exists, and php5 should
  not be enabled by default. This reverts a change from Peter Poeml
  from March 2005: mod_php5 only runs with prefork MPM, and we
  have different ways to run php5 by now; prefork is
  default-conservative and may vanish.
- rcapache2 now points at service (systemd facilitation), not at
  /etc/init.d/apache2 any more. /etc/init.d/apache2 is gone, but
  can be found at /usr/share/apache2/rc.apache2 .</changelog>
<changelog author="draht@suse.de" date="1406635200">- httpd-2.4.x-bnc887767-CVE-2014-0117-mod_proxy_crash.diff:
  reverse proxy configurations can suffer from a crash bug in
  mod_proxy with carefully crafter requests. This is known as
  CVE-2014-0117 . [bnc#887767]
- httpd-2.4.x-bnc887768-CVE-2014-0231-mod_cgid-hang.diff
  Introduces new configuration parameter CGIDScriptTimeout, which
  defaults to the value of parameter Timeout .
  CGIDScriptTimeout is set to 60s if mod_cgid is loaded/active,
  via /etc/apache2/conf.d/cgid-timeout.conf .
  The new directive and its effect prevent request workers to be
  eaten until starvation if cgi programs do not send output back
  to the server within the timout set by CGIDScriptTimeout.
  CVE-2014-0231 , [bnc#887768]
- httpd-2.4.6-bnc887771-CVE-2013-4352-mod_cache-crash-r1523235.diff:
  Fix for a NULL pointer dereference that can cause a crash of the
  server daemon in a chaching forwarding configuration.
  [bnc#887771] CVE-2013-4352
- httpd-2.4.x-bnc869106-CVE-2014-0098-log_cookie_c.diff:
  correction to parsing of cookie content; this can lead to a crash
  with a specially designed cookie sent to the server. This is
  CVE-2014-0098 [bnc#869106] .
- httpd-2.4.x-bnc887765-CVE-2014-0226-mod_status_race.diff
  a race condition in handling the server-internal scoreboard can
  lead to information disclosure by means of a heap overflow if
  access to the server status via mod_status is given for an
  attacker. mod_status is off by default, and normally only granted
  to clients from 127.0.0.1. [bnc#887765] CVE-2014-0226
- httpd-2.2.x-bnc869105-CVE-2013-6438-mod_dav-dos.diff:
  properly remove whitespace characters from CDATA sections to
  avoid remote denial of service by a crash of the apache server
  process. This is CVE-2013-6438 [bnc#869105].</changelog>
<changelog author="pgajdos@suse.com" date="1412769600">- httpd-2.4.6-mod_dav-bnc900198-hrefs-encoding.patch:
  Fix PR 56480: PROPFIND walker doesn't encode hrefs properly
  [bnc#900198]</changelog>
<changelog author="pgajdos@suse.com" date="1413201600">- enable mod_imagemap [bnc#866366]</changelog>
<changelog author="kstreitova@suse.com" date="1418385600">- added httpd-2.4.x-bnc909715-CVE-2014-8109-mod_lua_handling_of_Require_line.patch
  that fixes handling of the Require line when a LuaAuthzProvider
  is used in multiple Require directives with different arguments
  [bnc#909715], [CVE-2014-8109].</changelog>
<changelog author="kstreitova@suse.com" date="1418731200">- added httpd-2.4.x-bnc871310-CVE-2013-5704-mod_headers_chunked_requests.patch
  to fix flaw in the way mod_headers handled chunked requests. Adds
  "MergeTrailers" directive to restore legacy behavior [bnc#871310],
  [CVE-2013-5704].
- changed apache2.service file to fix situation where apache won't
  start at boot when using an encrypted certificate because user
  isn't prompted for password during boot [bnc#792309].
- added &lt;IfModule&gt; around SSLSessionCache to avoid failing to start
  [bnc#842377], [bnc#849445] and [bnc#864166].</changelog>
<changelog author="kstreitova@suse.com" date="1419940800">- fix IfModule directive around SSLSessionCache [bnc#842377c#11].</changelog>
<changelog author="kstreitova@suse.com" date="1430827200">- add httpd-2.4.6-split-logfile2.patch to fix split-logfile2 script
  [bnc#869790]</changelog>
<changelog author="kstreitova@suse.com" date="1432814400">- allow only TCP ports in Yast2 firewall files [bnc#931002]</changelog>
<changelog author="kstreitova@suse.com" date="1438862400">- add httpd-2.4.6-ap_some_auth_required_API_unusable.patch to
  replace ap_some_auth_required (unusable in Apache httpd 2.4)
  with new ap_some_authn_required and ap_force_authn hook
  [bnc#938723], [CVE-2015-3185]
- add httpd-2.4.6-chunk_header_parsing_defect.patch to parse chunk
  headers properly [bnc#938728], [CVE-2015-3183]</changelog>
<changelog author="pgajdos@suse.com" date="1444305600">- httpd-2.4.6-chunk_header_parsing_defect.patch disabled
  [bnc#949218]</changelog>

</package>
<package pkgid="dc9a9c6d0eb91e0f5aa9ce38661a846a9202b2a62951660969ae1fcf8385f041" name="apache2-worker" arch="x86_64">
    <version epoch="0" ver="2.4.6" rel="6.6.1"/>

<changelog author="crrodriguez@opensuse.org" date="1371211200">- Include mod_systemd for more complete integration with
  systemd, turn the service to Typé=notify as required
- Disable SSL NPN patch for now, it is required for mod_spdy
  but mod_spdy does not support apache 2.4</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556800">- remove After=mysql.service php-fpm.service postgresql.service
  which were added in the previous change, those must be added
  as Before=apache2.service in the respective services.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556801">- fix apache_mmn spec macro, otherwise all modules down
  the chain will have broken dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371556802">- apache-20-22-upgrade: still no cookie, module authn_file
  is ok and must not be disabled on update.
  authn_core must however be enabled too.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494400">- Update to version 2.4.6
  * SECURITY: CVE-2013-1896 (cve.mitre.org)
  * SECURITY: CVE-2013-2249 (cve.mitre.org)
  * Major updates to mod_lua
  * Support for proxying websocket requests
  * Higher performant shm-based cache implementation
  * Addition of mod_macro for easier configuration management
  * As well as several exciting fixes, especially those related to RFC edge
  cases in mod_cache and mod_proxy.
- IMPORTANT : With the current packaging scheme, we can no longer
  Include the ITK MPM, therefore it has been disabled. This is because
  this MPM can now only be provided as a loadable module but we do
  not currently build MPMs as shared modules but as independant
  binaries and all helpers/startup scripts depend on that behaviour.
  It will be fixed in the upcoming weeks/months.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1374494401">- httpd-event-ssl.patch: from upstream
  Lift the restriction that prevents mod_ssl taking
  full advantage of the event MPM.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375099200">- provide and obsolete mod_macro
- upgrade: some people complain that log_config module
  is not enabled by default sometimes, fix that.
- upgrade : "SSLMutex" no longer exists.
- Toogle EnableSendfile on because now apache defaults to off
  due to kernel bugs. that's a silly thing to do here
  as kernel bugs have to be fixed at their source, not worked around
  in applications.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1375358400">- Enable mod_proxy_html, mod_xml2enc and mod_lua (missed BuildRequires)</changelog>
<changelog author="meissner@suse.com" date="1375444800">- Make the default keysize in the sample gensslcerts 2048 bits to match
  government recommendations.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377691200">- Use %requires_ge for libapr1 and libapr-util1
- apache2-default-server.conf: Need to use IncludeOptional
- apache-20-22-upgrade: also load authz_core
- httpd-visibility.patch: Use compiler symbol visibility.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377864000">- Really use %requires_ge for libapr1 and libapr-util1
  mentioned but not implemented in the previous commit.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209600">- Ensure we only use /run and not /var/run</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378209601">- Also fix subtle non-obvious systemd unit confusion
  we really mean -DFOREGROUND not -DNO_DETACH the latter only
  inhibits the parent from forking, not quite the same as
  running in well.. the foreground as required.</changelog>
<changelog author="aj@suse.com" date="1381752000">- Fix SUSE spelling.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356800">- fix [bnc#846897] problems building kiwi images due to
  systemd not being running in chroot. (submit to 13.1 ASAP)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382356801">- mod_ssl: improve ephemeral key handling in particular, support DH params
  with more than 1024 bits, and allow custom configuration.
  This patch adjust DH parameters according to the relevant RFC
  recommendations and permanently disables the usage of "export"
  and "NULL" ciphers no matter what the user configuration is
  (mod_ssl-2.4.x-ekh.diff, to be in 2.4.7)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443200">- make mod_systemd static so scenarios described in
  [bnc#846897] do not happen again.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443201">- disable (revert) mod_ssl changes in the previous
  commit so it does not end in factory or 13.1 yet.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1382443202">- Correct build in old distros.</changelog>
<changelog author="freek@opensuse.org" date="1383739200">- Removed obsolete directive DefaultType (resolves [bnc#848146])
- Changed Order Deny Allow directives to new Require{|Any|All|None}</changelog>

</package>
<package pkgid="4d0429f549e3a0329b08ebaa54dcc84ce496fa0cea0a39b5d1301a92293c29ce" name="apcupsd" arch="i586">
    <version epoch="0" ver="3.14.10" rel="6.4.1"/>

<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389355200">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>

</package>
<package pkgid="75714772edff100e07ce1afcf0c5e9613f0490a0df2a5fc8b12405f17e8f8ae6" name="apcupsd" arch="i586">
    <version epoch="0" ver="3.14.10" rel="6.8.1"/>

<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389268800">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1437307200">- Add patch apcupsd-3.14.10-nodbg.patch: reduce amount of debug
  messages (rh#1053324).</changelog>

</package>
<package pkgid="93a89bc27ed7f23e926cbf63122e9f9a99e4b9f08bcb6e7003cac919477d61ba" name="apcupsd" arch="src">
    <version epoch="0" ver="3.14.10" rel="6.4.1"/>

<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389355200">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>

</package>
<package pkgid="c313ee8664a02fdd957867f4646c7447cd1649f7aedd5753b3fe3924514f70dc" name="apcupsd" arch="src">
    <version epoch="0" ver="3.14.10" rel="6.8.1"/>

<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389268800">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1437307200">- Add patch apcupsd-3.14.10-nodbg.patch: reduce amount of debug
  messages (rh#1053324).</changelog>

</package>
<package pkgid="61f21b28226c0e525fda97531516302674549e8e00d04b7915b95f4834c0781f" name="apcupsd" arch="x86_64">
    <version epoch="0" ver="3.14.10" rel="6.4.1"/>

<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389355200">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>

</package>
<package pkgid="eadebff73e2b3eb02a403ae021a619dc9e86998455c75e9123c31e735c6b3de9" name="apcupsd" arch="x86_64">
    <version epoch="0" ver="3.14.10" rel="6.8.1"/>

<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389268800">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1437307200">- Add patch apcupsd-3.14.10-nodbg.patch: reduce amount of debug
  messages (rh#1053324).</changelog>

</package>
<package pkgid="937ad3a20bc621615b93a6ed7ca1aada5b362825730626130cd9ac5e527ab1e6" name="apcupsd-cgi" arch="i586">
    <version epoch="0" ver="3.14.10" rel="6.4.1"/>

<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389355200">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>

</package>
<package pkgid="12eca63a0286c3ef58c7f6216eedd837120fac820489e0c7cef904d2c007bfa5" name="apcupsd-cgi" arch="i586">
    <version epoch="0" ver="3.14.10" rel="6.8.1"/>

<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389268800">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1437307200">- Add patch apcupsd-3.14.10-nodbg.patch: reduce amount of debug
  messages (rh#1053324).</changelog>

</package>
<package pkgid="c71e9de6116671bac6757a3b30aa817cdc711dca84ee4db0d2ec655ac1bedba4" name="apcupsd-cgi" arch="x86_64">
    <version epoch="0" ver="3.14.10" rel="6.4.1"/>

<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389355200">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>

</package>
<package pkgid="bef9d9924434875c59178447967a92903ddd02db29770eed207e4ef29c41f730" name="apcupsd-cgi" arch="x86_64">
    <version epoch="0" ver="3.14.10" rel="6.8.1"/>

<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389268800">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1437307200">- Add patch apcupsd-3.14.10-nodbg.patch: reduce amount of debug
  messages (rh#1053324).</changelog>

</package>
<package pkgid="0fc7d1a3e25f02e411ff41aa641c12b20e3097eafb23eabf4dd11cd09e788889" name="apcupsd-gui" arch="i586">
    <version epoch="0" ver="3.14.10" rel="6.4.1"/>

<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389355200">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>

</package>
<package pkgid="a29a9bedd7910a049519bf17f81cf5a7155dff9af20e525bf31d87633bf85a01" name="apcupsd-gui" arch="i586">
    <version epoch="0" ver="3.14.10" rel="6.8.1"/>

<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389268800">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1437307200">- Add patch apcupsd-3.14.10-nodbg.patch: reduce amount of debug
  messages (rh#1053324).</changelog>

</package>
<package pkgid="85e872c610e9e44b3d2155d95d1321c26c7c07c1db0fecc31ce173e07e54825a" name="apcupsd-gui" arch="x86_64">
    <version epoch="0" ver="3.14.10" rel="6.4.1"/>

<changelog author="coolo@novell.com" date="1270036800">- package requires sysvinit to build</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389355200">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>

</package>
<package pkgid="3af272669bab79f34ad033a4427ee91ca9a2bc42c0d38694741f9efc6a6b629b" name="apcupsd-gui" arch="x86_64">
    <version epoch="0" ver="3.14.10" rel="6.8.1"/>

<changelog author="cristian.rodriguez@opensuse.org" date="1280232000">- avoid leaking file descriptors (use CLOEXEC, patch from Fedora)</changelog>
<changelog author="vcizek@novell.com" date="1300968000">- fixed apcupsd-lite path in init script
  (reported later as bnc#703592)</changelog>
<changelog author="sbrabec@suse.cz" date="1309780800">- Updated to version 3.14.8:
  * Implement battery calibration and self-test interval in apctest
    for USB models.
  * Add support for turning the UPS off completely.
  * Updates of SNMP code.
  * Add support for reading battery voltage from the PowerSummary.
  * Switch time/date output format to simplified ISO.
  * Compilation warning fixes.
  * Other bug fixes and improvements.
  * Documentation improvements.
- Removed HAL support.</changelog>
<changelog author="sbrabec@suse.cz" date="1312286400">- Fixed init check to succeed with unmounted /usr (bnc#703592#c23).</changelog>
<changelog author="sbrabec@suse.cz" date="1314273600">- Implemented hibernate on power fail (bnc#703592#c39).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="mkubecek@suse.cz" date="1318852800">- apcupsd-3.14.8-exit-race.patch:
  When terminating apcupsd, cancel other threads before cleanup to
  avoid race condition and possible segfault (bnc#724487).
- Change build requirement from sysvinit to sysvinit-init for 12.1</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="sbrabec@suse.cz" date="1328011200">- Mark all files in /etc/apcupsd as config files. Their editing
  sometimes makes sense (bnc#744358).</changelog>
<changelog author="dvaleev@suse.com" date="1328702400">- fix ppc64 build</changelog>
<changelog author="aj@suse.de" date="1330603200">- Buildrequire xorg-x11-devel</changelog>
<changelog author="jengelh@inai.de" date="1338292800">- Adjust directory name to source config.guess/sub from
  to be a /little/ more future proof.</changelog>
<changelog author="p.drouand@gmail.com" date="1347624000">- Updated to version 3.14.10:
  * Fix missing status and spurrious incorrect status on newer BackUPS CS
    models using USB interface.
  * USB compatibility fixes for Mac OS X Lion
  * USB driver support for newer Microlink models on Mac OS X Lion and Windows
  * Ignore transitions to battery due to calibration (possible if user
    initiates calibration, then exits apctest and starts apcupsd before
    calibration completes.
  * Fix truncation of long UPS model names such as "Smart-UPS RT 5000 XL"
  * Fix MODEL vs. APCMODEL confusion. Remove APCMODEL and rename old MODEL
    aka 'mode' to DRIVER.
- Improve Systemd and logrotate support
- Remove apcupsd-lite support : difference between apcupsd-lite and
  apcupsd are minimal or cpu consumption don't justify his presence</changelog>
<changelog author="coolo@suse.com" date="1357905600">- fix build on factory - systemd moved to /usr</changelog>
<changelog author="aj@suse.de" date="1357905601">- Remove patch apcupsd-largebuf-overflow.patch, it's upstream now</changelog>
<changelog author="cfarrell@suse.com" date="1357905602">- license update: GPL-2.0</changelog>
<changelog author="dimstar@opensuse.org" date="1362916800">- Update apcupsd-3.14.8-systemd.patch: apcupsd lives in /usr/sbin,
  not in /sbin (bnc#801312).</changelog>
<changelog author="p.drouand@gmail.com" date="1389268800">- Add %fillup_prereq PreReq tag and %{fillup_only} in %post to
  correctly fillup sysconfig file; fix bnc#837337</changelog>
<changelog author="sbrabec@suse.cz" date="1392206400">- Do not call powersave-notify (regression bnc#856907).</changelog>
<changelog author="matwey.kornilov@gmail.com" date="1437307200">- Add patch apcupsd-3.14.10-nodbg.patch: reduce amount of debug
  messages (rh#1053324).</changelog>

</package>
<package pkgid="f09a4e3d361d8faff854c977383dc3428e07991d9038ee41e5a3e9b8a42d6dd7" name="apparmor" arch="src">
    <version epoch="0" ver="2.8.2" rel="4.13.1"/>

<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>
<changelog author="opensuse@cboltz.de" date="1384430400">- add apparmor-profiles-ntpd-r2103.diff with updated driftfile
  location for ntpd (bnc#850374)</changelog>
<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>

</package>
<package pkgid="2f040b6d4d05192b2e82965d99c7ee5bd39cf5001667e79161a897689e7291e0" name="apparmor" arch="src">
    <version epoch="0" ver="2.8.2" rel="4.8.1"/>

<changelog author="opensuse@cboltz.de" date="1358078400">- update abstractions/mysql with correct paths and add MariaDB paths
  (bnc#798183)</changelog>
<changelog author="jengelh@inai.de" date="1361102400">- Add missing files to SRPM (bnc#777471)</changelog>
<changelog author="opensuse@cboltz.de" date="1362484800">- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104, apparmor-profiles-nscd.diff)</changelog>
<changelog author="opensuse@cboltz.de" date="1364904000">- add Requires: insserv to parser package (needed by initscript)</changelog>
<changelog author="opensuse@cboltz.de" date="1366718400">- enable python and ruby subpackages (using %bcond_without)
- update/fix paths in %files for python and ruby subpackages</changelog>
<changelog author="coolo@suse.com" date="1368446400">- do not package directories as %config - especially not as noreplace</changelog>
<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>

</package>
<package pkgid="9543552a067857f1bc498388529f2515e74225a1a13b5b04ed023c1f31dea634" name="apparmor" arch="src">
    <version epoch="0" ver="2.8.4" rel="4.17.1"/>

<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>

</package>
<package pkgid="0e0bbc47f0ca0475455149b9860a7e46d54641555bce5a1afc0c6de5e7b4913a" name="apparmor" arch="src">
    <version epoch="0" ver="2.8.4" rel="4.20.1"/>

<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>
<changelog author="suse-beta@cboltz.de" date="1460721600">- add apparmor_2_8_bzr_changes_2148_2153.diff with upstream changes
  since the 2.8.4 release:
  - backport various profile updates from the 2.9 branch r3004 (hand-picked):
    profile updates:
  - sbin.syslog-ng
  - usr.sbin.identd
  - usr.sbin.nscd (allows nscd paranoia mode)
  - usr.sbin.smbd
  - usr.sbin.smbldap-useradd
  - apache2.d/phpsysinfo
    updated abstractions:
  - aspell
  - base
  - cups-client
  - fonts
  - freedesktop.org
  - nameservice
  - p11-kit
  - php5
  - samba (including the changes needed for Samba 4.2.x)
  - ssl_certs
  - ssl_keys
  - ubuntu-browsers.d/java
  - ubuntu-browsers.d/multimedia
  - ubuntu-browsers.d/plugins-common
  - ubuntu-browsers.d/ubuntu-integration
  - ubuntu-email
  - ubuntu-helpers
  - user-mail
  - X
    Note: there's no detailed changelog available because this was done as
    mass-backport. If you are interested in details, check the upstream
    2.9.x changelog on apparmor.net.
  - add support for more log formats (lp#1399027, debian#771400,
    boo#905368)</changelog>

</package>
<package pkgid="83523e6889ec2d5e6fa30ed11f73b141a019401cfbff16cea607a0ac102c420a" name="apparmor-docs" arch="noarch">
    <version epoch="0" ver="2.8.2" rel="4.13.1"/>

<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>
<changelog author="opensuse@cboltz.de" date="1384430400">- add apparmor-profiles-ntpd-r2103.diff with updated driftfile
  location for ntpd (bnc#850374)</changelog>
<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>

</package>
<package pkgid="8a98ed4d6c5e3e60c3ee6c014f254d9c62db9acfb4d3d9b7917ef37639715727" name="apparmor-docs" arch="noarch">
    <version epoch="0" ver="2.8.2" rel="4.8.1"/>

<changelog author="opensuse@cboltz.de" date="1358078400">- update abstractions/mysql with correct paths and add MariaDB paths
  (bnc#798183)</changelog>
<changelog author="jengelh@inai.de" date="1361102400">- Add missing files to SRPM (bnc#777471)</changelog>
<changelog author="opensuse@cboltz.de" date="1362484800">- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104, apparmor-profiles-nscd.diff)</changelog>
<changelog author="opensuse@cboltz.de" date="1364904000">- add Requires: insserv to parser package (needed by initscript)</changelog>
<changelog author="opensuse@cboltz.de" date="1366718400">- enable python and ruby subpackages (using %bcond_without)
- update/fix paths in %files for python and ruby subpackages</changelog>
<changelog author="coolo@suse.com" date="1368446400">- do not package directories as %config - especially not as noreplace</changelog>
<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>

</package>
<package pkgid="0c3508e20859487bac9daf93268f6387e31eb3532df5b8f733e13be5a2b6dddf" name="apparmor-docs" arch="noarch">
    <version epoch="0" ver="2.8.4" rel="4.17.1"/>

<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>

</package>
<package pkgid="3d00d8f045cd076bf71dc195b217164428c116d435962227b47e3dd4404ada68" name="apparmor-docs" arch="noarch">
    <version epoch="0" ver="2.8.4" rel="4.20.1"/>

<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>
<changelog author="suse-beta@cboltz.de" date="1460721600">- add apparmor_2_8_bzr_changes_2148_2153.diff with upstream changes
  since the 2.8.4 release:
  - backport various profile updates from the 2.9 branch r3004 (hand-picked):
    profile updates:
  - sbin.syslog-ng
  - usr.sbin.identd
  - usr.sbin.nscd (allows nscd paranoia mode)
  - usr.sbin.smbd
  - usr.sbin.smbldap-useradd
  - apache2.d/phpsysinfo
    updated abstractions:
  - aspell
  - base
  - cups-client
  - fonts
  - freedesktop.org
  - nameservice
  - p11-kit
  - php5
  - samba (including the changes needed for Samba 4.2.x)
  - ssl_certs
  - ssl_keys
  - ubuntu-browsers.d/java
  - ubuntu-browsers.d/multimedia
  - ubuntu-browsers.d/plugins-common
  - ubuntu-browsers.d/ubuntu-integration
  - ubuntu-email
  - ubuntu-helpers
  - user-mail
  - X
    Note: there's no detailed changelog available because this was done as
    mass-backport. If you are interested in details, check the upstream
    2.9.x changelog on apparmor.net.
  - add support for more log formats (lp#1399027, debian#771400,
    boo#905368)</changelog>

</package>
<package pkgid="49037e3fdae3327632d4e5fdc7e6762eb025dd63ed9cc0ac5d04321bff367a27" name="apparmor-parser" arch="i586">
    <version epoch="0" ver="2.8.2" rel="4.13.1"/>

<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>
<changelog author="opensuse@cboltz.de" date="1384430400">- add apparmor-profiles-ntpd-r2103.diff with updated driftfile
  location for ntpd (bnc#850374)</changelog>
<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>

</package>
<package pkgid="87b98e6d1858c15e024bf388c680b948e9ebab61cf4202cf5ff7554a9330fdbb" name="apparmor-parser" arch="i586">
    <version epoch="0" ver="2.8.2" rel="4.8.1"/>

<changelog author="opensuse@cboltz.de" date="1358078400">- update abstractions/mysql with correct paths and add MariaDB paths
  (bnc#798183)</changelog>
<changelog author="jengelh@inai.de" date="1361102400">- Add missing files to SRPM (bnc#777471)</changelog>
<changelog author="opensuse@cboltz.de" date="1362484800">- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104, apparmor-profiles-nscd.diff)</changelog>
<changelog author="opensuse@cboltz.de" date="1364904000">- add Requires: insserv to parser package (needed by initscript)</changelog>
<changelog author="opensuse@cboltz.de" date="1366718400">- enable python and ruby subpackages (using %bcond_without)
- update/fix paths in %files for python and ruby subpackages</changelog>
<changelog author="coolo@suse.com" date="1368446400">- do not package directories as %config - especially not as noreplace</changelog>
<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>

</package>
<package pkgid="ffe983caef2e6d76a5b54bb1e2d49e3ce6d895cabb183d2ad600ebc3a97464f6" name="apparmor-parser" arch="i586">
    <version epoch="0" ver="2.8.4" rel="4.17.1"/>

<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>

</package>
<package pkgid="b7626366fccf79d60521cc85c8fe556c195af3a76d297d5674dcda71e8742fe1" name="apparmor-parser" arch="i586">
    <version epoch="0" ver="2.8.4" rel="4.20.1"/>

<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>
<changelog author="suse-beta@cboltz.de" date="1460721600">- add apparmor_2_8_bzr_changes_2148_2153.diff with upstream changes
  since the 2.8.4 release:
  - backport various profile updates from the 2.9 branch r3004 (hand-picked):
    profile updates:
  - sbin.syslog-ng
  - usr.sbin.identd
  - usr.sbin.nscd (allows nscd paranoia mode)
  - usr.sbin.smbd
  - usr.sbin.smbldap-useradd
  - apache2.d/phpsysinfo
    updated abstractions:
  - aspell
  - base
  - cups-client
  - fonts
  - freedesktop.org
  - nameservice
  - p11-kit
  - php5
  - samba (including the changes needed for Samba 4.2.x)
  - ssl_certs
  - ssl_keys
  - ubuntu-browsers.d/java
  - ubuntu-browsers.d/multimedia
  - ubuntu-browsers.d/plugins-common
  - ubuntu-browsers.d/ubuntu-integration
  - ubuntu-email
  - ubuntu-helpers
  - user-mail
  - X
    Note: there's no detailed changelog available because this was done as
    mass-backport. If you are interested in details, check the upstream
    2.9.x changelog on apparmor.net.
  - add support for more log formats (lp#1399027, debian#771400,
    boo#905368)</changelog>

</package>
<package pkgid="57493deeab4635860676678bd970bd7c6f9168e2207f9abcb9d56a79f4ac7cd6" name="apparmor-parser" arch="x86_64">
    <version epoch="0" ver="2.8.2" rel="4.13.1"/>

<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>
<changelog author="opensuse@cboltz.de" date="1384430400">- add apparmor-profiles-ntpd-r2103.diff with updated driftfile
  location for ntpd (bnc#850374)</changelog>
<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>

</package>
<package pkgid="77814232fb4275f4811fa52c8d6b2bed074d21ba38641db29bad1d296225a621" name="apparmor-parser" arch="x86_64">
    <version epoch="0" ver="2.8.2" rel="4.8.1"/>

<changelog author="opensuse@cboltz.de" date="1358078400">- update abstractions/mysql with correct paths and add MariaDB paths
  (bnc#798183)</changelog>
<changelog author="jengelh@inai.de" date="1361102400">- Add missing files to SRPM (bnc#777471)</changelog>
<changelog author="opensuse@cboltz.de" date="1362484800">- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104, apparmor-profiles-nscd.diff)</changelog>
<changelog author="opensuse@cboltz.de" date="1364904000">- add Requires: insserv to parser package (needed by initscript)</changelog>
<changelog author="opensuse@cboltz.de" date="1366718400">- enable python and ruby subpackages (using %bcond_without)
- update/fix paths in %files for python and ruby subpackages</changelog>
<changelog author="coolo@suse.com" date="1368446400">- do not package directories as %config - especially not as noreplace</changelog>
<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>

</package>
<package pkgid="f331237cefcccba06a531b5f6c7bd557980a66dce7455b2f734e955a1df68cd7" name="apparmor-parser" arch="x86_64">
    <version epoch="0" ver="2.8.4" rel="4.17.1"/>

<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>

</package>
<package pkgid="ea7c0f33be2ef1eefc904f08e18a765132810ee27f850478e41b7da4a63efb61" name="apparmor-parser" arch="x86_64">
    <version epoch="0" ver="2.8.4" rel="4.20.1"/>

<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>
<changelog author="suse-beta@cboltz.de" date="1460721600">- add apparmor_2_8_bzr_changes_2148_2153.diff with upstream changes
  since the 2.8.4 release:
  - backport various profile updates from the 2.9 branch r3004 (hand-picked):
    profile updates:
  - sbin.syslog-ng
  - usr.sbin.identd
  - usr.sbin.nscd (allows nscd paranoia mode)
  - usr.sbin.smbd
  - usr.sbin.smbldap-useradd
  - apache2.d/phpsysinfo
    updated abstractions:
  - aspell
  - base
  - cups-client
  - fonts
  - freedesktop.org
  - nameservice
  - p11-kit
  - php5
  - samba (including the changes needed for Samba 4.2.x)
  - ssl_certs
  - ssl_keys
  - ubuntu-browsers.d/java
  - ubuntu-browsers.d/multimedia
  - ubuntu-browsers.d/plugins-common
  - ubuntu-browsers.d/ubuntu-integration
  - ubuntu-email
  - ubuntu-helpers
  - user-mail
  - X
    Note: there's no detailed changelog available because this was done as
    mass-backport. If you are interested in details, check the upstream
    2.9.x changelog on apparmor.net.
  - add support for more log formats (lp#1399027, debian#771400,
    boo#905368)</changelog>

</package>
<package pkgid="0e8e8aa3a042f7c75a24726fed913f0547a656fb7cc63b223fafe89697ba5d85" name="apparmor-parser-lang" arch="noarch">
    <version epoch="0" ver="2.8.2" rel="4.13.1"/>

<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>
<changelog author="opensuse@cboltz.de" date="1384430400">- add apparmor-profiles-ntpd-r2103.diff with updated driftfile
  location for ntpd (bnc#850374)</changelog>
<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>

</package>
<package pkgid="a55cc0997b027ee8c5cf5c316277f71906ca04e660d95b805c79a3a6fdbf60e8" name="apparmor-parser-lang" arch="noarch">
    <version epoch="0" ver="2.8.2" rel="4.8.1"/>

<changelog author="opensuse@cboltz.de" date="1358078400">- update abstractions/mysql with correct paths and add MariaDB paths
  (bnc#798183)</changelog>
<changelog author="jengelh@inai.de" date="1361102400">- Add missing files to SRPM (bnc#777471)</changelog>
<changelog author="opensuse@cboltz.de" date="1362484800">- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104, apparmor-profiles-nscd.diff)</changelog>
<changelog author="opensuse@cboltz.de" date="1364904000">- add Requires: insserv to parser package (needed by initscript)</changelog>
<changelog author="opensuse@cboltz.de" date="1366718400">- enable python and ruby subpackages (using %bcond_without)
- update/fix paths in %files for python and ruby subpackages</changelog>
<changelog author="coolo@suse.com" date="1368446400">- do not package directories as %config - especially not as noreplace</changelog>
<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>

</package>
<package pkgid="82b0282704908f89de7893cce6be3af3259e431a5e26678916952260164c64ef" name="apparmor-parser-lang" arch="noarch">
    <version epoch="0" ver="2.8.4" rel="4.17.1"/>

<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>

</package>
<package pkgid="adcc8e34cd891f86154b99c2b6e3c2520a5bc037628fe6601d0caad15e42c0c7" name="apparmor-parser-lang" arch="noarch">
    <version epoch="0" ver="2.8.4" rel="4.20.1"/>

<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>
<changelog author="suse-beta@cboltz.de" date="1460721600">- add apparmor_2_8_bzr_changes_2148_2153.diff with upstream changes
  since the 2.8.4 release:
  - backport various profile updates from the 2.9 branch r3004 (hand-picked):
    profile updates:
  - sbin.syslog-ng
  - usr.sbin.identd
  - usr.sbin.nscd (allows nscd paranoia mode)
  - usr.sbin.smbd
  - usr.sbin.smbldap-useradd
  - apache2.d/phpsysinfo
    updated abstractions:
  - aspell
  - base
  - cups-client
  - fonts
  - freedesktop.org
  - nameservice
  - p11-kit
  - php5
  - samba (including the changes needed for Samba 4.2.x)
  - ssl_certs
  - ssl_keys
  - ubuntu-browsers.d/java
  - ubuntu-browsers.d/multimedia
  - ubuntu-browsers.d/plugins-common
  - ubuntu-browsers.d/ubuntu-integration
  - ubuntu-email
  - ubuntu-helpers
  - user-mail
  - X
    Note: there's no detailed changelog available because this was done as
    mass-backport. If you are interested in details, check the upstream
    2.9.x changelog on apparmor.net.
  - add support for more log formats (lp#1399027, debian#771400,
    boo#905368)</changelog>

</package>
<package pkgid="9788fb310446f15f226cb1821145fca2a92a1015e277381f32edbc4e83c5d491" name="apparmor-profiles" arch="noarch">
    <version epoch="0" ver="2.8.2" rel="4.13.1"/>

<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>
<changelog author="opensuse@cboltz.de" date="1384430400">- add apparmor-profiles-ntpd-r2103.diff with updated driftfile
  location for ntpd (bnc#850374)</changelog>
<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>

</package>
<package pkgid="a8b59cf1602104651706aa1760e54321d50ad3a4e7c3e09e1843d4045898baed" name="apparmor-profiles" arch="noarch">
    <version epoch="0" ver="2.8.2" rel="4.8.1"/>

<changelog author="opensuse@cboltz.de" date="1358078400">- update abstractions/mysql with correct paths and add MariaDB paths
  (bnc#798183)</changelog>
<changelog author="jengelh@inai.de" date="1361102400">- Add missing files to SRPM (bnc#777471)</changelog>
<changelog author="opensuse@cboltz.de" date="1362484800">- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104, apparmor-profiles-nscd.diff)</changelog>
<changelog author="opensuse@cboltz.de" date="1364904000">- add Requires: insserv to parser package (needed by initscript)</changelog>
<changelog author="opensuse@cboltz.de" date="1366718400">- enable python and ruby subpackages (using %bcond_without)
- update/fix paths in %files for python and ruby subpackages</changelog>
<changelog author="coolo@suse.com" date="1368446400">- do not package directories as %config - especially not as noreplace</changelog>
<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>

</package>
<package pkgid="4f7208dd153e01c3e3af4229768409382186546d45dee03ef4d4bf2f3cd0707d" name="apparmor-profiles" arch="noarch">
    <version epoch="0" ver="2.8.4" rel="4.17.1"/>

<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>

</package>
<package pkgid="dacc0849e2d28f6f40532d151d728ded6b5a70dfc63e742fbf94470a073f0b4d" name="apparmor-profiles" arch="noarch">
    <version epoch="0" ver="2.8.4" rel="4.20.1"/>

<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>
<changelog author="suse-beta@cboltz.de" date="1460721600">- add apparmor_2_8_bzr_changes_2148_2153.diff with upstream changes
  since the 2.8.4 release:
  - backport various profile updates from the 2.9 branch r3004 (hand-picked):
    profile updates:
  - sbin.syslog-ng
  - usr.sbin.identd
  - usr.sbin.nscd (allows nscd paranoia mode)
  - usr.sbin.smbd
  - usr.sbin.smbldap-useradd
  - apache2.d/phpsysinfo
    updated abstractions:
  - aspell
  - base
  - cups-client
  - fonts
  - freedesktop.org
  - nameservice
  - p11-kit
  - php5
  - samba (including the changes needed for Samba 4.2.x)
  - ssl_certs
  - ssl_keys
  - ubuntu-browsers.d/java
  - ubuntu-browsers.d/multimedia
  - ubuntu-browsers.d/plugins-common
  - ubuntu-browsers.d/ubuntu-integration
  - ubuntu-email
  - ubuntu-helpers
  - user-mail
  - X
    Note: there's no detailed changelog available because this was done as
    mass-backport. If you are interested in details, check the upstream
    2.9.x changelog on apparmor.net.
  - add support for more log formats (lp#1399027, debian#771400,
    boo#905368)</changelog>

</package>
<package pkgid="8db34e17106e9644d488c1bc280cb20e23b94bd25c4d3b00fe9efb91c29e5b04" name="apparmor-utils" arch="noarch">
    <version epoch="0" ver="2.8.2" rel="4.13.1"/>

<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>
<changelog author="opensuse@cboltz.de" date="1384430400">- add apparmor-profiles-ntpd-r2103.diff with updated driftfile
  location for ntpd (bnc#850374)</changelog>
<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>

</package>
<package pkgid="f876d42c68285c4d2f86d54e08ebbda22af986e7640a3b175d33612fbfec2aea" name="apparmor-utils" arch="noarch">
    <version epoch="0" ver="2.8.2" rel="4.8.1"/>

<changelog author="opensuse@cboltz.de" date="1358078400">- update abstractions/mysql with correct paths and add MariaDB paths
  (bnc#798183)</changelog>
<changelog author="jengelh@inai.de" date="1361102400">- Add missing files to SRPM (bnc#777471)</changelog>
<changelog author="opensuse@cboltz.de" date="1362484800">- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104, apparmor-profiles-nscd.diff)</changelog>
<changelog author="opensuse@cboltz.de" date="1364904000">- add Requires: insserv to parser package (needed by initscript)</changelog>
<changelog author="opensuse@cboltz.de" date="1366718400">- enable python and ruby subpackages (using %bcond_without)
- update/fix paths in %files for python and ruby subpackages</changelog>
<changelog author="coolo@suse.com" date="1368446400">- do not package directories as %config - especially not as noreplace</changelog>
<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>

</package>
<package pkgid="ca10f39d7c16207963fff90ed788f2f47a469e73cff3fe4af834da97f4ec0a62" name="apparmor-utils" arch="noarch">
    <version epoch="0" ver="2.8.4" rel="4.17.1"/>

<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>

</package>
<package pkgid="389185ea800212ffc90c534fbd531bc61f880dd2d443435571e0548301f82016" name="apparmor-utils" arch="noarch">
    <version epoch="0" ver="2.8.4" rel="4.20.1"/>

<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>
<changelog author="suse-beta@cboltz.de" date="1460721600">- add apparmor_2_8_bzr_changes_2148_2153.diff with upstream changes
  since the 2.8.4 release:
  - backport various profile updates from the 2.9 branch r3004 (hand-picked):
    profile updates:
  - sbin.syslog-ng
  - usr.sbin.identd
  - usr.sbin.nscd (allows nscd paranoia mode)
  - usr.sbin.smbd
  - usr.sbin.smbldap-useradd
  - apache2.d/phpsysinfo
    updated abstractions:
  - aspell
  - base
  - cups-client
  - fonts
  - freedesktop.org
  - nameservice
  - p11-kit
  - php5
  - samba (including the changes needed for Samba 4.2.x)
  - ssl_certs
  - ssl_keys
  - ubuntu-browsers.d/java
  - ubuntu-browsers.d/multimedia
  - ubuntu-browsers.d/plugins-common
  - ubuntu-browsers.d/ubuntu-integration
  - ubuntu-email
  - ubuntu-helpers
  - user-mail
  - X
    Note: there's no detailed changelog available because this was done as
    mass-backport. If you are interested in details, check the upstream
    2.9.x changelog on apparmor.net.
  - add support for more log formats (lp#1399027, debian#771400,
    boo#905368)</changelog>

</package>
<package pkgid="3cb11710bb01eaa50d6856f571efe984bf11ffd6137eec1f50666c6285cb53d9" name="apparmor-utils-lang" arch="noarch">
    <version epoch="0" ver="2.8.2" rel="4.13.1"/>

<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>
<changelog author="opensuse@cboltz.de" date="1384430400">- add apparmor-profiles-ntpd-r2103.diff with updated driftfile
  location for ntpd (bnc#850374)</changelog>
<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>

</package>
<package pkgid="02d9e646a9b74dab454a9c2beef2978047faf6d5f8f7f971ecad07b12af3686c" name="apparmor-utils-lang" arch="noarch">
    <version epoch="0" ver="2.8.2" rel="4.8.1"/>

<changelog author="opensuse@cboltz.de" date="1358078400">- update abstractions/mysql with correct paths and add MariaDB paths
  (bnc#798183)</changelog>
<changelog author="jengelh@inai.de" date="1361102400">- Add missing files to SRPM (bnc#777471)</changelog>
<changelog author="opensuse@cboltz.de" date="1362484800">- nscd profile: add missing permissions and deny capability block_suspend
  (bnc#807104, apparmor-profiles-nscd.diff)</changelog>
<changelog author="opensuse@cboltz.de" date="1364904000">- add Requires: insserv to parser package (needed by initscript)</changelog>
<changelog author="opensuse@cboltz.de" date="1366718400">- enable python and ruby subpackages (using %bcond_without)
- update/fix paths in %files for python and ruby subpackages</changelog>
<changelog author="coolo@suse.com" date="1368446400">- do not package directories as %config - especially not as noreplace</changelog>
<changelog author="kkaempf@suse.com" date="1370347200">- Ruby 2.0 mkmf gets the path to ruby.h wrong (bnc#822277)</changelog>
<changelog author="opensuse@cboltz.de" date="1376568000">- add python3-apparmor subpackage (currently py2 OR py3 package can be
  build, but not both at the same time)
- add upstream apparmor-python3-r2052.diff to fix various python3 issues</changelog>
<changelog author="opensuse@cboltz.de" date="1376568001">- swig for python3 is broken on openSUSE 12.2 - build python-apparmor
  (for python2) instead on 12.2</changelog>
<changelog author="opensuse@cboltz.de" date="1376654400">- update to AppArmor 2.8.2
  - several fixes for python3 compability
  - various profile improvements:
  - various additions to abstractions/fonts
  - move poppler's cMaps from gnome to fonts; gnome includes fonts
  - deny @{HOME}/.gnome2/keyrings/** to abstractions/private-files-strict
  - add read access to @{PROC}/sys/vm/overcommit_memory to abstractions/base
    (bnc#824577)
  - update pulseaudio directory and cookie file paths
  - add missing permissions to the nscd profile (bnc#807104)
  - deny capability block_suspend to nscd (bnc#807104)
  - MariaDB compatability in abstractions/mysql (bnc#798183)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_2 for all details
- removed upstream(ed) patches
  - apparmor-abstractions-mysql-path.diff
  - apparmor-profiles-nscd.diff
  - apparmor-python3-r2052.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1377259200">- add apparmor-no-perl-smartmatch-r2088.diff: ~~ was marked as experimental
  in perl 5.18 again - use grep instead (upstream 2.8 branch r2088)
- fix ruby requires</changelog>
<changelog author="opensuse@cboltz.de" date="1378987200">- add apparmor-abstractions-r2089-r2090.diff (from upstream 2.8 branch)
  - p11-kit needs access to /usr/share/p11-kit/modules
  - allow reading /etc/machine-id in the dbus-session abstraction
- add apparmor-init.py-gsoc.diff - make apparmor/__init__.py ready for
  the new tools developed in GSoC</changelog>
<changelog author="opensuse@cboltz.de" date="1379073600">- add apparmor-utils-po-de-r2091.diff: fix some (mis)translations</changelog>
<changelog author="seife+obs@b1-systems.com" date="1379332800">- fix ntp by allowing read access to openssl.cnf</changelog>
<changelog author="opensuse@cboltz.de" date="1379678400">- add apparmor-fix-url-in-manpages-r2093.diff: fix URL in manpages
- add apparmor-unconfined-lang-r2094.diff: fix aa-unconfined to work
  in all languages</changelog>
<changelog author="opensuse@cboltz.de" date="1380456000">- update apparmor-init.py-gsoc.diff to the final GSoC apparmor/__init__.py</changelog>
<changelog author="opensuse@cboltz.de" date="1381838400">- add apparmor-profiles-samba4.diff - various profile additions for
  samba 4.x (bnc#845867, bnc#846054)
- update usr.sbin.winbindd for samba 4.x (bnc#845867, bnc#846054)</changelog>
<changelog author="opensuse@cboltz.de" date="1382270400">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x (bnc#846054#c5)</changelog>
<changelog author="opensuse@cboltz.de" date="1383134400">- add apparmor-profiles-dnsmasq.diff - add missing permissions for
  libvirt-generated files to dnsmasq profile (bnc#848215)</changelog>
<changelog author="opensuse@cboltz.de" date="1383393600">- apparmor-profiles-samba4.diff, usr.sbin.winbindd: some more profile
  updates for samba 4.x and kerberos (bnc#846586#c12 and #c15)</changelog>

</package>
<package pkgid="466d8a6b1c0b441f1614762ef83c843ce5c08a205c5ef55c16914477846ac036" name="apparmor-utils-lang" arch="noarch">
    <version epoch="0" ver="2.8.4" rel="4.17.1"/>

<changelog author="opensuse@cboltz.de" date="1385380800">- add apparmor-abstractions-ssl_certs.diff to allow access to
  certificates in /var/lib/ca-certificates/ (bnc#852018)</changelog>
<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>

</package>
<package pkgid="baa8bcf0f3d5462f006b77c865a391343f94d85c1f5747596a4fa11d93f364f9" name="apparmor-utils-lang" arch="noarch">
    <version epoch="0" ver="2.8.4" rel="4.20.1"/>

<changelog author="opensuse@cboltz.de" date="1388836800">- add apparmor-profiles-samba-create-dirs.diff to allow samba to
  mkdir /var/run/samba and /var/cache/samba (bnc#856651)
- add abstractions/samba to usr.sbin.winbindd profile
- add capabilities ipc_lock and setuid to usr.sbin.winbindd profile (bnc#851131)
- update dovecot profiles to support dovecot 2.x, and add profiles for
  the parts of dovecot that were not covered yet (bnc#851984)
  NOTE: Please adjust /etc/apparmor.d/tunables/dovecot to your needs.
  (apparmor-profiles-dovecot-bnc851984.diff, usr.lib.dovecot.*)
- %restart_on_update (in parser %postun) is "translated" to stop/start by
  the systemd wrapper, which removes AppArmor protection from running
  processes. Fixed by using a custom script instead (bnc#853019)
  NOTE: The %postun from the previously installed apparmor-parser package
  will remove AppArmor protection from running processes a last time.
  Run aa-status to get a list of processes you need to restart, or reboot
  your computer.
- reload profiles in %post of the apparmor-profiles package</changelog>
<changelog author="develop7@develop7.info" date="1389960000">- add apparmor-2.8.2-nm-dnsmasq-config.patch - allow dnsmasq read config
  created by recent NetworkManager (see
  http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=d82669d3fdaa7ec70ef1b64941c101ac810c394b
  for update details)</changelog>
<changelog author="opensuse@cboltz.de" date="1390132800">- add Recommends: net-tools to apparmor-utils (needed by aa-unconfined)
- update usr.lib.dovecot.lmtp (add /proc/*/mounts, /tmp/dovecot.lmtp.*,
  /{var/,}run/dovecot/mounts, deny capability block_suspend)</changelog>
<changelog author="opensuse@cboltz.de" date="1390737600">- update apparmor-2.8.2-nm-dnsmasq-config.patch - allow access to pid file
  and supplemental config directory (by develop7)
- update apparmor-profiles-dovecot-bnc851984.diff:
  - do not add access to @{DOVECOT_MAILSTORE} - not required by the main binary
  - add abstractions/mysql
  - allow execution of some more /usr/lib/dovecot/* binaries
  - better restrict access to /var/spool/postfix/private/
- update usr.lib.dovecot.auth to allow to read mysql config files
- update usr.lib.dovecot.dict and usr.lib.dovecot.lmtp:
  add abstractions/nameservice instead of allowing more and more files</changelog>
<changelog author="coolo@suse.com" date="1391256000">- use current ruby macros, the rb_sitearch is obsolete since at least
  12.1</changelog>
<changelog author="opensuse@cboltz.de" date="1392638400">- update to AppArmor 2.8.3 (r2122) bugfix release
  - fix some cache clearing bugs in apparmor_parser
  - various fixes in mod_apparmor
  - several profile updates, most of them were already included as patches
    (except abstractions/winbind (bnc#863226), abstractions/fonts and
    abstractions/p11-kit)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_3 for all details
- update partially upstreamed apparmor-2.8.2-nm-dnsmasq-config.patch
- remove upstream(ed) patches
  - apparmor-2.8.2-fix-ntpd-profile.diff
  - apparmor-abstractions-r2089-r2090.diff
  - apparmor-abstractions-ssl_certs.diff
  - apparmor-fix-url-in-manpages-r2093.diff
  - apparmor-no-perl-smartmatch-r2088.diff
  - apparmor-profiles-dnsmasq.diff
  - apparmor-profiles-ntpd-r2103.diff
  - apparmor-profiles-samba-create-dirs.diff
  - apparmor-profiles-samba4.diff
  - apparmor-unconfined-lang-r2094.diff
  - apparmor-utils-po-de-r2091.diff</changelog>
<changelog author="opensuse@cboltz.de" date="1395316800">- add Recommends: libnotify-tools to apparmor-utils (aa-notify -p
  needs notify-send)</changelog>
<changelog author="lmuelle@suse.com" date="1396008000">- update usr.sbin.winbindd profile (bnc#870607)
  - treat passdb.tdb.tmp as passdb.tdb
  - allow rw access to /var/tmp/</changelog>
<changelog author="lmuelle@suse.com" date="1396353600">- update usr.sbin.winbindd profile (bnc#870607)
  - restrict rw access to /var/cache/krb5rcache/ instead /var/tmp/</changelog>
<changelog author="chris@computersalat.de" date="1403870400">- add #include &lt;abstractions/wutmp&gt; to usr.lib.dovecot.auth</changelog>
<changelog author="chris@computersalat.de" date="1404302400">- fix problems with dovecot and managesieve
  * usr.lib.dovecot.managesieve-login: network inet6 stream
  * usr.lib.dovecot.managesieve:
    +#include &lt;tunables/dovecot&gt;
    /usr/lib/dovecot/managesieve {
    [#]include &lt;abstractions/base&gt;
    +  capability setgid,
    +  capability setuid,
    +  network inet stream,
    +  network inet6 stream,
    +  @{DOVECOT_MAILSTORE}/ rw,
    +  @{DOVECOT_MAILSTORE}/** rwkl,</changelog>
<changelog author="ddiss@suse.com" date="1404388800">- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)</changelog>
<changelog author="jeffm@suse.com" date="1406721600">- add perl-apparmor-fix-bare-network-keyword-handling.diff:
  perl-apparmor: Fix handling of network (or network all) (bnc#889650)
- add perl-apparmor-handle-bare-capability-keyword.diff:
  perl-apparmor: Fix handling of capability keyword (bnc#889651)
- add perl-apparmor-properly-handle-bare-file-keyword.diff:
  perl-apparmor: Properly handle bare file keyword (bnc#889652)</changelog>
<changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
<changelog author="opensuse@cboltz.de" date="1407758400">- usr.lib.dovecot.auth: add '/etc/dovecot/* r' to allow reading
  plaintext password files (bnc#874094)</changelog>
<changelog author="jfehlig@suse.com" date="1409832000">- add apparmor-profiles-dnsmasq-iface-mtu.patch to allow dnsmasq
  read access to interface mtu in
  /proc/sys/net/ipv6/conf/&lt;ifacename&gt;/mtu
  (bnc#892374)</changelog>
<changelog author="opensuse@cboltz.de" date="1411646400">- apparmor-profiles-dovecot-bnc851984.diff: deny capability block_suspend
  for /usr/lib/dovecot/imap
- usr.lib.dovecot.auth: allow /var/run/dovecot/auth-token-secret.dat{,.tmp}</changelog>
<changelog author="opensuse@cboltz.de" date="1413115200">- update to AppArmor 2.8.4 (bzr 2.8 branch r2148)
  - mod_apparmor: try uri hat after AADefaultHatName, not before. Fixes
    the regression in 2.8.3 (lp#1322778)
  - libapparmor: fix log parsing memory leaks (lp#1340927)
  - parser: Fix profile loads from cache files that contain multiple profiles
  - several profiles and abstractions/* updates (including bnc#857122#c2,
    bnc#899746, bnc#869787, bnc#886225)
  - see http://wiki.apparmor.net/index.php/ReleaseNotes_2_8_4 for details
- remove upstream(ed) patches:
  - mod_apparmor-regression-fix.diff
  - apparmor-2.8.2-nm-dnsmasq-config.patch
  - perl-apparmor-fix-bare-network-keyword-handling.diff
  - perl-apparmor-handle-bare-capability-keyword.diff
  - perl-apparmor-properly-handle-bare-file-keyword.diff
  - apparmor-profiles-dnsmasq-iface-mtu.patch
- refresh apparmor-2.5.1-edirectory-profile patch
- add Provides: apparmor-abstractions to apparmor-profiles</changelog>
<changelog author="opensuse@cboltz.de" date="1416139200">- delete cache in apparmor-profiles %post (workaround for
  bnc#904620#c8 / lp#1392042)</changelog>
<changelog author="suse-beta@cboltz.de" date="1460721600">- add apparmor_2_8_bzr_changes_2148_2153.diff with upstream changes
  since the 2.8.4 release:
  - backport various profile updates from the 2.9 branch r3004 (hand-picked):
    profile updates:
  - sbin.syslog-ng
  - usr.sbin.identd
  - usr.sbin.nscd (allows nscd paranoia mode)
  - usr.sbin.smbd
  - usr.sbin.smbldap-useradd
  - apache2.d/phpsysinfo
    updated abstractions:
  - aspell
  - base
  - cups-client
  - fonts
  - freedesktop.org
  - nameservice
  - p11-kit
  - php5
  - samba (including the changes needed for Samba 4.2.x)
  - ssl_certs
  - ssl_keys
  - ubuntu-browsers.d/java
  - ubuntu-browsers.d/multimedia
  - ubuntu-browsers.d/plugins-common
  - ubuntu-browsers.d/ubuntu-integration
  - ubuntu-email
  - ubuntu-helpers
  - user-mail
  - X
    Note: there's no detailed changelog available because this was done as
    mass-backport. If you are interested in details, check the upstream
    2.9.x changelog on apparmor.net.
  - add support for more log formats (lp#1399027, debian#771400,
    boo#905368)</changelog>

</package>
<package pkgid="a996eb49fe02c245b79169e754a3280593b91e1d6fda14fcf8bcea26e56eb6da" name="apper" arch="i586">
    <version epoch="0" ver="0.8.1" rel="11.7.1"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="coolo@suse.com" date="1358683200">- update to 0.8.0, http://dantti.wordpress.com/2013/01/08/happy-new-apper-release-0-8-0/
  * mainly adapted to threaded model of packagekit 0.8
  * allow to download updates only
  * added plasmoid</changelog>
<changelog author="coolo@suse.com" date="1358683201">- add several patches from git:
  0001-Fixed-bug-when-using-double-click-on-the-desktop-BUG.patch
  0002-Don-t-tell-apperd-to-watch-a-transaction-when-it-s-j.patch
  0003-Reduce-the-CPU-usage-by-not-setting-an-initial-state.patch
  0004-Adds-a-Help-menu-to-Apper-BUG-293440.patch
  0005-Fix-a-connection-caused-by-a-fix-for-BUG-302786.patch
  0006-Fixes-package-installation-of-files-in-non-latin-pat.patch
  0007-Make-hide-button-more-clear-BUG-263309.patch
  0008-Fix-about-application-icon.patch
  0009-Fix-About-Application-dialog-in-Apper-BUG-293440.patch
  0010-Feature-show-application-status-in-window-title-BUG-.patch
  0013-Get-rid-of-g_type_init.patch
  0014-Fix-browsing-groups.patch
  0015-Change-the-way-we-toggle-repos-so-that-we-can-report.patch
  0016-Show-how-much-download-is-left-and-use-QPointers-ins.patch
  0017-Fix-bug-that-after-a-refresh-cache-made-the-package-.patch
  0018-Add-a-feature-to-tell-the-user-to-refresh-his-cache-.patch
  0019-Connect-to-finished-signal-of-ApplicationLaunch-in-o.patch
  0020-Allow-PackageDetails-to-show-screenshots-from-softwa.patch</changelog>
<changelog author="coolo@suse.com" date="1358769600">- one more fix from git:
  0021-Update-the-last-refresh-cache-time-from-the-update-c.patch</changelog>
<changelog author="alinm.elena@gmail.com" date="1358769601">- added 10-opensuse-apper.js to make apper to be added and visible
  to the systray by default.</changelog>
<changelog author="coolo@suse.com" date="1358856000">- replace patch to desktop file with a call to suse_update_desktop,
  which also cares about erasing wrong translations</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358856001">- Adjusted license based on bnc#719888</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359115200">- Recommend the language package.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361275200">- Added 0022-just-return-after-EULA-acceptance.patch to resolve
  strange situation after accepting EULA (bnc#801703, bko#314256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361361600">- add 0023-fix-annoying-notifications-over-and-over.patch to make
  sure we don't keep showing the same error over and over again..
  (bnc#802562)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363521600">- Install plasmoid by default on &gt;= 13.1, and don't show tray icon
  all the time (install 10-opensuse-apper.js on &lt; 13.1)</changelog>
<changelog author="dimstar@opensuse.org" date="1365076800">- Add org.freedesktop.PackageKit.service provides and
  conflict otherproviders(org.freedesktop.PackageKit.service).</changelog>
<changelog author="mhrusecky@suse.com" date="1369396800">- fixed build in factory
  apper-0.8.0-extra-defines.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1370088000">- Bump PackageKitQt BuildRequires so apper-0.8.0-extra-defines.patch
  can be applied unconditionally</changelog>
<changelog author="giecrilj@stegny.2a.pl" date="1376568000">- fix URL
- minor spec file cleanup</changelog>
<changelog author="gber@opensuse.org" date="1382011200">- remove conflict with
  otherproviders(org.freedesktop.PackageKit.service) and rename the
  DBus service file since it affects parallel installation with
  GNOME/Xfce (bnc#846342)</changelog>
<changelog author="gber@opensuse.org" date="1382011201">- add back provides for org.freedesktop.PackageKit.service</changelog>
<changelog author="wbauer@tmo.at" date="1382875200">- Added 0001-Fix-accept-multiple-licenses.diff: fix handling of
  multiple licenses (bnc#847346, kde#326619)</changelog>
<changelog author="wbauer@tmo.at" date="1382961600">- Update to 0.8.1:
  * AppStream support (experimental)
  * Updater plasmoid now as a pure QML applet, with some nice improvements
  * Don’t create KJobs for when simulating the updates
  * Allow for fetching showing screenshot from openSUSE servers
  * and several bugfixes
- Remove included upstream patches:
    0001-Fixed-bug-when-using-double-click-on-the-desktop-BUG.patch
    0002-Don-t-tell-apperd-to-watch-a-transaction-when-it-s-j.patch
    0003-Reduce-the-CPU-usage-by-not-setting-an-initial-state.patch
    0004-Adds-a-Help-menu-to-Apper-BUG-293440.patch
    0005-Fix-a-connection-caused-by-a-fix-for-BUG-302786.patch
    0006-Fixes-package-installation-of-files-in-non-latin-pat.patch
    0007-Make-hide-button-more-clear-BUG-263309.patch
    0008-Fix-about-application-icon.patch
    0009-Fix-About-Application-dialog-in-Apper-BUG-293440.patch
    0010-Feature-show-application-status-in-window-title-BUG-.patch
    0013-Get-rid-of-g_type_init.patch
    0014-Fix-browsing-groups.patch
    0015-Change-the-way-we-toggle-repos-so-that-we-can-report.patch
    0016-Show-how-much-download-is-left-and-use-QPointers-ins.patch
    0017-Fix-bug-that-after-a-refresh-cache-made-the-package-.patch
    0018-Add-a-feature-to-tell-the-user-to-refresh-his-cache-.patch
    0019-Connect-to-finished-signal-of-ApplicationLaunch-in-o.patch
    0020-Allow-PackageDetails-to-show-screenshots-from-softwa.patch
    0021-Update-the-last-refresh-cache-time-from-the-update-c.patch
    0022-just-return-after-EULA-acceptance.patch
    0023-fix-annoying-notifications-over-and-over.patch
    apper-0.8.0-extra-defines.patch
- Rename 10-opensuse-apper.js to 10-opensuse-org.packagekit.updater.js
  to reflect the new plasmoid name and to make sure it gets run on
  update even if the old one has already been run
- Don't set the added plasmoid to "Always visible"
- Fixes bnc#802960</changelog>
<changelog author="wbauer@tmo.at" date="1383134400">- Added 0002-Load-the-main-apper-catalog-for-the-applet.diff:
  load the main apper catalog for the applet
- Cleaned up spec file a bit:
  * renumbered patches
  * removed outdated URLs</changelog>

</package>
<package pkgid="c80c4e28842091b8edf4dfe20492dd0c78bfade75f3d8b4dae2f0ac9ac276546" name="apper" arch="src">
    <version epoch="0" ver="0.8.1" rel="11.7.1"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="coolo@suse.com" date="1358683200">- update to 0.8.0, http://dantti.wordpress.com/2013/01/08/happy-new-apper-release-0-8-0/
  * mainly adapted to threaded model of packagekit 0.8
  * allow to download updates only
  * added plasmoid</changelog>
<changelog author="coolo@suse.com" date="1358683201">- add several patches from git:
  0001-Fixed-bug-when-using-double-click-on-the-desktop-BUG.patch
  0002-Don-t-tell-apperd-to-watch-a-transaction-when-it-s-j.patch
  0003-Reduce-the-CPU-usage-by-not-setting-an-initial-state.patch
  0004-Adds-a-Help-menu-to-Apper-BUG-293440.patch
  0005-Fix-a-connection-caused-by-a-fix-for-BUG-302786.patch
  0006-Fixes-package-installation-of-files-in-non-latin-pat.patch
  0007-Make-hide-button-more-clear-BUG-263309.patch
  0008-Fix-about-application-icon.patch
  0009-Fix-About-Application-dialog-in-Apper-BUG-293440.patch
  0010-Feature-show-application-status-in-window-title-BUG-.patch
  0013-Get-rid-of-g_type_init.patch
  0014-Fix-browsing-groups.patch
  0015-Change-the-way-we-toggle-repos-so-that-we-can-report.patch
  0016-Show-how-much-download-is-left-and-use-QPointers-ins.patch
  0017-Fix-bug-that-after-a-refresh-cache-made-the-package-.patch
  0018-Add-a-feature-to-tell-the-user-to-refresh-his-cache-.patch
  0019-Connect-to-finished-signal-of-ApplicationLaunch-in-o.patch
  0020-Allow-PackageDetails-to-show-screenshots-from-softwa.patch</changelog>
<changelog author="coolo@suse.com" date="1358769600">- one more fix from git:
  0021-Update-the-last-refresh-cache-time-from-the-update-c.patch</changelog>
<changelog author="alinm.elena@gmail.com" date="1358769601">- added 10-opensuse-apper.js to make apper to be added and visible
  to the systray by default.</changelog>
<changelog author="coolo@suse.com" date="1358856000">- replace patch to desktop file with a call to suse_update_desktop,
  which also cares about erasing wrong translations</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358856001">- Adjusted license based on bnc#719888</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359115200">- Recommend the language package.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361275200">- Added 0022-just-return-after-EULA-acceptance.patch to resolve
  strange situation after accepting EULA (bnc#801703, bko#314256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361361600">- add 0023-fix-annoying-notifications-over-and-over.patch to make
  sure we don't keep showing the same error over and over again..
  (bnc#802562)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363521600">- Install plasmoid by default on &gt;= 13.1, and don't show tray icon
  all the time (install 10-opensuse-apper.js on &lt; 13.1)</changelog>
<changelog author="dimstar@opensuse.org" date="1365076800">- Add org.freedesktop.PackageKit.service provides and
  conflict otherproviders(org.freedesktop.PackageKit.service).</changelog>
<changelog author="mhrusecky@suse.com" date="1369396800">- fixed build in factory
  apper-0.8.0-extra-defines.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1370088000">- Bump PackageKitQt BuildRequires so apper-0.8.0-extra-defines.patch
  can be applied unconditionally</changelog>
<changelog author="giecrilj@stegny.2a.pl" date="1376568000">- fix URL
- minor spec file cleanup</changelog>
<changelog author="gber@opensuse.org" date="1382011200">- remove conflict with
  otherproviders(org.freedesktop.PackageKit.service) and rename the
  DBus service file since it affects parallel installation with
  GNOME/Xfce (bnc#846342)</changelog>
<changelog author="gber@opensuse.org" date="1382011201">- add back provides for org.freedesktop.PackageKit.service</changelog>
<changelog author="wbauer@tmo.at" date="1382875200">- Added 0001-Fix-accept-multiple-licenses.diff: fix handling of
  multiple licenses (bnc#847346, kde#326619)</changelog>
<changelog author="wbauer@tmo.at" date="1382961600">- Update to 0.8.1:
  * AppStream support (experimental)
  * Updater plasmoid now as a pure QML applet, with some nice improvements
  * Don’t create KJobs for when simulating the updates
  * Allow for fetching showing screenshot from openSUSE servers
  * and several bugfixes
- Remove included upstream patches:
    0001-Fixed-bug-when-using-double-click-on-the-desktop-BUG.patch
    0002-Don-t-tell-apperd-to-watch-a-transaction-when-it-s-j.patch
    0003-Reduce-the-CPU-usage-by-not-setting-an-initial-state.patch
    0004-Adds-a-Help-menu-to-Apper-BUG-293440.patch
    0005-Fix-a-connection-caused-by-a-fix-for-BUG-302786.patch
    0006-Fixes-package-installation-of-files-in-non-latin-pat.patch
    0007-Make-hide-button-more-clear-BUG-263309.patch
    0008-Fix-about-application-icon.patch
    0009-Fix-About-Application-dialog-in-Apper-BUG-293440.patch
    0010-Feature-show-application-status-in-window-title-BUG-.patch
    0013-Get-rid-of-g_type_init.patch
    0014-Fix-browsing-groups.patch
    0015-Change-the-way-we-toggle-repos-so-that-we-can-report.patch
    0016-Show-how-much-download-is-left-and-use-QPointers-ins.patch
    0017-Fix-bug-that-after-a-refresh-cache-made-the-package-.patch
    0018-Add-a-feature-to-tell-the-user-to-refresh-his-cache-.patch
    0019-Connect-to-finished-signal-of-ApplicationLaunch-in-o.patch
    0020-Allow-PackageDetails-to-show-screenshots-from-softwa.patch
    0021-Update-the-last-refresh-cache-time-from-the-update-c.patch
    0022-just-return-after-EULA-acceptance.patch
    0023-fix-annoying-notifications-over-and-over.patch
    apper-0.8.0-extra-defines.patch
- Rename 10-opensuse-apper.js to 10-opensuse-org.packagekit.updater.js
  to reflect the new plasmoid name and to make sure it gets run on
  update even if the old one has already been run
- Don't set the added plasmoid to "Always visible"
- Fixes bnc#802960</changelog>
<changelog author="wbauer@tmo.at" date="1383134400">- Added 0002-Load-the-main-apper-catalog-for-the-applet.diff:
  load the main apper catalog for the applet
- Cleaned up spec file a bit:
  * renumbered patches
  * removed outdated URLs</changelog>

</package>
<package pkgid="1900558d375985aae96018fcfaa1282f35648dba86b96a79cf86eae341421dc6" name="apper" arch="x86_64">
    <version epoch="0" ver="0.8.1" rel="11.7.1"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="coolo@suse.com" date="1358683200">- update to 0.8.0, http://dantti.wordpress.com/2013/01/08/happy-new-apper-release-0-8-0/
  * mainly adapted to threaded model of packagekit 0.8
  * allow to download updates only
  * added plasmoid</changelog>
<changelog author="coolo@suse.com" date="1358683201">- add several patches from git:
  0001-Fixed-bug-when-using-double-click-on-the-desktop-BUG.patch
  0002-Don-t-tell-apperd-to-watch-a-transaction-when-it-s-j.patch
  0003-Reduce-the-CPU-usage-by-not-setting-an-initial-state.patch
  0004-Adds-a-Help-menu-to-Apper-BUG-293440.patch
  0005-Fix-a-connection-caused-by-a-fix-for-BUG-302786.patch
  0006-Fixes-package-installation-of-files-in-non-latin-pat.patch
  0007-Make-hide-button-more-clear-BUG-263309.patch
  0008-Fix-about-application-icon.patch
  0009-Fix-About-Application-dialog-in-Apper-BUG-293440.patch
  0010-Feature-show-application-status-in-window-title-BUG-.patch
  0013-Get-rid-of-g_type_init.patch
  0014-Fix-browsing-groups.patch
  0015-Change-the-way-we-toggle-repos-so-that-we-can-report.patch
  0016-Show-how-much-download-is-left-and-use-QPointers-ins.patch
  0017-Fix-bug-that-after-a-refresh-cache-made-the-package-.patch
  0018-Add-a-feature-to-tell-the-user-to-refresh-his-cache-.patch
  0019-Connect-to-finished-signal-of-ApplicationLaunch-in-o.patch
  0020-Allow-PackageDetails-to-show-screenshots-from-softwa.patch</changelog>
<changelog author="coolo@suse.com" date="1358769600">- one more fix from git:
  0021-Update-the-last-refresh-cache-time-from-the-update-c.patch</changelog>
<changelog author="alinm.elena@gmail.com" date="1358769601">- added 10-opensuse-apper.js to make apper to be added and visible
  to the systray by default.</changelog>
<changelog author="coolo@suse.com" date="1358856000">- replace patch to desktop file with a call to suse_update_desktop,
  which also cares about erasing wrong translations</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358856001">- Adjusted license based on bnc#719888</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359115200">- Recommend the language package.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361275200">- Added 0022-just-return-after-EULA-acceptance.patch to resolve
  strange situation after accepting EULA (bnc#801703, bko#314256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361361600">- add 0023-fix-annoying-notifications-over-and-over.patch to make
  sure we don't keep showing the same error over and over again..
  (bnc#802562)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363521600">- Install plasmoid by default on &gt;= 13.1, and don't show tray icon
  all the time (install 10-opensuse-apper.js on &lt; 13.1)</changelog>
<changelog author="dimstar@opensuse.org" date="1365076800">- Add org.freedesktop.PackageKit.service provides and
  conflict otherproviders(org.freedesktop.PackageKit.service).</changelog>
<changelog author="mhrusecky@suse.com" date="1369396800">- fixed build in factory
  apper-0.8.0-extra-defines.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1370088000">- Bump PackageKitQt BuildRequires so apper-0.8.0-extra-defines.patch
  can be applied unconditionally</changelog>
<changelog author="giecrilj@stegny.2a.pl" date="1376568000">- fix URL
- minor spec file cleanup</changelog>
<changelog author="gber@opensuse.org" date="1382011200">- remove conflict with
  otherproviders(org.freedesktop.PackageKit.service) and rename the
  DBus service file since it affects parallel installation with
  GNOME/Xfce (bnc#846342)</changelog>
<changelog author="gber@opensuse.org" date="1382011201">- add back provides for org.freedesktop.PackageKit.service</changelog>
<changelog author="wbauer@tmo.at" date="1382875200">- Added 0001-Fix-accept-multiple-licenses.diff: fix handling of
  multiple licenses (bnc#847346, kde#326619)</changelog>
<changelog author="wbauer@tmo.at" date="1382961600">- Update to 0.8.1:
  * AppStream support (experimental)
  * Updater plasmoid now as a pure QML applet, with some nice improvements
  * Don’t create KJobs for when simulating the updates
  * Allow for fetching showing screenshot from openSUSE servers
  * and several bugfixes
- Remove included upstream patches:
    0001-Fixed-bug-when-using-double-click-on-the-desktop-BUG.patch
    0002-Don-t-tell-apperd-to-watch-a-transaction-when-it-s-j.patch
    0003-Reduce-the-CPU-usage-by-not-setting-an-initial-state.patch
    0004-Adds-a-Help-menu-to-Apper-BUG-293440.patch
    0005-Fix-a-connection-caused-by-a-fix-for-BUG-302786.patch
    0006-Fixes-package-installation-of-files-in-non-latin-pat.patch
    0007-Make-hide-button-more-clear-BUG-263309.patch
    0008-Fix-about-application-icon.patch
    0009-Fix-About-Application-dialog-in-Apper-BUG-293440.patch
    0010-Feature-show-application-status-in-window-title-BUG-.patch
    0013-Get-rid-of-g_type_init.patch
    0014-Fix-browsing-groups.patch
    0015-Change-the-way-we-toggle-repos-so-that-we-can-report.patch
    0016-Show-how-much-download-is-left-and-use-QPointers-ins.patch
    0017-Fix-bug-that-after-a-refresh-cache-made-the-package-.patch
    0018-Add-a-feature-to-tell-the-user-to-refresh-his-cache-.patch
    0019-Connect-to-finished-signal-of-ApplicationLaunch-in-o.patch
    0020-Allow-PackageDetails-to-show-screenshots-from-softwa.patch
    0021-Update-the-last-refresh-cache-time-from-the-update-c.patch
    0022-just-return-after-EULA-acceptance.patch
    0023-fix-annoying-notifications-over-and-over.patch
    apper-0.8.0-extra-defines.patch
- Rename 10-opensuse-apper.js to 10-opensuse-org.packagekit.updater.js
  to reflect the new plasmoid name and to make sure it gets run on
  update even if the old one has already been run
- Don't set the added plasmoid to "Always visible"
- Fixes bnc#802960</changelog>
<changelog author="wbauer@tmo.at" date="1383134400">- Added 0002-Load-the-main-apper-catalog-for-the-applet.diff:
  load the main apper catalog for the applet
- Cleaned up spec file a bit:
  * renumbered patches
  * removed outdated URLs</changelog>

</package>
<package pkgid="4ac617addf7ce23865198035f56a5d491fd48134bf940a84a5f471413d461e42" name="apper-lang" arch="noarch">
    <version epoch="0" ver="0.8.1" rel="11.7.1"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="coolo@suse.com" date="1358683200">- update to 0.8.0, http://dantti.wordpress.com/2013/01/08/happy-new-apper-release-0-8-0/
  * mainly adapted to threaded model of packagekit 0.8
  * allow to download updates only
  * added plasmoid</changelog>
<changelog author="coolo@suse.com" date="1358683201">- add several patches from git:
  0001-Fixed-bug-when-using-double-click-on-the-desktop-BUG.patch
  0002-Don-t-tell-apperd-to-watch-a-transaction-when-it-s-j.patch
  0003-Reduce-the-CPU-usage-by-not-setting-an-initial-state.patch
  0004-Adds-a-Help-menu-to-Apper-BUG-293440.patch
  0005-Fix-a-connection-caused-by-a-fix-for-BUG-302786.patch
  0006-Fixes-package-installation-of-files-in-non-latin-pat.patch
  0007-Make-hide-button-more-clear-BUG-263309.patch
  0008-Fix-about-application-icon.patch
  0009-Fix-About-Application-dialog-in-Apper-BUG-293440.patch
  0010-Feature-show-application-status-in-window-title-BUG-.patch
  0013-Get-rid-of-g_type_init.patch
  0014-Fix-browsing-groups.patch
  0015-Change-the-way-we-toggle-repos-so-that-we-can-report.patch
  0016-Show-how-much-download-is-left-and-use-QPointers-ins.patch
  0017-Fix-bug-that-after-a-refresh-cache-made-the-package-.patch
  0018-Add-a-feature-to-tell-the-user-to-refresh-his-cache-.patch
  0019-Connect-to-finished-signal-of-ApplicationLaunch-in-o.patch
  0020-Allow-PackageDetails-to-show-screenshots-from-softwa.patch</changelog>
<changelog author="coolo@suse.com" date="1358769600">- one more fix from git:
  0021-Update-the-last-refresh-cache-time-from-the-update-c.patch</changelog>
<changelog author="alinm.elena@gmail.com" date="1358769601">- added 10-opensuse-apper.js to make apper to be added and visible
  to the systray by default.</changelog>
<changelog author="coolo@suse.com" date="1358856000">- replace patch to desktop file with a call to suse_update_desktop,
  which also cares about erasing wrong translations</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358856001">- Adjusted license based on bnc#719888</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359115200">- Recommend the language package.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361275200">- Added 0022-just-return-after-EULA-acceptance.patch to resolve
  strange situation after accepting EULA (bnc#801703, bko#314256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1361361600">- add 0023-fix-annoying-notifications-over-and-over.patch to make
  sure we don't keep showing the same error over and over again..
  (bnc#802562)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363521600">- Install plasmoid by default on &gt;= 13.1, and don't show tray icon
  all the time (install 10-opensuse-apper.js on &lt; 13.1)</changelog>
<changelog author="dimstar@opensuse.org" date="1365076800">- Add org.freedesktop.PackageKit.service provides and
  conflict otherproviders(org.freedesktop.PackageKit.service).</changelog>
<changelog author="mhrusecky@suse.com" date="1369396800">- fixed build in factory
  apper-0.8.0-extra-defines.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1370088000">- Bump PackageKitQt BuildRequires so apper-0.8.0-extra-defines.patch
  can be applied unconditionally</changelog>
<changelog author="giecrilj@stegny.2a.pl" date="1376568000">- fix URL
- minor spec file cleanup</changelog>
<changelog author="gber@opensuse.org" date="1382011200">- remove conflict with
  otherproviders(org.freedesktop.PackageKit.service) and rename the
  DBus service file since it affects parallel installation with
  GNOME/Xfce (bnc#846342)</changelog>
<changelog author="gber@opensuse.org" date="1382011201">- add back provides for org.freedesktop.PackageKit.service</changelog>
<changelog author="wbauer@tmo.at" date="1382875200">- Added 0001-Fix-accept-multiple-licenses.diff: fix handling of
  multiple licenses (bnc#847346, kde#326619)</changelog>
<changelog author="wbauer@tmo.at" date="1382961600">- Update to 0.8.1:
  * AppStream support (experimental)
  * Updater plasmoid now as a pure QML applet, with some nice improvements
  * Don’t create KJobs for when simulating the updates
  * Allow for fetching showing screenshot from openSUSE servers
  * and several bugfixes
- Remove included upstream patches:
    0001-Fixed-bug-when-using-double-click-on-the-desktop-BUG.patch
    0002-Don-t-tell-apperd-to-watch-a-transaction-when-it-s-j.patch
    0003-Reduce-the-CPU-usage-by-not-setting-an-initial-state.patch
    0004-Adds-a-Help-menu-to-Apper-BUG-293440.patch
    0005-Fix-a-connection-caused-by-a-fix-for-BUG-302786.patch
    0006-Fixes-package-installation-of-files-in-non-latin-pat.patch
    0007-Make-hide-button-more-clear-BUG-263309.patch
    0008-Fix-about-application-icon.patch
    0009-Fix-About-Application-dialog-in-Apper-BUG-293440.patch
    0010-Feature-show-application-status-in-window-title-BUG-.patch
    0013-Get-rid-of-g_type_init.patch
    0014-Fix-browsing-groups.patch
    0015-Change-the-way-we-toggle-repos-so-that-we-can-report.patch
    0016-Show-how-much-download-is-left-and-use-QPointers-ins.patch
    0017-Fix-bug-that-after-a-refresh-cache-made-the-package-.patch
    0018-Add-a-feature-to-tell-the-user-to-refresh-his-cache-.patch
    0019-Connect-to-finished-signal-of-ApplicationLaunch-in-o.patch
    0020-Allow-PackageDetails-to-show-screenshots-from-softwa.patch
    0021-Update-the-last-refresh-cache-time-from-the-update-c.patch
    0022-just-return-after-EULA-acceptance.patch
    0023-fix-annoying-notifications-over-and-over.patch
    apper-0.8.0-extra-defines.patch
- Rename 10-opensuse-apper.js to 10-opensuse-org.packagekit.updater.js
  to reflect the new plasmoid name and to make sure it gets run on
  update even if the old one has already been run
- Don't set the added plasmoid to "Always visible"
- Fixes bnc#802960</changelog>
<changelog author="wbauer@tmo.at" date="1383134400">- Added 0002-Load-the-main-apper-catalog-for-the-applet.diff:
  load the main apper catalog for the applet
- Cleaned up spec file a bit:
  * renumbered patches
  * removed outdated URLs</changelog>

</package>
<package pkgid="19e4e35ff46b474624aed2a112f586eaa33cbf0d53f4635985ba45dec2033ddd" name="ark" arch="i586">
    <version epoch="0" ver="4.11.3" rel="18.2"/>

<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_7_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="884ea8aa149595fb5e7b22b414aa52a4e936d352e29b27100082e7bbf18ee7d8" name="ark" arch="i586">
    <version epoch="0" ver="4.11.4" rel="186.5"/>

<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="af4addabc56c18df8894e6e92e75edeabd2486758ec0a88854640eb15631e9d1" name="ark" arch="i586">
    <version epoch="0" ver="4.11.5" rel="196.3"/>

<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="02272c75776cb3e222774bfed6d6cea4f24efcb78d69db7baf04f5a1dda6e4a1" name="ark" arch="i586">
    <version epoch="0" ver="4.11.5" rel="200.1"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1400587200">- Added 0001-Properly-stop-list-jobs-on-close.patch, for resolving
  kde#193908</changelog>

</package>
<package pkgid="2b85ddb048a82e999d0fc32729a618b0ec40189c8933ad676860dbcf3c5a3fbb" name="ark" arch="src">
    <version epoch="0" ver="4.11.3" rel="18.2"/>

<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_7_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="4b575f4f53fa38da1f8d8b74dc8af267769bfb11e1f2b840f5b37ced20fdfb8c" name="ark" arch="src">
    <version epoch="0" ver="4.11.4" rel="186.5"/>

<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="377f90906a10db7b084c44c1c378e6f35e74da84b2da9ac4d7a92854930d05d5" name="ark" arch="src">
    <version epoch="0" ver="4.11.5" rel="196.3"/>

<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="195aa54267249d8b2475e4c20d151e516688966c5b1d85c2c7cdc391bb2ba3a9" name="ark" arch="src">
    <version epoch="0" ver="4.11.5" rel="200.1"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1400587200">- Added 0001-Properly-stop-list-jobs-on-close.patch, for resolving
  kde#193908</changelog>

</package>
<package pkgid="7bb1413320b801c9aea9a214b909267ae805cc14ce5a8c8aaaf952c6855d510f" name="ark" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="18.2"/>

<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_7_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="47ab796f38a89864194643622da7b4a93b3030506d92aa5818559fdbb465d706" name="ark" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="186.5"/>

<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="7b2aa63b5d7a2944a1150a950cc9e98a8811612656bc8af7dc9be9b8a073eefc" name="ark" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="196.3"/>

<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="79d4525155b974c7f0e58631a9504ba324b95de825b02d4c0e437e80c09588c2" name="ark" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="200.1"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1400587200">- Added 0001-Properly-stop-list-jobs-on-close.patch, for resolving
  kde#193908</changelog>

</package>
<package pkgid="383de9692f659b74e6e952c3df528afcc4bbe31ed402b944046fa9e8d2d0ffdd" name="ark-devel" arch="i586">
    <version epoch="0" ver="4.11.3" rel="18.2"/>

<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_7_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="0342e427ca6c7d1a2d370e8ef172f4e4683c24755a3d648e90bc9cfff371e463" name="ark-devel" arch="i586">
    <version epoch="0" ver="4.11.4" rel="186.5"/>

<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="34ff9abae4aded7448814bb016fa209f68b67f3763661e22d154b4f5a1c36c58" name="ark-devel" arch="i586">
    <version epoch="0" ver="4.11.5" rel="196.3"/>

<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="ef262fb6b7aa68ca47ba62be4dbd1638d8d2c4ab316b0b2be763999f38339f6b" name="ark-devel" arch="i586">
    <version epoch="0" ver="4.11.5" rel="200.1"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1400587200">- Added 0001-Properly-stop-list-jobs-on-close.patch, for resolving
  kde#193908</changelog>

</package>
<package pkgid="33a754a60a7b504dd05aef4366989abdf4a61bf888c092cdb777769ac2a7ce73" name="ark-devel" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="18.2"/>

<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_7_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="0b2e3198350638332a29f853bc1ed6f02e76334fa0e5a7e739b7eecdfd82f78f" name="ark-devel" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="186.5"/>

<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="65a866bbad5c405f38a93b9a22b9a555109e10c02c61a9ce7a49560f407f9434" name="ark-devel" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="196.3"/>

<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="056141f986f43482b431aa91506389fc68050bfb4b1003745b98924e2904fa43" name="ark-devel" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="200.1"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374667200">- BuildRequire only libkde4-devel, instead of kdebase4-workspace-devel</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377604800">- Added ark-unrar5.diff which adds support for unrar5 (kde#319303)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  ark-unrar5.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1400587200">- Added 0001-Properly-stop-list-jobs-on-close.patch, for resolving
  kde#193908</changelog>

</package>
<package pkgid="36d5f321d8011a92ff5c7f6b75007bfdfef59e33b460db6a7e8b21fe8159f55b" name="armadillo" arch="src">
    <version epoch="0" ver="3.930.4" rel="2.4.1"/>

<changelog author="badshah400@gmail.com" date="1348315200">- Update to version 3.4.1:
  +  Workaround for a bug in the Mac OS X accelerate framework
  +  Fixes for handling empty sparse matrices
  +  Added documentation for saving &amp; loading matrices in HDF5
    format
  +  Faster dot() and cdot() for complex numbers.</changelog>
<changelog author="badshah400@gmail.com" date="1348660800">- Update to version 3.4.2:
  + Minor fixes for handling sparse submatrix views
  + Minor speedups for sparse matrices.</changelog>
<changelog author="badshah400@gmail.com" date="1349611200">- Update to version 3.4.3:
  + Fix for aliasing issue in diagmat()
  + Fix for speye() signature
  + Fixes for handling empty sparse matrices
  + Minor fixes for handling sparse submatrix views
  + Minor speedups for sparse matrices
  + Workaround for a bug in the Mac OS X accelerate framework
  + Added documentation for saving &amp; loading matrices in HDF5
    format
  + Faster dot() and cdot() for complex numbers.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1353585600">- Update to 3.4.4
  * Fix for handling complex numbers by sparse matrices
  * Fix for minor memory leak by sparse matrices</changelog>
<changelog author="dmitry_r@opensuse.org" date="1356091200">- Update to version 3.6.1
  Changes in 3.6.1
  * faster trace()
  * fix for handling sparse matrices by dot()
  * fixes for interactions between sparse and dense matrices
  Changes in 3.6.0
  * faster handling of compound expressions with submatrices
    and subcubes
  * added support for loading matrices as text files with
    NaN and Inf elements
  * added stable_sort_index(), which preserves the relative
    order of elements with equivalent values
  * added handling of sparse matrices by mean(), var(),
    norm(), abs(), square(), sqrt()
  * added saving and loading of sparse matrices in
    arma_binary format</changelog>
<changelog author="dmitry_r@opensuse.org" date="1359460800">- Update to version 3.6.2
  * faster determinant for matrices marked as diagonal or triangular
  * more fine-grained handling of 64 bit integers</changelog>
<changelog author="dmitry_r@opensuse.org" date="1361361600">- Update to version 3.6.3
  * faster find()
  * minor fix for non-contiguous submatrix views to handle
    empty vectors of indices</changelog>
<changelog author="dmitry_r@opensuse.org" date="1362139200">- Update to version 3.800.0
  * Armadillo is now licensed using the Mozilla Public License 2.0
  * added .imbue() for filling a matrix/cube with values provided
    by a functor or lambda expression
  * added .swap() for swapping contents with another matrix
  * added .transform() for transforming a matrix/cube using a
    functor or lambda expression
  * added round() for rounding matrix elements towards nearest integer
  * faster find()
  * fixes for handling non-square matrices by qr() and qr_econ()
  * minor fixes for handling empty matrices
  * reduction of pedantic compiler warnings</changelog>
<changelog author="dmitry_r@opensuse.org" date="1363089600">- Update to version 3.800.1
  * workaround for a bug in ATLAS 3.8 on 64 bit systems
  * faster matrix-vector multiply for small matrices</changelog>
<changelog author="badshah400@gmail.com" date="1364212800">- Update to version 3.800.2:
  * minor fix for installation on Mac OS X systems</changelog>
<changelog author="badshah400@gmail.com" date="1366372800">- Update to version 3.810.0 (Newell Highway):
  + Added fast Fourier transform: fft()
  + Added handling of .imbue() and .transform() by submatrices and
    subcubes
  + Added batch insertion constructors for sparse matrices
  + Minor fix for multiplication of complex sparse matrices
  + Better detection of recent Intel MKL versions during
    installation.</changelog>
<changelog author="badshah400@gmail.com" date="1368360000">- Update to version 3.820.0 (Mt Cootha):
  + Faster as_scalar() for compound expressions
  + Faster transpose of small vectors
  + Faster matrix-vector product for small vectors
  + Faster multiplication of small fixed size matrices.</changelog>
<changelog author="badshah400@gmail.com" date="1369224000">- Update to version 3.820.1:
  + Added detection of the OpenBLAS library during installation,
    which provides high-speed matrix multiplication</changelog>
<changelog author="badshah400@gmail.com" date="1370433600">- Update to version 3.900.0:
  + Added automatic SSE2 vectorisation of elementary expressions
    (eg. matrix addition) when using GCC 4.7+ with -O3
    optimisation
  + Added support for saving &amp; loading of cubes in HDF5 format
  + Faster median()
  + Faster handling of compound expressions with transposes of
    submatrix rows
  + Faster handling of compound expressions with transposes of
    complex vectors.</changelog>
<changelog author="badshah400@gmail.com" date="1371124800">- Update to version 3.900.4:
  + Minor corrections for compilation issues under GCC 4.8+
- Changes from version 3.900.1, 3.900.2 and 3.900.3 not
  documented by upstream.</changelog>
<changelog author="badshah400@gmail.com" date="1372248000">- Update to version 3.900.6:
  + No list of changes documented by upstream for 3.900.6 and
    3.900.5.</changelog>
<changelog author="dmitry_r@opensuse.org" date="1375272000">- Update to version 3.900.7
  * minor fix for inplace reshape()
  * minor corrections for compilation issues under GCC 4.8+</changelog>
<changelog author="badshah400@gmail.com" date="1376308800">- Update to version 3.910.0 (Pyrenees):
  + Faster multiplication of a matrix with a transpose of itself,
    ie. X*X.t() and X.t()*X
  + Added vectorise() for reshaping matrices into vectors
  + Added all() and any() for indicating presence of elements
    satisfying a relational condition</changelog>
<changelog author="badshah400@gmail.com" date="1378900800">- Update to version 3.910.1:
  + Minor fix for handling of complex matrices by braindead
    compilers (MSVC).</changelog>
<changelog author="badshah400@gmail.com" date="1390996800">- Cumulative update to version 3.930.4 (bnc#860900):
  + Lots of changes since version 3.910.1
    See http://arma.sourceforge.net for a list.</changelog>

</package>
<package pkgid="59be310b4938c719c457855b30c446745762eba46d0338b8f695b9a5ac942609" name="armadillo-devel" arch="i586">
    <version epoch="0" ver="3.930.4" rel="2.4.1"/>

<changelog author="badshah400@gmail.com" date="1348315200">- Update to version 3.4.1:
  +  Workaround for a bug in the Mac OS X accelerate framework
  +  Fixes for handling empty sparse matrices
  +  Added documentation for saving &amp; loading matrices in HDF5
    format
  +  Faster dot() and cdot() for complex numbers.</changelog>
<changelog author="badshah400@gmail.com" date="1348660800">- Update to version 3.4.2:
  + Minor fixes for handling sparse submatrix views
  + Minor speedups for sparse matrices.</changelog>
<changelog author="badshah400@gmail.com" date="1349611200">- Update to version 3.4.3:
  + Fix for aliasing issue in diagmat()
  + Fix for speye() signature
  + Fixes for handling empty sparse matrices
  + Minor fixes for handling sparse submatrix views
  + Minor speedups for sparse matrices
  + Workaround for a bug in the Mac OS X accelerate framework
  + Added documentation for saving &amp; loading matrices in HDF5
    format
  + Faster dot() and cdot() for complex numbers.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1353585600">- Update to 3.4.4
  * Fix for handling complex numbers by sparse matrices
  * Fix for minor memory leak by sparse matrices</changelog>
<changelog author="dmitry_r@opensuse.org" date="1356091200">- Update to version 3.6.1
  Changes in 3.6.1
  * faster trace()
  * fix for handling sparse matrices by dot()
  * fixes for interactions between sparse and dense matrices
  Changes in 3.6.0
  * faster handling of compound expressions with submatrices
    and subcubes
  * added support for loading matrices as text files with
    NaN and Inf elements
  * added stable_sort_index(), which preserves the relative
    order of elements with equivalent values
  * added handling of sparse matrices by mean(), var(),
    norm(), abs(), square(), sqrt()
  * added saving and loading of sparse matrices in
    arma_binary format</changelog>
<changelog author="dmitry_r@opensuse.org" date="1359460800">- Update to version 3.6.2
  * faster determinant for matrices marked as diagonal or triangular
  * more fine-grained handling of 64 bit integers</changelog>
<changelog author="dmitry_r@opensuse.org" date="1361361600">- Update to version 3.6.3
  * faster find()
  * minor fix for non-contiguous submatrix views to handle
    empty vectors of indices</changelog>
<changelog author="dmitry_r@opensuse.org" date="1362139200">- Update to version 3.800.0
  * Armadillo is now licensed using the Mozilla Public License 2.0
  * added .imbue() for filling a matrix/cube with values provided
    by a functor or lambda expression
  * added .swap() for swapping contents with another matrix
  * added .transform() for transforming a matrix/cube using a
    functor or lambda expression
  * added round() for rounding matrix elements towards nearest integer
  * faster find()
  * fixes for handling non-square matrices by qr() and qr_econ()
  * minor fixes for handling empty matrices
  * reduction of pedantic compiler warnings</changelog>
<changelog author="dmitry_r@opensuse.org" date="1363089600">- Update to version 3.800.1
  * workaround for a bug in ATLAS 3.8 on 64 bit systems
  * faster matrix-vector multiply for small matrices</changelog>
<changelog author="badshah400@gmail.com" date="1364212800">- Update to version 3.800.2:
  * minor fix for installation on Mac OS X systems</changelog>
<changelog author="badshah400@gmail.com" date="1366372800">- Update to version 3.810.0 (Newell Highway):
  + Added fast Fourier transform: fft()
  + Added handling of .imbue() and .transform() by submatrices and
    subcubes
  + Added batch insertion constructors for sparse matrices
  + Minor fix for multiplication of complex sparse matrices
  + Better detection of recent Intel MKL versions during
    installation.</changelog>
<changelog author="badshah400@gmail.com" date="1368360000">- Update to version 3.820.0 (Mt Cootha):
  + Faster as_scalar() for compound expressions
  + Faster transpose of small vectors
  + Faster matrix-vector product for small vectors
  + Faster multiplication of small fixed size matrices.</changelog>
<changelog author="badshah400@gmail.com" date="1369224000">- Update to version 3.820.1:
  + Added detection of the OpenBLAS library during installation,
    which provides high-speed matrix multiplication</changelog>
<changelog author="badshah400@gmail.com" date="1370433600">- Update to version 3.900.0:
  + Added automatic SSE2 vectorisation of elementary expressions
    (eg. matrix addition) when using GCC 4.7+ with -O3
    optimisation
  + Added support for saving &amp; loading of cubes in HDF5 format
  + Faster median()
  + Faster handling of compound expressions with transposes of
    submatrix rows
  + Faster handling of compound expressions with transposes of
    complex vectors.</changelog>
<changelog author="badshah400@gmail.com" date="1371124800">- Update to version 3.900.4:
  + Minor corrections for compilation issues under GCC 4.8+
- Changes from version 3.900.1, 3.900.2 and 3.900.3 not
  documented by upstream.</changelog>
<changelog author="badshah400@gmail.com" date="1372248000">- Update to version 3.900.6:
  + No list of changes documented by upstream for 3.900.6 and
    3.900.5.</changelog>
<changelog author="dmitry_r@opensuse.org" date="1375272000">- Update to version 3.900.7
  * minor fix for inplace reshape()
  * minor corrections for compilation issues under GCC 4.8+</changelog>
<changelog author="badshah400@gmail.com" date="1376308800">- Update to version 3.910.0 (Pyrenees):
  + Faster multiplication of a matrix with a transpose of itself,
    ie. X*X.t() and X.t()*X
  + Added vectorise() for reshaping matrices into vectors
  + Added all() and any() for indicating presence of elements
    satisfying a relational condition</changelog>
<changelog author="badshah400@gmail.com" date="1378900800">- Update to version 3.910.1:
  + Minor fix for handling of complex matrices by braindead
    compilers (MSVC).</changelog>
<changelog author="badshah400@gmail.com" date="1390996800">- Cumulative update to version 3.930.4 (bnc#860900):
  + Lots of changes since version 3.910.1
    See http://arma.sourceforge.net for a list.</changelog>

</package>
<package pkgid="726be2cfddc8f14ab6862b25294da96461c4e24615e3fd157df9e2a8b7464287" name="armadillo-devel" arch="x86_64">
    <version epoch="0" ver="3.930.4" rel="2.4.1"/>

<changelog author="badshah400@gmail.com" date="1348315200">- Update to version 3.4.1:
  +  Workaround for a bug in the Mac OS X accelerate framework
  +  Fixes for handling empty sparse matrices
  +  Added documentation for saving &amp; loading matrices in HDF5
    format
  +  Faster dot() and cdot() for complex numbers.</changelog>
<changelog author="badshah400@gmail.com" date="1348660800">- Update to version 3.4.2:
  + Minor fixes for handling sparse submatrix views
  + Minor speedups for sparse matrices.</changelog>
<changelog author="badshah400@gmail.com" date="1349611200">- Update to version 3.4.3:
  + Fix for aliasing issue in diagmat()
  + Fix for speye() signature
  + Fixes for handling empty sparse matrices
  + Minor fixes for handling sparse submatrix views
  + Minor speedups for sparse matrices
  + Workaround for a bug in the Mac OS X accelerate framework
  + Added documentation for saving &amp; loading matrices in HDF5
    format
  + Faster dot() and cdot() for complex numbers.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1353585600">- Update to 3.4.4
  * Fix for handling complex numbers by sparse matrices
  * Fix for minor memory leak by sparse matrices</changelog>
<changelog author="dmitry_r@opensuse.org" date="1356091200">- Update to version 3.6.1
  Changes in 3.6.1
  * faster trace()
  * fix for handling sparse matrices by dot()
  * fixes for interactions between sparse and dense matrices
  Changes in 3.6.0
  * faster handling of compound expressions with submatrices
    and subcubes
  * added support for loading matrices as text files with
    NaN and Inf elements
  * added stable_sort_index(), which preserves the relative
    order of elements with equivalent values
  * added handling of sparse matrices by mean(), var(),
    norm(), abs(), square(), sqrt()
  * added saving and loading of sparse matrices in
    arma_binary format</changelog>
<changelog author="dmitry_r@opensuse.org" date="1359460800">- Update to version 3.6.2
  * faster determinant for matrices marked as diagonal or triangular
  * more fine-grained handling of 64 bit integers</changelog>
<changelog author="dmitry_r@opensuse.org" date="1361361600">- Update to version 3.6.3
  * faster find()
  * minor fix for non-contiguous submatrix views to handle
    empty vectors of indices</changelog>
<changelog author="dmitry_r@opensuse.org" date="1362139200">- Update to version 3.800.0
  * Armadillo is now licensed using the Mozilla Public License 2.0
  * added .imbue() for filling a matrix/cube with values provided
    by a functor or lambda expression
  * added .swap() for swapping contents with another matrix
  * added .transform() for transforming a matrix/cube using a
    functor or lambda expression
  * added round() for rounding matrix elements towards nearest integer
  * faster find()
  * fixes for handling non-square matrices by qr() and qr_econ()
  * minor fixes for handling empty matrices
  * reduction of pedantic compiler warnings</changelog>
<changelog author="dmitry_r@opensuse.org" date="1363089600">- Update to version 3.800.1
  * workaround for a bug in ATLAS 3.8 on 64 bit systems
  * faster matrix-vector multiply for small matrices</changelog>
<changelog author="badshah400@gmail.com" date="1364212800">- Update to version 3.800.2:
  * minor fix for installation on Mac OS X systems</changelog>
<changelog author="badshah400@gmail.com" date="1366372800">- Update to version 3.810.0 (Newell Highway):
  + Added fast Fourier transform: fft()
  + Added handling of .imbue() and .transform() by submatrices and
    subcubes
  + Added batch insertion constructors for sparse matrices
  + Minor fix for multiplication of complex sparse matrices
  + Better detection of recent Intel MKL versions during
    installation.</changelog>
<changelog author="badshah400@gmail.com" date="1368360000">- Update to version 3.820.0 (Mt Cootha):
  + Faster as_scalar() for compound expressions
  + Faster transpose of small vectors
  + Faster matrix-vector product for small vectors
  + Faster multiplication of small fixed size matrices.</changelog>
<changelog author="badshah400@gmail.com" date="1369224000">- Update to version 3.820.1:
  + Added detection of the OpenBLAS library during installation,
    which provides high-speed matrix multiplication</changelog>
<changelog author="badshah400@gmail.com" date="1370433600">- Update to version 3.900.0:
  + Added automatic SSE2 vectorisation of elementary expressions
    (eg. matrix addition) when using GCC 4.7+ with -O3
    optimisation
  + Added support for saving &amp; loading of cubes in HDF5 format
  + Faster median()
  + Faster handling of compound expressions with transposes of
    submatrix rows
  + Faster handling of compound expressions with transposes of
    complex vectors.</changelog>
<changelog author="badshah400@gmail.com" date="1371124800">- Update to version 3.900.4:
  + Minor corrections for compilation issues under GCC 4.8+
- Changes from version 3.900.1, 3.900.2 and 3.900.3 not
  documented by upstream.</changelog>
<changelog author="badshah400@gmail.com" date="1372248000">- Update to version 3.900.6:
  + No list of changes documented by upstream for 3.900.6 and
    3.900.5.</changelog>
<changelog author="dmitry_r@opensuse.org" date="1375272000">- Update to version 3.900.7
  * minor fix for inplace reshape()
  * minor corrections for compilation issues under GCC 4.8+</changelog>
<changelog author="badshah400@gmail.com" date="1376308800">- Update to version 3.910.0 (Pyrenees):
  + Faster multiplication of a matrix with a transpose of itself,
    ie. X*X.t() and X.t()*X
  + Added vectorise() for reshaping matrices into vectors
  + Added all() and any() for indicating presence of elements
    satisfying a relational condition</changelog>
<changelog author="badshah400@gmail.com" date="1378900800">- Update to version 3.910.1:
  + Minor fix for handling of complex matrices by braindead
    compilers (MSVC).</changelog>
<changelog author="badshah400@gmail.com" date="1390996800">- Cumulative update to version 3.930.4 (bnc#860900):
  + Lots of changes since version 3.910.1
    See http://arma.sourceforge.net for a list.</changelog>

</package>
<package pkgid="bfd1cb24d28783c2a2f64aefbf2478b68901451143c4ab858e2ff5d9faee9bc2" name="armadillo-devel-32bit" arch="x86_64">
    <version epoch="0" ver="3.930.4" rel="2.4.1"/>

<changelog author="badshah400@gmail.com" date="1348315200">- Update to version 3.4.1:
  +  Workaround for a bug in the Mac OS X accelerate framework
  +  Fixes for handling empty sparse matrices
  +  Added documentation for saving &amp; loading matrices in HDF5
    format
  +  Faster dot() and cdot() for complex numbers.</changelog>
<changelog author="badshah400@gmail.com" date="1348660800">- Update to version 3.4.2:
  + Minor fixes for handling sparse submatrix views
  + Minor speedups for sparse matrices.</changelog>
<changelog author="badshah400@gmail.com" date="1349611200">- Update to version 3.4.3:
  + Fix for aliasing issue in diagmat()
  + Fix for speye() signature
  + Fixes for handling empty sparse matrices
  + Minor fixes for handling sparse submatrix views
  + Minor speedups for sparse matrices
  + Workaround for a bug in the Mac OS X accelerate framework
  + Added documentation for saving &amp; loading matrices in HDF5
    format
  + Faster dot() and cdot() for complex numbers.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1353585600">- Update to 3.4.4
  * Fix for handling complex numbers by sparse matrices
  * Fix for minor memory leak by sparse matrices</changelog>
<changelog author="dmitry_r@opensuse.org" date="1356091200">- Update to version 3.6.1
  Changes in 3.6.1
  * faster trace()
  * fix for handling sparse matrices by dot()
  * fixes for interactions between sparse and dense matrices
  Changes in 3.6.0
  * faster handling of compound expressions with submatrices
    and subcubes
  * added support for loading matrices as text files with
    NaN and Inf elements
  * added stable_sort_index(), which preserves the relative
    order of elements with equivalent values
  * added handling of sparse matrices by mean(), var(),
    norm(), abs(), square(), sqrt()
  * added saving and loading of sparse matrices in
    arma_binary format</changelog>
<changelog author="dmitry_r@opensuse.org" date="1359460800">- Update to version 3.6.2
  * faster determinant for matrices marked as diagonal or triangular
  * more fine-grained handling of 64 bit integers</changelog>
<changelog author="dmitry_r@opensuse.org" date="1361361600">- Update to version 3.6.3
  * faster find()
  * minor fix for non-contiguous submatrix views to handle
    empty vectors of indices</changelog>
<changelog author="dmitry_r@opensuse.org" date="1362139200">- Update to version 3.800.0
  * Armadillo is now licensed using the Mozilla Public License 2.0
  * added .imbue() for filling a matrix/cube with values provided
    by a functor or lambda expression
  * added .swap() for swapping contents with another matrix
  * added .transform() for transforming a matrix/cube using a
    functor or lambda expression
  * added round() for rounding matrix elements towards nearest integer
  * faster find()
  * fixes for handling non-square matrices by qr() and qr_econ()
  * minor fixes for handling empty matrices
  * reduction of pedantic compiler warnings</changelog>
<changelog author="dmitry_r@opensuse.org" date="1363089600">- Update to version 3.800.1
  * workaround for a bug in ATLAS 3.8 on 64 bit systems
  * faster matrix-vector multiply for small matrices</changelog>
<changelog author="badshah400@gmail.com" date="1364212800">- Update to version 3.800.2:
  * minor fix for installation on Mac OS X systems</changelog>
<changelog author="badshah400@gmail.com" date="1366372800">- Update to version 3.810.0 (Newell Highway):
  + Added fast Fourier transform: fft()
  + Added handling of .imbue() and .transform() by submatrices and
    subcubes
  + Added batch insertion constructors for sparse matrices
  + Minor fix for multiplication of complex sparse matrices
  + Better detection of recent Intel MKL versions during
    installation.</changelog>
<changelog author="badshah400@gmail.com" date="1368360000">- Update to version 3.820.0 (Mt Cootha):
  + Faster as_scalar() for compound expressions
  + Faster transpose of small vectors
  + Faster matrix-vector product for small vectors
  + Faster multiplication of small fixed size matrices.</changelog>
<changelog author="badshah400@gmail.com" date="1369224000">- Update to version 3.820.1:
  + Added detection of the OpenBLAS library during installation,
    which provides high-speed matrix multiplication</changelog>
<changelog author="badshah400@gmail.com" date="1370433600">- Update to version 3.900.0:
  + Added automatic SSE2 vectorisation of elementary expressions
    (eg. matrix addition) when using GCC 4.7+ with -O3
    optimisation
  + Added support for saving &amp; loading of cubes in HDF5 format
  + Faster median()
  + Faster handling of compound expressions with transposes of
    submatrix rows
  + Faster handling of compound expressions with transposes of
    complex vectors.</changelog>
<changelog author="badshah400@gmail.com" date="1371124800">- Update to version 3.900.4:
  + Minor corrections for compilation issues under GCC 4.8+
- Changes from version 3.900.1, 3.900.2 and 3.900.3 not
  documented by upstream.</changelog>
<changelog author="badshah400@gmail.com" date="1372248000">- Update to version 3.900.6:
  + No list of changes documented by upstream for 3.900.6 and
    3.900.5.</changelog>
<changelog author="dmitry_r@opensuse.org" date="1375272000">- Update to version 3.900.7
  * minor fix for inplace reshape()
  * minor corrections for compilation issues under GCC 4.8+</changelog>
<changelog author="badshah400@gmail.com" date="1376308800">- Update to version 3.910.0 (Pyrenees):
  + Faster multiplication of a matrix with a transpose of itself,
    ie. X*X.t() and X.t()*X
  + Added vectorise() for reshaping matrices into vectors
  + Added all() and any() for indicating presence of elements
    satisfying a relational condition</changelog>
<changelog author="badshah400@gmail.com" date="1378900800">- Update to version 3.910.1:
  + Minor fix for handling of complex matrices by braindead
    compilers (MSVC).</changelog>
<changelog author="badshah400@gmail.com" date="1390996800">- Cumulative update to version 3.930.4 (bnc#860900):
  + Lots of changes since version 3.910.1
    See http://arma.sourceforge.net for a list.</changelog>

</package>
<package pkgid="c6a46d03ea91074fefd38cd939d37a881f1fdbacd2b6aa684780a5045dc082ae" name="armadillo-doc" arch="noarch">
    <version epoch="0" ver="3.930.4" rel="2.4.1"/>

<changelog author="badshah400@gmail.com" date="1348315200">- Update to version 3.4.1:
  +  Workaround for a bug in the Mac OS X accelerate framework
  +  Fixes for handling empty sparse matrices
  +  Added documentation for saving &amp; loading matrices in HDF5
    format
  +  Faster dot() and cdot() for complex numbers.</changelog>
<changelog author="badshah400@gmail.com" date="1348660800">- Update to version 3.4.2:
  + Minor fixes for handling sparse submatrix views
  + Minor speedups for sparse matrices.</changelog>
<changelog author="badshah400@gmail.com" date="1349611200">- Update to version 3.4.3:
  + Fix for aliasing issue in diagmat()
  + Fix for speye() signature
  + Fixes for handling empty sparse matrices
  + Minor fixes for handling sparse submatrix views
  + Minor speedups for sparse matrices
  + Workaround for a bug in the Mac OS X accelerate framework
  + Added documentation for saving &amp; loading matrices in HDF5
    format
  + Faster dot() and cdot() for complex numbers.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1353585600">- Update to 3.4.4
  * Fix for handling complex numbers by sparse matrices
  * Fix for minor memory leak by sparse matrices</changelog>
<changelog author="dmitry_r@opensuse.org" date="1356091200">- Update to version 3.6.1
  Changes in 3.6.1
  * faster trace()
  * fix for handling sparse matrices by dot()
  * fixes for interactions between sparse and dense matrices
  Changes in 3.6.0
  * faster handling of compound expressions with submatrices
    and subcubes
  * added support for loading matrices as text files with
    NaN and Inf elements
  * added stable_sort_index(), which preserves the relative
    order of elements with equivalent values
  * added handling of sparse matrices by mean(), var(),
    norm(), abs(), square(), sqrt()
  * added saving and loading of sparse matrices in
    arma_binary format</changelog>
<changelog author="dmitry_r@opensuse.org" date="1359460800">- Update to version 3.6.2
  * faster determinant for matrices marked as diagonal or triangular
  * more fine-grained handling of 64 bit integers</changelog>
<changelog author="dmitry_r@opensuse.org" date="1361361600">- Update to version 3.6.3
  * faster find()
  * minor fix for non-contiguous submatrix views to handle
    empty vectors of indices</changelog>
<changelog author="dmitry_r@opensuse.org" date="1362139200">- Update to version 3.800.0
  * Armadillo is now licensed using the Mozilla Public License 2.0
  * added .imbue() for filling a matrix/cube with values provided
    by a functor or lambda expression
  * added .swap() for swapping contents with another matrix
  * added .transform() for transforming a matrix/cube using a
    functor or lambda expression
  * added round() for rounding matrix elements towards nearest integer
  * faster find()
  * fixes for handling non-square matrices by qr() and qr_econ()
  * minor fixes for handling empty matrices
  * reduction of pedantic compiler warnings</changelog>
<changelog author="dmitry_r@opensuse.org" date="1363089600">- Update to version 3.800.1
  * workaround for a bug in ATLAS 3.8 on 64 bit systems
  * faster matrix-vector multiply for small matrices</changelog>
<changelog author="badshah400@gmail.com" date="1364212800">- Update to version 3.800.2:
  * minor fix for installation on Mac OS X systems</changelog>
<changelog author="badshah400@gmail.com" date="1366372800">- Update to version 3.810.0 (Newell Highway):
  + Added fast Fourier transform: fft()
  + Added handling of .imbue() and .transform() by submatrices and
    subcubes
  + Added batch insertion constructors for sparse matrices
  + Minor fix for multiplication of complex sparse matrices
  + Better detection of recent Intel MKL versions during
    installation.</changelog>
<changelog author="badshah400@gmail.com" date="1368360000">- Update to version 3.820.0 (Mt Cootha):
  + Faster as_scalar() for compound expressions
  + Faster transpose of small vectors
  + Faster matrix-vector product for small vectors
  + Faster multiplication of small fixed size matrices.</changelog>
<changelog author="badshah400@gmail.com" date="1369224000">- Update to version 3.820.1:
  + Added detection of the OpenBLAS library during installation,
    which provides high-speed matrix multiplication</changelog>
<changelog author="badshah400@gmail.com" date="1370433600">- Update to version 3.900.0:
  + Added automatic SSE2 vectorisation of elementary expressions
    (eg. matrix addition) when using GCC 4.7+ with -O3
    optimisation
  + Added support for saving &amp; loading of cubes in HDF5 format
  + Faster median()
  + Faster handling of compound expressions with transposes of
    submatrix rows
  + Faster handling of compound expressions with transposes of
    complex vectors.</changelog>
<changelog author="badshah400@gmail.com" date="1371124800">- Update to version 3.900.4:
  + Minor corrections for compilation issues under GCC 4.8+
- Changes from version 3.900.1, 3.900.2 and 3.900.3 not
  documented by upstream.</changelog>
<changelog author="badshah400@gmail.com" date="1372248000">- Update to version 3.900.6:
  + No list of changes documented by upstream for 3.900.6 and
    3.900.5.</changelog>
<changelog author="dmitry_r@opensuse.org" date="1375272000">- Update to version 3.900.7
  * minor fix for inplace reshape()
  * minor corrections for compilation issues under GCC 4.8+</changelog>
<changelog author="badshah400@gmail.com" date="1376308800">- Update to version 3.910.0 (Pyrenees):
  + Faster multiplication of a matrix with a transpose of itself,
    ie. X*X.t() and X.t()*X
  + Added vectorise() for reshaping matrices into vectors
  + Added all() and any() for indicating presence of elements
    satisfying a relational condition</changelog>
<changelog author="badshah400@gmail.com" date="1378900800">- Update to version 3.910.1:
  + Minor fix for handling of complex matrices by braindead
    compilers (MSVC).</changelog>
<changelog author="badshah400@gmail.com" date="1390996800">- Cumulative update to version 3.930.4 (bnc#860900):
  + Lots of changes since version 3.910.1
    See http://arma.sourceforge.net for a list.</changelog>

</package>
<package pkgid="1a92bfdbd8ec6054bed019d97dc9997f018923d71f4584da5852e9dee6931b63" name="arpwatch" arch="i586">
    <version epoch="0" ver="2.1a15" rel="153.4.1"/>

<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="lrupp@suse.de" date="1179144000">- update to 2.1a15
  + let the database files belong to the package
  + build parallel
  + use rpm macros for configure and make</changelog>
<changelog author="prusnak@suse.cz" date="1185451200">- changed libpcap to libpcap-devel in BuildRequires</changelog>
<changelog author="draht@suse.de" date="1226491200">- start script tuned for multiple interface support and independent
  databases. #149003</changelog>
<changelog author="draht@suse.de" date="1226491201">- arpwatch-2.1a11-emailaddr.dif for flexibility in sender and
  recipient addresses on commandline.
- arpwatch-2.1a11-drop-privs.dif to run arpwatch as different user
- arpwatch-2.1a11-drop-privs-manpage.dif for the manpage</changelog>
<changelog author="mseben@novell.com" date="1259323200">- added ARPDIR to build section in spec file, to fix error message
  in logs</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
<changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
<changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>

</package>
<package pkgid="4e9484f5185c4dcc8c0617627e071ec9f19683c995a9324b937aab38c12ffcdd" name="arpwatch" arch="src">
    <version epoch="0" ver="2.1a15" rel="153.4.1"/>

<changelog author="mmj@suse.de" date="1055419200">- Forgot to comment in a line</changelog>
<changelog author="aj@suse.de" date="1059480000">- Fix for chown changes.</changelog>
<changelog author="adrian@suse.de" date="1073908800">- add %defattr</changelog>
<changelog author="adrian@suse.de" date="1073908801">- fix build as user</changelog>
<changelog author="mmj@suse.de" date="1080216000">- Add postfix to # neededforbuild</changelog>
<changelog author="lmuelle@suse.de" date="1088164800">- Update to version 2.1a13.
- Add sysconfig file to allow additional options in the init script.
- Compress source tar ball with bzip2.
- Move IEEE OUI and Company_id file to ethercodes sub package.</changelog>
<changelog author="lmuelle@suse.de" date="1099742400">- Add files needed by massagevendor script, [#48005].</changelog>
<changelog author="lmuelle@suse.de" date="1099742401">- Split off massagevendor script and required files as we only need them at
  build time to create the ethercodes.dat file from the IEEE.org meta data.</changelog>
<changelog author="lmuelle@suse.de" date="1100174400">- Add %insserv_prereq %fillup_prereq to prereq.
- Add missing call to %stop_on_removal (%preun), %restart_on_update, and
  %insserv_cleanup (%postun).</changelog>
<changelog author="meissner@suse.de" date="1113825600">- Use RPM_OPT_FLAGS.</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="lrupp@suse.de" date="1179144000">- update to 2.1a15
  + let the database files belong to the package
  + build parallel
  + use rpm macros for configure and make</changelog>
<changelog author="prusnak@suse.cz" date="1185451200">- changed libpcap to libpcap-devel in BuildRequires</changelog>
<changelog author="draht@suse.de" date="1226491200">- start script tuned for multiple interface support and independent
  databases. #149003</changelog>
<changelog author="draht@suse.de" date="1226491201">- arpwatch-2.1a11-emailaddr.dif for flexibility in sender and
  recipient addresses on commandline.
- arpwatch-2.1a11-drop-privs.dif to run arpwatch as different user
- arpwatch-2.1a11-drop-privs-manpage.dif for the manpage</changelog>
<changelog author="mseben@novell.com" date="1259323200">- added ARPDIR to build section in spec file, to fix error message
  in logs</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
<changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
<changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>

</package>
<package pkgid="862deb3d416902bc9090f8abe7a36b94fb7662d0058f7a2e64100f39abe00cf8" name="arpwatch" arch="x86_64">
    <version epoch="0" ver="2.1a15" rel="153.4.1"/>

<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="lrupp@suse.de" date="1179144000">- update to 2.1a15
  + let the database files belong to the package
  + build parallel
  + use rpm macros for configure and make</changelog>
<changelog author="prusnak@suse.cz" date="1185451200">- changed libpcap to libpcap-devel in BuildRequires</changelog>
<changelog author="draht@suse.de" date="1226491200">- start script tuned for multiple interface support and independent
  databases. #149003</changelog>
<changelog author="draht@suse.de" date="1226491201">- arpwatch-2.1a11-emailaddr.dif for flexibility in sender and
  recipient addresses on commandline.
- arpwatch-2.1a11-drop-privs.dif to run arpwatch as different user
- arpwatch-2.1a11-drop-privs-manpage.dif for the manpage</changelog>
<changelog author="mseben@novell.com" date="1259323200">- added ARPDIR to build section in spec file, to fix error message
  in logs</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
<changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
<changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>

</package>
<package pkgid="2e0b16a043b2887895f72ef9478b5d4261093fd58427af1993033be2d7907ebc" name="arpwatch-ethercodes-build" arch="i586">
    <version epoch="0" ver="2.1a15" rel="153.4.1"/>

<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="lrupp@suse.de" date="1179144000">- update to 2.1a15
  + let the database files belong to the package
  + build parallel
  + use rpm macros for configure and make</changelog>
<changelog author="prusnak@suse.cz" date="1185451200">- changed libpcap to libpcap-devel in BuildRequires</changelog>
<changelog author="draht@suse.de" date="1226491200">- start script tuned for multiple interface support and independent
  databases. #149003</changelog>
<changelog author="draht@suse.de" date="1226491201">- arpwatch-2.1a11-emailaddr.dif for flexibility in sender and
  recipient addresses on commandline.
- arpwatch-2.1a11-drop-privs.dif to run arpwatch as different user
- arpwatch-2.1a11-drop-privs-manpage.dif for the manpage</changelog>
<changelog author="mseben@novell.com" date="1259323200">- added ARPDIR to build section in spec file, to fix error message
  in logs</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
<changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
<changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>

</package>
<package pkgid="e2c76b6219546faa9b5c30f0478040919520952fccac08ff2b962377a233c6a3" name="arpwatch-ethercodes-build" arch="x86_64">
    <version epoch="0" ver="2.1a15" rel="153.4.1"/>

<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="lrupp@suse.de" date="1179144000">- update to 2.1a15
  + let the database files belong to the package
  + build parallel
  + use rpm macros for configure and make</changelog>
<changelog author="prusnak@suse.cz" date="1185451200">- changed libpcap to libpcap-devel in BuildRequires</changelog>
<changelog author="draht@suse.de" date="1226491200">- start script tuned for multiple interface support and independent
  databases. #149003</changelog>
<changelog author="draht@suse.de" date="1226491201">- arpwatch-2.1a11-emailaddr.dif for flexibility in sender and
  recipient addresses on commandline.
- arpwatch-2.1a11-drop-privs.dif to run arpwatch as different user
- arpwatch-2.1a11-drop-privs-manpage.dif for the manpage</changelog>
<changelog author="mseben@novell.com" date="1259323200">- added ARPDIR to build section in spec file, to fix error message
  in logs</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
<changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
<changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>

</package>
<package pkgid="67409fce6502963843bdbd40315bc2ee43bb93c090881df4367654e0f374cb1e" name="at" arch="i586">
    <version epoch="0" ver="3.1.13" rel="5.14.1"/>

<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="opensuse@cboltz.de" date="1347537600">- fix atd.service (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="pgajdos@suse.com" date="1406635200">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>
<changelog author="kstreitova@suse.com" date="1412251200">- Add at-3.1.13-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160).</changelog>
<changelog author="kstreitova@suse.com" date="1412683200">- Replace at-3.1.13-sane-envkeys.patch with the upstream fix
  (bnc#899160)</changelog>

</package>
<package pkgid="a8142a9e8918c6badaeedd625806d7f17442a45ba05c8c3ca0f9ccb4ad2315db" name="at" arch="i586">
    <version epoch="0" ver="3.1.13" rel="5.17.1"/>

<changelog author="opensuse@cboltz.de" date="1347537600">- fix atd.service (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="pgajdos@suse.com" date="1406635200">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>
<changelog author="kstreitova@suse.com" date="1412251200">- Add at-3.1.13-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160).</changelog>
<changelog author="kstreitova@suse.com" date="1412683200">- Replace at-3.1.13-sane-envkeys.patch with the upstream fix
  (bnc#899160)</changelog>
<changelog author="vcizek@suse.com" date="1435060800">- loadavg on Linux is a sum over all CPUs, so multiply LOADAVG_MX
  by the amount of CPUs when comparing to loadavg (bnc#889174)
  * added at-adjust_load_to_cpu_count.patch</changelog>

</package>
<package pkgid="0dc8030d8df05fd6e8a1d39f20619b20dc356001c07ec9bd76c87500654265df" name="at" arch="i586">
    <version epoch="0" ver="3.1.13" rel="5.20.1"/>

<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="pgajdos@suse.com" date="1406635200">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>
<changelog author="kstreitova@suse.com" date="1412251200">- Add at-3.1.13-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160).</changelog>
<changelog author="kstreitova@suse.com" date="1412683200">- Replace at-3.1.13-sane-envkeys.patch with the upstream fix
  (bnc#899160)</changelog>
<changelog author="vcizek@suse.com" date="1435060800">- loadavg on Linux is a sum over all CPUs, so multiply LOADAVG_MX
  by the amount of CPUs when comparing to loadavg (bnc#889174)
  * added at-adjust_load_to_cpu_count.patch</changelog>
<changelog author="kstreitova@suse.com" date="1444737600">- add at-3.1.13-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>

</package>
<package pkgid="894aa3d13938d603350790511cc2cf23c39715f191b20d02077f54295a9a9ebf" name="at" arch="i586">
    <version epoch="0" ver="3.1.13" rel="5.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1323086400">- Support systemd.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1323086401">- Fix rpmlint warnings</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="coolo@suse.com" date="1324382401">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="opensuse@cboltz.de" date="1347537600">- fix atd.service (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>

</package>
<package pkgid="6be299e826fca6b429afefa71532842f558ca1a301f06f5cbb0d53163440f957" name="at" arch="i586">
    <version epoch="0" ver="3.1.13" rel="5.8.1"/>

<changelog author="crrodriguez@opensuse.org" date="1323086400">- Fix rpmlint warnings</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="coolo@suse.com" date="1324382401">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="opensuse@cboltz.de" date="1347537600">- fix atd.service (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="pgajdos@suse.com" date="1406635200">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>

</package>
<package pkgid="a4e8304c5107ea87e1ecbf6e8ad20eee9e71a23d678ed986c6c622e9705240f6" name="at" arch="src">
    <version epoch="0" ver="3.1.13" rel="5.14.1"/>

<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="opensuse@cboltz.de" date="1347537600">- fix atd.service (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="pgajdos@suse.com" date="1406635200">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>
<changelog author="kstreitova@suse.com" date="1412251200">- Add at-3.1.13-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160).</changelog>
<changelog author="kstreitova@suse.com" date="1412683200">- Replace at-3.1.13-sane-envkeys.patch with the upstream fix
  (bnc#899160)</changelog>

</package>
<package pkgid="580a0240abfa5eec81d0c83aa860698b523bae1ba3a2adbe2c085d1e755abe29" name="at" arch="src">
    <version epoch="0" ver="3.1.13" rel="5.17.1"/>

<changelog author="opensuse@cboltz.de" date="1347537600">- fix atd.service (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="pgajdos@suse.com" date="1406635200">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>
<changelog author="kstreitova@suse.com" date="1412251200">- Add at-3.1.13-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160).</changelog>
<changelog author="kstreitova@suse.com" date="1412683200">- Replace at-3.1.13-sane-envkeys.patch with the upstream fix
  (bnc#899160)</changelog>
<changelog author="vcizek@suse.com" date="1435060800">- loadavg on Linux is a sum over all CPUs, so multiply LOADAVG_MX
  by the amount of CPUs when comparing to loadavg (bnc#889174)
  * added at-adjust_load_to_cpu_count.patch</changelog>

</package>
<package pkgid="7140290581467701fb0ffab83dd7ba374c8fb8b0ed9f47f63cee0c411283315c" name="at" arch="src">
    <version epoch="0" ver="3.1.13" rel="5.20.1"/>

<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="pgajdos@suse.com" date="1406635200">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>
<changelog author="kstreitova@suse.com" date="1412251200">- Add at-3.1.13-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160).</changelog>
<changelog author="kstreitova@suse.com" date="1412683200">- Replace at-3.1.13-sane-envkeys.patch with the upstream fix
  (bnc#899160)</changelog>
<changelog author="vcizek@suse.com" date="1435060800">- loadavg on Linux is a sum over all CPUs, so multiply LOADAVG_MX
  by the amount of CPUs when comparing to loadavg (bnc#889174)
  * added at-adjust_load_to_cpu_count.patch</changelog>
<changelog author="kstreitova@suse.com" date="1444737600">- add at-3.1.13-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>

</package>
<package pkgid="e83d9faa96dca3ba71447be8df3f376920a787cb27d43f3d4b580fafab57fe8f" name="at" arch="src">
    <version epoch="0" ver="3.1.13" rel="5.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1323086400">- Support systemd.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1323086401">- Fix rpmlint warnings</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="coolo@suse.com" date="1324382401">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="opensuse@cboltz.de" date="1347537600">- fix atd.service (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>

</package>
<package pkgid="f2366d523bcc12dee0ef6fefa4a822675e44c70b4d24f78f35d663861079249b" name="at" arch="src">
    <version epoch="0" ver="3.1.13" rel="5.8.1"/>

<changelog author="crrodriguez@opensuse.org" date="1323086400">- Fix rpmlint warnings</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="coolo@suse.com" date="1324382401">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="opensuse@cboltz.de" date="1347537600">- fix atd.service (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="pgajdos@suse.com" date="1406635200">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>

</package>
<package pkgid="10ca196d0f23257150747afbeefb17de86b3853a79cdab73ed8a5e08d9876af4" name="at" arch="x86_64">
    <version epoch="0" ver="3.1.13" rel="5.14.1"/>

<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="opensuse@cboltz.de" date="1347537600">- fix atd.service (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="pgajdos@suse.com" date="1406635200">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>
<changelog author="kstreitova@suse.com" date="1412251200">- Add at-3.1.13-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160).</changelog>
<changelog author="kstreitova@suse.com" date="1412683200">- Replace at-3.1.13-sane-envkeys.patch with the upstream fix
  (bnc#899160)</changelog>

</package>
<package pkgid="f46b66897d195eef46f7c6f3aa8d3223d64d389186844552c788add6582ac99c" name="at" arch="x86_64">
    <version epoch="0" ver="3.1.13" rel="5.17.1"/>

<changelog author="opensuse@cboltz.de" date="1347537600">- fix atd.service (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="pgajdos@suse.com" date="1406635200">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>
<changelog author="kstreitova@suse.com" date="1412251200">- Add at-3.1.13-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160).</changelog>
<changelog author="kstreitova@suse.com" date="1412683200">- Replace at-3.1.13-sane-envkeys.patch with the upstream fix
  (bnc#899160)</changelog>
<changelog author="vcizek@suse.com" date="1435060800">- loadavg on Linux is a sum over all CPUs, so multiply LOADAVG_MX
  by the amount of CPUs when comparing to loadavg (bnc#889174)
  * added at-adjust_load_to_cpu_count.patch</changelog>

</package>
<package pkgid="1259148d12b769f5034b2428e47712e2e4ada5a5440099521d49dc4cebd75e79" name="at" arch="x86_64">
    <version epoch="0" ver="3.1.13" rel="5.20.1"/>

<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="pgajdos@suse.com" date="1406635200">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>
<changelog author="kstreitova@suse.com" date="1412251200">- Add at-3.1.13-sane-envkeys.patch to skip exporting variables with
  awkward keys (bnc#899160).</changelog>
<changelog author="kstreitova@suse.com" date="1412683200">- Replace at-3.1.13-sane-envkeys.patch with the upstream fix
  (bnc#899160)</changelog>
<changelog author="vcizek@suse.com" date="1435060800">- loadavg on Linux is a sum over all CPUs, so multiply LOADAVG_MX
  by the amount of CPUs when comparing to loadavg (bnc#889174)
  * added at-adjust_load_to_cpu_count.patch</changelog>
<changelog author="kstreitova@suse.com" date="1444737600">- add at-3.1.13-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>

</package>
<package pkgid="a21d163322eb9c8307003643dc214a5491fa11680a7bb6f2cab52ef449464378" name="at" arch="x86_64">
    <version epoch="0" ver="3.1.13" rel="5.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1323086400">- Support systemd.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1323086401">- Fix rpmlint warnings</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="coolo@suse.com" date="1324382401">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="opensuse@cboltz.de" date="1347537600">- fix atd.service (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>

</package>
<package pkgid="1253c59ed9aa8ffc1c273921adf72872dfeb1ba011ec2aa5d616fa112b5f1770" name="at" arch="x86_64">
    <version epoch="0" ver="3.1.13" rel="5.8.1"/>

<changelog author="crrodriguez@opensuse.org" date="1323086400">- Fix rpmlint warnings</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="coolo@suse.com" date="1324382401">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="opensuse@cboltz.de" date="1347537600">- fix atd.service (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1353931200">- use /etc/sysconfig/atd variables in atd.service (bnc#780259#c4)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104000">- Fix systemd unit and sysconfig parsing the right way.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1354104001">- When sysconfig variables are empty, do not set stuff to zero
  just use the defaults.</changelog>
<changelog author="jengelh@inai.de" date="1357473600">- Use simpler HXmap_get in at-parse-suse-sysconfig.patch
  (bnc#780259)</changelog>
<changelog author="opensuse@cboltz.de" date="1360152000">- fix author information in at-parse-suse-sysconfig.patch (bnc#780259#c25)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering after syslog.target is no longer recommended.</changelog>
<changelog author="lang@b1-systems.de" date="1370952000">- updated to upstream 3.1.13
- ported patches to new source code in session with Stefan Seyfried
- removed unnecessary patches</changelog>
<changelog author="schwab@suse.de" date="1371556800">- at-makefile-deps.patch: fix makefile dependencies</changelog>
<changelog author="crrodriguez@opensuse.org" date="1371729600">- at.sleep move away from pm-utils to systemd-sleep</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716800">- Use /run not /var/run to store the pid file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1373716801">- systemd: start as non-forking service
- systemd: start after systemd-user-sessions.service</changelog>
<changelog author="werner@suse.de" date="1373889600">- No http://0pointer.de/public/systemd-units/atd.service anymore</changelog>
<changelog author="crrodriguez@opensuse.org" date="1381060800">- at-secure_getenv.patch at must use secure_getenv.</changelog>
<changelog author="meissner@suse.com" date="1382443200">- adding service hook was in %verifyscript section not in %post</changelog>
<changelog author="mvyskocil@suse.com" date="1384257600">- use old privs model (fixes bnc#849720)
  * at-backport-old-privs.patch
- do not install sysvinit script and service file together
- add sticky bit to atjobs</changelog>
<changelog author="pgajdos@suse.com" date="1406635200">- introduced -o &lt;timeformat&gt; switch for atq [bnc#879402]
  * added at-atq-timeformat.patch</changelog>

</package>
<package pkgid="2489dbb5a215154b1e08247be498020463d4356350e464537da64e987aa6e9cb" name="at-spi2-atk" arch="src">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.6.0:
  + Fix some crashes in atk_bridge_adaptor_cleanup (bgo#684434)
  + When the cache is activated, register it on the main D-Bus
    connection.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Make atk-bridge location empty in the schema, to fix problems
    with multilib builds.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Up libatspi dependency to what is actually required
    (bgo#686667).
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1353067200">- Update to version 2.7.1:
  + Remove the schema; it was only used to specify the location of
    the atk-bridge library, which is now installed in the standard
    path.
  + Fix compiler warnings (bgo#678045).
- Drop glib2_gsettings_schema_post/postun schema handling from
  - common package, as there are no more schemas installed.</changelog>
<changelog author="dimstar@opensuse.org" date="1353844800">- Update to version 2.7.2:
  + atk-adaptor: don't emit a critical in case the bridge was not
    initialized (bgo#684334).
  + Remove dbind (it was only used for the droute test).
  + Fix a crash in socket_embed_hook if spi_global_register is NULL
  + [droute] Fix memory leak in path cleanup (bgo#688363).</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Re-register if the registry goes away and later returns.
  + Stop using deprecated glib functions.
  + Fix a few memory leaks.
- Add BuildRequires:  pkgconfig(glib-2.0), so we can version it.
- Remove a cosmetic '-' in order to remove a rpmlint warning about
  summary being to long.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Support ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Bump atk dependency to 2.7.5 (bgo#693189).
- Clean up BuildRequires to match what configure looks for:
  + Removed: atk-devel, gtk2-devel
  + Added: pkgconfig(atk), pkgconfig(dbus-1),
    pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0).</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add Locale property (bgo#694368).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + No changes since version 2.7.91.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.8.1:
  + Fix memory leak in socketadaptor.c (bgo#696733).
  + Fix a crash when handling a D-Bus method reply after
    deinitialization.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix various DBusError leaks (bgo#698951).
  + Suppress a warning if an app returns NULL when referencing a
    child.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Fix reentrancy issues with gnome-shell (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Fix a deadlock for apps that also register AT-SPI key event
    listeners (ie, the Orca preferences dialog works again).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix another crash when we're initialized and shut down
    repeatedly.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Implement GetStringAtOffset (bgo#7055810).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Properly clean up when timing out when motifying keystroke
    listeners (bgo#707218).
  + Allow lists of attribute values when reading collection match
    rules (bgo#700865).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since version 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1380283200">- Require at-spi2-core from libatk-bridge-2_0-0: the library
  interacts on DBus with org.a11y (bnc#818808#c4).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atk_component_contains wrapper (bgo#710730).</changelog>

</package>
<package pkgid="01e2eb4fd0715dc0e0e008c59821a50c484e8fb8f9186416046378f930b8cc87" name="at-spi2-atk-common" arch="i586">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.6.0:
  + Fix some crashes in atk_bridge_adaptor_cleanup (bgo#684434)
  + When the cache is activated, register it on the main D-Bus
    connection.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Make atk-bridge location empty in the schema, to fix problems
    with multilib builds.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Up libatspi dependency to what is actually required
    (bgo#686667).
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1353067200">- Update to version 2.7.1:
  + Remove the schema; it was only used to specify the location of
    the atk-bridge library, which is now installed in the standard
    path.
  + Fix compiler warnings (bgo#678045).
- Drop glib2_gsettings_schema_post/postun schema handling from
  - common package, as there are no more schemas installed.</changelog>
<changelog author="dimstar@opensuse.org" date="1353844800">- Update to version 2.7.2:
  + atk-adaptor: don't emit a critical in case the bridge was not
    initialized (bgo#684334).
  + Remove dbind (it was only used for the droute test).
  + Fix a crash in socket_embed_hook if spi_global_register is NULL
  + [droute] Fix memory leak in path cleanup (bgo#688363).</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Re-register if the registry goes away and later returns.
  + Stop using deprecated glib functions.
  + Fix a few memory leaks.
- Add BuildRequires:  pkgconfig(glib-2.0), so we can version it.
- Remove a cosmetic '-' in order to remove a rpmlint warning about
  summary being to long.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Support ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Bump atk dependency to 2.7.5 (bgo#693189).
- Clean up BuildRequires to match what configure looks for:
  + Removed: atk-devel, gtk2-devel
  + Added: pkgconfig(atk), pkgconfig(dbus-1),
    pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0).</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add Locale property (bgo#694368).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + No changes since version 2.7.91.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.8.1:
  + Fix memory leak in socketadaptor.c (bgo#696733).
  + Fix a crash when handling a D-Bus method reply after
    deinitialization.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix various DBusError leaks (bgo#698951).
  + Suppress a warning if an app returns NULL when referencing a
    child.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Fix reentrancy issues with gnome-shell (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Fix a deadlock for apps that also register AT-SPI key event
    listeners (ie, the Orca preferences dialog works again).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix another crash when we're initialized and shut down
    repeatedly.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Implement GetStringAtOffset (bgo#7055810).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Properly clean up when timing out when motifying keystroke
    listeners (bgo#707218).
  + Allow lists of attribute values when reading collection match
    rules (bgo#700865).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since version 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1380283200">- Require at-spi2-core from libatk-bridge-2_0-0: the library
  interacts on DBus with org.a11y (bnc#818808#c4).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atk_component_contains wrapper (bgo#710730).</changelog>

</package>
<package pkgid="065493fb53f93cb142def7dacd38d4e841273a461f01c5ee91227565b5ec0352" name="at-spi2-atk-common" arch="x86_64">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.6.0:
  + Fix some crashes in atk_bridge_adaptor_cleanup (bgo#684434)
  + When the cache is activated, register it on the main D-Bus
    connection.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Make atk-bridge location empty in the schema, to fix problems
    with multilib builds.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Up libatspi dependency to what is actually required
    (bgo#686667).
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1353067200">- Update to version 2.7.1:
  + Remove the schema; it was only used to specify the location of
    the atk-bridge library, which is now installed in the standard
    path.
  + Fix compiler warnings (bgo#678045).
- Drop glib2_gsettings_schema_post/postun schema handling from
  - common package, as there are no more schemas installed.</changelog>
<changelog author="dimstar@opensuse.org" date="1353844800">- Update to version 2.7.2:
  + atk-adaptor: don't emit a critical in case the bridge was not
    initialized (bgo#684334).
  + Remove dbind (it was only used for the droute test).
  + Fix a crash in socket_embed_hook if spi_global_register is NULL
  + [droute] Fix memory leak in path cleanup (bgo#688363).</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Re-register if the registry goes away and later returns.
  + Stop using deprecated glib functions.
  + Fix a few memory leaks.
- Add BuildRequires:  pkgconfig(glib-2.0), so we can version it.
- Remove a cosmetic '-' in order to remove a rpmlint warning about
  summary being to long.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Support ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Bump atk dependency to 2.7.5 (bgo#693189).
- Clean up BuildRequires to match what configure looks for:
  + Removed: atk-devel, gtk2-devel
  + Added: pkgconfig(atk), pkgconfig(dbus-1),
    pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0).</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add Locale property (bgo#694368).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + No changes since version 2.7.91.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.8.1:
  + Fix memory leak in socketadaptor.c (bgo#696733).
  + Fix a crash when handling a D-Bus method reply after
    deinitialization.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix various DBusError leaks (bgo#698951).
  + Suppress a warning if an app returns NULL when referencing a
    child.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Fix reentrancy issues with gnome-shell (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Fix a deadlock for apps that also register AT-SPI key event
    listeners (ie, the Orca preferences dialog works again).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix another crash when we're initialized and shut down
    repeatedly.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Implement GetStringAtOffset (bgo#7055810).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Properly clean up when timing out when motifying keystroke
    listeners (bgo#707218).
  + Allow lists of attribute values when reading collection match
    rules (bgo#700865).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since version 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1380283200">- Require at-spi2-core from libatk-bridge-2_0-0: the library
  interacts on DBus with org.a11y (bnc#818808#c4).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atk_component_contains wrapper (bgo#710730).</changelog>

</package>
<package pkgid="29b7a63cfeaaec4519de68cc34c67cf30738387101a6f0f43907942901a24a36" name="at-spi2-atk-devel" arch="i586">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.6.0:
  + Fix some crashes in atk_bridge_adaptor_cleanup (bgo#684434)
  + When the cache is activated, register it on the main D-Bus
    connection.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Make atk-bridge location empty in the schema, to fix problems
    with multilib builds.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Up libatspi dependency to what is actually required
    (bgo#686667).
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1353067200">- Update to version 2.7.1:
  + Remove the schema; it was only used to specify the location of
    the atk-bridge library, which is now installed in the standard
    path.
  + Fix compiler warnings (bgo#678045).
- Drop glib2_gsettings_schema_post/postun schema handling from
  - common package, as there are no more schemas installed.</changelog>
<changelog author="dimstar@opensuse.org" date="1353844800">- Update to version 2.7.2:
  + atk-adaptor: don't emit a critical in case the bridge was not
    initialized (bgo#684334).
  + Remove dbind (it was only used for the droute test).
  + Fix a crash in socket_embed_hook if spi_global_register is NULL
  + [droute] Fix memory leak in path cleanup (bgo#688363).</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Re-register if the registry goes away and later returns.
  + Stop using deprecated glib functions.
  + Fix a few memory leaks.
- Add BuildRequires:  pkgconfig(glib-2.0), so we can version it.
- Remove a cosmetic '-' in order to remove a rpmlint warning about
  summary being to long.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Support ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Bump atk dependency to 2.7.5 (bgo#693189).
- Clean up BuildRequires to match what configure looks for:
  + Removed: atk-devel, gtk2-devel
  + Added: pkgconfig(atk), pkgconfig(dbus-1),
    pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0).</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add Locale property (bgo#694368).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + No changes since version 2.7.91.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.8.1:
  + Fix memory leak in socketadaptor.c (bgo#696733).
  + Fix a crash when handling a D-Bus method reply after
    deinitialization.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix various DBusError leaks (bgo#698951).
  + Suppress a warning if an app returns NULL when referencing a
    child.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Fix reentrancy issues with gnome-shell (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Fix a deadlock for apps that also register AT-SPI key event
    listeners (ie, the Orca preferences dialog works again).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix another crash when we're initialized and shut down
    repeatedly.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Implement GetStringAtOffset (bgo#7055810).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Properly clean up when timing out when motifying keystroke
    listeners (bgo#707218).
  + Allow lists of attribute values when reading collection match
    rules (bgo#700865).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since version 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1380283200">- Require at-spi2-core from libatk-bridge-2_0-0: the library
  interacts on DBus with org.a11y (bnc#818808#c4).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atk_component_contains wrapper (bgo#710730).</changelog>

</package>
<package pkgid="f592baa2660e855173dd4b0222b39340946c9e698b28c3b20ce900bef4915909" name="at-spi2-atk-devel" arch="x86_64">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.6.0:
  + Fix some crashes in atk_bridge_adaptor_cleanup (bgo#684434)
  + When the cache is activated, register it on the main D-Bus
    connection.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Make atk-bridge location empty in the schema, to fix problems
    with multilib builds.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Up libatspi dependency to what is actually required
    (bgo#686667).
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1353067200">- Update to version 2.7.1:
  + Remove the schema; it was only used to specify the location of
    the atk-bridge library, which is now installed in the standard
    path.
  + Fix compiler warnings (bgo#678045).
- Drop glib2_gsettings_schema_post/postun schema handling from
  - common package, as there are no more schemas installed.</changelog>
<changelog author="dimstar@opensuse.org" date="1353844800">- Update to version 2.7.2:
  + atk-adaptor: don't emit a critical in case the bridge was not
    initialized (bgo#684334).
  + Remove dbind (it was only used for the droute test).
  + Fix a crash in socket_embed_hook if spi_global_register is NULL
  + [droute] Fix memory leak in path cleanup (bgo#688363).</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Re-register if the registry goes away and later returns.
  + Stop using deprecated glib functions.
  + Fix a few memory leaks.
- Add BuildRequires:  pkgconfig(glib-2.0), so we can version it.
- Remove a cosmetic '-' in order to remove a rpmlint warning about
  summary being to long.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Support ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Bump atk dependency to 2.7.5 (bgo#693189).
- Clean up BuildRequires to match what configure looks for:
  + Removed: atk-devel, gtk2-devel
  + Added: pkgconfig(atk), pkgconfig(dbus-1),
    pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0).</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add Locale property (bgo#694368).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + No changes since version 2.7.91.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.8.1:
  + Fix memory leak in socketadaptor.c (bgo#696733).
  + Fix a crash when handling a D-Bus method reply after
    deinitialization.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix various DBusError leaks (bgo#698951).
  + Suppress a warning if an app returns NULL when referencing a
    child.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Fix reentrancy issues with gnome-shell (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Fix a deadlock for apps that also register AT-SPI key event
    listeners (ie, the Orca preferences dialog works again).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix another crash when we're initialized and shut down
    repeatedly.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Implement GetStringAtOffset (bgo#7055810).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Properly clean up when timing out when motifying keystroke
    listeners (bgo#707218).
  + Allow lists of attribute values when reading collection match
    rules (bgo#700865).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since version 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1380283200">- Require at-spi2-core from libatk-bridge-2_0-0: the library
  interacts on DBus with org.a11y (bnc#818808#c4).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atk_component_contains wrapper (bgo#710730).</changelog>

</package>
<package pkgid="f853cd7e3caa6807fd9b2b15c85986e7d4e18660f64ed58b71dc28481ca405ae" name="at-spi2-atk-gtk2" arch="i586">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.6.0:
  + Fix some crashes in atk_bridge_adaptor_cleanup (bgo#684434)
  + When the cache is activated, register it on the main D-Bus
    connection.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Make atk-bridge location empty in the schema, to fix problems
    with multilib builds.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Up libatspi dependency to what is actually required
    (bgo#686667).
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1353067200">- Update to version 2.7.1:
  + Remove the schema; it was only used to specify the location of
    the atk-bridge library, which is now installed in the standard
    path.
  + Fix compiler warnings (bgo#678045).
- Drop glib2_gsettings_schema_post/postun schema handling from
  - common package, as there are no more schemas installed.</changelog>
<changelog author="dimstar@opensuse.org" date="1353844800">- Update to version 2.7.2:
  + atk-adaptor: don't emit a critical in case the bridge was not
    initialized (bgo#684334).
  + Remove dbind (it was only used for the droute test).
  + Fix a crash in socket_embed_hook if spi_global_register is NULL
  + [droute] Fix memory leak in path cleanup (bgo#688363).</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Re-register if the registry goes away and later returns.
  + Stop using deprecated glib functions.
  + Fix a few memory leaks.
- Add BuildRequires:  pkgconfig(glib-2.0), so we can version it.
- Remove a cosmetic '-' in order to remove a rpmlint warning about
  summary being to long.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Support ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Bump atk dependency to 2.7.5 (bgo#693189).
- Clean up BuildRequires to match what configure looks for:
  + Removed: atk-devel, gtk2-devel
  + Added: pkgconfig(atk), pkgconfig(dbus-1),
    pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0).</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add Locale property (bgo#694368).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + No changes since version 2.7.91.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.8.1:
  + Fix memory leak in socketadaptor.c (bgo#696733).
  + Fix a crash when handling a D-Bus method reply after
    deinitialization.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix various DBusError leaks (bgo#698951).
  + Suppress a warning if an app returns NULL when referencing a
    child.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Fix reentrancy issues with gnome-shell (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Fix a deadlock for apps that also register AT-SPI key event
    listeners (ie, the Orca preferences dialog works again).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix another crash when we're initialized and shut down
    repeatedly.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Implement GetStringAtOffset (bgo#7055810).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Properly clean up when timing out when motifying keystroke
    listeners (bgo#707218).
  + Allow lists of attribute values when reading collection match
    rules (bgo#700865).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since version 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1380283200">- Require at-spi2-core from libatk-bridge-2_0-0: the library
  interacts on DBus with org.a11y (bnc#818808#c4).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atk_component_contains wrapper (bgo#710730).</changelog>

</package>
<package pkgid="31fce3e15ceeb301a4a2bcc0fe5afbdb5d026c4f24836dddf0ffd604ed8f41e6" name="at-spi2-atk-gtk2" arch="x86_64">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 2.6.0:
  + Fix some crashes in atk_bridge_adaptor_cleanup (bgo#684434)
  + When the cache is activated, register it on the main D-Bus
    connection.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Make atk-bridge location empty in the schema, to fix problems
    with multilib builds.</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Up libatspi dependency to what is actually required
    (bgo#686667).
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1353067200">- Update to version 2.7.1:
  + Remove the schema; it was only used to specify the location of
    the atk-bridge library, which is now installed in the standard
    path.
  + Fix compiler warnings (bgo#678045).
- Drop glib2_gsettings_schema_post/postun schema handling from
  - common package, as there are no more schemas installed.</changelog>
<changelog author="dimstar@opensuse.org" date="1353844800">- Update to version 2.7.2:
  + atk-adaptor: don't emit a critical in case the bridge was not
    initialized (bgo#684334).
  + Remove dbind (it was only used for the droute test).
  + Fix a crash in socket_embed_hook if spi_global_register is NULL
  + [droute] Fix memory leak in path cleanup (bgo#688363).</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Re-register if the registry goes away and later returns.
  + Stop using deprecated glib functions.
  + Fix a few memory leaks.
- Add BuildRequires:  pkgconfig(glib-2.0), so we can version it.
- Remove a cosmetic '-' in order to remove a rpmlint warning about
  summary being to long.</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Support ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Bump atk dependency to 2.7.5 (bgo#693189).
- Clean up BuildRequires to match what configure looks for:
  + Removed: atk-devel, gtk2-devel
  + Added: pkgconfig(atk), pkgconfig(dbus-1),
    pkgconfig(gmodule-2.0) and pkgconfig(gobject-2.0).</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add Locale property (bgo#694368).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + No changes since version 2.7.91.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.8.1:
  + Fix memory leak in socketadaptor.c (bgo#696733).
  + Fix a crash when handling a D-Bus method reply after
    deinitialization.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix various DBusError leaks (bgo#698951).
  + Suppress a warning if an app returns NULL when referencing a
    child.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Fix reentrancy issues with gnome-shell (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Fix a deadlock for apps that also register AT-SPI key event
    listeners (ie, the Orca preferences dialog works again).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix another crash when we're initialized and shut down
    repeatedly.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Implement GetStringAtOffset (bgo#7055810).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Properly clean up when timing out when motifying keystroke
    listeners (bgo#707218).
  + Allow lists of attribute values when reading collection match
    rules (bgo#700865).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since version 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1380283200">- Require at-spi2-core from libatk-bridge-2_0-0: the library
  interacts on DBus with org.a11y (bnc#818808#c4).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atk_component_contains wrapper (bgo#710730).</changelog>

</package>
<package pkgid="90f3054027aca353fae8406a1619ecbeabf2dbeca70da2528519756034c5a22f" name="at-spi2-core" arch="i586">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Update cache in response to role change notifications
    (bgo#685469).</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Don't output a warning when a p2p connection isn't available.
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1354536000">- Add baselibs.conf in order to provide libatspi0-32bit and
  at-spi2-core-devel-32bit. The library is needed by
  libatk-bridge-2_0-0-32bit.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 2.6.3:
  + Fix several crashes.
  + Fix atspi_accessible_get_index_in_parent when the parent is not
    cached.
  + Fix deregistering of applications.
  + Fix some compiler warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Atspi_accessible_get_index_in_parent no longer returns -1 if
    the object's parent is not cached (bgo#688057).
  + Re-register keystroke listeners if the registry goes away and
    then returns.
  + Fix atspi_device_listener_new_simple.
  + Fix some compiler warnings.
  + Build: use gobject-introspection's Makefile instead of rolling
    our own.
  + Fix a crash when parsing events without detail when there is a
    listener for the event that names a specific detail value.
  + Fix crash when removing hung processes.
  + Fix deregistering of applications.
  + A few documentation fixes.
- Changes from version 2.7.2:
  + Only call an event listener once per event, even if the
    listener registered for both the event and a superset of the
    event.
  + Don't distribute dbind-config.h (bgo#688083).
  + Fix gtk-doc for Atspi-Registry (bgo#688224).
  + Some introspection fixes to make vapigen happy (bgo#688223).
  + Fixed a crash handling DeregisterKeystrokeListener.
- Changes from version 2.7.1:
  + Update the cache in response to role change notifications
    (bgo#685469).
  + Don't output a warning when a p2p connection isn't available.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 2.7.4.1:
  + Fix some ref count leaks.
  + Some functions that return accessibles now propagate errors.
- Add at-spi2-core-brp-fixes.patch: Fix brp errors (no return in
  non-void function and void return).</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Add ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.
- Drop at-spi2-core-brp-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Removed a debug print that was accidentally included in 2.7.5.</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add atspi_accessible_get_object_locale (bgo#694368).
  + Start the bus launcher in the initialization phase
    (bgo#694984).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix D-Bus introspection for GetActions.
  + Use glib-mkenums to generate enum types, and use these
    generated types for role and state names, rather than static
    tables.
  + nnotate filter in atspi_register_device_event_listener with
    allow-none (bgo#700237).
  + Rename various functions to avoid name collisions (bgo#700243).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Add atspi_is_initialized (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Add atspi_set_main_context (mainly for use by at-spi2-atk).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix possible memory leak when D-Bus calls time out.
  + Fix a memory leak in atspi_accessible_get_role_name that was
    introduced earlier in the 2.9 cycle with the enum refactor.
  + A couple of functions not intended for introspection are now
    marked as skip.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Separate out X-dependent functionality, allow building without
    X11 (bgo#682199, bgo#701378).
  + Add atspi_text_get_string_at_offset, and deprecate
    atspi_text_get_text_at_offset.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 2.9.91:
  + Fix a performance issue when running for a long time without a
    main loop, such as with a dogtail script (bgo#701145).
  + Remove an unneeded unref that was causing a warning
    (bgo#706893).
  + Skip some functions that were not introspectable (bgo#707010).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Fix multiple deadlocks with keystroke listeners (bgo#707218).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 2.10.1:
  + Fix a leak introduced in 2.9.92 that adversely affected
    performance (bgo#709625).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atspi_component_contains (bgo#710730).
  + Hopefully fix a crash when unable to register with the session
    manager (bgo#710689).</changelog>

</package>
<package pkgid="d08e85875f26b4a7a2c3a8d193c7777801b547845495f97f84fa894a2078666a" name="at-spi2-core" arch="src">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Update cache in response to role change notifications
    (bgo#685469).</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Don't output a warning when a p2p connection isn't available.
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1354536000">- Add baselibs.conf in order to provide libatspi0-32bit and
  at-spi2-core-devel-32bit. The library is needed by
  libatk-bridge-2_0-0-32bit.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 2.6.3:
  + Fix several crashes.
  + Fix atspi_accessible_get_index_in_parent when the parent is not
    cached.
  + Fix deregistering of applications.
  + Fix some compiler warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Atspi_accessible_get_index_in_parent no longer returns -1 if
    the object's parent is not cached (bgo#688057).
  + Re-register keystroke listeners if the registry goes away and
    then returns.
  + Fix atspi_device_listener_new_simple.
  + Fix some compiler warnings.
  + Build: use gobject-introspection's Makefile instead of rolling
    our own.
  + Fix a crash when parsing events without detail when there is a
    listener for the event that names a specific detail value.
  + Fix crash when removing hung processes.
  + Fix deregistering of applications.
  + A few documentation fixes.
- Changes from version 2.7.2:
  + Only call an event listener once per event, even if the
    listener registered for both the event and a superset of the
    event.
  + Don't distribute dbind-config.h (bgo#688083).
  + Fix gtk-doc for Atspi-Registry (bgo#688224).
  + Some introspection fixes to make vapigen happy (bgo#688223).
  + Fixed a crash handling DeregisterKeystrokeListener.
- Changes from version 2.7.1:
  + Update the cache in response to role change notifications
    (bgo#685469).
  + Don't output a warning when a p2p connection isn't available.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 2.7.4.1:
  + Fix some ref count leaks.
  + Some functions that return accessibles now propagate errors.
- Add at-spi2-core-brp-fixes.patch: Fix brp errors (no return in
  non-void function and void return).</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Add ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.
- Drop at-spi2-core-brp-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Removed a debug print that was accidentally included in 2.7.5.</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add atspi_accessible_get_object_locale (bgo#694368).
  + Start the bus launcher in the initialization phase
    (bgo#694984).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix D-Bus introspection for GetActions.
  + Use glib-mkenums to generate enum types, and use these
    generated types for role and state names, rather than static
    tables.
  + nnotate filter in atspi_register_device_event_listener with
    allow-none (bgo#700237).
  + Rename various functions to avoid name collisions (bgo#700243).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Add atspi_is_initialized (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Add atspi_set_main_context (mainly for use by at-spi2-atk).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix possible memory leak when D-Bus calls time out.
  + Fix a memory leak in atspi_accessible_get_role_name that was
    introduced earlier in the 2.9 cycle with the enum refactor.
  + A couple of functions not intended for introspection are now
    marked as skip.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Separate out X-dependent functionality, allow building without
    X11 (bgo#682199, bgo#701378).
  + Add atspi_text_get_string_at_offset, and deprecate
    atspi_text_get_text_at_offset.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 2.9.91:
  + Fix a performance issue when running for a long time without a
    main loop, such as with a dogtail script (bgo#701145).
  + Remove an unneeded unref that was causing a warning
    (bgo#706893).
  + Skip some functions that were not introspectable (bgo#707010).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Fix multiple deadlocks with keystroke listeners (bgo#707218).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 2.10.1:
  + Fix a leak introduced in 2.9.92 that adversely affected
    performance (bgo#709625).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atspi_component_contains (bgo#710730).
  + Hopefully fix a crash when unable to register with the session
    manager (bgo#710689).</changelog>

</package>
<package pkgid="1abb998cafef7ef2a728b5baa20977055392afc7315952ff24e5b4c410105b35" name="at-spi2-core" arch="x86_64">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Update cache in response to role change notifications
    (bgo#685469).</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Don't output a warning when a p2p connection isn't available.
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1354536000">- Add baselibs.conf in order to provide libatspi0-32bit and
  at-spi2-core-devel-32bit. The library is needed by
  libatk-bridge-2_0-0-32bit.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 2.6.3:
  + Fix several crashes.
  + Fix atspi_accessible_get_index_in_parent when the parent is not
    cached.
  + Fix deregistering of applications.
  + Fix some compiler warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Atspi_accessible_get_index_in_parent no longer returns -1 if
    the object's parent is not cached (bgo#688057).
  + Re-register keystroke listeners if the registry goes away and
    then returns.
  + Fix atspi_device_listener_new_simple.
  + Fix some compiler warnings.
  + Build: use gobject-introspection's Makefile instead of rolling
    our own.
  + Fix a crash when parsing events without detail when there is a
    listener for the event that names a specific detail value.
  + Fix crash when removing hung processes.
  + Fix deregistering of applications.
  + A few documentation fixes.
- Changes from version 2.7.2:
  + Only call an event listener once per event, even if the
    listener registered for both the event and a superset of the
    event.
  + Don't distribute dbind-config.h (bgo#688083).
  + Fix gtk-doc for Atspi-Registry (bgo#688224).
  + Some introspection fixes to make vapigen happy (bgo#688223).
  + Fixed a crash handling DeregisterKeystrokeListener.
- Changes from version 2.7.1:
  + Update the cache in response to role change notifications
    (bgo#685469).
  + Don't output a warning when a p2p connection isn't available.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 2.7.4.1:
  + Fix some ref count leaks.
  + Some functions that return accessibles now propagate errors.
- Add at-spi2-core-brp-fixes.patch: Fix brp errors (no return in
  non-void function and void return).</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Add ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.
- Drop at-spi2-core-brp-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Removed a debug print that was accidentally included in 2.7.5.</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add atspi_accessible_get_object_locale (bgo#694368).
  + Start the bus launcher in the initialization phase
    (bgo#694984).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix D-Bus introspection for GetActions.
  + Use glib-mkenums to generate enum types, and use these
    generated types for role and state names, rather than static
    tables.
  + nnotate filter in atspi_register_device_event_listener with
    allow-none (bgo#700237).
  + Rename various functions to avoid name collisions (bgo#700243).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Add atspi_is_initialized (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Add atspi_set_main_context (mainly for use by at-spi2-atk).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix possible memory leak when D-Bus calls time out.
  + Fix a memory leak in atspi_accessible_get_role_name that was
    introduced earlier in the 2.9 cycle with the enum refactor.
  + A couple of functions not intended for introspection are now
    marked as skip.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Separate out X-dependent functionality, allow building without
    X11 (bgo#682199, bgo#701378).
  + Add atspi_text_get_string_at_offset, and deprecate
    atspi_text_get_text_at_offset.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 2.9.91:
  + Fix a performance issue when running for a long time without a
    main loop, such as with a dogtail script (bgo#701145).
  + Remove an unneeded unref that was causing a warning
    (bgo#706893).
  + Skip some functions that were not introspectable (bgo#707010).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Fix multiple deadlocks with keystroke listeners (bgo#707218).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 2.10.1:
  + Fix a leak introduced in 2.9.92 that adversely affected
    performance (bgo#709625).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atspi_component_contains (bgo#710730).
  + Hopefully fix a crash when unable to register with the session
    manager (bgo#710689).</changelog>

</package>
<package pkgid="a80352f1b1a2cdf23213b0d2863e81e81b6e7954cacf6082f3c566f10bdfaf14" name="at-spi2-core-devel" arch="i586">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Update cache in response to role change notifications
    (bgo#685469).</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Don't output a warning when a p2p connection isn't available.
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1354536000">- Add baselibs.conf in order to provide libatspi0-32bit and
  at-spi2-core-devel-32bit. The library is needed by
  libatk-bridge-2_0-0-32bit.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 2.6.3:
  + Fix several crashes.
  + Fix atspi_accessible_get_index_in_parent when the parent is not
    cached.
  + Fix deregistering of applications.
  + Fix some compiler warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Atspi_accessible_get_index_in_parent no longer returns -1 if
    the object's parent is not cached (bgo#688057).
  + Re-register keystroke listeners if the registry goes away and
    then returns.
  + Fix atspi_device_listener_new_simple.
  + Fix some compiler warnings.
  + Build: use gobject-introspection's Makefile instead of rolling
    our own.
  + Fix a crash when parsing events without detail when there is a
    listener for the event that names a specific detail value.
  + Fix crash when removing hung processes.
  + Fix deregistering of applications.
  + A few documentation fixes.
- Changes from version 2.7.2:
  + Only call an event listener once per event, even if the
    listener registered for both the event and a superset of the
    event.
  + Don't distribute dbind-config.h (bgo#688083).
  + Fix gtk-doc for Atspi-Registry (bgo#688224).
  + Some introspection fixes to make vapigen happy (bgo#688223).
  + Fixed a crash handling DeregisterKeystrokeListener.
- Changes from version 2.7.1:
  + Update the cache in response to role change notifications
    (bgo#685469).
  + Don't output a warning when a p2p connection isn't available.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 2.7.4.1:
  + Fix some ref count leaks.
  + Some functions that return accessibles now propagate errors.
- Add at-spi2-core-brp-fixes.patch: Fix brp errors (no return in
  non-void function and void return).</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Add ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.
- Drop at-spi2-core-brp-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Removed a debug print that was accidentally included in 2.7.5.</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add atspi_accessible_get_object_locale (bgo#694368).
  + Start the bus launcher in the initialization phase
    (bgo#694984).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix D-Bus introspection for GetActions.
  + Use glib-mkenums to generate enum types, and use these
    generated types for role and state names, rather than static
    tables.
  + nnotate filter in atspi_register_device_event_listener with
    allow-none (bgo#700237).
  + Rename various functions to avoid name collisions (bgo#700243).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Add atspi_is_initialized (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Add atspi_set_main_context (mainly for use by at-spi2-atk).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix possible memory leak when D-Bus calls time out.
  + Fix a memory leak in atspi_accessible_get_role_name that was
    introduced earlier in the 2.9 cycle with the enum refactor.
  + A couple of functions not intended for introspection are now
    marked as skip.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Separate out X-dependent functionality, allow building without
    X11 (bgo#682199, bgo#701378).
  + Add atspi_text_get_string_at_offset, and deprecate
    atspi_text_get_text_at_offset.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 2.9.91:
  + Fix a performance issue when running for a long time without a
    main loop, such as with a dogtail script (bgo#701145).
  + Remove an unneeded unref that was causing a warning
    (bgo#706893).
  + Skip some functions that were not introspectable (bgo#707010).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Fix multiple deadlocks with keystroke listeners (bgo#707218).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 2.10.1:
  + Fix a leak introduced in 2.9.92 that adversely affected
    performance (bgo#709625).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atspi_component_contains (bgo#710730).
  + Hopefully fix a crash when unable to register with the session
    manager (bgo#710689).</changelog>

</package>
<package pkgid="7bc6fd273e707e3ba0806cf114f14a799733e623a8edae898d5c6916ff97e96b" name="at-spi2-core-devel" arch="x86_64">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Update cache in response to role change notifications
    (bgo#685469).</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Don't output a warning when a p2p connection isn't available.
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1354536000">- Add baselibs.conf in order to provide libatspi0-32bit and
  at-spi2-core-devel-32bit. The library is needed by
  libatk-bridge-2_0-0-32bit.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 2.6.3:
  + Fix several crashes.
  + Fix atspi_accessible_get_index_in_parent when the parent is not
    cached.
  + Fix deregistering of applications.
  + Fix some compiler warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Atspi_accessible_get_index_in_parent no longer returns -1 if
    the object's parent is not cached (bgo#688057).
  + Re-register keystroke listeners if the registry goes away and
    then returns.
  + Fix atspi_device_listener_new_simple.
  + Fix some compiler warnings.
  + Build: use gobject-introspection's Makefile instead of rolling
    our own.
  + Fix a crash when parsing events without detail when there is a
    listener for the event that names a specific detail value.
  + Fix crash when removing hung processes.
  + Fix deregistering of applications.
  + A few documentation fixes.
- Changes from version 2.7.2:
  + Only call an event listener once per event, even if the
    listener registered for both the event and a superset of the
    event.
  + Don't distribute dbind-config.h (bgo#688083).
  + Fix gtk-doc for Atspi-Registry (bgo#688224).
  + Some introspection fixes to make vapigen happy (bgo#688223).
  + Fixed a crash handling DeregisterKeystrokeListener.
- Changes from version 2.7.1:
  + Update the cache in response to role change notifications
    (bgo#685469).
  + Don't output a warning when a p2p connection isn't available.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 2.7.4.1:
  + Fix some ref count leaks.
  + Some functions that return accessibles now propagate errors.
- Add at-spi2-core-brp-fixes.patch: Fix brp errors (no return in
  non-void function and void return).</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Add ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.
- Drop at-spi2-core-brp-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Removed a debug print that was accidentally included in 2.7.5.</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add atspi_accessible_get_object_locale (bgo#694368).
  + Start the bus launcher in the initialization phase
    (bgo#694984).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix D-Bus introspection for GetActions.
  + Use glib-mkenums to generate enum types, and use these
    generated types for role and state names, rather than static
    tables.
  + nnotate filter in atspi_register_device_event_listener with
    allow-none (bgo#700237).
  + Rename various functions to avoid name collisions (bgo#700243).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Add atspi_is_initialized (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Add atspi_set_main_context (mainly for use by at-spi2-atk).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix possible memory leak when D-Bus calls time out.
  + Fix a memory leak in atspi_accessible_get_role_name that was
    introduced earlier in the 2.9 cycle with the enum refactor.
  + A couple of functions not intended for introspection are now
    marked as skip.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Separate out X-dependent functionality, allow building without
    X11 (bgo#682199, bgo#701378).
  + Add atspi_text_get_string_at_offset, and deprecate
    atspi_text_get_text_at_offset.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 2.9.91:
  + Fix a performance issue when running for a long time without a
    main loop, such as with a dogtail script (bgo#701145).
  + Remove an unneeded unref that was causing a warning
    (bgo#706893).
  + Skip some functions that were not introspectable (bgo#707010).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Fix multiple deadlocks with keystroke listeners (bgo#707218).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 2.10.1:
  + Fix a leak introduced in 2.9.92 that adversely affected
    performance (bgo#709625).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atspi_component_contains (bgo#710730).
  + Hopefully fix a crash when unable to register with the session
    manager (bgo#710689).</changelog>

</package>
<package pkgid="1e4fd2ef0f4983181b3a9f1eeed87524e3da41843a3eeac77b332bf92056fd9f" name="at-spi2-core-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Update cache in response to role change notifications
    (bgo#685469).</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Don't output a warning when a p2p connection isn't available.
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1354536000">- Add baselibs.conf in order to provide libatspi0-32bit and
  at-spi2-core-devel-32bit. The library is needed by
  libatk-bridge-2_0-0-32bit.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 2.6.3:
  + Fix several crashes.
  + Fix atspi_accessible_get_index_in_parent when the parent is not
    cached.
  + Fix deregistering of applications.
  + Fix some compiler warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Atspi_accessible_get_index_in_parent no longer returns -1 if
    the object's parent is not cached (bgo#688057).
  + Re-register keystroke listeners if the registry goes away and
    then returns.
  + Fix atspi_device_listener_new_simple.
  + Fix some compiler warnings.
  + Build: use gobject-introspection's Makefile instead of rolling
    our own.
  + Fix a crash when parsing events without detail when there is a
    listener for the event that names a specific detail value.
  + Fix crash when removing hung processes.
  + Fix deregistering of applications.
  + A few documentation fixes.
- Changes from version 2.7.2:
  + Only call an event listener once per event, even if the
    listener registered for both the event and a superset of the
    event.
  + Don't distribute dbind-config.h (bgo#688083).
  + Fix gtk-doc for Atspi-Registry (bgo#688224).
  + Some introspection fixes to make vapigen happy (bgo#688223).
  + Fixed a crash handling DeregisterKeystrokeListener.
- Changes from version 2.7.1:
  + Update the cache in response to role change notifications
    (bgo#685469).
  + Don't output a warning when a p2p connection isn't available.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 2.7.4.1:
  + Fix some ref count leaks.
  + Some functions that return accessibles now propagate errors.
- Add at-spi2-core-brp-fixes.patch: Fix brp errors (no return in
  non-void function and void return).</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Add ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.
- Drop at-spi2-core-brp-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Removed a debug print that was accidentally included in 2.7.5.</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add atspi_accessible_get_object_locale (bgo#694368).
  + Start the bus launcher in the initialization phase
    (bgo#694984).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix D-Bus introspection for GetActions.
  + Use glib-mkenums to generate enum types, and use these
    generated types for role and state names, rather than static
    tables.
  + nnotate filter in atspi_register_device_event_listener with
    allow-none (bgo#700237).
  + Rename various functions to avoid name collisions (bgo#700243).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Add atspi_is_initialized (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Add atspi_set_main_context (mainly for use by at-spi2-atk).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix possible memory leak when D-Bus calls time out.
  + Fix a memory leak in atspi_accessible_get_role_name that was
    introduced earlier in the 2.9 cycle with the enum refactor.
  + A couple of functions not intended for introspection are now
    marked as skip.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Separate out X-dependent functionality, allow building without
    X11 (bgo#682199, bgo#701378).
  + Add atspi_text_get_string_at_offset, and deprecate
    atspi_text_get_text_at_offset.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 2.9.91:
  + Fix a performance issue when running for a long time without a
    main loop, such as with a dogtail script (bgo#701145).
  + Remove an unneeded unref that was causing a warning
    (bgo#706893).
  + Skip some functions that were not introspectable (bgo#707010).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Fix multiple deadlocks with keystroke listeners (bgo#707218).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 2.10.1:
  + Fix a leak introduced in 2.9.92 that adversely affected
    performance (bgo#709625).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atspi_component_contains (bgo#710730).
  + Hopefully fix a crash when unable to register with the session
    manager (bgo#710689).</changelog>

</package>
<package pkgid="62b442b436a524a8b17e03777c23a3f06e447143c8d9c7b2d6f5b4f7663ff71b" name="at-spi2-core-lang" arch="noarch">
    <version epoch="0" ver="2.10.2" rel="12.1"/>

<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 2.6.1:
  + Update cache in response to role change notifications
    (bgo#685469).</changelog>
<changelog author="dimstar@opensuse.org" date="1352980800">- Update to version 2.6.2:
  + Don't output a warning when a p2p connection isn't available.
  + Don't distribute dbind-config.h (bgo#688083).</changelog>
<changelog author="dimstar@opensuse.org" date="1354536000">- Add baselibs.conf in order to provide libatspi0-32bit and
  at-spi2-core-devel-32bit. The library is needed by
  libatk-bridge-2_0-0-32bit.</changelog>
<changelog author="vuntz@opensuse.org" date="1355227200">- Update to version 2.6.3:
  + Fix several crashes.
  + Fix atspi_accessible_get_index_in_parent when the parent is not
    cached.
  + Fix deregistering of applications.
  + Fix some compiler warnings.</changelog>
<changelog author="zaitor@opensuse.org" date="1356523200">- Update to version 2.7.3:
  + Atspi_accessible_get_index_in_parent no longer returns -1 if
    the object's parent is not cached (bgo#688057).
  + Re-register keystroke listeners if the registry goes away and
    then returns.
  + Fix atspi_device_listener_new_simple.
  + Fix some compiler warnings.
  + Build: use gobject-introspection's Makefile instead of rolling
    our own.
  + Fix a crash when parsing events without detail when there is a
    listener for the event that names a specific detail value.
  + Fix crash when removing hung processes.
  + Fix deregistering of applications.
  + A few documentation fixes.
- Changes from version 2.7.2:
  + Only call an event listener once per event, even if the
    listener registered for both the event and a superset of the
    event.
  + Don't distribute dbind-config.h (bgo#688083).
  + Fix gtk-doc for Atspi-Registry (bgo#688224).
  + Some introspection fixes to make vapigen happy (bgo#688223).
  + Fixed a crash handling DeregisterKeystrokeListener.
- Changes from version 2.7.1:
  + Update the cache in response to role change notifications
    (bgo#685469).
  + Don't output a warning when a p2p connection isn't available.</changelog>
<changelog author="dimstar@opensuse.org" date="1358251200">- Update to version 2.7.4.1:
  + Fix some ref count leaks.
  + Some functions that return accessibles now propagate errors.
- Add at-spi2-core-brp-fixes.patch: Fix brp errors (no return in
  non-void function and void return).</changelog>
<changelog author="dimstar@opensuse.org" date="1359979200">- Update to version 2.7.5:
  + Add ATSPI_ROLE_LEVEL_BAR to correspond to the new atk role.
  + Fix various compiler warnings.
- Drop at-spi2-core-brp-fixes.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1361275200">- Update to version 2.7.90:
  + Removed a debug print that was accidentally included in 2.7.5.</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 2.7.91:
  + Add atspi_accessible_get_object_locale (bgo#694368).
  + Start the bus launcher in the initialization phase
    (bgo#694984).</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 2.8.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 2.9.2:
  + Fix D-Bus introspection for GetActions.
  + Use glib-mkenums to generate enum types, and use these
    generated types for role and state names, rather than static
    tables.
  + nnotate filter in atspi_register_device_event_listener with
    allow-none (bgo#700237).
  + Rename various functions to avoid name collisions (bgo#700243).</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 2.9.3:
  + Add atspi_is_initialized (bgo#681276).</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 2.9.4:
  + Add atspi_set_main_context (mainly for use by at-spi2-atk).</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 2.9.5:
  + Fix possible memory leak when D-Bus calls time out.
  + Fix a memory leak in atspi_accessible_get_role_name that was
    introduced earlier in the 2.9 cycle with the enum refactor.
  + A couple of functions not intended for introspection are now
    marked as skip.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 2.9.90:
  + Separate out X-dependent functionality, allow building without
    X11 (bgo#682199, bgo#701378).
  + Add atspi_text_get_string_at_offset, and deprecate
    atspi_text_get_text_at_offset.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 2.9.91:
  + Fix a performance issue when running for a long time without a
    main loop, such as with a dogtail script (bgo#701145).
  + Remove an unneeded unref that was causing a warning
    (bgo#706893).
  + Skip some functions that were not introspectable (bgo#707010).</changelog>
<changelog author="zaitor@opensuse.org" date="1379332800">- Update to version 2.9.92:
  + Fix multiple deadlocks with keystroke listeners (bgo#707218).</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 2.10.0:
  + No changes since 2.9.92.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 2.10.1:
  + Fix a leak introduced in 2.9.92 that adversely affected
    performance (bgo#709625).</changelog>
<changelog author="dimstar@opensuse.org" date="1384257600">- Update to version 2.10.2 (bnc#849913):
  + Fix atspi_component_contains (bgo#710730).
  + Hopefully fix a crash when unable to register with the session
    manager (bgo#710689).</changelog>

</package>
<package pkgid="59c5e301f1e40fa8ab5e2afbeb560c0c9ae05936470147791690b07e82439939" name="atftp" arch="i586">
    <version epoch="0" ver="0.7.0" rel="157.3.1"/>

<changelog author="cristian.rodriguez@opensuse.org" date="1285156800">- add missing pcre-devel to build Requires (bnc#537425)</changelog>
<changelog author="chris@computersalat.de" date="1286971200">- modified init/sysconfig file
  o set defaults in init file
- added default group/user tftp:tftp (bnc#472282)
- added /srv/tftpboot as default ATFTPD_DIRECTORY (bnc#248008,507011)
- added logrotate script
  o --logfile /var/log/atftpd/atftp.log
- added missing README.MCAST, README.PCRE
- some rpmlint stuff
  o fixed missing-dependency-to-logrotate
  o fixed init non-remote_fs-dependency
  o fixed init no-reload-entry
  o fixed non-conffile-in-etc</changelog>
<changelog author="chris@computersalat.de" date="1288353600">- cleanup spec
  o RPM_BUILD_ROOT vs buildroot
- fix pre
  o no check before addding group/user (darix)
- fix files
  o provide /srv/tftpboot
- modify sysconfig
  o provide defaults (darix)</changelog>
<changelog author="vcizek@suse.com" date="1315310400">- added missing PreReq: pwdutils (bnc#683140)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="vcizek@suse.com" date="1320321600">- fixed the "Sorcerer's Apprentice Syndrome" bug
  (bnc#727843)</changelog>
<changelog author="vcizek@suse.com" date="1320840000">- licence in spdx format</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- added autoconf as BuildRequires</changelog>
<changelog author="vcizek@suse.com" date="1326283200">- fix a race condition where two server threads pick up a single
  client, which causes the transported file being overwritten
  (bnc#599856)</changelog>
<changelog author="vcizek@suse.com" date="1346846400">- prevent the sorcerer's apprentice syndrome situation only when
  explicitly specified by the user (bnc#774376)
  (added a new command line option --prevent-sas to turn it on)</changelog>
<changelog author="vcizek@suse.com" date="1347364800">- use the "su" logrotate directive (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347364801">- added rules for SuSEfirewall2 (bnc#729793)</changelog>
<changelog author="vcizek@suse.com" date="1349697600">- use Vladimir Nadvornik's heuristic for packet retransmission
  by default (see bnc#774376)
  The RFC1350 compliant behaviour stays optional.
  (added atftp-0.7-ack_heuristic.patch)
- merged the two sorcerer's apprentice syndrome patches to one
  (removed atftp-0.7-prevent-sas.patch)</changelog>
<changelog author="vcizek@suse.com" date="1357214400">- change ownership of /srv/tftpboot, because atftpd running as
  tftp:tftp can't write to that directory
- create pid directory on service start
- manpage changes:
  * substitute /tftpboot with /srv/tftpboot
  * default user is now tftp:tftp
  * added patches:
    atftp-0.7-default_user_man.patch
    atftp-0.7-default_dir_man.patch</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- create capabilites provided by both tftp and atftp
  (bnc#801481 or bnc#725378)</changelog>
<changelog author="mrueckert@suse.de" date="1434369600">- Fix typo in init script (boo #921219)</changelog>

</package>
<package pkgid="72718d311e89578afa3f10fe490cb49143671926956a4f28b30a2a4b21116b11" name="atftp" arch="i586">
    <version epoch="0" ver="0.7.0" rel="157.4.1"/>

<changelog author="vcizek@suse.com" date="1315310400">- added missing PreReq: pwdutils (bnc#683140)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="vcizek@suse.com" date="1320321600">- fixed the "Sorcerer's Apprentice Syndrome" bug
  (bnc#727843)</changelog>
<changelog author="vcizek@suse.com" date="1320840000">- licence in spdx format</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- added autoconf as BuildRequires</changelog>
<changelog author="vcizek@suse.com" date="1326283200">- fix a race condition where two server threads pick up a single
  client, which causes the transported file being overwritten
  (bnc#599856)</changelog>
<changelog author="vcizek@suse.com" date="1346846400">- prevent the sorcerer's apprentice syndrome situation only when
  explicitly specified by the user (bnc#774376)
  (added a new command line option --prevent-sas to turn it on)</changelog>
<changelog author="vcizek@suse.com" date="1347364800">- use the "su" logrotate directive (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347364801">- added rules for SuSEfirewall2 (bnc#729793)</changelog>
<changelog author="vcizek@suse.com" date="1349697600">- use Vladimir Nadvornik's heuristic for packet retransmission
  by default (see bnc#774376)
  The RFC1350 compliant behaviour stays optional.
  (added atftp-0.7-ack_heuristic.patch)
- merged the two sorcerer's apprentice syndrome patches to one
  (removed atftp-0.7-prevent-sas.patch)</changelog>
<changelog author="vcizek@suse.com" date="1357214400">- change ownership of /srv/tftpboot, because atftpd running as
  tftp:tftp can't write to that directory
- create pid directory on service start
- manpage changes:
  * substitute /tftpboot with /srv/tftpboot
  * default user is now tftp:tftp
  * added patches:
    atftp-0.7-default_user_man.patch
    atftp-0.7-default_dir_man.patch</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- create capabilites provided by both tftp and atftp
  (bnc#801481 or bnc#725378)</changelog>
<changelog author="chris@computersalat.de" date="1384257600">- rebase patches (p0)
- rename atftpd.init.d to atftpd.init
- fix spec
  * remove ghost /var/run/atftp (created by init)</changelog>
<changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
<changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
<changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
<changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
<changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>

</package>
<package pkgid="0eead04034d1a823d13975fbbfdf7dd36f678bcb289fdab65a3250382df5f14a" name="atftp" arch="src">
    <version epoch="0" ver="0.7.0" rel="157.3.1"/>

<changelog author="mrueckert@suse.de" date="1207224000">- added atftpd-0.7_unprotected_assignments_crash.patch: (bnc#291884)
  under high load atftpd dies as data access wasnt always protected
  with a mutex.</changelog>
<changelog author="ro@suse.de" date="1219406400">- change fillup_and_insserv to fillup_only (not active by default)</changelog>
<changelog author="mrueckert@suse.de" date="1221220800">- add atftpd-0.7_circumvent_tftp_size_restrictions.patch:
  allow block counts higher than 65536 (Fate#303031)
- replace network with remote_fs in the init script dependencies</changelog>
<changelog author="cristian.rodriguez@opensuse.org" date="1285156800">- add missing pcre-devel to build Requires (bnc#537425)</changelog>
<changelog author="chris@computersalat.de" date="1286971200">- modified init/sysconfig file
  o set defaults in init file
- added default group/user tftp:tftp (bnc#472282)
- added /srv/tftpboot as default ATFTPD_DIRECTORY (bnc#248008,507011)
- added logrotate script
  o --logfile /var/log/atftpd/atftp.log
- added missing README.MCAST, README.PCRE
- some rpmlint stuff
  o fixed missing-dependency-to-logrotate
  o fixed init non-remote_fs-dependency
  o fixed init no-reload-entry
  o fixed non-conffile-in-etc</changelog>
<changelog author="chris@computersalat.de" date="1288353600">- cleanup spec
  o RPM_BUILD_ROOT vs buildroot
- fix pre
  o no check before addding group/user (darix)
- fix files
  o provide /srv/tftpboot
- modify sysconfig
  o provide defaults (darix)</changelog>
<changelog author="vcizek@suse.com" date="1315310400">- added missing PreReq: pwdutils (bnc#683140)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="vcizek@suse.com" date="1320321600">- fixed the "Sorcerer's Apprentice Syndrome" bug
  (bnc#727843)</changelog>
<changelog author="vcizek@suse.com" date="1320840000">- licence in spdx format</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- added autoconf as BuildRequires</changelog>
<changelog author="vcizek@suse.com" date="1326283200">- fix a race condition where two server threads pick up a single
  client, which causes the transported file being overwritten
  (bnc#599856)</changelog>
<changelog author="vcizek@suse.com" date="1346846400">- prevent the sorcerer's apprentice syndrome situation only when
  explicitly specified by the user (bnc#774376)
  (added a new command line option --prevent-sas to turn it on)</changelog>
<changelog author="vcizek@suse.com" date="1347364800">- use the "su" logrotate directive (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347364801">- added rules for SuSEfirewall2 (bnc#729793)</changelog>
<changelog author="vcizek@suse.com" date="1349697600">- use Vladimir Nadvornik's heuristic for packet retransmission
  by default (see bnc#774376)
  The RFC1350 compliant behaviour stays optional.
  (added atftp-0.7-ack_heuristic.patch)
- merged the two sorcerer's apprentice syndrome patches to one
  (removed atftp-0.7-prevent-sas.patch)</changelog>
<changelog author="vcizek@suse.com" date="1357214400">- change ownership of /srv/tftpboot, because atftpd running as
  tftp:tftp can't write to that directory
- create pid directory on service start
- manpage changes:
  * substitute /tftpboot with /srv/tftpboot
  * default user is now tftp:tftp
  * added patches:
    atftp-0.7-default_user_man.patch
    atftp-0.7-default_dir_man.patch</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- create capabilites provided by both tftp and atftp
  (bnc#801481 or bnc#725378)</changelog>
<changelog author="mrueckert@suse.de" date="1434369600">- Fix typo in init script (boo #921219)</changelog>

</package>
<package pkgid="daa28100dc5080c5639178cc26fa593b432f013ff986f9e09733aa14cb882233" name="atftp" arch="src">
    <version epoch="0" ver="0.7.0" rel="157.4.1"/>

<changelog author="vcizek@suse.com" date="1315310400">- added missing PreReq: pwdutils (bnc#683140)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="vcizek@suse.com" date="1320321600">- fixed the "Sorcerer's Apprentice Syndrome" bug
  (bnc#727843)</changelog>
<changelog author="vcizek@suse.com" date="1320840000">- licence in spdx format</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- added autoconf as BuildRequires</changelog>
<changelog author="vcizek@suse.com" date="1326283200">- fix a race condition where two server threads pick up a single
  client, which causes the transported file being overwritten
  (bnc#599856)</changelog>
<changelog author="vcizek@suse.com" date="1346846400">- prevent the sorcerer's apprentice syndrome situation only when
  explicitly specified by the user (bnc#774376)
  (added a new command line option --prevent-sas to turn it on)</changelog>
<changelog author="vcizek@suse.com" date="1347364800">- use the "su" logrotate directive (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347364801">- added rules for SuSEfirewall2 (bnc#729793)</changelog>
<changelog author="vcizek@suse.com" date="1349697600">- use Vladimir Nadvornik's heuristic for packet retransmission
  by default (see bnc#774376)
  The RFC1350 compliant behaviour stays optional.
  (added atftp-0.7-ack_heuristic.patch)
- merged the two sorcerer's apprentice syndrome patches to one
  (removed atftp-0.7-prevent-sas.patch)</changelog>
<changelog author="vcizek@suse.com" date="1357214400">- change ownership of /srv/tftpboot, because atftpd running as
  tftp:tftp can't write to that directory
- create pid directory on service start
- manpage changes:
  * substitute /tftpboot with /srv/tftpboot
  * default user is now tftp:tftp
  * added patches:
    atftp-0.7-default_user_man.patch
    atftp-0.7-default_dir_man.patch</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- create capabilites provided by both tftp and atftp
  (bnc#801481 or bnc#725378)</changelog>
<changelog author="chris@computersalat.de" date="1384257600">- rebase patches (p0)
- rename atftpd.init.d to atftpd.init
- fix spec
  * remove ghost /var/run/atftp (created by init)</changelog>
<changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
<changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
<changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
<changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
<changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>

</package>
<package pkgid="64ca5ed648f09da26becb0c8c2f51c5bbf80a82611f6957ad1fe1d7252e37185" name="atftp" arch="x86_64">
    <version epoch="0" ver="0.7.0" rel="157.3.1"/>

<changelog author="cristian.rodriguez@opensuse.org" date="1285156800">- add missing pcre-devel to build Requires (bnc#537425)</changelog>
<changelog author="chris@computersalat.de" date="1286971200">- modified init/sysconfig file
  o set defaults in init file
- added default group/user tftp:tftp (bnc#472282)
- added /srv/tftpboot as default ATFTPD_DIRECTORY (bnc#248008,507011)
- added logrotate script
  o --logfile /var/log/atftpd/atftp.log
- added missing README.MCAST, README.PCRE
- some rpmlint stuff
  o fixed missing-dependency-to-logrotate
  o fixed init non-remote_fs-dependency
  o fixed init no-reload-entry
  o fixed non-conffile-in-etc</changelog>
<changelog author="chris@computersalat.de" date="1288353600">- cleanup spec
  o RPM_BUILD_ROOT vs buildroot
- fix pre
  o no check before addding group/user (darix)
- fix files
  o provide /srv/tftpboot
- modify sysconfig
  o provide defaults (darix)</changelog>
<changelog author="vcizek@suse.com" date="1315310400">- added missing PreReq: pwdutils (bnc#683140)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="vcizek@suse.com" date="1320321600">- fixed the "Sorcerer's Apprentice Syndrome" bug
  (bnc#727843)</changelog>
<changelog author="vcizek@suse.com" date="1320840000">- licence in spdx format</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- added autoconf as BuildRequires</changelog>
<changelog author="vcizek@suse.com" date="1326283200">- fix a race condition where two server threads pick up a single
  client, which causes the transported file being overwritten
  (bnc#599856)</changelog>
<changelog author="vcizek@suse.com" date="1346846400">- prevent the sorcerer's apprentice syndrome situation only when
  explicitly specified by the user (bnc#774376)
  (added a new command line option --prevent-sas to turn it on)</changelog>
<changelog author="vcizek@suse.com" date="1347364800">- use the "su" logrotate directive (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347364801">- added rules for SuSEfirewall2 (bnc#729793)</changelog>
<changelog author="vcizek@suse.com" date="1349697600">- use Vladimir Nadvornik's heuristic for packet retransmission
  by default (see bnc#774376)
  The RFC1350 compliant behaviour stays optional.
  (added atftp-0.7-ack_heuristic.patch)
- merged the two sorcerer's apprentice syndrome patches to one
  (removed atftp-0.7-prevent-sas.patch)</changelog>
<changelog author="vcizek@suse.com" date="1357214400">- change ownership of /srv/tftpboot, because atftpd running as
  tftp:tftp can't write to that directory
- create pid directory on service start
- manpage changes:
  * substitute /tftpboot with /srv/tftpboot
  * default user is now tftp:tftp
  * added patches:
    atftp-0.7-default_user_man.patch
    atftp-0.7-default_dir_man.patch</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- create capabilites provided by both tftp and atftp
  (bnc#801481 or bnc#725378)</changelog>
<changelog author="mrueckert@suse.de" date="1434369600">- Fix typo in init script (boo #921219)</changelog>

</package>
<package pkgid="662a667690a3c376f05f14b14951fc15964d4e6352cf32f9d49dcd27f7c40c85" name="atftp" arch="x86_64">
    <version epoch="0" ver="0.7.0" rel="157.4.1"/>

<changelog author="vcizek@suse.com" date="1315310400">- added missing PreReq: pwdutils (bnc#683140)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="vcizek@suse.com" date="1320321600">- fixed the "Sorcerer's Apprentice Syndrome" bug
  (bnc#727843)</changelog>
<changelog author="vcizek@suse.com" date="1320840000">- licence in spdx format</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- added autoconf as BuildRequires</changelog>
<changelog author="vcizek@suse.com" date="1326283200">- fix a race condition where two server threads pick up a single
  client, which causes the transported file being overwritten
  (bnc#599856)</changelog>
<changelog author="vcizek@suse.com" date="1346846400">- prevent the sorcerer's apprentice syndrome situation only when
  explicitly specified by the user (bnc#774376)
  (added a new command line option --prevent-sas to turn it on)</changelog>
<changelog author="vcizek@suse.com" date="1347364800">- use the "su" logrotate directive (bnc#677335)</changelog>
<changelog author="vcizek@suse.com" date="1347364801">- added rules for SuSEfirewall2 (bnc#729793)</changelog>
<changelog author="vcizek@suse.com" date="1349697600">- use Vladimir Nadvornik's heuristic for packet retransmission
  by default (see bnc#774376)
  The RFC1350 compliant behaviour stays optional.
  (added atftp-0.7-ack_heuristic.patch)
- merged the two sorcerer's apprentice syndrome patches to one
  (removed atftp-0.7-prevent-sas.patch)</changelog>
<changelog author="vcizek@suse.com" date="1357214400">- change ownership of /srv/tftpboot, because atftpd running as
  tftp:tftp can't write to that directory
- create pid directory on service start
- manpage changes:
  * substitute /tftpboot with /srv/tftpboot
  * default user is now tftp:tftp
  * added patches:
    atftp-0.7-default_user_man.patch
    atftp-0.7-default_dir_man.patch</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- create capabilites provided by both tftp and atftp
  (bnc#801481 or bnc#725378)</changelog>
<changelog author="chris@computersalat.de" date="1384257600">- rebase patches (p0)
- rename atftpd.init.d to atftpd.init
- fix spec
  * remove ghost /var/run/atftp (created by init)</changelog>
<changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
<changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
<changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
<changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
<changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
<changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>

</package>
<package pkgid="dd8a60ed1465de82dae231379f285094207eec75aa26731dceda500076b1c12f" name="audiofile" arch="i586">
    <version epoch="0" ver="0.3.6" rel="2.3.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="a7b62c38725e4366f9721783a10b952856bb13d06af4600e7daea2bcb1ad0eb6" name="audiofile" arch="src">
    <version epoch="0" ver="0.3.6" rel="2.3.1"/>

<changelog author="olh@suse.de" date="1225368000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="olh@suse.de" date="1228910400">- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
  (bnc#437293)</changelog>
<changelog author="crrodriguez@suse.de" date="1231848000">- remove static libraries and "la" files
- run make check</changelog>
<changelog author="msuman@suse.de" date="1232452800">- Clean up the spec file to use proper RPM macros
- Continue to provide the "la" files for SUSE releases &lt;= 11.1</changelog>
<changelog author="mauro@suse.de" date="1232452801">- Added bnc_463220.patch to fix bnc#463220
  + Correct buffer size.</changelog>
<changelog author="mboman@suse.de" date="1235304000">- Don't use -fno-strict-aliasing for build. Not needed
- Remove CFLAGS, CXXFLAGS and FFLAGS since it only contains
  $RPM_OPT_FLAGS which is default</changelog>
<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="899df26bb82def70404f530014d91713f467ed1143f4b6277a6659c8708e3885" name="audiofile" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="2.3.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="1debd0575ccec494faa9325b755a0dbcf060fc7c0f7b3e12edecd0d138897c6c" name="audiofile-devel" arch="i586">
    <version epoch="0" ver="0.3.6" rel="2.3.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="de6b727fb4fabf4f3ec09e593ea529eba11f966213bc055d219e98eea85d954e" name="audiofile-devel" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="2.3.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="dafbcb72950648dc917c81a1907c0aa5a26ce2b16dc4d68d7ae77b5234caaebc" name="audiofile-devel-32bit" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="2.3.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="11abac8f1110644febcb71fa752abbec0b648902452f458d3d9345c05e087479" name="audiofile-doc" arch="i586">
    <version epoch="0" ver="0.3.6" rel="2.3.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="f8a825522f1c1712f4889b970d7a9309c1a3393c31d796bf9775a2040e7c12f9" name="audiofile-doc" arch="x86_64">
    <version epoch="0" ver="0.3.6" rel="2.3.1"/>

<changelog author="meissner@suse.de" date="1256644800">- fixed implicit functions</changelog>
<changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="dimstar@opensuse.org" date="1273492800">- Update to version 0.2.7:
  + Fix decoding of multi-channel ADPCM WAVE files.
  + Reduce unshared data in library.
  + Fix handling of audio files with more than 2^24 frames.
  + Add support for writing double-precision floating-point WAVE
    files.
  + Add support for reading certain uncompressed AIFF-C files
    created by Mac OS X.
  + Write fact chunk in floating-point WAVE files.
- Drop bnc_463220.patch, fixed by upstream in a different way.
- Drop audiofile-0.2.6.patch, audiofile-m4_quote_fix.diff and
  audiofile-fiximplicit.patch.</changelog>
<changelog author="appleonkel@opensuse.org" date="1316433600">- Update to version 0.3.1:
  + Support u-law and A-law compression in Core Audio Format files
  + Add support for Creative Voice File format
  + Define AFframecount and AFfileoffset as 64-bit signed integers
  + Add support for extensible WAVE format
- Added audiofile-remove-unused-variables.patch for -Werror
- Added audiofile-add-lm-linker.patch to fix build error
- Drop audiofile-oldstyle.patch, fixed by upstream in a different way.
- Split documentation of the library into doc package
- Removed Obsoletes/Provides audiofil, seems outdated</changelog>
<changelog author="jengelh@medozas.de" date="1316520000">- Remove redundant tags/sections from specfile
- Fix a typo in %_smp_mflags
- Implement shlib policy</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dimstar@opensuse.org" date="1322654400">- Update to version 0.3.2:
  + Fix initialization of byte order in Creative Voice File format.
  + Fix calculation of frame count in NIST SPHERE sound files.
  + Remove duplicate definition of AFvirtualfile.
  + Don't treat compiler warnings as errors by default.
- Clean spec file using spec-cleaner.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Update to version 0.3.3:
  + Update library's soname version.
  + Link against libm.
- Drop audiofile-add-lm-linker.patch: fixed upstream.
- Rebase audiofile-remove-unused-variables.patch.
- Remove call to autoreconf: it was only there for
  audiofile-add-lm-linker.patch.
- Move man pages from libaudiofile0 subpackage to audiofile
  subpackage, where the binaries live.
- Rename libaudiofile0 subpackage to libaudiofile1, following
  upstream soversion change.</changelog>
<changelog author="vuntz@opensuse.org" date="1336737600">- Update to version 0.3.4:
  + Use hidden visibility for internal symbols.
  + Add support for Sample Vision format.
  + Update license for extended-precision floating-point conversion
    routines.</changelog>
<changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
<changelog author="reddwarf@opensuse.org" date="1361361600">- Update to version 0.3.5:
  + Implement IMA ADPCM encoding and decoding for AIFF-C, CAF, and WAVE files.
  + Implement Microsoft ADPCM encoding for WAVE files.
  + Fix calculation of IRCAM frame size.
  + Record marker comments in WAVE files.
  + Improve validation of compressed audio formats.
  + Add support for building without documentation.
- Add audiofile-0.3.5-without_examples.patch
- Remove audiofile-remove-unused-variables.patch
- Remove Obsoletes: audiofile-64bit</changelog>
<changelog author="reddwarf@opensuse.org" date="1362657600">- Update to version 0.3.6:
  + Implement FLAC and ALAC encoding and decoding.
  + Update license to LGPL 2.1.
- Remove audiofile-0.3.5-without_examples.patch
- Add pkgconfig(flac) BuildRequires</changelog>
<changelog author="sbrabec@suse.com" date="1445515200">- Fix overflow when changing both number of channels and sample
  format (bsc#949399, CVE-2015-7747,
  audiofile-CVE-2015-7747.patch).</changelog>

</package>
<package pkgid="17d3ea96f8b4f51ea0e93a4df9eba5daae9c4ad864297a190b95e2f82e0538f2" name="autofs" arch="i586">
    <version epoch="0" ver="5.0.7" rel="19.4.1"/>

<changelog author="lchiquitto@suse.com" date="1350475200">- rpm spec: don't try to build with udisks support on old versions
  of the distribution</changelog>
<changelog author="lchiquitto@suse.com" date="1350648000">- autofs-5.0.7-upstream-patches-20121018.bz2: update 5.0.7 upstream
  patches to 20121018, fixing some bugs:
  * fix recursive mount deadlock
  * increase file map read buffer size
  * handle new location of systemd
- remove patches that are now upstream:
  * autofs-5.0.7-handle-new-location-of-systemd.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351771200">- autofs.service: use service type simple with no forking</changelog>
<changelog author="lchiquitto@suse.com" date="1352203200">- autofs-5.0.7-new-style-systemd-daemon.patch: add new command
  line parameter --systemd, which instructs automount to skip
  daemonization completely, leaving the task to systemd
- autofs.service: use new --systemd option when starting up</changelog>
<changelog author="lchiquitto@suse.com" date="1352203201">- autofs-5.0.7-dont-reschedule-alarm-after-signals.patch: don't
  schedule new alarms after handling SIGHUP and SIGUSR1 (bnc#783651)</changelog>
<changelog author="lchiquitto@suse.com" date="1352203202">- autofs-5.0.7-use-protocol-id-instead-of-protoent.patch: use
  protocol id directly instead of calling the non-reentrant
  function getprotobyname() (bnc#787410)</changelog>
<changelog author="werner@suse.de" date="1352980800">- UDisks dbus module support: use private connection, do not refer
  to a reply if already handled, install dbus AutoMount.conf in
  direct way</changelog>
<changelog author="lchiquitto@suse.com" date="1357905600">- revert systemd initialization type from "simple" to "forking"
  and drop the patch that partially implemented "new style systemd"
  daemon (bnc#798162)
- autofs-5.0.7-new-style-systemd-daemon.patch: delete</changelog>
<changelog author="lchiquitto@suse.com" date="1357905601">- autofs-5.0.7-upstream-patches-20121120.bz2: update 5.0.7 upstream
  patches to 20121120, fixing some bugs:
  * fix map entry duplicate offset detection
  * allow nsswitch.conf to not contain "automount:" lines</changelog>
<changelog author="lchiquitto@suse.com" date="1357905602">- autofs-5.0.7-fix-scandir-filter.patch: fix lookup_dir when the
  included directory is on an XFS file system (bnc#798158)</changelog>
<changelog author="lchiquitto@suse.com" date="1357905603">- fix build on older versions of the distribution, do not install
  org.freedesktop.AutoMount.conf</changelog>
<changelog author="lchiquitto@suse.com" date="1358769600">- autofs-5.0.7-upstream-patches-20130121.bz2: update 5.0.7 upstream
  patches to 20130121, fixing some bugs:
  * fix nobind man page description
  * fix submount offset delete
  * fix init script status return
  * fix use get_proximity() without libtirpc
  * don't use dirent d_type to filter out files in scandir()
  * don't schedule new alarms after readmap
  * use numeric protocol ids instead of protoent structs
  * lib/defaults.c: use WITH_LDAP conditional around LDAP types
  * make yellow pages support optional
  * modules/replicated.c: use sin6_addr.s6_addr32
  * workaround missing GNU versionsort extension
- remove patches that are now upstream:
  * autofs-5.0.7-fix-scandir-filter.patch
  * autofs-5.0.7-use-protocol-id-instead-of-protoent.patch
  * autofs-5.0.7-dont-reschedule-alarm-after-signals.patch</changelog>
<changelog author="lchiquitto@suse.com" date="1359460800">- rpm spec: enable sssd support if available</changelog>
<changelog author="lchiquitto@suse.com" date="1360152000">- autofs-5.0.6-invalid-ghost-dirs.patch: delete. the problem's
  root cause was fixed in the kernel</changelog>
<changelog author="lchiquitto@suse.com" date="1363003200">- autofs-5.0.7-upstream-patches-20130311.bz2: update 5.0.7 upstream
  patches to 20130311, fixing some bugs:
  * dont fail on master map self include (bnc#799873)
  * fix wildcard multi map regression
  * fix file descriptor leak when reloading the daemon (bnc#772698)
  * deprecate nosymlink pseudo option
  * add symlink pseudo option
  * document browse option in man page</changelog>
<changelog author="lchiquitto@suse.com" date="1365508800">- autofs-5.0.7-fix-submount-tree-not-all-expiring.patch: expire
  multiple levels of recursive mounts correctly (bnc#801808)</changelog>
<changelog author="lchiquitto@suse.com" date="1368360000">- autofs-5.0.7-upstream-patches-20130428.bz2: update 5.0.7 upstream
  patches up to 2013-04-28, fixing some bugs:
  * fix some automount(8) typos
  * syncronize handle_mounts() shutdown
  * fix submount tree not all expiring (bnc#801808)
- remove patches that are now upstream:
  * autofs-5.0.7-fix-submount-tree-not-all-expiring.patch</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly specify cyrus-sasl-devel and openssl-devel
  which were implicit before</changelog>
<changelog author="lchiquitto@suse.com" date="1373198400">- autofs-5.0.7-upstream-patches-20130619.bz2: update 5.0.7 upstream
  patches up to 2013-06-19, fixing some bugs:
  * make dump maps check for duplicate indirect mounts
  * document allowed map sources in auto.master
  * add enable sloppy mount option to configure
  * fix interface address null check
  * don't probe rdma mounts
  * fix master map mount options matching
  * fix master map bogus keywork match
  * fix fix map entry duplicate offset detection
  * probe each nfs version in turn for singleton mounts
  * fix probe each nfs version in turn for singleton mounts
  * misc man page fixes</changelog>
<changelog author="arvidjaar@gmail.com" date="1383912000">- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch
  Fix parsing of legacy LDAP map syntax (bnc#847494)</changelog>

</package>
<package pkgid="628d0db3181999ed224f33491089df58c92d0d1e0580307a891e34161992b046" name="autofs" arch="i586">
    <version epoch="0" ver="5.0.8" rel="19.8.1"/>

<changelog author="lchiquitto@suse.com" date="1352203200">- autofs-5.0.7-dont-reschedule-alarm-after-signals.patch: don't
  schedule new alarms after handling SIGHUP and SIGUSR1 (bnc#783651)</changelog>
<changelog author="lchiquitto@suse.com" date="1352203201">- autofs-5.0.7-use-protocol-id-instead-of-protoent.patch: use
  protocol id directly instead of calling the non-reentrant
  function getprotobyname() (bnc#787410)</changelog>
<changelog author="werner@suse.de" date="1352980800">- UDisks dbus module support: use private connection, do not refer
  to a reply if already handled, install dbus AutoMount.conf in
  direct way</changelog>
<changelog author="lchiquitto@suse.com" date="1357905600">- revert systemd initialization type from "simple" to "forking"
  and drop the patch that partially implemented "new style systemd"
  daemon (bnc#798162)
- autofs-5.0.7-new-style-systemd-daemon.patch: delete</changelog>
<changelog author="lchiquitto@suse.com" date="1357905601">- autofs-5.0.7-upstream-patches-20121120.bz2: update 5.0.7 upstream
  patches to 20121120, fixing some bugs:
  * fix map entry duplicate offset detection
  * allow nsswitch.conf to not contain "automount:" lines</changelog>
<changelog author="lchiquitto@suse.com" date="1357905602">- autofs-5.0.7-fix-scandir-filter.patch: fix lookup_dir when the
  included directory is on an XFS file system (bnc#798158)</changelog>
<changelog author="lchiquitto@suse.com" date="1357905603">- fix build on older versions of the distribution, do not install
  org.freedesktop.AutoMount.conf</changelog>
<changelog author="lchiquitto@suse.com" date="1358769600">- autofs-5.0.7-upstream-patches-20130121.bz2: update 5.0.7 upstream
  patches to 20130121, fixing some bugs:
  * fix nobind man page description
  * fix submount offset delete
  * fix init script status return
  * fix use get_proximity() without libtirpc
  * don't use dirent d_type to filter out files in scandir()
  * don't schedule new alarms after readmap
  * use numeric protocol ids instead of protoent structs
  * lib/defaults.c: use WITH_LDAP conditional around LDAP types
  * make yellow pages support optional
  * modules/replicated.c: use sin6_addr.s6_addr32
  * workaround missing GNU versionsort extension
- remove patches that are now upstream:
  * autofs-5.0.7-fix-scandir-filter.patch
  * autofs-5.0.7-use-protocol-id-instead-of-protoent.patch
  * autofs-5.0.7-dont-reschedule-alarm-after-signals.patch</changelog>
<changelog author="lchiquitto@suse.com" date="1359460800">- rpm spec: enable sssd support if available</changelog>
<changelog author="lchiquitto@suse.com" date="1360152000">- autofs-5.0.6-invalid-ghost-dirs.patch: delete. the problem's
  root cause was fixed in the kernel</changelog>
<changelog author="lchiquitto@suse.com" date="1363003200">- autofs-5.0.7-upstream-patches-20130311.bz2: update 5.0.7 upstream
  patches to 20130311, fixing some bugs:
  * dont fail on master map self include (bnc#799873)
  * fix wildcard multi map regression
  * fix file descriptor leak when reloading the daemon (bnc#772698)
  * deprecate nosymlink pseudo option
  * add symlink pseudo option
  * document browse option in man page</changelog>
<changelog author="lchiquitto@suse.com" date="1365508800">- autofs-5.0.7-fix-submount-tree-not-all-expiring.patch: expire
  multiple levels of recursive mounts correctly (bnc#801808)</changelog>
<changelog author="lchiquitto@suse.com" date="1368360000">- autofs-5.0.7-upstream-patches-20130428.bz2: update 5.0.7 upstream
  patches up to 2013-04-28, fixing some bugs:
  * fix some automount(8) typos
  * syncronize handle_mounts() shutdown
  * fix submount tree not all expiring (bnc#801808)
- remove patches that are now upstream:
  * autofs-5.0.7-fix-submount-tree-not-all-expiring.patch</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly specify cyrus-sasl-devel and openssl-devel
  which were implicit before</changelog>
<changelog author="lchiquitto@suse.com" date="1373198400">- autofs-5.0.7-upstream-patches-20130619.bz2: update 5.0.7 upstream
  patches up to 2013-06-19, fixing some bugs:
  * make dump maps check for duplicate indirect mounts
  * document allowed map sources in auto.master
  * add enable sloppy mount option to configure
  * fix interface address null check
  * don't probe rdma mounts
  * fix master map mount options matching
  * fix master map bogus keywork match
  * fix fix map entry duplicate offset detection
  * probe each nfs version in turn for singleton mounts
  * fix probe each nfs version in turn for singleton mounts
  * misc man page fixes</changelog>
<changelog author="arvidjaar@gmail.com" date="1383912000">- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch
  Fix parsing of legacy LDAP map syntax (bnc#847494)</changelog>
<changelog author="lchiquitto@suse.de" date="1392811200">- update to version 5.0.8:
  * fix add null check in parse_server_string()
  * check for protocol option
  * use ulimit max open files if greater than internal maximum
  * don't override LDFLAGS in make rules
  * fix a couple of compiler warnings
  * add after sssd dependency to unit file
  * dont start readmap unless ready
  * fix crash due to thread unsafe use of libldap (bnc#820585)
  * fix compile error with heimdal support enabled
  * fix typo forced-shutdown should be force-shutdown
  * fix hesiod check error and use correct $(LIBS) setting
  * fix dead LDAP symbolic link when LDAP support is disabled
  * add missing libtirpc lib to mount_nfs.so when TIRPC enabled
  * use compiler determined by configure instead of hard-coded ones
  * remove hard-coded STRIP variable
  * use LIBS for link libraries
  * unbundle NOTSTRIP from DEBUG so they dont depend on each other
  * fix occasional build error when enable parallel compiling
  * fix compilation of lookup_ldap.c without sasl
  * fix dumpmaps multi output
  * try and cleanup after dumpmaps
  * teach dumpmaps to output simple key value pairs
  * fix syncronize handle_mounts() shutdown
  * fix fix wildcard multi map regression
  * improve timeout option description
  * only probe specific nfs version when requested
  * fix bad mkdir permission on create
  * setup program map env from macro table
  * add short host name standard marco variable
  * allow use of hosts map in maps
  * fix get_nfs_info() probe
  * fix portmap lookup
  * add std vars to program map invocation
  * samples/auto.smb: add logic to obtain credentials
- autofs-5.0.8-dbus-udisks-monitor.patch: rebase on top of 5.0.8
- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch: drop
- autofs-suse-build.patch: drop</changelog>
<changelog author="lchiquitto@suse.de" date="1392811201">- autofs-5.0.8-upstream-patches-20131124.bz2: update 5.0.8 upstream
  patches up to 2013-11-24, fixing the following bugs:
  * fix undefined authtype_requires_creds err if ldap enabled but
    without sasl
  * fix master map type check
  * fix task manager not getting signaled
  * allow --with-systemd to take a path arg
  * fix WITH_LIBTIRPC function name
  * fix ipv6 libtirpc getport</changelog>
<changelog author="lchiquitto@suse.de" date="1392811202">- autofs-5.0.8-fix-serialize-libldap-init.patch: fix deadlock when
  trying to lock mutex that's already owned by the same thread
  (bnc#859969)
- autofs-5.0.8-serialize-libldap-unbind.patch: serialize LDAP unbind
  operations, as they're also not thread-safe and could cause
  segmentation faults (bnc#853469)</changelog>
<changelog author="lchiquitto@suse.com" date="1394452800">- the update to version 5.0.8 also fixes the special -hosts map
  (auto.net) in IPv6 environments (bnc#847207)</changelog>

</package>
<package pkgid="87766157fc2a6d110768977980527a6d15a589643c3cd51029c07ba7af0ba958" name="autofs" arch="i586">
    <version epoch="0" ver="5.0.9" rel="19.12.1"/>

<changelog author="lchiquitto@suse.com" date="1352203200">- autofs-5.0.7-use-protocol-id-instead-of-protoent.patch: use
  protocol id directly instead of calling the non-reentrant
  function getprotobyname() (bnc#787410)</changelog>
<changelog author="werner@suse.de" date="1352980800">- UDisks dbus module support: use private connection, do not refer
  to a reply if already handled, install dbus AutoMount.conf in
  direct way</changelog>
<changelog author="lchiquitto@suse.com" date="1357905600">- revert systemd initialization type from "simple" to "forking"
  and drop the patch that partially implemented "new style systemd"
  daemon (bnc#798162)
- autofs-5.0.7-new-style-systemd-daemon.patch: delete</changelog>
<changelog author="lchiquitto@suse.com" date="1357905601">- autofs-5.0.7-upstream-patches-20121120.bz2: update 5.0.7 upstream
  patches to 20121120, fixing some bugs:
  * fix map entry duplicate offset detection
  * allow nsswitch.conf to not contain "automount:" lines</changelog>
<changelog author="lchiquitto@suse.com" date="1357905602">- autofs-5.0.7-fix-scandir-filter.patch: fix lookup_dir when the
  included directory is on an XFS file system (bnc#798158)</changelog>
<changelog author="lchiquitto@suse.com" date="1357905603">- fix build on older versions of the distribution, do not install
  org.freedesktop.AutoMount.conf</changelog>
<changelog author="lchiquitto@suse.com" date="1358769600">- autofs-5.0.7-upstream-patches-20130121.bz2: update 5.0.7 upstream
  patches to 20130121, fixing some bugs:
  * fix nobind man page description
  * fix submount offset delete
  * fix init script status return
  * fix use get_proximity() without libtirpc
  * don't use dirent d_type to filter out files in scandir()
  * don't schedule new alarms after readmap
  * use numeric protocol ids instead of protoent structs
  * lib/defaults.c: use WITH_LDAP conditional around LDAP types
  * make yellow pages support optional
  * modules/replicated.c: use sin6_addr.s6_addr32
  * workaround missing GNU versionsort extension
- remove patches that are now upstream:
  * autofs-5.0.7-fix-scandir-filter.patch
  * autofs-5.0.7-use-protocol-id-instead-of-protoent.patch
  * autofs-5.0.7-dont-reschedule-alarm-after-signals.patch</changelog>
<changelog author="lchiquitto@suse.com" date="1359460800">- rpm spec: enable sssd support if available</changelog>
<changelog author="lchiquitto@suse.com" date="1360152000">- autofs-5.0.6-invalid-ghost-dirs.patch: delete. the problem's
  root cause was fixed in the kernel</changelog>
<changelog author="lchiquitto@suse.com" date="1363003200">- autofs-5.0.7-upstream-patches-20130311.bz2: update 5.0.7 upstream
  patches to 20130311, fixing some bugs:
  * dont fail on master map self include (bnc#799873)
  * fix wildcard multi map regression
  * fix file descriptor leak when reloading the daemon (bnc#772698)
  * deprecate nosymlink pseudo option
  * add symlink pseudo option
  * document browse option in man page</changelog>
<changelog author="lchiquitto@suse.com" date="1365508800">- autofs-5.0.7-fix-submount-tree-not-all-expiring.patch: expire
  multiple levels of recursive mounts correctly (bnc#801808)</changelog>
<changelog author="lchiquitto@suse.com" date="1368360000">- autofs-5.0.7-upstream-patches-20130428.bz2: update 5.0.7 upstream
  patches up to 2013-04-28, fixing some bugs:
  * fix some automount(8) typos
  * syncronize handle_mounts() shutdown
  * fix submount tree not all expiring (bnc#801808)
- remove patches that are now upstream:
  * autofs-5.0.7-fix-submount-tree-not-all-expiring.patch</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly specify cyrus-sasl-devel and openssl-devel
  which were implicit before</changelog>
<changelog author="lchiquitto@suse.com" date="1373198400">- autofs-5.0.7-upstream-patches-20130619.bz2: update 5.0.7 upstream
  patches up to 2013-06-19, fixing some bugs:
  * make dump maps check for duplicate indirect mounts
  * document allowed map sources in auto.master
  * add enable sloppy mount option to configure
  * fix interface address null check
  * don't probe rdma mounts
  * fix master map mount options matching
  * fix master map bogus keywork match
  * fix fix map entry duplicate offset detection
  * probe each nfs version in turn for singleton mounts
  * fix probe each nfs version in turn for singleton mounts
  * misc man page fixes</changelog>
<changelog author="arvidjaar@gmail.com" date="1383912000">- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch
  Fix parsing of legacy LDAP map syntax (bnc#847494)</changelog>
<changelog author="lchiquitto@suse.de" date="1392811200">- update to version 5.0.8:
  * fix add null check in parse_server_string()
  * check for protocol option
  * use ulimit max open files if greater than internal maximum
  * don't override LDFLAGS in make rules
  * fix a couple of compiler warnings
  * add after sssd dependency to unit file
  * dont start readmap unless ready
  * fix crash due to thread unsafe use of libldap (bnc#820585)
  * fix compile error with heimdal support enabled
  * fix typo forced-shutdown should be force-shutdown
  * fix hesiod check error and use correct $(LIBS) setting
  * fix dead LDAP symbolic link when LDAP support is disabled
  * add missing libtirpc lib to mount_nfs.so when TIRPC enabled
  * use compiler determined by configure instead of hard-coded ones
  * remove hard-coded STRIP variable
  * use LIBS for link libraries
  * unbundle NOTSTRIP from DEBUG so they dont depend on each other
  * fix occasional build error when enable parallel compiling
  * fix compilation of lookup_ldap.c without sasl
  * fix dumpmaps multi output
  * try and cleanup after dumpmaps
  * teach dumpmaps to output simple key value pairs
  * fix syncronize handle_mounts() shutdown
  * fix fix wildcard multi map regression
  * improve timeout option description
  * only probe specific nfs version when requested
  * fix bad mkdir permission on create
  * setup program map env from macro table
  * add short host name standard marco variable
  * allow use of hosts map in maps
  * fix get_nfs_info() probe
  * fix portmap lookup
  * add std vars to program map invocation
  * samples/auto.smb: add logic to obtain credentials
- autofs-5.0.8-dbus-udisks-monitor.patch: rebase on top of 5.0.8
- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch: drop
- autofs-suse-build.patch: drop</changelog>
<changelog author="lchiquitto@suse.de" date="1392811201">- autofs-5.0.8-upstream-patches-20131124.bz2: update 5.0.8 upstream
  patches up to 2013-11-24, fixing the following bugs:
  * fix undefined authtype_requires_creds err if ldap enabled but
    without sasl
  * fix master map type check
  * fix task manager not getting signaled
  * allow --with-systemd to take a path arg
  * fix WITH_LIBTIRPC function name
  * fix ipv6 libtirpc getport</changelog>
<changelog author="lchiquitto@suse.de" date="1392811202">- autofs-5.0.8-fix-serialize-libldap-init.patch: fix deadlock when
  trying to lock mutex that's already owned by the same thread
  (bnc#859969)
- autofs-5.0.8-serialize-libldap-unbind.patch: serialize LDAP unbind
  operations, as they're also not thread-safe and could cause
  segmentation faults (bnc#853469)</changelog>
<changelog author="lchiquitto@suse.com" date="1394452800">- the update to version 5.0.8 also fixes the special -hosts map
  (auto.net) in IPv6 environments (bnc#847207)</changelog>
<changelog author="lchiquitto@suse.com" date="1411128000">- update to stable release 5.0.9 (bnc#869806):
  * fix ipv6 link local address handling
  * fix fix ipv6 libtirpc getport
  * get_nfs_info() should query portmapper if port is not given
  * fix rpc_portmap_getport() proto not set
  * fix protmap not trying proto v2
  * fix rpc_getport() when libtirpc is disabled
  * fix rpc_getrpcbport() when libtirpc is disabled
  * don't reset errno
  * extend fix for crash due to thread unsafe use of libldap
  * fix deadlock in init_ldap_connection
  * fix options compare
  * fix negative status being reset on map read
  * check for existing offset mount before mounting
  * fix max() declaration
  * fix symlink fail message in mount_bind.c
  * fix cache readlock not taken on lookup
  * pass map_source as function paramter where possible
  * check for bind onto self in mount_bind.c
  * fix symlink expire
  * dont clobber mapent for negative cache
  * fix macro_addvar() and move init to main thread
  * change walk_tree() to take ap
  * add negative cache lookup to hesiod lookup
  * fix external env configure
  * make autofs(5) consistent with auto.master(5)
  * fix map source with type lookup
  * fix lookup_nss_mount() map lookup
  * dont ignore null cache entries on multi mount umount
  * fix inconsistent error returns in handle_packet_missing_direct()
  * simple coverity fixes
  * fix fix options compare
  * use open(2) instead of access(2) to trigger dependent mounts
  * fix fix map source with type lookup
  * fixes for samples/auto.master
  * fix variable substitution description
  * fix incorrect append options description in README.v5-release
  * add amd map format parser
- drop patches that are already included in the new version:
  * autofs-5.0.8-upstream-patches-20131124.bz2
  * autofs-5.0.8-serialize-libldap-unbind.patch
  * autofs-5.0.8-fix-serialize-libldap-init.patch
  * autofs-5.0.8-eaccess.patch
- autofs-5.0.8-dbus-udisks-monitor.patch: refresh
- autofs-5.0.8-task-use-after-free.patch: refresh
- autofs-5.0.8-revert-fix-libtirpc-name-clash.patch: refresh
- autofs-suse-auto-master-defaults.patch: rename and refresh</changelog>

</package>
<package pkgid="244d98d6835ee54b042bf7ef2abb28e10b7631162a2c2cd86fc0868e62182b65" name="autofs" arch="i586">
    <version epoch="0" ver="5.0.9" rel="19.16.1"/>

<changelog author="werner@suse.de" date="1352980800">- UDisks dbus module support: use private connection, do not refer
  to a reply if already handled, install dbus AutoMount.conf in
  direct way</changelog>
<changelog author="lchiquitto@suse.com" date="1357905600">- revert systemd initialization type from "simple" to "forking"
  and drop the patch that partially implemented "new style systemd"
  daemon (bnc#798162)
- autofs-5.0.7-new-style-systemd-daemon.patch: delete</changelog>
<changelog author="lchiquitto@suse.com" date="1357905601">- autofs-5.0.7-upstream-patches-20121120.bz2: update 5.0.7 upstream
  patches to 20121120, fixing some bugs:
  * fix map entry duplicate offset detection
  * allow nsswitch.conf to not contain "automount:" lines</changelog>
<changelog author="lchiquitto@suse.com" date="1357905602">- autofs-5.0.7-fix-scandir-filter.patch: fix lookup_dir when the
  included directory is on an XFS file system (bnc#798158)</changelog>
<changelog author="lchiquitto@suse.com" date="1357905603">- fix build on older versions of the distribution, do not install
  org.freedesktop.AutoMount.conf</changelog>
<changelog author="lchiquitto@suse.com" date="1358769600">- autofs-5.0.7-upstream-patches-20130121.bz2: update 5.0.7 upstream
  patches to 20130121, fixing some bugs:
  * fix nobind man page description
  * fix submount offset delete
  * fix init script status return
  * fix use get_proximity() without libtirpc
  * don't use dirent d_type to filter out files in scandir()
  * don't schedule new alarms after readmap
  * use numeric protocol ids instead of protoent structs
  * lib/defaults.c: use WITH_LDAP conditional around LDAP types
  * make yellow pages support optional
  * modules/replicated.c: use sin6_addr.s6_addr32
  * workaround missing GNU versionsort extension
- remove patches that are now upstream:
  * autofs-5.0.7-fix-scandir-filter.patch
  * autofs-5.0.7-use-protocol-id-instead-of-protoent.patch
  * autofs-5.0.7-dont-reschedule-alarm-after-signals.patch</changelog>
<changelog author="lchiquitto@suse.com" date="1359460800">- rpm spec: enable sssd support if available</changelog>
<changelog author="lchiquitto@suse.com" date="1360152000">- autofs-5.0.6-invalid-ghost-dirs.patch: delete. the problem's
  root cause was fixed in the kernel</changelog>
<changelog author="lchiquitto@suse.com" date="1363003200">- autofs-5.0.7-upstream-patches-20130311.bz2: update 5.0.7 upstream
  patches to 20130311, fixing some bugs:
  * dont fail on master map self include (bnc#799873)
  * fix wildcard multi map regression
  * fix file descriptor leak when reloading the daemon (bnc#772698)
  * deprecate nosymlink pseudo option
  * add symlink pseudo option
  * document browse option in man page</changelog>
<changelog author="lchiquitto@suse.com" date="1365508800">- autofs-5.0.7-fix-submount-tree-not-all-expiring.patch: expire
  multiple levels of recursive mounts correctly (bnc#801808)</changelog>
<changelog author="lchiquitto@suse.com" date="1368360000">- autofs-5.0.7-upstream-patches-20130428.bz2: update 5.0.7 upstream
  patches up to 2013-04-28, fixing some bugs:
  * fix some automount(8) typos
  * syncronize handle_mounts() shutdown
  * fix submount tree not all expiring (bnc#801808)
- remove patches that are now upstream:
  * autofs-5.0.7-fix-submount-tree-not-all-expiring.patch</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly specify cyrus-sasl-devel and openssl-devel
  which were implicit before</changelog>
<changelog author="lchiquitto@suse.com" date="1373198400">- autofs-5.0.7-upstream-patches-20130619.bz2: update 5.0.7 upstream
  patches up to 2013-06-19, fixing some bugs:
  * make dump maps check for duplicate indirect mounts
  * document allowed map sources in auto.master
  * add enable sloppy mount option to configure
  * fix interface address null check
  * don't probe rdma mounts
  * fix master map mount options matching
  * fix master map bogus keywork match
  * fix fix map entry duplicate offset detection
  * probe each nfs version in turn for singleton mounts
  * fix probe each nfs version in turn for singleton mounts
  * misc man page fixes</changelog>
<changelog author="arvidjaar@gmail.com" date="1383912000">- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch
  Fix parsing of legacy LDAP map syntax (bnc#847494)</changelog>
<changelog author="lchiquitto@suse.de" date="1392811200">- update to version 5.0.8:
  * fix add null check in parse_server_string()
  * check for protocol option
  * use ulimit max open files if greater than internal maximum
  * don't override LDFLAGS in make rules
  * fix a couple of compiler warnings
  * add after sssd dependency to unit file
  * dont start readmap unless ready
  * fix crash due to thread unsafe use of libldap (bnc#820585)
  * fix compile error with heimdal support enabled
  * fix typo forced-shutdown should be force-shutdown
  * fix hesiod check error and use correct $(LIBS) setting
  * fix dead LDAP symbolic link when LDAP support is disabled
  * add missing libtirpc lib to mount_nfs.so when TIRPC enabled
  * use compiler determined by configure instead of hard-coded ones
  * remove hard-coded STRIP variable
  * use LIBS for link libraries
  * unbundle NOTSTRIP from DEBUG so they dont depend on each other
  * fix occasional build error when enable parallel compiling
  * fix compilation of lookup_ldap.c without sasl
  * fix dumpmaps multi output
  * try and cleanup after dumpmaps
  * teach dumpmaps to output simple key value pairs
  * fix syncronize handle_mounts() shutdown
  * fix fix wildcard multi map regression
  * improve timeout option description
  * only probe specific nfs version when requested
  * fix bad mkdir permission on create
  * setup program map env from macro table
  * add short host name standard marco variable
  * allow use of hosts map in maps
  * fix get_nfs_info() probe
  * fix portmap lookup
  * add std vars to program map invocation
  * samples/auto.smb: add logic to obtain credentials
- autofs-5.0.8-dbus-udisks-monitor.patch: rebase on top of 5.0.8
- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch: drop
- autofs-suse-build.patch: drop</changelog>
<changelog author="lchiquitto@suse.de" date="1392811201">- autofs-5.0.8-upstream-patches-20131124.bz2: update 5.0.8 upstream
  patches up to 2013-11-24, fixing the following bugs:
  * fix undefined authtype_requires_creds err if ldap enabled but
    without sasl
  * fix master map type check
  * fix task manager not getting signaled
  * allow --with-systemd to take a path arg
  * fix WITH_LIBTIRPC function name
  * fix ipv6 libtirpc getport</changelog>
<changelog author="lchiquitto@suse.de" date="1392811202">- autofs-5.0.8-fix-serialize-libldap-init.patch: fix deadlock when
  trying to lock mutex that's already owned by the same thread
  (bnc#859969)
- autofs-5.0.8-serialize-libldap-unbind.patch: serialize LDAP unbind
  operations, as they're also not thread-safe and could cause
  segmentation faults (bnc#853469)</changelog>
<changelog author="lchiquitto@suse.com" date="1394452800">- the update to version 5.0.8 also fixes the special -hosts map
  (auto.net) in IPv6 environments (bnc#847207)</changelog>
<changelog author="lchiquitto@suse.com" date="1411128000">- update to stable release 5.0.9 (bnc#869806):
  * fix ipv6 link local address handling
  * fix fix ipv6 libtirpc getport
  * get_nfs_info() should query portmapper if port is not given
  * fix rpc_portmap_getport() proto not set
  * fix protmap not trying proto v2
  * fix rpc_getport() when libtirpc is disabled
  * fix rpc_getrpcbport() when libtirpc is disabled
  * don't reset errno
  * extend fix for crash due to thread unsafe use of libldap
  * fix deadlock in init_ldap_connection
  * fix options compare
  * fix negative status being reset on map read
  * check for existing offset mount before mounting
  * fix max() declaration
  * fix symlink fail message in mount_bind.c
  * fix cache readlock not taken on lookup
  * pass map_source as function paramter where possible
  * check for bind onto self in mount_bind.c
  * fix symlink expire
  * dont clobber mapent for negative cache
  * fix macro_addvar() and move init to main thread
  * change walk_tree() to take ap
  * add negative cache lookup to hesiod lookup
  * fix external env configure
  * make autofs(5) consistent with auto.master(5)
  * fix map source with type lookup
  * fix lookup_nss_mount() map lookup
  * dont ignore null cache entries on multi mount umount
  * fix inconsistent error returns in handle_packet_missing_direct()
  * simple coverity fixes
  * fix fix options compare
  * use open(2) instead of access(2) to trigger dependent mounts
  * fix fix map source with type lookup
  * fixes for samples/auto.master
  * fix variable substitution description
  * fix incorrect append options description in README.v5-release
  * add amd map format parser
- drop patches that are already included in the new version:
  * autofs-5.0.8-upstream-patches-20131124.bz2
  * autofs-5.0.8-serialize-libldap-unbind.patch
  * autofs-5.0.8-fix-serialize-libldap-init.patch
  * autofs-5.0.8-eaccess.patch
- autofs-5.0.8-dbus-udisks-monitor.patch: refresh
- autofs-5.0.8-task-use-after-free.patch: refresh
- autofs-5.0.8-revert-fix-libtirpc-name-clash.patch: refresh
- autofs-suse-auto-master-defaults.patch: rename and refresh</changelog>
<changelog author="mszeredi@suse.cz" date="1425384000">- prevent potential privilege escalation via interpreter load path
  for program-based automount maps, add the following patches:
  autofs-5.1.0-add-a-prefix-to-program-map-stdvars.patch
  autofs-5.1.0-add-config-option-to-force-use-of-program-map-stdvars.patch
  (bnc#917977 CVE-2014-8169)</changelog>

</package>
<package pkgid="f7484c392b911e778763378a23c1a349f67bac70fb6e214fa42f307c257ab7a2" name="autofs" arch="src">
    <version epoch="0" ver="5.0.7" rel="19.4.1"/>

<changelog author="lchiquitto@suse.com" date="1350475200">- rpm spec: don't try to build with udisks support on old versions
  of the distribution</changelog>
<changelog author="lchiquitto@suse.com" date="1350648000">- autofs-5.0.7-upstream-patches-20121018.bz2: update 5.0.7 upstream
  patches to 20121018, fixing some bugs:
  * fix recursive mount deadlock
  * increase file map read buffer size
  * handle new location of systemd
- remove patches that are now upstream:
  * autofs-5.0.7-handle-new-location-of-systemd.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351771200">- autofs.service: use service type simple with no forking</changelog>
<changelog author="lchiquitto@suse.com" date="1352203200">- autofs-5.0.7-new-style-systemd-daemon.patch: add new command
  line parameter --systemd, which instructs automount to skip
  daemonization completely, leaving the task to systemd
- autofs.service: use new --systemd option when starting up</changelog>
<changelog author="lchiquitto@suse.com" date="1352203201">- autofs-5.0.7-dont-reschedule-alarm-after-signals.patch: don't
  schedule new alarms after handling SIGHUP and SIGUSR1 (bnc#783651)</changelog>
<changelog author="lchiquitto@suse.com" date="1352203202">- autofs-5.0.7-use-protocol-id-instead-of-protoent.patch: use
  protocol id directly instead of calling the non-reentrant
  function getprotobyname() (bnc#787410)</changelog>
<changelog author="werner@suse.de" date="1352980800">- UDisks dbus module support: use private connection, do not refer
  to a reply if already handled, install dbus AutoMount.conf in
  direct way</changelog>
<changelog author="lchiquitto@suse.com" date="1357905600">- revert systemd initialization type from "simple" to "forking"
  and drop the patch that partially implemented "new style systemd"
  daemon (bnc#798162)
- autofs-5.0.7-new-style-systemd-daemon.patch: delete</changelog>
<changelog author="lchiquitto@suse.com" date="1357905601">- autofs-5.0.7-upstream-patches-20121120.bz2: update 5.0.7 upstream
  patches to 20121120, fixing some bugs:
  * fix map entry duplicate offset detection
  * allow nsswitch.conf to not contain "automount:" lines</changelog>
<changelog author="lchiquitto@suse.com" date="1357905602">- autofs-5.0.7-fix-scandir-filter.patch: fix lookup_dir when the
  included directory is on an XFS file system (bnc#798158)</changelog>
<changelog author="lchiquitto@suse.com" date="1357905603">- fix build on older versions of the distribution, do not install
  org.freedesktop.AutoMount.conf</changelog>
<changelog author="lchiquitto@suse.com" date="1358769600">- autofs-5.0.7-upstream-patches-20130121.bz2: update 5.0.7 upstream
  patches to 20130121, fixing some bugs:
  * fix nobind man page description
  * fix submount offset delete
  * fix init script status return
  * fix use get_proximity() without libtirpc
  * don't use dirent d_type to filter out files in scandir()
  * don't schedule new alarms after readmap
  * use numeric protocol ids instead of protoent structs
  * lib/defaults.c: use WITH_LDAP conditional around LDAP types
  * make yellow pages support optional
  * modules/replicated.c: use sin6_addr.s6_addr32
  * workaround missing GNU versionsort extension
- remove patches that are now upstream:
  * autofs-5.0.7-fix-scandir-filter.patch
  * autofs-5.0.7-use-protocol-id-instead-of-protoent.patch
  * autofs-5.0.7-dont-reschedule-alarm-after-signals.patch</changelog>
<changelog author="lchiquitto@suse.com" date="1359460800">- rpm spec: enable sssd support if available</changelog>
<changelog author="lchiquitto@suse.com" date="1360152000">- autofs-5.0.6-invalid-ghost-dirs.patch: delete. the problem's
  root cause was fixed in the kernel</changelog>
<changelog author="lchiquitto@suse.com" date="1363003200">- autofs-5.0.7-upstream-patches-20130311.bz2: update 5.0.7 upstream
  patches to 20130311, fixing some bugs:
  * dont fail on master map self include (bnc#799873)
  * fix wildcard multi map regression
  * fix file descriptor leak when reloading the daemon (bnc#772698)
  * deprecate nosymlink pseudo option
  * add symlink pseudo option
  * document browse option in man page</changelog>
<changelog author="lchiquitto@suse.com" date="1365508800">- autofs-5.0.7-fix-submount-tree-not-all-expiring.patch: expire
  multiple levels of recursive mounts correctly (bnc#801808)</changelog>
<changelog author="lchiquitto@suse.com" date="1368360000">- autofs-5.0.7-upstream-patches-20130428.bz2: update 5.0.7 upstream
  patches up to 2013-04-28, fixing some bugs:
  * fix some automount(8) typos
  * syncronize handle_mounts() shutdown
  * fix submount tree not all expiring (bnc#801808)
- remove patches that are now upstream:
  * autofs-5.0.7-fix-submount-tree-not-all-expiring.patch</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly specify cyrus-sasl-devel and openssl-devel
  which were implicit before</changelog>
<changelog author="lchiquitto@suse.com" date="1373198400">- autofs-5.0.7-upstream-patches-20130619.bz2: update 5.0.7 upstream
  patches up to 2013-06-19, fixing some bugs:
  * make dump maps check for duplicate indirect mounts
  * document allowed map sources in auto.master
  * add enable sloppy mount option to configure
  * fix interface address null check
  * don't probe rdma mounts
  * fix master map mount options matching
  * fix master map bogus keywork match
  * fix fix map entry duplicate offset detection
  * probe each nfs version in turn for singleton mounts
  * fix probe each nfs version in turn for singleton mounts
  * misc man page fixes</changelog>
<changelog author="arvidjaar@gmail.com" date="1383912000">- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch
  Fix parsing of legacy LDAP map syntax (bnc#847494)</changelog>

</package>
<package pkgid="0915df588dc3ca926731c4bed9065995f41fe710a0e9cda586cc1c9f232deec6" name="autofs" arch="src">
    <version epoch="0" ver="5.0.8" rel="19.8.1"/>

<changelog author="lchiquitto@suse.com" date="1352203200">- autofs-5.0.7-dont-reschedule-alarm-after-signals.patch: don't
  schedule new alarms after handling SIGHUP and SIGUSR1 (bnc#783651)</changelog>
<changelog author="lchiquitto@suse.com" date="1352203201">- autofs-5.0.7-use-protocol-id-instead-of-protoent.patch: use
  protocol id directly instead of calling the non-reentrant
  function getprotobyname() (bnc#787410)</changelog>
<changelog author="werner@suse.de" date="1352980800">- UDisks dbus module support: use private connection, do not refer
  to a reply if already handled, install dbus AutoMount.conf in
  direct way</changelog>
<changelog author="lchiquitto@suse.com" date="1357905600">- revert systemd initialization type from "simple" to "forking"
  and drop the patch that partially implemented "new style systemd"
  daemon (bnc#798162)
- autofs-5.0.7-new-style-systemd-daemon.patch: delete</changelog>
<changelog author="lchiquitto@suse.com" date="1357905601">- autofs-5.0.7-upstream-patches-20121120.bz2: update 5.0.7 upstream
  patches to 20121120, fixing some bugs:
  * fix map entry duplicate offset detection
  * allow nsswitch.conf to not contain "automount:" lines</changelog>
<changelog author="lchiquitto@suse.com" date="1357905602">- autofs-5.0.7-fix-scandir-filter.patch: fix lookup_dir when the
  included directory is on an XFS file system (bnc#798158)</changelog>
<changelog author="lchiquitto@suse.com" date="1357905603">- fix build on older versions of the distribution, do not install
  org.freedesktop.AutoMount.conf</changelog>
<changelog author="lchiquitto@suse.com" date="1358769600">- autofs-5.0.7-upstream-patches-20130121.bz2: update 5.0.7 upstream
  patches to 20130121, fixing some bugs:
  * fix nobind man page description
  * fix submount offset delete
  * fix init script status return
  * fix use get_proximity() without libtirpc
  * don't use dirent d_type to filter out files in scandir()
  * don't schedule new alarms after readmap
  * use numeric protocol ids instead of protoent structs
  * lib/defaults.c: use WITH_LDAP conditional around LDAP types
  * make yellow pages support optional
  * modules/replicated.c: use sin6_addr.s6_addr32
  * workaround missing GNU versionsort extension
- remove patches that are now upstream:
  * autofs-5.0.7-fix-scandir-filter.patch
  * autofs-5.0.7-use-protocol-id-instead-of-protoent.patch
  * autofs-5.0.7-dont-reschedule-alarm-after-signals.patch</changelog>
<changelog author="lchiquitto@suse.com" date="1359460800">- rpm spec: enable sssd support if available</changelog>
<changelog author="lchiquitto@suse.com" date="1360152000">- autofs-5.0.6-invalid-ghost-dirs.patch: delete. the problem's
  root cause was fixed in the kernel</changelog>
<changelog author="lchiquitto@suse.com" date="1363003200">- autofs-5.0.7-upstream-patches-20130311.bz2: update 5.0.7 upstream
  patches to 20130311, fixing some bugs:
  * dont fail on master map self include (bnc#799873)
  * fix wildcard multi map regression
  * fix file descriptor leak when reloading the daemon (bnc#772698)
  * deprecate nosymlink pseudo option
  * add symlink pseudo option
  * document browse option in man page</changelog>
<changelog author="lchiquitto@suse.com" date="1365508800">- autofs-5.0.7-fix-submount-tree-not-all-expiring.patch: expire
  multiple levels of recursive mounts correctly (bnc#801808)</changelog>
<changelog author="lchiquitto@suse.com" date="1368360000">- autofs-5.0.7-upstream-patches-20130428.bz2: update 5.0.7 upstream
  patches up to 2013-04-28, fixing some bugs:
  * fix some automount(8) typos
  * syncronize handle_mounts() shutdown
  * fix submount tree not all expiring (bnc#801808)
- remove patches that are now upstream:
  * autofs-5.0.7-fix-submount-tree-not-all-expiring.patch</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly specify cyrus-sasl-devel and openssl-devel
  which were implicit before</changelog>
<changelog author="lchiquitto@suse.com" date="1373198400">- autofs-5.0.7-upstream-patches-20130619.bz2: update 5.0.7 upstream
  patches up to 2013-06-19, fixing some bugs:
  * make dump maps check for duplicate indirect mounts
  * document allowed map sources in auto.master
  * add enable sloppy mount option to configure
  * fix interface address null check
  * don't probe rdma mounts
  * fix master map mount options matching
  * fix master map bogus keywork match
  * fix fix map entry duplicate offset detection
  * probe each nfs version in turn for singleton mounts
  * fix probe each nfs version in turn for singleton mounts
  * misc man page fixes</changelog>
<changelog author="arvidjaar@gmail.com" date="1383912000">- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch
  Fix parsing of legacy LDAP map syntax (bnc#847494)</changelog>
<changelog author="lchiquitto@suse.de" date="1392811200">- update to version 5.0.8:
  * fix add null check in parse_server_string()
  * check for protocol option
  * use ulimit max open files if greater than internal maximum
  * don't override LDFLAGS in make rules
  * fix a couple of compiler warnings
  * add after sssd dependency to unit file
  * dont start readmap unless ready
  * fix crash due to thread unsafe use of libldap (bnc#820585)
  * fix compile error with heimdal support enabled
  * fix typo forced-shutdown should be force-shutdown
  * fix hesiod check error and use correct $(LIBS) setting
  * fix dead LDAP symbolic link when LDAP support is disabled
  * add missing libtirpc lib to mount_nfs.so when TIRPC enabled
  * use compiler determined by configure instead of hard-coded ones
  * remove hard-coded STRIP variable
  * use LIBS for link libraries
  * unbundle NOTSTRIP from DEBUG so they dont depend on each other
  * fix occasional build error when enable parallel compiling
  * fix compilation of lookup_ldap.c without sasl
  * fix dumpmaps multi output
  * try and cleanup after dumpmaps
  * teach dumpmaps to output simple key value pairs
  * fix syncronize handle_mounts() shutdown
  * fix fix wildcard multi map regression
  * improve timeout option description
  * only probe specific nfs version when requested
  * fix bad mkdir permission on create
  * setup program map env from macro table
  * add short host name standard marco variable
  * allow use of hosts map in maps
  * fix get_nfs_info() probe
  * fix portmap lookup
  * add std vars to program map invocation
  * samples/auto.smb: add logic to obtain credentials
- autofs-5.0.8-dbus-udisks-monitor.patch: rebase on top of 5.0.8
- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch: drop
- autofs-suse-build.patch: drop</changelog>
<changelog author="lchiquitto@suse.de" date="1392811201">- autofs-5.0.8-upstream-patches-20131124.bz2: update 5.0.8 upstream
  patches up to 2013-11-24, fixing the following bugs:
  * fix undefined authtype_requires_creds err if ldap enabled but
    without sasl
  * fix master map type check
  * fix task manager not getting signaled
  * allow --with-systemd to take a path arg
  * fix WITH_LIBTIRPC function name
  * fix ipv6 libtirpc getport</changelog>
<changelog author="lchiquitto@suse.de" date="1392811202">- autofs-5.0.8-fix-serialize-libldap-init.patch: fix deadlock when
  trying to lock mutex that's already owned by the same thread
  (bnc#859969)
- autofs-5.0.8-serialize-libldap-unbind.patch: serialize LDAP unbind
  operations, as they're also not thread-safe and could cause
  segmentation faults (bnc#853469)</changelog>
<changelog author="lchiquitto@suse.com" date="1394452800">- the update to version 5.0.8 also fixes the special -hosts map
  (auto.net) in IPv6 environments (bnc#847207)</changelog>

</package>
<package pkgid="10b16a4f2c420484e300e7dd4dfe9a245c8eefed1d80aa5a30ed053935ca442e" name="autofs" arch="src">
    <version epoch="0" ver="5.0.9" rel="19.12.1"/>

<changelog author="lchiquitto@suse.com" date="1352203200">- autofs-5.0.7-use-protocol-id-instead-of-protoent.patch: use
  protocol id directly instead of calling the non-reentrant
  function getprotobyname() (bnc#787410)</changelog>
<changelog author="werner@suse.de" date="1352980800">- UDisks dbus module support: use private connection, do not refer
  to a reply if already handled, install dbus AutoMount.conf in
  direct way</changelog>
<changelog author="lchiquitto@suse.com" date="1357905600">- revert systemd initialization type from "simple" to "forking"
  and drop the patch that partially implemented "new style systemd"
  daemon (bnc#798162)
- autofs-5.0.7-new-style-systemd-daemon.patch: delete</changelog>
<changelog author="lchiquitto@suse.com" date="1357905601">- autofs-5.0.7-upstream-patches-20121120.bz2: update 5.0.7 upstream
  patches to 20121120, fixing some bugs:
  * fix map entry duplicate offset detection
  * allow nsswitch.conf to not contain "automount:" lines</changelog>
<changelog author="lchiquitto@suse.com" date="1357905602">- autofs-5.0.7-fix-scandir-filter.patch: fix lookup_dir when the
  included directory is on an XFS file system (bnc#798158)</changelog>
<changelog author="lchiquitto@suse.com" date="1357905603">- fix build on older versions of the distribution, do not install
  org.freedesktop.AutoMount.conf</changelog>
<changelog author="lchiquitto@suse.com" date="1358769600">- autofs-5.0.7-upstream-patches-20130121.bz2: update 5.0.7 upstream
  patches to 20130121, fixing some bugs:
  * fix nobind man page description
  * fix submount offset delete
  * fix init script status return
  * fix use get_proximity() without libtirpc
  * don't use dirent d_type to filter out files in scandir()
  * don't schedule new alarms after readmap
  * use numeric protocol ids instead of protoent structs
  * lib/defaults.c: use WITH_LDAP conditional around LDAP types
  * make yellow pages support optional
  * modules/replicated.c: use sin6_addr.s6_addr32
  * workaround missing GNU versionsort extension
- remove patches that are now upstream:
  * autofs-5.0.7-fix-scandir-filter.patch
  * autofs-5.0.7-use-protocol-id-instead-of-protoent.patch
  * autofs-5.0.7-dont-reschedule-alarm-after-signals.patch</changelog>
<changelog author="lchiquitto@suse.com" date="1359460800">- rpm spec: enable sssd support if available</changelog>
<changelog author="lchiquitto@suse.com" date="1360152000">- autofs-5.0.6-invalid-ghost-dirs.patch: delete. the problem's
  root cause was fixed in the kernel</changelog>
<changelog author="lchiquitto@suse.com" date="1363003200">- autofs-5.0.7-upstream-patches-20130311.bz2: update 5.0.7 upstream
  patches to 20130311, fixing some bugs:
  * dont fail on master map self include (bnc#799873)
  * fix wildcard multi map regression
  * fix file descriptor leak when reloading the daemon (bnc#772698)
  * deprecate nosymlink pseudo option
  * add symlink pseudo option
  * document browse option in man page</changelog>
<changelog author="lchiquitto@suse.com" date="1365508800">- autofs-5.0.7-fix-submount-tree-not-all-expiring.patch: expire
  multiple levels of recursive mounts correctly (bnc#801808)</changelog>
<changelog author="lchiquitto@suse.com" date="1368360000">- autofs-5.0.7-upstream-patches-20130428.bz2: update 5.0.7 upstream
  patches up to 2013-04-28, fixing some bugs:
  * fix some automount(8) typos
  * syncronize handle_mounts() shutdown
  * fix submount tree not all expiring (bnc#801808)
- remove patches that are now upstream:
  * autofs-5.0.7-fix-submount-tree-not-all-expiring.patch</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly specify cyrus-sasl-devel and openssl-devel
  which were implicit before</changelog>
<changelog author="lchiquitto@suse.com" date="1373198400">- autofs-5.0.7-upstream-patches-20130619.bz2: update 5.0.7 upstream
  patches up to 2013-06-19, fixing some bugs:
  * make dump maps check for duplicate indirect mounts
  * document allowed map sources in auto.master
  * add enable sloppy mount option to configure
  * fix interface address null check
  * don't probe rdma mounts
  * fix master map mount options matching
  * fix master map bogus keywork match
  * fix fix map entry duplicate offset detection
  * probe each nfs version in turn for singleton mounts
  * fix probe each nfs version in turn for singleton mounts
  * misc man page fixes</changelog>
<changelog author="arvidjaar@gmail.com" date="1383912000">- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch
  Fix parsing of legacy LDAP map syntax (bnc#847494)</changelog>
<changelog author="lchiquitto@suse.de" date="1392811200">- update to version 5.0.8:
  * fix add null check in parse_server_string()
  * check for protocol option
  * use ulimit max open files if greater than internal maximum
  * don't override LDFLAGS in make rules
  * fix a couple of compiler warnings
  * add after sssd dependency to unit file
  * dont start readmap unless ready
  * fix crash due to thread unsafe use of libldap (bnc#820585)
  * fix compile error with heimdal support enabled
  * fix typo forced-shutdown should be force-shutdown
  * fix hesiod check error and use correct $(LIBS) setting
  * fix dead LDAP symbolic link when LDAP support is disabled
  * add missing libtirpc lib to mount_nfs.so when TIRPC enabled
  * use compiler determined by configure instead of hard-coded ones
  * remove hard-coded STRIP variable
  * use LIBS for link libraries
  * unbundle NOTSTRIP from DEBUG so they dont depend on each other
  * fix occasional build error when enable parallel compiling
  * fix compilation of lookup_ldap.c without sasl
  * fix dumpmaps multi output
  * try and cleanup after dumpmaps
  * teach dumpmaps to output simple key value pairs
  * fix syncronize handle_mounts() shutdown
  * fix fix wildcard multi map regression
  * improve timeout option description
  * only probe specific nfs version when requested
  * fix bad mkdir permission on create
  * setup program map env from macro table
  * add short host name standard marco variable
  * allow use of hosts map in maps
  * fix get_nfs_info() probe
  * fix portmap lookup
  * add std vars to program map invocation
  * samples/auto.smb: add logic to obtain credentials
- autofs-5.0.8-dbus-udisks-monitor.patch: rebase on top of 5.0.8
- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch: drop
- autofs-suse-build.patch: drop</changelog>
<changelog author="lchiquitto@suse.de" date="1392811201">- autofs-5.0.8-upstream-patches-20131124.bz2: update 5.0.8 upstream
  patches up to 2013-11-24, fixing the following bugs:
  * fix undefined authtype_requires_creds err if ldap enabled but
    without sasl
  * fix master map type check
  * fix task manager not getting signaled
  * allow --with-systemd to take a path arg
  * fix WITH_LIBTIRPC function name
  * fix ipv6 libtirpc getport</changelog>
<changelog author="lchiquitto@suse.de" date="1392811202">- autofs-5.0.8-fix-serialize-libldap-init.patch: fix deadlock when
  trying to lock mutex that's already owned by the same thread
  (bnc#859969)
- autofs-5.0.8-serialize-libldap-unbind.patch: serialize LDAP unbind
  operations, as they're also not thread-safe and could cause
  segmentation faults (bnc#853469)</changelog>
<changelog author="lchiquitto@suse.com" date="1394452800">- the update to version 5.0.8 also fixes the special -hosts map
  (auto.net) in IPv6 environments (bnc#847207)</changelog>
<changelog author="lchiquitto@suse.com" date="1411128000">- update to stable release 5.0.9 (bnc#869806):
  * fix ipv6 link local address handling
  * fix fix ipv6 libtirpc getport
  * get_nfs_info() should query portmapper if port is not given
  * fix rpc_portmap_getport() proto not set
  * fix protmap not trying proto v2
  * fix rpc_getport() when libtirpc is disabled
  * fix rpc_getrpcbport() when libtirpc is disabled
  * don't reset errno
  * extend fix for crash due to thread unsafe use of libldap
  * fix deadlock in init_ldap_connection
  * fix options compare
  * fix negative status being reset on map read
  * check for existing offset mount before mounting
  * fix max() declaration
  * fix symlink fail message in mount_bind.c
  * fix cache readlock not taken on lookup
  * pass map_source as function paramter where possible
  * check for bind onto self in mount_bind.c
  * fix symlink expire
  * dont clobber mapent for negative cache
  * fix macro_addvar() and move init to main thread
  * change walk_tree() to take ap
  * add negative cache lookup to hesiod lookup
  * fix external env configure
  * make autofs(5) consistent with auto.master(5)
  * fix map source with type lookup
  * fix lookup_nss_mount() map lookup
  * dont ignore null cache entries on multi mount umount
  * fix inconsistent error returns in handle_packet_missing_direct()
  * simple coverity fixes
  * fix fix options compare
  * use open(2) instead of access(2) to trigger dependent mounts
  * fix fix map source with type lookup
  * fixes for samples/auto.master
  * fix variable substitution description
  * fix incorrect append options description in README.v5-release
  * add amd map format parser
- drop patches that are already included in the new version:
  * autofs-5.0.8-upstream-patches-20131124.bz2
  * autofs-5.0.8-serialize-libldap-unbind.patch
  * autofs-5.0.8-fix-serialize-libldap-init.patch
  * autofs-5.0.8-eaccess.patch
- autofs-5.0.8-dbus-udisks-monitor.patch: refresh
- autofs-5.0.8-task-use-after-free.patch: refresh
- autofs-5.0.8-revert-fix-libtirpc-name-clash.patch: refresh
- autofs-suse-auto-master-defaults.patch: rename and refresh</changelog>

</package>
<package pkgid="95398c389095cea4085140f66cbf9ccd82e287de624aadc0830ad9f6836b97d7" name="autofs" arch="src">
    <version epoch="0" ver="5.0.9" rel="19.16.1"/>

<changelog author="werner@suse.de" date="1352980800">- UDisks dbus module support: use private connection, do not refer
  to a reply if already handled, install dbus AutoMount.conf in
  direct way</changelog>
<changelog author="lchiquitto@suse.com" date="1357905600">- revert systemd initialization type from "simple" to "forking"
  and drop the patch that partially implemented "new style systemd"
  daemon (bnc#798162)
- autofs-5.0.7-new-style-systemd-daemon.patch: delete</changelog>
<changelog author="lchiquitto@suse.com" date="1357905601">- autofs-5.0.7-upstream-patches-20121120.bz2: update 5.0.7 upstream
  patches to 20121120, fixing some bugs:
  * fix map entry duplicate offset detection
  * allow nsswitch.conf to not contain "automount:" lines</changelog>
<changelog author="lchiquitto@suse.com" date="1357905602">- autofs-5.0.7-fix-scandir-filter.patch: fix lookup_dir when the
  included directory is on an XFS file system (bnc#798158)</changelog>
<changelog author="lchiquitto@suse.com" date="1357905603">- fix build on older versions of the distribution, do not install
  org.freedesktop.AutoMount.conf</changelog>
<changelog author="lchiquitto@suse.com" date="1358769600">- autofs-5.0.7-upstream-patches-20130121.bz2: update 5.0.7 upstream
  patches to 20130121, fixing some bugs:
  * fix nobind man page description
  * fix submount offset delete
  * fix init script status return
  * fix use get_proximity() without libtirpc
  * don't use dirent d_type to filter out files in scandir()
  * don't schedule new alarms after readmap
  * use numeric protocol ids instead of protoent structs
  * lib/defaults.c: use WITH_LDAP conditional around LDAP types
  * make yellow pages support optional
  * modules/replicated.c: use sin6_addr.s6_addr32
  * workaround missing GNU versionsort extension
- remove patches that are now upstream:
  * autofs-5.0.7-fix-scandir-filter.patch
  * autofs-5.0.7-use-protocol-id-instead-of-protoent.patch
  * autofs-5.0.7-dont-reschedule-alarm-after-signals.patch</changelog>
<changelog author="lchiquitto@suse.com" date="1359460800">- rpm spec: enable sssd support if available</changelog>
<changelog author="lchiquitto@suse.com" date="1360152000">- autofs-5.0.6-invalid-ghost-dirs.patch: delete. the problem's
  root cause was fixed in the kernel</changelog>
<changelog author="lchiquitto@suse.com" date="1363003200">- autofs-5.0.7-upstream-patches-20130311.bz2: update 5.0.7 upstream
  patches to 20130311, fixing some bugs:
  * dont fail on master map self include (bnc#799873)
  * fix wildcard multi map regression
  * fix file descriptor leak when reloading the daemon (bnc#772698)
  * deprecate nosymlink pseudo option
  * add symlink pseudo option
  * document browse option in man page</changelog>
<changelog author="lchiquitto@suse.com" date="1365508800">- autofs-5.0.7-fix-submount-tree-not-all-expiring.patch: expire
  multiple levels of recursive mounts correctly (bnc#801808)</changelog>
<changelog author="lchiquitto@suse.com" date="1368360000">- autofs-5.0.7-upstream-patches-20130428.bz2: update 5.0.7 upstream
  patches up to 2013-04-28, fixing some bugs:
  * fix some automount(8) typos
  * syncronize handle_mounts() shutdown
  * fix submount tree not all expiring (bnc#801808)
- remove patches that are now upstream:
  * autofs-5.0.7-fix-submount-tree-not-all-expiring.patch</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly specify cyrus-sasl-devel and openssl-devel
  which were implicit before</changelog>
<changelog author="lchiquitto@suse.com" date="1373198400">- autofs-5.0.7-upstream-patches-20130619.bz2: update 5.0.7 upstream
  patches up to 2013-06-19, fixing some bugs:
  * make dump maps check for duplicate indirect mounts
  * document allowed map sources in auto.master
  * add enable sloppy mount option to configure
  * fix interface address null check
  * don't probe rdma mounts
  * fix master map mount options matching
  * fix master map bogus keywork match
  * fix fix map entry duplicate offset detection
  * probe each nfs version in turn for singleton mounts
  * fix probe each nfs version in turn for singleton mounts
  * misc man page fixes</changelog>
<changelog author="arvidjaar@gmail.com" date="1383912000">- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch
  Fix parsing of legacy LDAP map syntax (bnc#847494)</changelog>
<changelog author="lchiquitto@suse.de" date="1392811200">- update to version 5.0.8:
  * fix add null check in parse_server_string()
  * check for protocol option
  * use ulimit max open files if greater than internal maximum
  * don't override LDFLAGS in make rules
  * fix a couple of compiler warnings
  * add after sssd dependency to unit file
  * dont start readmap unless ready
  * fix crash due to thread unsafe use of libldap (bnc#820585)
  * fix compile error with heimdal support enabled
  * fix typo forced-shutdown should be force-shutdown
  * fix hesiod check error and use correct $(LIBS) setting
  * fix dead LDAP symbolic link when LDAP support is disabled
  * add missing libtirpc lib to mount_nfs.so when TIRPC enabled
  * use compiler determined by configure instead of hard-coded ones
  * remove hard-coded STRIP variable
  * use LIBS for link libraries
  * unbundle NOTSTRIP from DEBUG so they dont depend on each other
  * fix occasional build error when enable parallel compiling
  * fix compilation of lookup_ldap.c without sasl
  * fix dumpmaps multi output
  * try and cleanup after dumpmaps
  * teach dumpmaps to output simple key value pairs
  * fix syncronize handle_mounts() shutdown
  * fix fix wildcard multi map regression
  * improve timeout option description
  * only probe specific nfs version when requested
  * fix bad mkdir permission on create
  * setup program map env from macro table
  * add short host name standard marco variable
  * allow use of hosts map in maps
  * fix get_nfs_info() probe
  * fix portmap lookup
  * add std vars to program map invocation
  * samples/auto.smb: add logic to obtain credentials
- autofs-5.0.8-dbus-udisks-monitor.patch: rebase on top of 5.0.8
- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch: drop
- autofs-suse-build.patch: drop</changelog>
<changelog author="lchiquitto@suse.de" date="1392811201">- autofs-5.0.8-upstream-patches-20131124.bz2: update 5.0.8 upstream
  patches up to 2013-11-24, fixing the following bugs:
  * fix undefined authtype_requires_creds err if ldap enabled but
    without sasl
  * fix master map type check
  * fix task manager not getting signaled
  * allow --with-systemd to take a path arg
  * fix WITH_LIBTIRPC function name
  * fix ipv6 libtirpc getport</changelog>
<changelog author="lchiquitto@suse.de" date="1392811202">- autofs-5.0.8-fix-serialize-libldap-init.patch: fix deadlock when
  trying to lock mutex that's already owned by the same thread
  (bnc#859969)
- autofs-5.0.8-serialize-libldap-unbind.patch: serialize LDAP unbind
  operations, as they're also not thread-safe and could cause
  segmentation faults (bnc#853469)</changelog>
<changelog author="lchiquitto@suse.com" date="1394452800">- the update to version 5.0.8 also fixes the special -hosts map
  (auto.net) in IPv6 environments (bnc#847207)</changelog>
<changelog author="lchiquitto@suse.com" date="1411128000">- update to stable release 5.0.9 (bnc#869806):
  * fix ipv6 link local address handling
  * fix fix ipv6 libtirpc getport
  * get_nfs_info() should query portmapper if port is not given
  * fix rpc_portmap_getport() proto not set
  * fix protmap not trying proto v2
  * fix rpc_getport() when libtirpc is disabled
  * fix rpc_getrpcbport() when libtirpc is disabled
  * don't reset errno
  * extend fix for crash due to thread unsafe use of libldap
  * fix deadlock in init_ldap_connection
  * fix options compare
  * fix negative status being reset on map read
  * check for existing offset mount before mounting
  * fix max() declaration
  * fix symlink fail message in mount_bind.c
  * fix cache readlock not taken on lookup
  * pass map_source as function paramter where possible
  * check for bind onto self in mount_bind.c
  * fix symlink expire
  * dont clobber mapent for negative cache
  * fix macro_addvar() and move init to main thread
  * change walk_tree() to take ap
  * add negative cache lookup to hesiod lookup
  * fix external env configure
  * make autofs(5) consistent with auto.master(5)
  * fix map source with type lookup
  * fix lookup_nss_mount() map lookup
  * dont ignore null cache entries on multi mount umount
  * fix inconsistent error returns in handle_packet_missing_direct()
  * simple coverity fixes
  * fix fix options compare
  * use open(2) instead of access(2) to trigger dependent mounts
  * fix fix map source with type lookup
  * fixes for samples/auto.master
  * fix variable substitution description
  * fix incorrect append options description in README.v5-release
  * add amd map format parser
- drop patches that are already included in the new version:
  * autofs-5.0.8-upstream-patches-20131124.bz2
  * autofs-5.0.8-serialize-libldap-unbind.patch
  * autofs-5.0.8-fix-serialize-libldap-init.patch
  * autofs-5.0.8-eaccess.patch
- autofs-5.0.8-dbus-udisks-monitor.patch: refresh
- autofs-5.0.8-task-use-after-free.patch: refresh
- autofs-5.0.8-revert-fix-libtirpc-name-clash.patch: refresh
- autofs-suse-auto-master-defaults.patch: rename and refresh</changelog>
<changelog author="mszeredi@suse.cz" date="1425384000">- prevent potential privilege escalation via interpreter load path
  for program-based automount maps, add the following patches:
  autofs-5.1.0-add-a-prefix-to-program-map-stdvars.patch
  autofs-5.1.0-add-config-option-to-force-use-of-program-map-stdvars.patch
  (bnc#917977 CVE-2014-8169)</changelog>

</package>
<package pkgid="9e3f315b7091d0170fc20318adc8cb809268eea6684531a219f74ede82baf1af" name="autofs" arch="x86_64">
    <version epoch="0" ver="5.0.7" rel="19.4.1"/>

<changelog author="lchiquitto@suse.com" date="1350475200">- rpm spec: don't try to build with udisks support on old versions
  of the distribution</changelog>
<changelog author="lchiquitto@suse.com" date="1350648000">- autofs-5.0.7-upstream-patches-20121018.bz2: update 5.0.7 upstream
  patches to 20121018, fixing some bugs:
  * fix recursive mount deadlock
  * increase file map read buffer size
  * handle new location of systemd
- remove patches that are now upstream:
  * autofs-5.0.7-handle-new-location-of-systemd.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351771200">- autofs.service: use service type simple with no forking</changelog>
<changelog author="lchiquitto@suse.com" date="1352203200">- autofs-5.0.7-new-style-systemd-daemon.patch: add new command
  line parameter --systemd, which instructs automount to skip
  daemonization completely, leaving the task to systemd
- autofs.service: use new --systemd option when starting up</changelog>
<changelog author="lchiquitto@suse.com" date="1352203201">- autofs-5.0.7-dont-reschedule-alarm-after-signals.patch: don't
  schedule new alarms after handling SIGHUP and SIGUSR1 (bnc#783651)</changelog>
<changelog author="lchiquitto@suse.com" date="1352203202">- autofs-5.0.7-use-protocol-id-instead-of-protoent.patch: use
  protocol id directly instead of calling the non-reentrant
  function getprotobyname() (bnc#787410)</changelog>
<changelog author="werner@suse.de" date="1352980800">- UDisks dbus module support: use private connection, do not refer
  to a reply if already handled, install dbus AutoMount.conf in
  direct way</changelog>
<changelog author="lchiquitto@suse.com" date="1357905600">- revert systemd initialization type from "simple" to "forking"
  and drop the patch that partially implemented "new style systemd"
  daemon (bnc#798162)
- autofs-5.0.7-new-style-systemd-daemon.patch: delete</changelog>
<changelog author="lchiquitto@suse.com" date="1357905601">- autofs-5.0.7-upstream-patches-20121120.bz2: update 5.0.7 upstream
  patches to 20121120, fixing some bugs:
  * fix map entry duplicate offset detection
  * allow nsswitch.conf to not contain "automount:" lines</changelog>
<changelog author="lchiquitto@suse.com" date="1357905602">- autofs-5.0.7-fix-scandir-filter.patch: fix lookup_dir when the
  included directory is on an XFS file system (bnc#798158)</changelog>
<changelog author="lchiquitto@suse.com" date="1357905603">- fix build on older versions of the distribution, do not install
  org.freedesktop.AutoMount.conf</changelog>
<changelog author="lchiquitto@suse.com" date="1358769600">- autofs-5.0.7-upstream-patches-20130121.bz2: update 5.0.7 upstream
  patches to 20130121, fixing some bugs:
  * fix nobind man page description
  * fix submount offset delete
  * fix init script status return
  * fix use get_proximity() without libtirpc
  * don't use dirent d_type to filter out files in scandir()
  * don't schedule new alarms after readmap
  * use numeric protocol ids instead of protoent structs
  * lib/defaults.c: use WITH_LDAP conditional around LDAP types
  * make yellow pages support optional
  * modules/replicated.c: use sin6_addr.s6_addr32
  * workaround missing GNU versionsort extension
- remove patches that are now upstream:
  * autofs-5.0.7-fix-scandir-filter.patch
  * autofs-5.0.7-use-protocol-id-instead-of-protoent.patch
  * autofs-5.0.7-dont-reschedule-alarm-after-signals.patch</changelog>
<changelog author="lchiquitto@suse.com" date="1359460800">- rpm spec: enable sssd support if available</changelog>
<changelog author="lchiquitto@suse.com" date="1360152000">- autofs-5.0.6-invalid-ghost-dirs.patch: delete. the problem's
  root cause was fixed in the kernel</changelog>
<changelog author="lchiquitto@suse.com" date="1363003200">- autofs-5.0.7-upstream-patches-20130311.bz2: update 5.0.7 upstream
  patches to 20130311, fixing some bugs:
  * dont fail on master map self include (bnc#799873)
  * fix wildcard multi map regression
  * fix file descriptor leak when reloading the daemon (bnc#772698)
  * deprecate nosymlink pseudo option
  * add symlink pseudo option
  * document browse option in man page</changelog>
<changelog author="lchiquitto@suse.com" date="1365508800">- autofs-5.0.7-fix-submount-tree-not-all-expiring.patch: expire
  multiple levels of recursive mounts correctly (bnc#801808)</changelog>
<changelog author="lchiquitto@suse.com" date="1368360000">- autofs-5.0.7-upstream-patches-20130428.bz2: update 5.0.7 upstream
  patches up to 2013-04-28, fixing some bugs:
  * fix some automount(8) typos
  * syncronize handle_mounts() shutdown
  * fix submount tree not all expiring (bnc#801808)
- remove patches that are now upstream:
  * autofs-5.0.7-fix-submount-tree-not-all-expiring.patch</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly specify cyrus-sasl-devel and openssl-devel
  which were implicit before</changelog>
<changelog author="lchiquitto@suse.com" date="1373198400">- autofs-5.0.7-upstream-patches-20130619.bz2: update 5.0.7 upstream
  patches up to 2013-06-19, fixing some bugs:
  * make dump maps check for duplicate indirect mounts
  * document allowed map sources in auto.master
  * add enable sloppy mount option to configure
  * fix interface address null check
  * don't probe rdma mounts
  * fix master map mount options matching
  * fix master map bogus keywork match
  * fix fix map entry duplicate offset detection
  * probe each nfs version in turn for singleton mounts
  * fix probe each nfs version in turn for singleton mounts
  * misc man page fixes</changelog>
<changelog author="arvidjaar@gmail.com" date="1383912000">- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch
  Fix parsing of legacy LDAP map syntax (bnc#847494)</changelog>

</package>
<package pkgid="cf0061454e3fa7f3109fe03e12a787a33ca2f3aa3df0a7eef824bb80b432efc9" name="autofs" arch="x86_64">
    <version epoch="0" ver="5.0.8" rel="19.8.1"/>

<changelog author="lchiquitto@suse.com" date="1352203200">- autofs-5.0.7-dont-reschedule-alarm-after-signals.patch: don't
  schedule new alarms after handling SIGHUP and SIGUSR1 (bnc#783651)</changelog>
<changelog author="lchiquitto@suse.com" date="1352203201">- autofs-5.0.7-use-protocol-id-instead-of-protoent.patch: use
  protocol id directly instead of calling the non-reentrant
  function getprotobyname() (bnc#787410)</changelog>
<changelog author="werner@suse.de" date="1352980800">- UDisks dbus module support: use private connection, do not refer
  to a reply if already handled, install dbus AutoMount.conf in
  direct way</changelog>
<changelog author="lchiquitto@suse.com" date="1357905600">- revert systemd initialization type from "simple" to "forking"
  and drop the patch that partially implemented "new style systemd"
  daemon (bnc#798162)
- autofs-5.0.7-new-style-systemd-daemon.patch: delete</changelog>
<changelog author="lchiquitto@suse.com" date="1357905601">- autofs-5.0.7-upstream-patches-20121120.bz2: update 5.0.7 upstream
  patches to 20121120, fixing some bugs:
  * fix map entry duplicate offset detection
  * allow nsswitch.conf to not contain "automount:" lines</changelog>
<changelog author="lchiquitto@suse.com" date="1357905602">- autofs-5.0.7-fix-scandir-filter.patch: fix lookup_dir when the
  included directory is on an XFS file system (bnc#798158)</changelog>
<changelog author="lchiquitto@suse.com" date="1357905603">- fix build on older versions of the distribution, do not install
  org.freedesktop.AutoMount.conf</changelog>
<changelog author="lchiquitto@suse.com" date="1358769600">- autofs-5.0.7-upstream-patches-20130121.bz2: update 5.0.7 upstream
  patches to 20130121, fixing some bugs:
  * fix nobind man page description
  * fix submount offset delete
  * fix init script status return
  * fix use get_proximity() without libtirpc
  * don't use dirent d_type to filter out files in scandir()
  * don't schedule new alarms after readmap
  * use numeric protocol ids instead of protoent structs
  * lib/defaults.c: use WITH_LDAP conditional around LDAP types
  * make yellow pages support optional
  * modules/replicated.c: use sin6_addr.s6_addr32
  * workaround missing GNU versionsort extension
- remove patches that are now upstream:
  * autofs-5.0.7-fix-scandir-filter.patch
  * autofs-5.0.7-use-protocol-id-instead-of-protoent.patch
  * autofs-5.0.7-dont-reschedule-alarm-after-signals.patch</changelog>
<changelog author="lchiquitto@suse.com" date="1359460800">- rpm spec: enable sssd support if available</changelog>
<changelog author="lchiquitto@suse.com" date="1360152000">- autofs-5.0.6-invalid-ghost-dirs.patch: delete. the problem's
  root cause was fixed in the kernel</changelog>
<changelog author="lchiquitto@suse.com" date="1363003200">- autofs-5.0.7-upstream-patches-20130311.bz2: update 5.0.7 upstream
  patches to 20130311, fixing some bugs:
  * dont fail on master map self include (bnc#799873)
  * fix wildcard multi map regression
  * fix file descriptor leak when reloading the daemon (bnc#772698)
  * deprecate nosymlink pseudo option
  * add symlink pseudo option
  * document browse option in man page</changelog>
<changelog author="lchiquitto@suse.com" date="1365508800">- autofs-5.0.7-fix-submount-tree-not-all-expiring.patch: expire
  multiple levels of recursive mounts correctly (bnc#801808)</changelog>
<changelog author="lchiquitto@suse.com" date="1368360000">- autofs-5.0.7-upstream-patches-20130428.bz2: update 5.0.7 upstream
  patches up to 2013-04-28, fixing some bugs:
  * fix some automount(8) typos
  * syncronize handle_mounts() shutdown
  * fix submount tree not all expiring (bnc#801808)
- remove patches that are now upstream:
  * autofs-5.0.7-fix-submount-tree-not-all-expiring.patch</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly specify cyrus-sasl-devel and openssl-devel
  which were implicit before</changelog>
<changelog author="lchiquitto@suse.com" date="1373198400">- autofs-5.0.7-upstream-patches-20130619.bz2: update 5.0.7 upstream
  patches up to 2013-06-19, fixing some bugs:
  * make dump maps check for duplicate indirect mounts
  * document allowed map sources in auto.master
  * add enable sloppy mount option to configure
  * fix interface address null check
  * don't probe rdma mounts
  * fix master map mount options matching
  * fix master map bogus keywork match
  * fix fix map entry duplicate offset detection
  * probe each nfs version in turn for singleton mounts
  * fix probe each nfs version in turn for singleton mounts
  * misc man page fixes</changelog>
<changelog author="arvidjaar@gmail.com" date="1383912000">- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch
  Fix parsing of legacy LDAP map syntax (bnc#847494)</changelog>
<changelog author="lchiquitto@suse.de" date="1392811200">- update to version 5.0.8:
  * fix add null check in parse_server_string()
  * check for protocol option
  * use ulimit max open files if greater than internal maximum
  * don't override LDFLAGS in make rules
  * fix a couple of compiler warnings
  * add after sssd dependency to unit file
  * dont start readmap unless ready
  * fix crash due to thread unsafe use of libldap (bnc#820585)
  * fix compile error with heimdal support enabled
  * fix typo forced-shutdown should be force-shutdown
  * fix hesiod check error and use correct $(LIBS) setting
  * fix dead LDAP symbolic link when LDAP support is disabled
  * add missing libtirpc lib to mount_nfs.so when TIRPC enabled
  * use compiler determined by configure instead of hard-coded ones
  * remove hard-coded STRIP variable
  * use LIBS for link libraries
  * unbundle NOTSTRIP from DEBUG so they dont depend on each other
  * fix occasional build error when enable parallel compiling
  * fix compilation of lookup_ldap.c without sasl
  * fix dumpmaps multi output
  * try and cleanup after dumpmaps
  * teach dumpmaps to output simple key value pairs
  * fix syncronize handle_mounts() shutdown
  * fix fix wildcard multi map regression
  * improve timeout option description
  * only probe specific nfs version when requested
  * fix bad mkdir permission on create
  * setup program map env from macro table
  * add short host name standard marco variable
  * allow use of hosts map in maps
  * fix get_nfs_info() probe
  * fix portmap lookup
  * add std vars to program map invocation
  * samples/auto.smb: add logic to obtain credentials
- autofs-5.0.8-dbus-udisks-monitor.patch: rebase on top of 5.0.8
- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch: drop
- autofs-suse-build.patch: drop</changelog>
<changelog author="lchiquitto@suse.de" date="1392811201">- autofs-5.0.8-upstream-patches-20131124.bz2: update 5.0.8 upstream
  patches up to 2013-11-24, fixing the following bugs:
  * fix undefined authtype_requires_creds err if ldap enabled but
    without sasl
  * fix master map type check
  * fix task manager not getting signaled
  * allow --with-systemd to take a path arg
  * fix WITH_LIBTIRPC function name
  * fix ipv6 libtirpc getport</changelog>
<changelog author="lchiquitto@suse.de" date="1392811202">- autofs-5.0.8-fix-serialize-libldap-init.patch: fix deadlock when
  trying to lock mutex that's already owned by the same thread
  (bnc#859969)
- autofs-5.0.8-serialize-libldap-unbind.patch: serialize LDAP unbind
  operations, as they're also not thread-safe and could cause
  segmentation faults (bnc#853469)</changelog>
<changelog author="lchiquitto@suse.com" date="1394452800">- the update to version 5.0.8 also fixes the special -hosts map
  (auto.net) in IPv6 environments (bnc#847207)</changelog>

</package>
<package pkgid="cbab789b59ae8a9588c2c9caba7176e6b4b01e5293f5bf699bb2dfcb7793a6c7" name="autofs" arch="x86_64">
    <version epoch="0" ver="5.0.9" rel="19.12.1"/>

<changelog author="lchiquitto@suse.com" date="1352203200">- autofs-5.0.7-use-protocol-id-instead-of-protoent.patch: use
  protocol id directly instead of calling the non-reentrant
  function getprotobyname() (bnc#787410)</changelog>
<changelog author="werner@suse.de" date="1352980800">- UDisks dbus module support: use private connection, do not refer
  to a reply if already handled, install dbus AutoMount.conf in
  direct way</changelog>
<changelog author="lchiquitto@suse.com" date="1357905600">- revert systemd initialization type from "simple" to "forking"
  and drop the patch that partially implemented "new style systemd"
  daemon (bnc#798162)
- autofs-5.0.7-new-style-systemd-daemon.patch: delete</changelog>
<changelog author="lchiquitto@suse.com" date="1357905601">- autofs-5.0.7-upstream-patches-20121120.bz2: update 5.0.7 upstream
  patches to 20121120, fixing some bugs:
  * fix map entry duplicate offset detection
  * allow nsswitch.conf to not contain "automount:" lines</changelog>
<changelog author="lchiquitto@suse.com" date="1357905602">- autofs-5.0.7-fix-scandir-filter.patch: fix lookup_dir when the
  included directory is on an XFS file system (bnc#798158)</changelog>
<changelog author="lchiquitto@suse.com" date="1357905603">- fix build on older versions of the distribution, do not install
  org.freedesktop.AutoMount.conf</changelog>
<changelog author="lchiquitto@suse.com" date="1358769600">- autofs-5.0.7-upstream-patches-20130121.bz2: update 5.0.7 upstream
  patches to 20130121, fixing some bugs:
  * fix nobind man page description
  * fix submount offset delete
  * fix init script status return
  * fix use get_proximity() without libtirpc
  * don't use dirent d_type to filter out files in scandir()
  * don't schedule new alarms after readmap
  * use numeric protocol ids instead of protoent structs
  * lib/defaults.c: use WITH_LDAP conditional around LDAP types
  * make yellow pages support optional
  * modules/replicated.c: use sin6_addr.s6_addr32
  * workaround missing GNU versionsort extension
- remove patches that are now upstream:
  * autofs-5.0.7-fix-scandir-filter.patch
  * autofs-5.0.7-use-protocol-id-instead-of-protoent.patch
  * autofs-5.0.7-dont-reschedule-alarm-after-signals.patch</changelog>
<changelog author="lchiquitto@suse.com" date="1359460800">- rpm spec: enable sssd support if available</changelog>
<changelog author="lchiquitto@suse.com" date="1360152000">- autofs-5.0.6-invalid-ghost-dirs.patch: delete. the problem's
  root cause was fixed in the kernel</changelog>
<changelog author="lchiquitto@suse.com" date="1363003200">- autofs-5.0.7-upstream-patches-20130311.bz2: update 5.0.7 upstream
  patches to 20130311, fixing some bugs:
  * dont fail on master map self include (bnc#799873)
  * fix wildcard multi map regression
  * fix file descriptor leak when reloading the daemon (bnc#772698)
  * deprecate nosymlink pseudo option
  * add symlink pseudo option
  * document browse option in man page</changelog>
<changelog author="lchiquitto@suse.com" date="1365508800">- autofs-5.0.7-fix-submount-tree-not-all-expiring.patch: expire
  multiple levels of recursive mounts correctly (bnc#801808)</changelog>
<changelog author="lchiquitto@suse.com" date="1368360000">- autofs-5.0.7-upstream-patches-20130428.bz2: update 5.0.7 upstream
  patches up to 2013-04-28, fixing some bugs:
  * fix some automount(8) typos
  * syncronize handle_mounts() shutdown
  * fix submount tree not all expiring (bnc#801808)
- remove patches that are now upstream:
  * autofs-5.0.7-fix-submount-tree-not-all-expiring.patch</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly specify cyrus-sasl-devel and openssl-devel
  which were implicit before</changelog>
<changelog author="lchiquitto@suse.com" date="1373198400">- autofs-5.0.7-upstream-patches-20130619.bz2: update 5.0.7 upstream
  patches up to 2013-06-19, fixing some bugs:
  * make dump maps check for duplicate indirect mounts
  * document allowed map sources in auto.master
  * add enable sloppy mount option to configure
  * fix interface address null check
  * don't probe rdma mounts
  * fix master map mount options matching
  * fix master map bogus keywork match
  * fix fix map entry duplicate offset detection
  * probe each nfs version in turn for singleton mounts
  * fix probe each nfs version in turn for singleton mounts
  * misc man page fixes</changelog>
<changelog author="arvidjaar@gmail.com" date="1383912000">- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch
  Fix parsing of legacy LDAP map syntax (bnc#847494)</changelog>
<changelog author="lchiquitto@suse.de" date="1392811200">- update to version 5.0.8:
  * fix add null check in parse_server_string()
  * check for protocol option
  * use ulimit max open files if greater than internal maximum
  * don't override LDFLAGS in make rules
  * fix a couple of compiler warnings
  * add after sssd dependency to unit file
  * dont start readmap unless ready
  * fix crash due to thread unsafe use of libldap (bnc#820585)
  * fix compile error with heimdal support enabled
  * fix typo forced-shutdown should be force-shutdown
  * fix hesiod check error and use correct $(LIBS) setting
  * fix dead LDAP symbolic link when LDAP support is disabled
  * add missing libtirpc lib to mount_nfs.so when TIRPC enabled
  * use compiler determined by configure instead of hard-coded ones
  * remove hard-coded STRIP variable
  * use LIBS for link libraries
  * unbundle NOTSTRIP from DEBUG so they dont depend on each other
  * fix occasional build error when enable parallel compiling
  * fix compilation of lookup_ldap.c without sasl
  * fix dumpmaps multi output
  * try and cleanup after dumpmaps
  * teach dumpmaps to output simple key value pairs
  * fix syncronize handle_mounts() shutdown
  * fix fix wildcard multi map regression
  * improve timeout option description
  * only probe specific nfs version when requested
  * fix bad mkdir permission on create
  * setup program map env from macro table
  * add short host name standard marco variable
  * allow use of hosts map in maps
  * fix get_nfs_info() probe
  * fix portmap lookup
  * add std vars to program map invocation
  * samples/auto.smb: add logic to obtain credentials
- autofs-5.0.8-dbus-udisks-monitor.patch: rebase on top of 5.0.8
- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch: drop
- autofs-suse-build.patch: drop</changelog>
<changelog author="lchiquitto@suse.de" date="1392811201">- autofs-5.0.8-upstream-patches-20131124.bz2: update 5.0.8 upstream
  patches up to 2013-11-24, fixing the following bugs:
  * fix undefined authtype_requires_creds err if ldap enabled but
    without sasl
  * fix master map type check
  * fix task manager not getting signaled
  * allow --with-systemd to take a path arg
  * fix WITH_LIBTIRPC function name
  * fix ipv6 libtirpc getport</changelog>
<changelog author="lchiquitto@suse.de" date="1392811202">- autofs-5.0.8-fix-serialize-libldap-init.patch: fix deadlock when
  trying to lock mutex that's already owned by the same thread
  (bnc#859969)
- autofs-5.0.8-serialize-libldap-unbind.patch: serialize LDAP unbind
  operations, as they're also not thread-safe and could cause
  segmentation faults (bnc#853469)</changelog>
<changelog author="lchiquitto@suse.com" date="1394452800">- the update to version 5.0.8 also fixes the special -hosts map
  (auto.net) in IPv6 environments (bnc#847207)</changelog>
<changelog author="lchiquitto@suse.com" date="1411128000">- update to stable release 5.0.9 (bnc#869806):
  * fix ipv6 link local address handling
  * fix fix ipv6 libtirpc getport
  * get_nfs_info() should query portmapper if port is not given
  * fix rpc_portmap_getport() proto not set
  * fix protmap not trying proto v2
  * fix rpc_getport() when libtirpc is disabled
  * fix rpc_getrpcbport() when libtirpc is disabled
  * don't reset errno
  * extend fix for crash due to thread unsafe use of libldap
  * fix deadlock in init_ldap_connection
  * fix options compare
  * fix negative status being reset on map read
  * check for existing offset mount before mounting
  * fix max() declaration
  * fix symlink fail message in mount_bind.c
  * fix cache readlock not taken on lookup
  * pass map_source as function paramter where possible
  * check for bind onto self in mount_bind.c
  * fix symlink expire
  * dont clobber mapent for negative cache
  * fix macro_addvar() and move init to main thread
  * change walk_tree() to take ap
  * add negative cache lookup to hesiod lookup
  * fix external env configure
  * make autofs(5) consistent with auto.master(5)
  * fix map source with type lookup
  * fix lookup_nss_mount() map lookup
  * dont ignore null cache entries on multi mount umount
  * fix inconsistent error returns in handle_packet_missing_direct()
  * simple coverity fixes
  * fix fix options compare
  * use open(2) instead of access(2) to trigger dependent mounts
  * fix fix map source with type lookup
  * fixes for samples/auto.master
  * fix variable substitution description
  * fix incorrect append options description in README.v5-release
  * add amd map format parser
- drop patches that are already included in the new version:
  * autofs-5.0.8-upstream-patches-20131124.bz2
  * autofs-5.0.8-serialize-libldap-unbind.patch
  * autofs-5.0.8-fix-serialize-libldap-init.patch
  * autofs-5.0.8-eaccess.patch
- autofs-5.0.8-dbus-udisks-monitor.patch: refresh
- autofs-5.0.8-task-use-after-free.patch: refresh
- autofs-5.0.8-revert-fix-libtirpc-name-clash.patch: refresh
- autofs-suse-auto-master-defaults.patch: rename and refresh</changelog>

</package>
<package pkgid="8eabc9f9cee10fad7d4c51bb9fe1642048b46db0ce7426e2e2bce4a12d749e5b" name="autofs" arch="x86_64">
    <version epoch="0" ver="5.0.9" rel="19.16.1"/>

<changelog author="werner@suse.de" date="1352980800">- UDisks dbus module support: use private connection, do not refer
  to a reply if already handled, install dbus AutoMount.conf in
  direct way</changelog>
<changelog author="lchiquitto@suse.com" date="1357905600">- revert systemd initialization type from "simple" to "forking"
  and drop the patch that partially implemented "new style systemd"
  daemon (bnc#798162)
- autofs-5.0.7-new-style-systemd-daemon.patch: delete</changelog>
<changelog author="lchiquitto@suse.com" date="1357905601">- autofs-5.0.7-upstream-patches-20121120.bz2: update 5.0.7 upstream
  patches to 20121120, fixing some bugs:
  * fix map entry duplicate offset detection
  * allow nsswitch.conf to not contain "automount:" lines</changelog>
<changelog author="lchiquitto@suse.com" date="1357905602">- autofs-5.0.7-fix-scandir-filter.patch: fix lookup_dir when the
  included directory is on an XFS file system (bnc#798158)</changelog>
<changelog author="lchiquitto@suse.com" date="1357905603">- fix build on older versions of the distribution, do not install
  org.freedesktop.AutoMount.conf</changelog>
<changelog author="lchiquitto@suse.com" date="1358769600">- autofs-5.0.7-upstream-patches-20130121.bz2: update 5.0.7 upstream
  patches to 20130121, fixing some bugs:
  * fix nobind man page description
  * fix submount offset delete
  * fix init script status return
  * fix use get_proximity() without libtirpc
  * don't use dirent d_type to filter out files in scandir()
  * don't schedule new alarms after readmap
  * use numeric protocol ids instead of protoent structs
  * lib/defaults.c: use WITH_LDAP conditional around LDAP types
  * make yellow pages support optional
  * modules/replicated.c: use sin6_addr.s6_addr32
  * workaround missing GNU versionsort extension
- remove patches that are now upstream:
  * autofs-5.0.7-fix-scandir-filter.patch
  * autofs-5.0.7-use-protocol-id-instead-of-protoent.patch
  * autofs-5.0.7-dont-reschedule-alarm-after-signals.patch</changelog>
<changelog author="lchiquitto@suse.com" date="1359460800">- rpm spec: enable sssd support if available</changelog>
<changelog author="lchiquitto@suse.com" date="1360152000">- autofs-5.0.6-invalid-ghost-dirs.patch: delete. the problem's
  root cause was fixed in the kernel</changelog>
<changelog author="lchiquitto@suse.com" date="1363003200">- autofs-5.0.7-upstream-patches-20130311.bz2: update 5.0.7 upstream
  patches to 20130311, fixing some bugs:
  * dont fail on master map self include (bnc#799873)
  * fix wildcard multi map regression
  * fix file descriptor leak when reloading the daemon (bnc#772698)
  * deprecate nosymlink pseudo option
  * add symlink pseudo option
  * document browse option in man page</changelog>
<changelog author="lchiquitto@suse.com" date="1365508800">- autofs-5.0.7-fix-submount-tree-not-all-expiring.patch: expire
  multiple levels of recursive mounts correctly (bnc#801808)</changelog>
<changelog author="lchiquitto@suse.com" date="1368360000">- autofs-5.0.7-upstream-patches-20130428.bz2: update 5.0.7 upstream
  patches up to 2013-04-28, fixing some bugs:
  * fix some automount(8) typos
  * syncronize handle_mounts() shutdown
  * fix submount tree not all expiring (bnc#801808)
- remove patches that are now upstream:
  * autofs-5.0.7-fix-submount-tree-not-all-expiring.patch</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly specify cyrus-sasl-devel and openssl-devel
  which were implicit before</changelog>
<changelog author="lchiquitto@suse.com" date="1373198400">- autofs-5.0.7-upstream-patches-20130619.bz2: update 5.0.7 upstream
  patches up to 2013-06-19, fixing some bugs:
  * make dump maps check for duplicate indirect mounts
  * document allowed map sources in auto.master
  * add enable sloppy mount option to configure
  * fix interface address null check
  * don't probe rdma mounts
  * fix master map mount options matching
  * fix master map bogus keywork match
  * fix fix map entry duplicate offset detection
  * probe each nfs version in turn for singleton mounts
  * fix probe each nfs version in turn for singleton mounts
  * misc man page fixes</changelog>
<changelog author="arvidjaar@gmail.com" date="1383912000">- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch
  Fix parsing of legacy LDAP map syntax (bnc#847494)</changelog>
<changelog author="lchiquitto@suse.de" date="1392811200">- update to version 5.0.8:
  * fix add null check in parse_server_string()
  * check for protocol option
  * use ulimit max open files if greater than internal maximum
  * don't override LDFLAGS in make rules
  * fix a couple of compiler warnings
  * add after sssd dependency to unit file
  * dont start readmap unless ready
  * fix crash due to thread unsafe use of libldap (bnc#820585)
  * fix compile error with heimdal support enabled
  * fix typo forced-shutdown should be force-shutdown
  * fix hesiod check error and use correct $(LIBS) setting
  * fix dead LDAP symbolic link when LDAP support is disabled
  * add missing libtirpc lib to mount_nfs.so when TIRPC enabled
  * use compiler determined by configure instead of hard-coded ones
  * remove hard-coded STRIP variable
  * use LIBS for link libraries
  * unbundle NOTSTRIP from DEBUG so they dont depend on each other
  * fix occasional build error when enable parallel compiling
  * fix compilation of lookup_ldap.c without sasl
  * fix dumpmaps multi output
  * try and cleanup after dumpmaps
  * teach dumpmaps to output simple key value pairs
  * fix syncronize handle_mounts() shutdown
  * fix fix wildcard multi map regression
  * improve timeout option description
  * only probe specific nfs version when requested
  * fix bad mkdir permission on create
  * setup program map env from macro table
  * add short host name standard marco variable
  * allow use of hosts map in maps
  * fix get_nfs_info() probe
  * fix portmap lookup
  * add std vars to program map invocation
  * samples/auto.smb: add logic to obtain credentials
- autofs-5.0.8-dbus-udisks-monitor.patch: rebase on top of 5.0.8
- autofs-5.0.7-fix-add-null-check-in-parse_server_stri.patch: drop
- autofs-suse-build.patch: drop</changelog>
<changelog author="lchiquitto@suse.de" date="1392811201">- autofs-5.0.8-upstream-patches-20131124.bz2: update 5.0.8 upstream
  patches up to 2013-11-24, fixing the following bugs:
  * fix undefined authtype_requires_creds err if ldap enabled but
    without sasl
  * fix master map type check
  * fix task manager not getting signaled
  * allow --with-systemd to take a path arg
  * fix WITH_LIBTIRPC function name
  * fix ipv6 libtirpc getport</changelog>
<changelog author="lchiquitto@suse.de" date="1392811202">- autofs-5.0.8-fix-serialize-libldap-init.patch: fix deadlock when
  trying to lock mutex that's already owned by the same thread
  (bnc#859969)
- autofs-5.0.8-serialize-libldap-unbind.patch: serialize LDAP unbind
  operations, as they're also not thread-safe and could cause
  segmentation faults (bnc#853469)</changelog>
<changelog author="lchiquitto@suse.com" date="1394452800">- the update to version 5.0.8 also fixes the special -hosts map
  (auto.net) in IPv6 environments (bnc#847207)</changelog>
<changelog author="lchiquitto@suse.com" date="1411128000">- update to stable release 5.0.9 (bnc#869806):
  * fix ipv6 link local address handling
  * fix fix ipv6 libtirpc getport
  * get_nfs_info() should query portmapper if port is not given
  * fix rpc_portmap_getport() proto not set
  * fix protmap not trying proto v2
  * fix rpc_getport() when libtirpc is disabled
  * fix rpc_getrpcbport() when libtirpc is disabled
  * don't reset errno
  * extend fix for crash due to thread unsafe use of libldap
  * fix deadlock in init_ldap_connection
  * fix options compare
  * fix negative status being reset on map read
  * check for existing offset mount before mounting
  * fix max() declaration
  * fix symlink fail message in mount_bind.c
  * fix cache readlock not taken on lookup
  * pass map_source as function paramter where possible
  * check for bind onto self in mount_bind.c
  * fix symlink expire
  * dont clobber mapent for negative cache
  * fix macro_addvar() and move init to main thread
  * change walk_tree() to take ap
  * add negative cache lookup to hesiod lookup
  * fix external env configure
  * make autofs(5) consistent with auto.master(5)
  * fix map source with type lookup
  * fix lookup_nss_mount() map lookup
  * dont ignore null cache entries on multi mount umount
  * fix inconsistent error returns in handle_packet_missing_direct()
  * simple coverity fixes
  * fix fix options compare
  * use open(2) instead of access(2) to trigger dependent mounts
  * fix fix map source with type lookup
  * fixes for samples/auto.master
  * fix variable substitution description
  * fix incorrect append options description in README.v5-release
  * add amd map format parser
- drop patches that are already included in the new version:
  * autofs-5.0.8-upstream-patches-20131124.bz2
  * autofs-5.0.8-serialize-libldap-unbind.patch
  * autofs-5.0.8-fix-serialize-libldap-init.patch
  * autofs-5.0.8-eaccess.patch
- autofs-5.0.8-dbus-udisks-monitor.patch: refresh
- autofs-5.0.8-task-use-after-free.patch: refresh
- autofs-5.0.8-revert-fix-libtirpc-name-clash.patch: refresh
- autofs-suse-auto-master-defaults.patch: rename and refresh</changelog>
<changelog author="mszeredi@suse.cz" date="1425384000">- prevent potential privilege escalation via interpreter load path
  for program-based automount maps, add the following patches:
  autofs-5.1.0-add-a-prefix-to-program-map-stdvars.patch
  autofs-5.1.0-add-config-option-to-force-use-of-program-map-stdvars.patch
  (bnc#917977 CVE-2014-8169)</changelog>

</package>
<package pkgid="af182085c581b948ff98c54bc7d3b94fedd1ea5e11594a651dd4a8f68c3e1f88" name="avahi" arch="i586">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="dimstar@opensuse.org" date="1309608000">- Add avahi-gtk_box_new.patch: do not used deprecated
  gtk_[hv]box_new function anymore; this fixes build of
  avahi-glib2.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="fcrozat@suse.com" date="1318248000">- Use systemd macros for 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1323000000">- Change libtool BuildRequires to be unconditional: it is needed to
  build all submodules as well.
- Change License tag to spdx identifier (LGPL-2.1+) and remove
  duplicate mentions of the License tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1323259200">- Split the typelib files in typelib-1_0-Avahi-0_6 subpackage.
- Add typelib-1_0-Avahi-0_6 Requires to libavahi-glib-devel
  subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845,bnc#851953)</changelog>

</package>
<package pkgid="f7bf65bdc28d9f823fea90e037eb6a33807d1737b99b9ce233f9634a906f17a1" name="avahi" arch="src">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="dimstar@opensuse.org" date="1309608000">- Add avahi-gtk_box_new.patch: do not used deprecated
  gtk_[hv]box_new function anymore; this fixes build of
  avahi-glib2.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="fcrozat@suse.com" date="1318248000">- Use systemd macros for 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1323000000">- Change libtool BuildRequires to be unconditional: it is needed to
  build all submodules as well.
- Change License tag to spdx identifier (LGPL-2.1+) and remove
  duplicate mentions of the License tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1323259200">- Split the typelib files in typelib-1_0-Avahi-0_6 subpackage.
- Add typelib-1_0-Avahi-0_6 Requires to libavahi-glib-devel
  subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845,bnc#851953)</changelog>

</package>
<package pkgid="0eb17fd29d8d185968c94164baedb7021dd352154eedbf523a8caeca8dccc8e0" name="avahi" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="dimstar@opensuse.org" date="1309608000">- Add avahi-gtk_box_new.patch: do not used deprecated
  gtk_[hv]box_new function anymore; this fixes build of
  avahi-glib2.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="fcrozat@suse.com" date="1318248000">- Use systemd macros for 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1323000000">- Change libtool BuildRequires to be unconditional: it is needed to
  build all submodules as well.
- Change License tag to spdx identifier (LGPL-2.1+) and remove
  duplicate mentions of the License tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1323259200">- Split the typelib files in typelib-1_0-Avahi-0_6 subpackage.
- Add typelib-1_0-Avahi-0_6 Requires to libavahi-glib-devel
  subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845,bnc#851953)</changelog>

</package>
<package pkgid="2b3abe277d90c88c8bfa0671eecfd895d97b69f1c45fc8097e5399bac9384ddf" name="avahi-autoipd" arch="i586">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="dimstar@opensuse.org" date="1309608000">- Add avahi-gtk_box_new.patch: do not used deprecated
  gtk_[hv]box_new function anymore; this fixes build of
  avahi-glib2.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="fcrozat@suse.com" date="1318248000">- Use systemd macros for 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1323000000">- Change libtool BuildRequires to be unconditional: it is needed to
  build all submodules as well.
- Change License tag to spdx identifier (LGPL-2.1+) and remove
  duplicate mentions of the License tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1323259200">- Split the typelib files in typelib-1_0-Avahi-0_6 subpackage.
- Add typelib-1_0-Avahi-0_6 Requires to libavahi-glib-devel
  subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845,bnc#851953)</changelog>

</package>
<package pkgid="4d8948165bbe089fc1ad817f33aad5e80480a992d66f1a86be0781638c3ba794" name="avahi-autoipd" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="dimstar@opensuse.org" date="1309608000">- Add avahi-gtk_box_new.patch: do not used deprecated
  gtk_[hv]box_new function anymore; this fixes build of
  avahi-glib2.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="fcrozat@suse.com" date="1318248000">- Use systemd macros for 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1323000000">- Change libtool BuildRequires to be unconditional: it is needed to
  build all submodules as well.
- Change License tag to spdx identifier (LGPL-2.1+) and remove
  duplicate mentions of the License tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1323259200">- Split the typelib files in typelib-1_0-Avahi-0_6 subpackage.
- Add typelib-1_0-Avahi-0_6 Requires to libavahi-glib-devel
  subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845,bnc#851953)</changelog>

</package>
<package pkgid="96f04b78e820e715f87b87256a610ae89e628932a9938c2798aef3a4bc0eb531" name="avahi-compat-howl-devel" arch="i586">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="dimstar@opensuse.org" date="1309608000">- Add avahi-gtk_box_new.patch: do not used deprecated
  gtk_[hv]box_new function anymore; this fixes build of
  avahi-glib2.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="fcrozat@suse.com" date="1318248000">- Use systemd macros for 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1323000000">- Change libtool BuildRequires to be unconditional: it is needed to
  build all submodules as well.
- Change License tag to spdx identifier (LGPL-2.1+) and remove
  duplicate mentions of the License tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1323259200">- Split the typelib files in typelib-1_0-Avahi-0_6 subpackage.
- Add typelib-1_0-Avahi-0_6 Requires to libavahi-glib-devel
  subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845,bnc#851953)</changelog>

</package>
<package pkgid="82f6fc320d9b99020031314443012fd4c204ec77f97787c249ef68e1a1465808" name="avahi-compat-howl-devel" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="dimstar@opensuse.org" date="1309608000">- Add avahi-gtk_box_new.patch: do not used deprecated
  gtk_[hv]box_new function anymore; this fixes build of
  avahi-glib2.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="fcrozat@suse.com" date="1318248000">- Use systemd macros for 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1323000000">- Change libtool BuildRequires to be unconditional: it is needed to
  build all submodules as well.
- Change License tag to spdx identifier (LGPL-2.1+) and remove
  duplicate mentions of the License tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1323259200">- Split the typelib files in typelib-1_0-Avahi-0_6 subpackage.
- Add typelib-1_0-Avahi-0_6 Requires to libavahi-glib-devel
  subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845,bnc#851953)</changelog>

</package>
<package pkgid="63742625222447af19898281f60c67ba54591d9ad638ea7d3cc8b6fc66c86599" name="avahi-compat-mDNSResponder-devel" arch="i586">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="dimstar@opensuse.org" date="1309608000">- Add avahi-gtk_box_new.patch: do not used deprecated
  gtk_[hv]box_new function anymore; this fixes build of
  avahi-glib2.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="fcrozat@suse.com" date="1318248000">- Use systemd macros for 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1323000000">- Change libtool BuildRequires to be unconditional: it is needed to
  build all submodules as well.
- Change License tag to spdx identifier (LGPL-2.1+) and remove
  duplicate mentions of the License tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1323259200">- Split the typelib files in typelib-1_0-Avahi-0_6 subpackage.
- Add typelib-1_0-Avahi-0_6 Requires to libavahi-glib-devel
  subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845,bnc#851953)</changelog>

</package>
<package pkgid="4d0472548b8c0d51e62395634515dd431ff0f52ace673732c1db31eb35c20e7b" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="dimstar@opensuse.org" date="1309608000">- Add avahi-gtk_box_new.patch: do not used deprecated
  gtk_[hv]box_new function anymore; this fixes build of
  avahi-glib2.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="fcrozat@suse.com" date="1318248000">- Use systemd macros for 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1323000000">- Change libtool BuildRequires to be unconditional: it is needed to
  build all submodules as well.
- Change License tag to spdx identifier (LGPL-2.1+) and remove
  duplicate mentions of the License tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1323259200">- Split the typelib files in typelib-1_0-Avahi-0_6 subpackage.
- Add typelib-1_0-Avahi-0_6 Requires to libavahi-glib-devel
  subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845,bnc#851953)</changelog>

</package>
<package pkgid="28522fdf4519e14ace12c5545a8ec9ee097d0345e5680d6a72b5a544d61b8b98" name="avahi-glib2" arch="src">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="sbrabec@suse.cz" date="1216382400">- Build glib2, gobject and python stuff separately to break build
  loop cups -&gt; gtk2 -&gt; avahi -&gt; cups.
- Split avahi-python-gtk from avahi-python.
- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
<changelog author="aj@suse.de" date="1217073600">- Fix requires to require avahi base package.</changelog>
<changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
<changelog author="ro@suse.de" date="1217764800">- move fix further up in specfile</changelog>
<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="842dc9ab0ccc7811c854efe891fc94e6fabc68564d5bb23b4b93763cb9c2a34d" name="avahi-lang" arch="noarch">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="dimstar@opensuse.org" date="1309608000">- Add avahi-gtk_box_new.patch: do not used deprecated
  gtk_[hv]box_new function anymore; this fixes build of
  avahi-glib2.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="fcrozat@suse.com" date="1318248000">- Use systemd macros for 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1323000000">- Change libtool BuildRequires to be unconditional: it is needed to
  build all submodules as well.
- Change License tag to spdx identifier (LGPL-2.1+) and remove
  duplicate mentions of the License tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1323259200">- Split the typelib files in typelib-1_0-Avahi-0_6 subpackage.
- Add typelib-1_0-Avahi-0_6 Requires to libavahi-glib-devel
  subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845,bnc#851953)</changelog>

</package>
<package pkgid="5fac29b5449924c93eb65cde7ebe8eedd41e3c85de2122b3bdc65a586c83f5df" name="avahi-mono" arch="i586">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="aj@suse.de" date="1185796800">- Add gcc-c++ to BuildRequires.</changelog>
<changelog author="bk@suse.de" date="1186401600">- replace -p /usr/sbin/ldconfig with %{run_ldconfig}</changelog>
<changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
<changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
<changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
<changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>

</package>
<package pkgid="81d90989292829304b7ab7fc6a48f349e4ec7077ab6598d7f62ebd98e25d09a8" name="avahi-mono" arch="src">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="aj@suse.de" date="1184587200">- Create new spec file to avoid build cycle avahi-&gt;gnome-&gt;mono-&gt;avahi.</changelog>
<changelog author="aj@suse.de" date="1185796800">- Add gcc-c++ to BuildRequires.</changelog>
<changelog author="bk@suse.de" date="1186401600">- replace -p /usr/sbin/ldconfig with %{run_ldconfig}</changelog>
<changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
<changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
<changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
<changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>

</package>
<package pkgid="eb41981ba5010f4241b4c05ac89c39193df3896cf978db5fcaf0a40d258b89b5" name="avahi-mono" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="aj@suse.de" date="1185796800">- Add gcc-c++ to BuildRequires.</changelog>
<changelog author="bk@suse.de" date="1186401600">- replace -p /usr/sbin/ldconfig with %{run_ldconfig}</changelog>
<changelog author="sbrabec@suse.de" date="1192104000">- Updated dependencies.</changelog>
<changelog author="sbrabec@suse.cz" date="1205236800">- Fix build failure of avahi-mono.</changelog>
<changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
<changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>

</package>
<package pkgid="a48660e3a511e8227d8fe7fe880d9d20e9751417dd8599b240a064c81fae168c" name="avahi-qt4" arch="src">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
<changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
<changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>

</package>
<package pkgid="c70b83c8321603c6ea399cfefa13daf20bee47eaa7bb02ec1bdd549964f06fd8" name="avahi-utils" arch="i586">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="dimstar@opensuse.org" date="1309608000">- Add avahi-gtk_box_new.patch: do not used deprecated
  gtk_[hv]box_new function anymore; this fixes build of
  avahi-glib2.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="fcrozat@suse.com" date="1318248000">- Use systemd macros for 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1323000000">- Change libtool BuildRequires to be unconditional: it is needed to
  build all submodules as well.
- Change License tag to spdx identifier (LGPL-2.1+) and remove
  duplicate mentions of the License tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1323259200">- Split the typelib files in typelib-1_0-Avahi-0_6 subpackage.
- Add typelib-1_0-Avahi-0_6 Requires to libavahi-glib-devel
  subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845,bnc#851953)</changelog>

</package>
<package pkgid="22a00bc0ca238b6d48eb92ef935e0f2aca8ffcbe212f4826a6cffbcbcd477be9" name="avahi-utils" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="dimstar@opensuse.org" date="1309608000">- Add avahi-gtk_box_new.patch: do not used deprecated
  gtk_[hv]box_new function anymore; this fixes build of
  avahi-glib2.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="fcrozat@suse.com" date="1318248000">- Use systemd macros for 12.1</changelog>
<changelog author="dimstar@opensuse.org" date="1323000000">- Change libtool BuildRequires to be unconditional: it is needed to
  build all submodules as well.
- Change License tag to spdx identifier (LGPL-2.1+) and remove
  duplicate mentions of the License tag.</changelog>
<changelog author="dimstar@opensuse.org" date="1323259200">- Split the typelib files in typelib-1_0-Avahi-0_6 subpackage.
- Add typelib-1_0-Avahi-0_6 Requires to libavahi-glib-devel
  subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Add avahi-gir-fixup.patch: Change the gir/typelib dependency to
  be correctly libavahi-core.so.7 instead of avahi-core.</changelog>
<changelog author="vuntz@opensuse.org" date="1329307200">- Update to version 0.6.31:
  + Add Mumble to service type database
  + systemd: syslog.target is not longer useful
  + Compatibility with newer automake
- Rebase avahi-empty-share-dir.patch.
- Move dbus xml interface files from devel subpackage to main
  subpackage: those files are needed at runtime.</changelog>
<changelog author="vuntz@opensuse.org" date="1330344000">- Stop passing --with-systemdsystemunitdir to configure: we'll just
  use the right default value, which should be %{_unitdir}.
- Change systemd BuildRequires to systemd-devel since this is
  needed to get that default value in configure.</changelog>
<changelog author="coolo@suse.com" date="1341144000">- Add avahi-fix-mkdir.diff: fix build with automake 1.12.1, which
  removed AM_PROG_MKDIR_P, which is deprecated for a long time.</changelog>
<changelog author="vuntz@opensuse.org" date="1342008000">- Add avahi-enable-ipv6.patch: enable IPv6 by default. Fix
  bnc#710230.</changelog>
<changelog author="schwab@linux-m68k.org" date="1349265600">- Mark /etc/avahi/hosts as %config(noreplace)</changelog>
<changelog author="coolo@suse.com" date="1350388800">- Replace systemd-devel BuildRequires with pkgconfig(systemd)
  to prefer the -mini package, avoiding build cycles.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="rmilasan@suse.com" date="1359374400">- Add avahi-move-everything-to-run.patch: move everything
  (socket and pid files) to /run.</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Automatically disable avahi on networks with unicast .local
  domain (bnc#431704, avahi-daemon-check-dns-suse.sh,
  avahi-daemon-check-dns-suse.patch).
- Split avahi-autoipd into a separate package (bnc#431704#c6,
  avahi-autoipd.if-up, avahi-autoipd.if-down,
  avahi-autoipd.README.SUSE).
- Use dedicated UID and GID for avahi-autoipd.
- Added sysconfig to fine tune behavior.
- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699, avahi-desktop.patch).
- Move service-types.db to the main package. It is requires by
  python-avahi and avahi-utils.</changelog>
<changelog author="mgorse@suse.com" date="1377086400">- Fix hang when registering with large numbers of service files
  (bnc#835984, avahi-reserve-space-for-record-data-when-size-e.patch).</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.
- Run pre_checkin.sh to sync .spec files.</changelog>
<changelog author="dimstar@opensuse.org" date="1380110400">- Sanitize scrtiplet requirements (bnc#839520):
  + Add shadow Requires(pre) for useradd and groupadd.
  + Add coreutils Requires(post) for chown.</changelog>
<changelog author="mt@suse.com" date="1393502400">- do not start unconditionally / by default under sysconfig as
  it breaks vlan,bridge,bonding setups (bnc#853845,bnc#851953)</changelog>

</package>
<package pkgid="e125abd7f444921bfad343a46a37db2e4c41443ed26818e46dc52d89f9531ca5" name="avahi-utils-gtk" arch="i586">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="4d7ef938b33d4e7431801a3ba708f3eac79a8b036c35297c556bb9cf15a115ad" name="avahi-utils-gtk" arch="x86_64">
    <version epoch="0" ver="0.6.31" rel="16.6.1"/>

<changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
<changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
<changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
<changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
<changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
<changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
<changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
<changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
<changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>

</package>
<package pkgid="e44c2539f2a9cd49908c839d705f0c1014238fe7a12eb4427071a83b398d610b" name="awesome-branding-basedonopensuse" arch="i586">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="6ab4021cd88fc5a8c0e5a4dfe8bc9586df0bea233f62f7631d41a748a9b19063" name="awesome-branding-basedonopensuse" arch="x86_64">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="60fb390ebd6c60b29434fea586948f051138c7784098168201b25125a7b90065" name="backintime" arch="noarch">
    <version epoch="0" ver="1.0.28" rel="4.4.16"/>

<changelog author="detlef@links2linux.de" date="1236254400">- new upstream version &lt;0.9.14&gt;
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * update Swedish translation (Niklas Grahn &lt;terra.unknown@yahoo.com&gt;)
  * update Spanish translation (Francisco Manuel García Claramonte &lt;franciscomanuel.garcia@hispalinux.es&gt;)
  * update French translation (Michel Corps &lt;mahikeulbody@gmail.com&gt;)
  * GNOME &amp; KDE4: rework MainWindow
  * GNOME &amp; KDE4: rework SettingsDialog
  * GNOME &amp; KDE4: add "smart" remove</changelog>
<changelog author="detlef@links2linux.de" date="1236859200">- fix DOCDIR in config.py</changelog>
<changelog author="detlef@links2linux.de" date="1237291200">- new upstream version &lt;0.9.16.1&gt;
  * fix a bug/crush for French version
  * update translations
  * don’t show the snapshot that is being taken in snapshots list
  * GNOME &amp; KDE4: when the application starts and snapshots directory don’t exists show a messagebox
  * give more information for ‘take snapshot’ progress (to prove that is not blocked)
  * MainWindow: rename ‘Timeline’ column with ‘Snapshots’
  * when it tries to take a snapshot if the snapshots directory don’t exists  (it is on a removable drive that is not plugged) it will notify and wait maxmimum 30  seconds (for the drive to be plugged)
  * GNOME &amp; KDE4: add notify if the snapshots directory don’t exists
  * KDE4: rework MainWindow</changelog>
<changelog author="herbert@links2linux.de" date="1240574400">- require python-kde4 for kde subpackage</changelog>
<changelog author="herbert@links2linux.de" date="1245672000">- new upstream version &lt;0.9.26&gt;
  * update translations from Launchpad
  * Fix a but smart-remove algorithm (https://bugs.launchpad.net/backintime/+bug/376104)
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/374477
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/375113
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * add '--no-check' option to configure scripts
  * use only 'folder' term (more consistent with GNOME/KDE)
  * add 'expert option': enable/disable nice for cron jobs
  * GNOME &amp; KDE4: refresh snapshots button force files view to update too
  * you can include a backup parent directory (backup directory will auto-exclude itself)
  * fix some small bugs
- new upstream version &lt;0.9.24&gt;
  * update translations
  * KDE4: fix python string &lt;=&gt; QString problems
  * KDE4 FilesView/SnapshotsDialog: ctrl-click just select (don't execute)
  * KDE4: fix crush after "take snapshot" process (https://bugs.launchpad.net/backintime/+bug/366241)
  * store basic permission in a special file so it can restore them correctly (event from NTFS)
  * add config version
  * implement Gnome/KDE4 systray icons and user.callback as plugins
  * reorganize code: common/GNOME/KDE4
  * GNOME: break the big glade file in multiple file
  * backintime is no longer aware of 'backintime-gnome' and 'backintime-kde4'
    (you need run 'backintime-gnome' for GNOME version and 'backintime-kde4' for KDE4 version)
- new upstream version &lt;0.9.22.1&gt;
  * fix French translation
- new upstream version &lt;0.9.22&gt;
  * update translations from Launchpad
  * KDE4: fix some translation problems
  * remove --safe-links for save/restore (this means copy symlinks as symlinks)
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * create directory now use python os.makedirs (replace use of mkdir command)
  * KDE4: fix a crush related to QString - python string conversion
  * GNOME &amp; KDE4 SettingsDialog: if schedule automatic backups per directory is set, global schedule is hidden
  * GNOME FilesView: thread "*~" files (backup files) as hidden files
  * GNOME: use gtk-preferences icon for SettingsDialog (replace gtk-execute icon)
  * expert option: $XDG_CONFIG_HOME/backintime/user.callback (if exists) is called a different steps
    of a "take snapshot" process (before, after, on error, is a new snapshot was taken).
  * add more command line options: --snapshots-list, --snapshots-list-path, --last-snapshot, --last-snapshot-path
  * follow FreeDesktop directories specs:
    $XDG_DATA_HOME (default: $HOME/.local/share) to store app.lock files
    $XDG_CONFIG_HOME (default: $HOME/.config) to save settings
  * new install system: use more common steps (./configure; make; sudo make install)
- new upstream version &lt;0.9.20&gt;
  * smart remove: fix an important bug and make it more verbose in syslog
  * update Spanish translation (Francisco Manuel García Claramonte &lt;franciscomanuel.garcia@hispalinux.es&gt;)
- new upstream version &lt;0.9.18&gt;
  * update translations from Launchpad
  * update Slovak translation (Tomáš Vadina &lt;kyberdev@gmail.com&gt;)
  * update French translation (Michel Corps &lt;mahikeulbody@gmail.com&gt;)
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * GNOME bugfix: fix a crush in files view for files with special characters (ex: "a%%20b")
  * GNOME SettingsDialog bugfix: if snapshots path is a new created folder, snapshots navigation (files view) don't work
  * update doc
  * GNOME &amp; KDE4 MainWindow: Rename "Places" list with "Snapshots"
  * GNOME SettingsDialog bugfix: modify something, then press cancel. If you reopen the dialog it show wrong values (the ones before cancel)
  * GNOME &amp; KDE4: add root mode menu entries (use gksu for gnome and kdesudo for kde)
  * GNOME &amp; KDE4: MainWindow - Files view: if the current directory don't exists in current snapshot display a message
  * SettingDialog: add an expert option to enable to schedule automatic backups per directory
  * SettingDialog: schedule automatic backups - if the application can't find crontab it show an error
  * SettingDialog: if the application can't write in snapshots directory there should be an error message
  * add Polish translation (Paweł Hołuj &lt;pholuj@gmail.com&gt;)
  * add cron in common package dependencies
  * GNOME &amp; KDE4: rework settings dialog
  * SettingDialog: add an option to enable/disable notifications</changelog>
<changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
<changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomáš Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
<changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
<changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
<changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
<changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
<changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>

</package>
<package pkgid="2d2894c3235d8ae678a01069130288c40725cee0e0debe30432b191c0675539f" name="backintime" arch="src">
    <version epoch="0" ver="1.0.28" rel="4.4.16"/>

<changelog author="detlef@links2linux.de" date="1235217600">- new upstream version &lt;0.9.8&gt;
  * update Spanish translation
  * bug fix: unable to restore files that contains space char in their name
  * unsafe links are ignored (that means that a link to a file/directory outside of include directories are ignored)
  * KDE4: add copy to clipboard
  * KDE4: sort files by name, size or date
  * cron 5/10 minutes: replace mutiple lines with a single crontab line using divide (*/5 or */10)
  * cron: when called from cron redirect output (stdout &amp; stderr) to /dev/null</changelog>
<changelog author="detlef@links2linux.de" date="1235822400">- new upstream version &lt;0.9.12&gt;
  * bug fix: now if you include “.abc” folder and exclude “.*”, “.abc” will be saved in the snapshot
  * KDE4: add help
  * add Slovenian translation
  * bug fix (GNOME): bookmarks with special characters
  * add Swedish translation
  * KDE4: drop and drop from backintime files view to any file manager
  * bug fix: fix a segfault when running from cron</changelog>
<changelog author="detlef@links2linux.de" date="1236254400">- new upstream version &lt;0.9.14&gt;
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * update Swedish translation (Niklas Grahn &lt;terra.unknown@yahoo.com&gt;)
  * update Spanish translation (Francisco Manuel García Claramonte &lt;franciscomanuel.garcia@hispalinux.es&gt;)
  * update French translation (Michel Corps &lt;mahikeulbody@gmail.com&gt;)
  * GNOME &amp; KDE4: rework MainWindow
  * GNOME &amp; KDE4: rework SettingsDialog
  * GNOME &amp; KDE4: add "smart" remove</changelog>
<changelog author="detlef@links2linux.de" date="1236859200">- fix DOCDIR in config.py</changelog>
<changelog author="detlef@links2linux.de" date="1237291200">- new upstream version &lt;0.9.16.1&gt;
  * fix a bug/crush for French version
  * update translations
  * don’t show the snapshot that is being taken in snapshots list
  * GNOME &amp; KDE4: when the application starts and snapshots directory don’t exists show a messagebox
  * give more information for ‘take snapshot’ progress (to prove that is not blocked)
  * MainWindow: rename ‘Timeline’ column with ‘Snapshots’
  * when it tries to take a snapshot if the snapshots directory don’t exists  (it is on a removable drive that is not plugged) it will notify and wait maxmimum 30  seconds (for the drive to be plugged)
  * GNOME &amp; KDE4: add notify if the snapshots directory don’t exists
  * KDE4: rework MainWindow</changelog>
<changelog author="herbert@links2linux.de" date="1240574400">- require python-kde4 for kde subpackage</changelog>
<changelog author="herbert@links2linux.de" date="1245672000">- new upstream version &lt;0.9.26&gt;
  * update translations from Launchpad
  * Fix a but smart-remove algorithm (https://bugs.launchpad.net/backintime/+bug/376104)
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/374477
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/375113
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * add '--no-check' option to configure scripts
  * use only 'folder' term (more consistent with GNOME/KDE)
  * add 'expert option': enable/disable nice for cron jobs
  * GNOME &amp; KDE4: refresh snapshots button force files view to update too
  * you can include a backup parent directory (backup directory will auto-exclude itself)
  * fix some small bugs
- new upstream version &lt;0.9.24&gt;
  * update translations
  * KDE4: fix python string &lt;=&gt; QString problems
  * KDE4 FilesView/SnapshotsDialog: ctrl-click just select (don't execute)
  * KDE4: fix crush after "take snapshot" process (https://bugs.launchpad.net/backintime/+bug/366241)
  * store basic permission in a special file so it can restore them correctly (event from NTFS)
  * add config version
  * implement Gnome/KDE4 systray icons and user.callback as plugins
  * reorganize code: common/GNOME/KDE4
  * GNOME: break the big glade file in multiple file
  * backintime is no longer aware of 'backintime-gnome' and 'backintime-kde4'
    (you need run 'backintime-gnome' for GNOME version and 'backintime-kde4' for KDE4 version)
- new upstream version &lt;0.9.22.1&gt;
  * fix French translation
- new upstream version &lt;0.9.22&gt;
  * update translations from Launchpad
  * KDE4: fix some translation problems
  * remove --safe-links for save/restore (this means copy symlinks as symlinks)
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * create directory now use python os.makedirs (replace use of mkdir command)
  * KDE4: fix a crush related to QString - python string conversion
  * GNOME &amp; KDE4 SettingsDialog: if schedule automatic backups per directory is set, global schedule is hidden
  * GNOME FilesView: thread "*~" files (backup files) as hidden files
  * GNOME: use gtk-preferences icon for SettingsDialog (replace gtk-execute icon)
  * expert option: $XDG_CONFIG_HOME/backintime/user.callback (if exists) is called a different steps
    of a "take snapshot" process (before, after, on error, is a new snapshot was taken).
  * add more command line options: --snapshots-list, --snapshots-list-path, --last-snapshot, --last-snapshot-path
  * follow FreeDesktop directories specs:
    $XDG_DATA_HOME (default: $HOME/.local/share) to store app.lock files
    $XDG_CONFIG_HOME (default: $HOME/.config) to save settings
  * new install system: use more common steps (./configure; make; sudo make install)
- new upstream version &lt;0.9.20&gt;
  * smart remove: fix an important bug and make it more verbose in syslog
  * update Spanish translation (Francisco Manuel García Claramonte &lt;franciscomanuel.garcia@hispalinux.es&gt;)
- new upstream version &lt;0.9.18&gt;
  * update translations from Launchpad
  * update Slovak translation (Tomáš Vadina &lt;kyberdev@gmail.com&gt;)
  * update French translation (Michel Corps &lt;mahikeulbody@gmail.com&gt;)
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * GNOME bugfix: fix a crush in files view for files with special characters (ex: "a%%20b")
  * GNOME SettingsDialog bugfix: if snapshots path is a new created folder, snapshots navigation (files view) don't work
  * update doc
  * GNOME &amp; KDE4 MainWindow: Rename "Places" list with "Snapshots"
  * GNOME SettingsDialog bugfix: modify something, then press cancel. If you reopen the dialog it show wrong values (the ones before cancel)
  * GNOME &amp; KDE4: add root mode menu entries (use gksu for gnome and kdesudo for kde)
  * GNOME &amp; KDE4: MainWindow - Files view: if the current directory don't exists in current snapshot display a message
  * SettingDialog: add an expert option to enable to schedule automatic backups per directory
  * SettingDialog: schedule automatic backups - if the application can't find crontab it show an error
  * SettingDialog: if the application can't write in snapshots directory there should be an error message
  * add Polish translation (Paweł Hołuj &lt;pholuj@gmail.com&gt;)
  * add cron in common package dependencies
  * GNOME &amp; KDE4: rework settings dialog
  * SettingDialog: add an option to enable/disable notifications</changelog>
<changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
<changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomáš Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
<changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
<changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
<changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
<changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
<changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>

</package>
<package pkgid="1008d330d9537e13f079cce5f7515b60e53b89138278901c10fef6591f0b1da4" name="backintime-doc" arch="noarch">
    <version epoch="0" ver="1.0.28" rel="4.4.16"/>

<changelog author="detlef@links2linux.de" date="1236254400">- new upstream version &lt;0.9.14&gt;
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * update Swedish translation (Niklas Grahn &lt;terra.unknown@yahoo.com&gt;)
  * update Spanish translation (Francisco Manuel García Claramonte &lt;franciscomanuel.garcia@hispalinux.es&gt;)
  * update French translation (Michel Corps &lt;mahikeulbody@gmail.com&gt;)
  * GNOME &amp; KDE4: rework MainWindow
  * GNOME &amp; KDE4: rework SettingsDialog
  * GNOME &amp; KDE4: add "smart" remove</changelog>
<changelog author="detlef@links2linux.de" date="1236859200">- fix DOCDIR in config.py</changelog>
<changelog author="detlef@links2linux.de" date="1237291200">- new upstream version &lt;0.9.16.1&gt;
  * fix a bug/crush for French version
  * update translations
  * don’t show the snapshot that is being taken in snapshots list
  * GNOME &amp; KDE4: when the application starts and snapshots directory don’t exists show a messagebox
  * give more information for ‘take snapshot’ progress (to prove that is not blocked)
  * MainWindow: rename ‘Timeline’ column with ‘Snapshots’
  * when it tries to take a snapshot if the snapshots directory don’t exists  (it is on a removable drive that is not plugged) it will notify and wait maxmimum 30  seconds (for the drive to be plugged)
  * GNOME &amp; KDE4: add notify if the snapshots directory don’t exists
  * KDE4: rework MainWindow</changelog>
<changelog author="herbert@links2linux.de" date="1240574400">- require python-kde4 for kde subpackage</changelog>
<changelog author="herbert@links2linux.de" date="1245672000">- new upstream version &lt;0.9.26&gt;
  * update translations from Launchpad
  * Fix a but smart-remove algorithm (https://bugs.launchpad.net/backintime/+bug/376104)
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/374477
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/375113
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * add '--no-check' option to configure scripts
  * use only 'folder' term (more consistent with GNOME/KDE)
  * add 'expert option': enable/disable nice for cron jobs
  * GNOME &amp; KDE4: refresh snapshots button force files view to update too
  * you can include a backup parent directory (backup directory will auto-exclude itself)
  * fix some small bugs
- new upstream version &lt;0.9.24&gt;
  * update translations
  * KDE4: fix python string &lt;=&gt; QString problems
  * KDE4 FilesView/SnapshotsDialog: ctrl-click just select (don't execute)
  * KDE4: fix crush after "take snapshot" process (https://bugs.launchpad.net/backintime/+bug/366241)
  * store basic permission in a special file so it can restore them correctly (event from NTFS)
  * add config version
  * implement Gnome/KDE4 systray icons and user.callback as plugins
  * reorganize code: common/GNOME/KDE4
  * GNOME: break the big glade file in multiple file
  * backintime is no longer aware of 'backintime-gnome' and 'backintime-kde4'
    (you need run 'backintime-gnome' for GNOME version and 'backintime-kde4' for KDE4 version)
- new upstream version &lt;0.9.22.1&gt;
  * fix French translation
- new upstream version &lt;0.9.22&gt;
  * update translations from Launchpad
  * KDE4: fix some translation problems
  * remove --safe-links for save/restore (this means copy symlinks as symlinks)
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * create directory now use python os.makedirs (replace use of mkdir command)
  * KDE4: fix a crush related to QString - python string conversion
  * GNOME &amp; KDE4 SettingsDialog: if schedule automatic backups per directory is set, global schedule is hidden
  * GNOME FilesView: thread "*~" files (backup files) as hidden files
  * GNOME: use gtk-preferences icon for SettingsDialog (replace gtk-execute icon)
  * expert option: $XDG_CONFIG_HOME/backintime/user.callback (if exists) is called a different steps
    of a "take snapshot" process (before, after, on error, is a new snapshot was taken).
  * add more command line options: --snapshots-list, --snapshots-list-path, --last-snapshot, --last-snapshot-path
  * follow FreeDesktop directories specs:
    $XDG_DATA_HOME (default: $HOME/.local/share) to store app.lock files
    $XDG_CONFIG_HOME (default: $HOME/.config) to save settings
  * new install system: use more common steps (./configure; make; sudo make install)
- new upstream version &lt;0.9.20&gt;
  * smart remove: fix an important bug and make it more verbose in syslog
  * update Spanish translation (Francisco Manuel García Claramonte &lt;franciscomanuel.garcia@hispalinux.es&gt;)
- new upstream version &lt;0.9.18&gt;
  * update translations from Launchpad
  * update Slovak translation (Tomáš Vadina &lt;kyberdev@gmail.com&gt;)
  * update French translation (Michel Corps &lt;mahikeulbody@gmail.com&gt;)
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * GNOME bugfix: fix a crush in files view for files with special characters (ex: "a%%20b")
  * GNOME SettingsDialog bugfix: if snapshots path is a new created folder, snapshots navigation (files view) don't work
  * update doc
  * GNOME &amp; KDE4 MainWindow: Rename "Places" list with "Snapshots"
  * GNOME SettingsDialog bugfix: modify something, then press cancel. If you reopen the dialog it show wrong values (the ones before cancel)
  * GNOME &amp; KDE4: add root mode menu entries (use gksu for gnome and kdesudo for kde)
  * GNOME &amp; KDE4: MainWindow - Files view: if the current directory don't exists in current snapshot display a message
  * SettingDialog: add an expert option to enable to schedule automatic backups per directory
  * SettingDialog: schedule automatic backups - if the application can't find crontab it show an error
  * SettingDialog: if the application can't write in snapshots directory there should be an error message
  * add Polish translation (Paweł Hołuj &lt;pholuj@gmail.com&gt;)
  * add cron in common package dependencies
  * GNOME &amp; KDE4: rework settings dialog
  * SettingDialog: add an option to enable/disable notifications</changelog>
<changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
<changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomáš Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
<changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
<changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
<changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
<changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
<changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>

</package>
<package pkgid="6574b38e1c2aa90170ff8b6cec4f42e6fbb715f5d0af816b511b8a7ff9bcb684" name="backintime-gnome" arch="noarch">
    <version epoch="0" ver="1.0.28" rel="4.4.16"/>

<changelog author="detlef@links2linux.de" date="1236254400">- new upstream version &lt;0.9.14&gt;
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * update Swedish translation (Niklas Grahn &lt;terra.unknown@yahoo.com&gt;)
  * update Spanish translation (Francisco Manuel García Claramonte &lt;franciscomanuel.garcia@hispalinux.es&gt;)
  * update French translation (Michel Corps &lt;mahikeulbody@gmail.com&gt;)
  * GNOME &amp; KDE4: rework MainWindow
  * GNOME &amp; KDE4: rework SettingsDialog
  * GNOME &amp; KDE4: add "smart" remove</changelog>
<changelog author="detlef@links2linux.de" date="1236859200">- fix DOCDIR in config.py</changelog>
<changelog author="detlef@links2linux.de" date="1237291200">- new upstream version &lt;0.9.16.1&gt;
  * fix a bug/crush for French version
  * update translations
  * don’t show the snapshot that is being taken in snapshots list
  * GNOME &amp; KDE4: when the application starts and snapshots directory don’t exists show a messagebox
  * give more information for ‘take snapshot’ progress (to prove that is not blocked)
  * MainWindow: rename ‘Timeline’ column with ‘Snapshots’
  * when it tries to take a snapshot if the snapshots directory don’t exists  (it is on a removable drive that is not plugged) it will notify and wait maxmimum 30  seconds (for the drive to be plugged)
  * GNOME &amp; KDE4: add notify if the snapshots directory don’t exists
  * KDE4: rework MainWindow</changelog>
<changelog author="herbert@links2linux.de" date="1240574400">- require python-kde4 for kde subpackage</changelog>
<changelog author="herbert@links2linux.de" date="1245672000">- new upstream version &lt;0.9.26&gt;
  * update translations from Launchpad
  * Fix a but smart-remove algorithm (https://bugs.launchpad.net/backintime/+bug/376104)
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/374477
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/375113
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * add '--no-check' option to configure scripts
  * use only 'folder' term (more consistent with GNOME/KDE)
  * add 'expert option': enable/disable nice for cron jobs
  * GNOME &amp; KDE4: refresh snapshots button force files view to update too
  * you can include a backup parent directory (backup directory will auto-exclude itself)
  * fix some small bugs
- new upstream version &lt;0.9.24&gt;
  * update translations
  * KDE4: fix python string &lt;=&gt; QString problems
  * KDE4 FilesView/SnapshotsDialog: ctrl-click just select (don't execute)
  * KDE4: fix crush after "take snapshot" process (https://bugs.launchpad.net/backintime/+bug/366241)
  * store basic permission in a special file so it can restore them correctly (event from NTFS)
  * add config version
  * implement Gnome/KDE4 systray icons and user.callback as plugins
  * reorganize code: common/GNOME/KDE4
  * GNOME: break the big glade file in multiple file
  * backintime is no longer aware of 'backintime-gnome' and 'backintime-kde4'
    (you need run 'backintime-gnome' for GNOME version and 'backintime-kde4' for KDE4 version)
- new upstream version &lt;0.9.22.1&gt;
  * fix French translation
- new upstream version &lt;0.9.22&gt;
  * update translations from Launchpad
  * KDE4: fix some translation problems
  * remove --safe-links for save/restore (this means copy symlinks as symlinks)
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * create directory now use python os.makedirs (replace use of mkdir command)
  * KDE4: fix a crush related to QString - python string conversion
  * GNOME &amp; KDE4 SettingsDialog: if schedule automatic backups per directory is set, global schedule is hidden
  * GNOME FilesView: thread "*~" files (backup files) as hidden files
  * GNOME: use gtk-preferences icon for SettingsDialog (replace gtk-execute icon)
  * expert option: $XDG_CONFIG_HOME/backintime/user.callback (if exists) is called a different steps
    of a "take snapshot" process (before, after, on error, is a new snapshot was taken).
  * add more command line options: --snapshots-list, --snapshots-list-path, --last-snapshot, --last-snapshot-path
  * follow FreeDesktop directories specs:
    $XDG_DATA_HOME (default: $HOME/.local/share) to store app.lock files
    $XDG_CONFIG_HOME (default: $HOME/.config) to save settings
  * new install system: use more common steps (./configure; make; sudo make install)
- new upstream version &lt;0.9.20&gt;
  * smart remove: fix an important bug and make it more verbose in syslog
  * update Spanish translation (Francisco Manuel García Claramonte &lt;franciscomanuel.garcia@hispalinux.es&gt;)
- new upstream version &lt;0.9.18&gt;
  * update translations from Launchpad
  * update Slovak translation (Tomáš Vadina &lt;kyberdev@gmail.com&gt;)
  * update French translation (Michel Corps &lt;mahikeulbody@gmail.com&gt;)
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * GNOME bugfix: fix a crush in files view for files with special characters (ex: "a%%20b")
  * GNOME SettingsDialog bugfix: if snapshots path is a new created folder, snapshots navigation (files view) don't work
  * update doc
  * GNOME &amp; KDE4 MainWindow: Rename "Places" list with "Snapshots"
  * GNOME SettingsDialog bugfix: modify something, then press cancel. If you reopen the dialog it show wrong values (the ones before cancel)
  * GNOME &amp; KDE4: add root mode menu entries (use gksu for gnome and kdesudo for kde)
  * GNOME &amp; KDE4: MainWindow - Files view: if the current directory don't exists in current snapshot display a message
  * SettingDialog: add an expert option to enable to schedule automatic backups per directory
  * SettingDialog: schedule automatic backups - if the application can't find crontab it show an error
  * SettingDialog: if the application can't write in snapshots directory there should be an error message
  * add Polish translation (Paweł Hołuj &lt;pholuj@gmail.com&gt;)
  * add cron in common package dependencies
  * GNOME &amp; KDE4: rework settings dialog
  * SettingDialog: add an option to enable/disable notifications</changelog>
<changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
<changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomáš Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
<changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
<changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
<changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
<changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
<changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>

</package>
<package pkgid="182d8bd39adf802037a484484876e7eed4cfed2c3213476ab03f951a9f92dc2a" name="backintime-kde" arch="noarch">
    <version epoch="0" ver="1.0.28" rel="4.4.16"/>

<changelog author="detlef@links2linux.de" date="1236254400">- new upstream version &lt;0.9.14&gt;
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * update Swedish translation (Niklas Grahn &lt;terra.unknown@yahoo.com&gt;)
  * update Spanish translation (Francisco Manuel García Claramonte &lt;franciscomanuel.garcia@hispalinux.es&gt;)
  * update French translation (Michel Corps &lt;mahikeulbody@gmail.com&gt;)
  * GNOME &amp; KDE4: rework MainWindow
  * GNOME &amp; KDE4: rework SettingsDialog
  * GNOME &amp; KDE4: add "smart" remove</changelog>
<changelog author="detlef@links2linux.de" date="1236859200">- fix DOCDIR in config.py</changelog>
<changelog author="detlef@links2linux.de" date="1237291200">- new upstream version &lt;0.9.16.1&gt;
  * fix a bug/crush for French version
  * update translations
  * don’t show the snapshot that is being taken in snapshots list
  * GNOME &amp; KDE4: when the application starts and snapshots directory don’t exists show a messagebox
  * give more information for ‘take snapshot’ progress (to prove that is not blocked)
  * MainWindow: rename ‘Timeline’ column with ‘Snapshots’
  * when it tries to take a snapshot if the snapshots directory don’t exists  (it is on a removable drive that is not plugged) it will notify and wait maxmimum 30  seconds (for the drive to be plugged)
  * GNOME &amp; KDE4: add notify if the snapshots directory don’t exists
  * KDE4: rework MainWindow</changelog>
<changelog author="herbert@links2linux.de" date="1240574400">- require python-kde4 for kde subpackage</changelog>
<changelog author="herbert@links2linux.de" date="1245672000">- new upstream version &lt;0.9.26&gt;
  * update translations from Launchpad
  * Fix a but smart-remove algorithm (https://bugs.launchpad.net/backintime/+bug/376104)
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/374477
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/375113
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * add '--no-check' option to configure scripts
  * use only 'folder' term (more consistent with GNOME/KDE)
  * add 'expert option': enable/disable nice for cron jobs
  * GNOME &amp; KDE4: refresh snapshots button force files view to update too
  * you can include a backup parent directory (backup directory will auto-exclude itself)
  * fix some small bugs
- new upstream version &lt;0.9.24&gt;
  * update translations
  * KDE4: fix python string &lt;=&gt; QString problems
  * KDE4 FilesView/SnapshotsDialog: ctrl-click just select (don't execute)
  * KDE4: fix crush after "take snapshot" process (https://bugs.launchpad.net/backintime/+bug/366241)
  * store basic permission in a special file so it can restore them correctly (event from NTFS)
  * add config version
  * implement Gnome/KDE4 systray icons and user.callback as plugins
  * reorganize code: common/GNOME/KDE4
  * GNOME: break the big glade file in multiple file
  * backintime is no longer aware of 'backintime-gnome' and 'backintime-kde4'
    (you need run 'backintime-gnome' for GNOME version and 'backintime-kde4' for KDE4 version)
- new upstream version &lt;0.9.22.1&gt;
  * fix French translation
- new upstream version &lt;0.9.22&gt;
  * update translations from Launchpad
  * KDE4: fix some translation problems
  * remove --safe-links for save/restore (this means copy symlinks as symlinks)
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * create directory now use python os.makedirs (replace use of mkdir command)
  * KDE4: fix a crush related to QString - python string conversion
  * GNOME &amp; KDE4 SettingsDialog: if schedule automatic backups per directory is set, global schedule is hidden
  * GNOME FilesView: thread "*~" files (backup files) as hidden files
  * GNOME: use gtk-preferences icon for SettingsDialog (replace gtk-execute icon)
  * expert option: $XDG_CONFIG_HOME/backintime/user.callback (if exists) is called a different steps
    of a "take snapshot" process (before, after, on error, is a new snapshot was taken).
  * add more command line options: --snapshots-list, --snapshots-list-path, --last-snapshot, --last-snapshot-path
  * follow FreeDesktop directories specs:
    $XDG_DATA_HOME (default: $HOME/.local/share) to store app.lock files
    $XDG_CONFIG_HOME (default: $HOME/.config) to save settings
  * new install system: use more common steps (./configure; make; sudo make install)
- new upstream version &lt;0.9.20&gt;
  * smart remove: fix an important bug and make it more verbose in syslog
  * update Spanish translation (Francisco Manuel García Claramonte &lt;franciscomanuel.garcia@hispalinux.es&gt;)
- new upstream version &lt;0.9.18&gt;
  * update translations from Launchpad
  * update Slovak translation (Tomáš Vadina &lt;kyberdev@gmail.com&gt;)
  * update French translation (Michel Corps &lt;mahikeulbody@gmail.com&gt;)
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * GNOME bugfix: fix a crush in files view for files with special characters (ex: "a%%20b")
  * GNOME SettingsDialog bugfix: if snapshots path is a new created folder, snapshots navigation (files view) don't work
  * update doc
  * GNOME &amp; KDE4 MainWindow: Rename "Places" list with "Snapshots"
  * GNOME SettingsDialog bugfix: modify something, then press cancel. If you reopen the dialog it show wrong values (the ones before cancel)
  * GNOME &amp; KDE4: add root mode menu entries (use gksu for gnome and kdesudo for kde)
  * GNOME &amp; KDE4: MainWindow - Files view: if the current directory don't exists in current snapshot display a message
  * SettingDialog: add an expert option to enable to schedule automatic backups per directory
  * SettingDialog: schedule automatic backups - if the application can't find crontab it show an error
  * SettingDialog: if the application can't write in snapshots directory there should be an error message
  * add Polish translation (Paweł Hołuj &lt;pholuj@gmail.com&gt;)
  * add cron in common package dependencies
  * GNOME &amp; KDE4: rework settings dialog
  * SettingDialog: add an option to enable/disable notifications</changelog>
<changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
<changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomáš Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
<changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
<changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
<changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
<changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
<changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>

</package>
<package pkgid="a34baad1321a45e194888332e8f5b7f3b3ffc639e45a10e379f6b12331111a7d" name="backintime-lang" arch="noarch">
    <version epoch="0" ver="1.0.28" rel="4.4.16"/>

<changelog author="detlef@links2linux.de" date="1236254400">- new upstream version &lt;0.9.14&gt;
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * update Swedish translation (Niklas Grahn &lt;terra.unknown@yahoo.com&gt;)
  * update Spanish translation (Francisco Manuel García Claramonte &lt;franciscomanuel.garcia@hispalinux.es&gt;)
  * update French translation (Michel Corps &lt;mahikeulbody@gmail.com&gt;)
  * GNOME &amp; KDE4: rework MainWindow
  * GNOME &amp; KDE4: rework SettingsDialog
  * GNOME &amp; KDE4: add "smart" remove</changelog>
<changelog author="detlef@links2linux.de" date="1236859200">- fix DOCDIR in config.py</changelog>
<changelog author="detlef@links2linux.de" date="1237291200">- new upstream version &lt;0.9.16.1&gt;
  * fix a bug/crush for French version
  * update translations
  * don’t show the snapshot that is being taken in snapshots list
  * GNOME &amp; KDE4: when the application starts and snapshots directory don’t exists show a messagebox
  * give more information for ‘take snapshot’ progress (to prove that is not blocked)
  * MainWindow: rename ‘Timeline’ column with ‘Snapshots’
  * when it tries to take a snapshot if the snapshots directory don’t exists  (it is on a removable drive that is not plugged) it will notify and wait maxmimum 30  seconds (for the drive to be plugged)
  * GNOME &amp; KDE4: add notify if the snapshots directory don’t exists
  * KDE4: rework MainWindow</changelog>
<changelog author="herbert@links2linux.de" date="1240574400">- require python-kde4 for kde subpackage</changelog>
<changelog author="herbert@links2linux.de" date="1245672000">- new upstream version &lt;0.9.26&gt;
  * update translations from Launchpad
  * Fix a but smart-remove algorithm (https://bugs.launchpad.net/backintime/+bug/376104)
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/374477
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/375113
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * add '--no-check' option to configure scripts
  * use only 'folder' term (more consistent with GNOME/KDE)
  * add 'expert option': enable/disable nice for cron jobs
  * GNOME &amp; KDE4: refresh snapshots button force files view to update too
  * you can include a backup parent directory (backup directory will auto-exclude itself)
  * fix some small bugs
- new upstream version &lt;0.9.24&gt;
  * update translations
  * KDE4: fix python string &lt;=&gt; QString problems
  * KDE4 FilesView/SnapshotsDialog: ctrl-click just select (don't execute)
  * KDE4: fix crush after "take snapshot" process (https://bugs.launchpad.net/backintime/+bug/366241)
  * store basic permission in a special file so it can restore them correctly (event from NTFS)
  * add config version
  * implement Gnome/KDE4 systray icons and user.callback as plugins
  * reorganize code: common/GNOME/KDE4
  * GNOME: break the big glade file in multiple file
  * backintime is no longer aware of 'backintime-gnome' and 'backintime-kde4'
    (you need run 'backintime-gnome' for GNOME version and 'backintime-kde4' for KDE4 version)
- new upstream version &lt;0.9.22.1&gt;
  * fix French translation
- new upstream version &lt;0.9.22&gt;
  * update translations from Launchpad
  * KDE4: fix some translation problems
  * remove --safe-links for save/restore (this means copy symlinks as symlinks)
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * create directory now use python os.makedirs (replace use of mkdir command)
  * KDE4: fix a crush related to QString - python string conversion
  * GNOME &amp; KDE4 SettingsDialog: if schedule automatic backups per directory is set, global schedule is hidden
  * GNOME FilesView: thread "*~" files (backup files) as hidden files
  * GNOME: use gtk-preferences icon for SettingsDialog (replace gtk-execute icon)
  * expert option: $XDG_CONFIG_HOME/backintime/user.callback (if exists) is called a different steps
    of a "take snapshot" process (before, after, on error, is a new snapshot was taken).
  * add more command line options: --snapshots-list, --snapshots-list-path, --last-snapshot, --last-snapshot-path
  * follow FreeDesktop directories specs:
    $XDG_DATA_HOME (default: $HOME/.local/share) to store app.lock files
    $XDG_CONFIG_HOME (default: $HOME/.config) to save settings
  * new install system: use more common steps (./configure; make; sudo make install)
- new upstream version &lt;0.9.20&gt;
  * smart remove: fix an important bug and make it more verbose in syslog
  * update Spanish translation (Francisco Manuel García Claramonte &lt;franciscomanuel.garcia@hispalinux.es&gt;)
- new upstream version &lt;0.9.18&gt;
  * update translations from Launchpad
  * update Slovak translation (Tomáš Vadina &lt;kyberdev@gmail.com&gt;)
  * update French translation (Michel Corps &lt;mahikeulbody@gmail.com&gt;)
  * update German translation (Michael Wiedmann &lt;mw@miwie.in-berlin.de&gt;)
  * GNOME bugfix: fix a crush in files view for files with special characters (ex: "a%%20b")
  * GNOME SettingsDialog bugfix: if snapshots path is a new created folder, snapshots navigation (files view) don't work
  * update doc
  * GNOME &amp; KDE4 MainWindow: Rename "Places" list with "Snapshots"
  * GNOME SettingsDialog bugfix: modify something, then press cancel. If you reopen the dialog it show wrong values (the ones before cancel)
  * GNOME &amp; KDE4: add root mode menu entries (use gksu for gnome and kdesudo for kde)
  * GNOME &amp; KDE4: MainWindow - Files view: if the current directory don't exists in current snapshot display a message
  * SettingDialog: add an expert option to enable to schedule automatic backups per directory
  * SettingDialog: schedule automatic backups - if the application can't find crontab it show an error
  * SettingDialog: if the application can't write in snapshots directory there should be an error message
  * add Polish translation (Paweł Hołuj &lt;pholuj@gmail.com&gt;)
  * add cron in common package dependencies
  * GNOME &amp; KDE4: rework settings dialog
  * SettingDialog: add an option to enable/disable notifications</changelog>
<changelog author="detlef@links2linux.de" date="1250942400">- fix Requires</changelog>
<changelog author="detlef@links2linux.de" date="1284552000">- new upstream version &lt;1.0&gt;
  * add '.dropbox*' to default exclude patterns (https://bugs.launchpad.net/backintime/+bug/628172)
  * add option to take a snapshot at every boot (https://bugs.launchpad.net/backintime/+bug/621810)
  * add continue on errors (https://bugs.launchpad.net/backintime/+bug/616299)
  * add expert options: copy unsafe links &amp; copy links
  * "user-callback" replace "user.callback" and receive profile informations
  * documentation: on-line only (easier to maintain)
  * add error log and error log view dialog (Gnome &amp; KDE4)
  * merge with: lp:~dave2010/backintime/minor-edits
  * merge with: lp:~mcfonty/backintime/unique-snapshots-view
  * reduce memory usage during compare with previous snapshot process
  * custom backup hour (for daily backups or mode): https://bugs.launchpad.net/backintime/+bug/507451
  * smart remove was slightly changed (https://bugs.launchpad.net/backintime/+bug/502435)
  * make backup on restore optional
  * add ionice support for user/cron backup process
  * remove "schedule per included directory" (profiles do that) (+ bug LP: #412470)
  * update Slovak translation (Tomáš Vadina &lt;kyberdev@gmail.com&gt;)
  * multiple profiles support
  * backintime snapshot folder is restructured to ../backintime/machine/user/profile_id/
  * added the possibility to include other snapshot folders within a profile, it can only read those, there is not a GUI implementation yet
  * added a tag suffix to the snapshot_id, to avoid double snapshot_ids
  * added a desktop file for kdesu and a test if kdesu or kdesudo should be used (LP: #389988)
  * added expert option to disable snapshots when on battery (LP: #388178)
  * snapshots are stored entirely read-only (LP: #386275)
  * changed default exclude patterns to caches, thumbnails, trashbins, and backups (LP: #422132)
  * write access to snapshot folder is checked &amp; change to snapshot version 2 (LP: #423086)
  * Used a more standard crontab syntax (LP: #409783)
  * Stop the "Over zealous removal of crontab entries" (LP: #451811)
  * and many bugfixes</changelog>
<changelog author="detlef@links2linux.de" date="1287230400">- new upstream version &lt;1.0.2&gt;
  * reduce log file (no more duplicate "Compare with..." lines)
  * declare backintime-kde4 packages as a replacement of backintime-kde</changelog>
<changelog author="detlef@links2linux.de" date="1288440000">- new upstream version &lt;1.0.4&gt;
  * SettingsDialog: show highly recommended excludes
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/664783
  * Option to use checksum to detect changes (https://bugs.launchpad.net/backintime/+bug/666964)
  * Option to select log verbosity (https://bugs.launchpad.net/backintime/+bug/664423)
  * Gnome: use gloobus-preview if installed</changelog>
<changelog author="detlef@links2linux.de" date="1294056000">- new upstream version &lt;1.0.6&gt;
  * Fix bug:
    https://bugs.launchpad.net/backintime/+bug/676223
    https://bugs.launchpad.net/backintime/+bug/672705
  * Smart remove: configurable options:
    https://bugs.launchpad.net/backintime/+bug/406765</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1303128000">- Imported package from packman</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1309089600">- Fix missing language directories</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1311163200">- new upstream version 1.0.8
  * Fix bug: lp#723545
    + Cache UID/GID to improve backup speed
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/705237
    + wrong profile name in message box
  * Fix bug: lp#696663
    + Empty directories created during build
  * Fix bug: lp#671946
    + Invalid notification ID</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1328097600">- Fix duplicated omf files</changelog>
<changelog author="coolo@suse.com" date="1350388800">- fix file list</changelog>
<changelog author="tejas.guruswamy@opensuse.org" date="1355745600">- Update to upstream version 1.0.20
  * Fix bug: restore remote path with spaces using mode ssh returned error
  * Fix packages: man &amp; translations
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1077446
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1078979
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1079479
  * Map multiple arguments for gettext so they can be rearranged by translators
  * Add links to: website, documentation, report a bug, answers, faq
  * Use libnotify for gnome/kde4 notifications instead of gnome specific libraries
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1059247
  * Add more schedule options: every 30 min, every 2 hours, every 4 hours, every 6 hours &amp; every 12 hours
  * Add generic mount-framework
  * Add mode 'SSH' for backups on remote host using ssh protocol.
  * Fix bug: wrong path if restore system root
  * Fix bug: glade (xml) files did not translate
  * Fix bug: https://bugs.launchpad.net/backintime/+bug/1073867
  * Add "Restore to ..." in replacement of copy (with or without drag &amp; drop) because copy don't restore user/group/rights</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Added omit_KDirModel.removeColumns.patch, fixes crash of kde
  frontend (bnc#846526)</changelog>
<changelog author="toddrme2178@gmail.com" date="1384344000">- Update to upstream version 1.0.28
  * remove config on 'apt-get purge'
  * add more options for configure scripts; update README
  * add udev schedule (run BIT as soon as the drive is connected)
  * Fix bug: AttributeError with python-keyring&gt;1.6.1 [#1234024](https://bugs.launchpad.net/backintime/+bug/1234024)
  * Fix bug: TypeError: KDirModel.removeColumns() is a private method in kde4/app.py [#1232694](https://bugs.launchpad.net/backintime/+bug/1232694)
  * add '--checksum' commandline option [#886021](https://bugs.launchpad.net/backintime/+bug/886021)
  * Fix bug: sshfs mount disconnect after a while due to some firewalls (add ServerAliveInterval) [#235685](https://answers.launchpad.net/backintime/+question/235685)
  * Fix bug: Ping fails if ICMP is disabled on remote host [#1226718](https://bugs.launchpad.net/backintime/+bug/1226718)
  * Fix bug: KeyError in getgrnam if there is no 'fuse' group [#1225561](https://bugs.launchpad.net/backintime/+bug/1225561)
  * Fix bug: anacrontab won't work with profilename with spaces [#1224620](https://bugs.launchpad.net/backintime/+bug/1224620)
  * Fix bug: NameError in tools.move_snapshots_folder [#871466](https://bugs.launchpad.net/backintime/+bug/871466)
  * Fix bug: KPassivePopup is not defined [#871475](https://bugs.launchpad.net/backintime/+bug/871475)
  * multi selection for include and exclude list [#660753](https://bugs.launchpad.net/backintime/+bug/660753)
  * Fix bug: ValueError while reading pw-cache PID [#235407](https://answers.launchpad.net/backintime/+question/235407)
- Update to upstream version 1.0.26
  * add feature: keep min free inodes
  * roll back commit 836.1.5 (check free-space on ssh remote host): statvfs DOES work over sshfs. But not with quite outdated sshd
  * add daily anacron schedule
  * add delete button and 'list only equal' in Snapshot dialog; multiSelect in snapshot list
  * add manpage backintime-config and config-examples
  * Fix bug: Restore makes files public during the operation
  * Fix bug: Cannot keep modifications to cron (https://bugs.launchpad.net/backintime/+bug/698106)
  * add feature: restore from command line; add option --config
  * Fix bug: cannot stat 'backintime-kde4-root.desktop.kdesudo' (https://bugs.launchpad.net/backintime/+bug/696659)
  * Fix bug: unreadable dark KDE color schemes (https://bugs.launchpad.net/backintime/+bug/1184920)
  * use 'ps ax' to check if 'backintime --pw-cache' is still running
  * mount after locking, unmount before unlocking in take_snapshot
  * Fix bug: permission denied if remote uid wasn't the same as local uid
  * add option --bwlimit for rsync
  * redirect logger.error and .warning to stderr; new argument --quiet
  * deactivate 'Save Password' if no keyring is available
  * use Password-cache for user-input too
  * handle two Passwords
  * add 'SSH encrypted': mount / with encfs reverse and sync encrypted with rsync. EXPERIMENTEL!
  * add 'Local encrypted': mount encfs
- Update to upstream version 1.0.24
  * hide check_for_canges if full_rsync_mode is checked
  * DEFAULT_EXCLUDE system folders with /foo/* so at least the folder itself will backup
  * DEFAULT_EXCLUDE /run; exclude MOUNT_ROOT with higher priority and not with DEFAULT_EXCLUDE anymore
  * Fix bug: 'CalledProcessError' object has no attribute 'strerror'
  * Fix bug: quote rsync remote path with spaces
  * 'Save Password' default off to avoid problems with existing profiles
  * if restore uid/gid failed try to restore at least gid
  * SSH need to store permissions in seperate file with "Full rsync mode" because remote user might not be able to store ownership
  * Fix bug: restore permission failed on "Full rsync mode"
  * Fix bug: glib.GError: Unknown internal child: selection
  * Fix bug: GtkWarning: Unknown property: GtkLabel.margin-top
  * Fix bug: check keyring backend only if password is needed
  * switch to 'find -exec cmd {} +' (https://bugs.launchpad.net/backintime/+bug/1157639)
  * change all indent tabs to 4 spaces
- Update to upstream version 1.0.22
  * check free-space on ssh remote host (statvfs didn't work over sshfs)
  * Add Password storage mode ssh
  * Add "Full rsync mode" (can be faster but ...)
  * Fix bug: "Restore to..." failed due to spaces in directory name (https://bugs.launchpad.net/backintime/+bug/1096319)
  * Fix bug: host not found in known_hosts if port != 22 (https://bugs.launchpad.net/backintime/+bug/1130356)
  * Fix bug: sshtools.py used not POSIX conform conditionals
- Update requires and buildrequires.
- Remove upstreamed omit_KDirModel.removeColumns.patch
- Split doc and lang packages</changelog>

</package>
<package pkgid="1eacc0d9e0f4d79f640652782e16a22ead4381bf42e12057b40a5b6cfcc43318" name="banshee" arch="i586">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="dad238b7d70c1fbce14b089fb21641e66c1713e38701e2790c574088f4f7a445" name="banshee" arch="src">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="b589da49eb373c85489362708367f1a4b71a5696f5e361bddf491f089b05d748" name="banshee" arch="x86_64">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="7f8cc4fad291320ef17b59981c27a4d4a0ae47fc55edfd799f237307e54175f0" name="banshee-backend-engine-gstreamer" arch="i586">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="b41fb0ebdfafefe2dbaf105ca51a475705975321f908d83b9f86fd0a13cb075e" name="banshee-backend-engine-gstreamer" arch="x86_64">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="8c8085a9a514a9a126cd2582fc442554ebaefaaafb416cb18c06be19b40d3d72" name="banshee-backend-io-gio" arch="i586">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="cbca41c6584c31e047992a5c7c2f31841046ab19372ffbce9c2cba3ee07a6235" name="banshee-backend-io-gio" arch="x86_64">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="b9ccc45fefe7b1d0a090ac60ed83792fc79c4a4cc319f8da93b4987d483e89e9" name="banshee-backend-platform-gnome" arch="i586">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="26020db6ad28248b9bf2cac005ec5bf703ef4550aebb5a06f72a2bf957b3936e" name="banshee-backend-platform-gnome" arch="x86_64">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="e902763c0a12a3dd7d2fe412cc2a6af81efdd6b3e9c5a90a07008d489e8764cf" name="banshee-backend-platform-unix" arch="i586">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="4c9c1d6063a15f384a45321bb3a6d93c490d3c499c103d5bfd2f3fa927ccd5e3" name="banshee-backend-platform-unix" arch="x86_64">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="a51edce0b428a5a4017153a19e00dd02c0ac880e597ed82d630ca566c2cc404c" name="banshee-core" arch="i586">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="ac639edad09e36f417f13981d880f8eeac22034fb27b093083e09e0e1aafde48" name="banshee-core" arch="x86_64">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="5b3fdf4867d181b82ea440445eed2a1648922e7bdbe6cf5b99c72b95c3102adc" name="banshee-core-lang" arch="noarch">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="4f0a22e5f9864367c7b349899bb196e2ec8c46c24a739af98c13b025ef29b5ab" name="banshee-devel" arch="i586">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="349ebf89902b948189d67ecd204bed4813f8cc9b77fc970ebb0526789b9fa8b2" name="banshee-devel" arch="x86_64">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="2c104ae2e45619bcdc4721ab5e3e93442d0614682e6ef2d6c8d892a48bee557f" name="banshee-dmp" arch="i586">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="f94a184272ae4631c15c68f68ef1ffd9e8934b56c781f63d68bbba10079886c3" name="banshee-dmp" arch="x86_64">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="3646a3dede86fcbcf7918dacbf656cb28ca4fe4b55497718c088ab4f94b103dd" name="banshee-dmp-apple-devices" arch="i586">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="d75330250f4568f9e7a5ad9d77f4724f1e0697931228c88fd936102dd270d116" name="banshee-dmp-apple-devices" arch="x86_64">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="fb720876c6f6bf32da5d0606fa99f706bf8106d1776dbf1166a7a89c5db8294c" name="banshee-dmp-mtp" arch="i586">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="4e116d959b9686d51e91e6c3143368c4304113c76cc90e8420b839c6fd3b052d" name="banshee-dmp-mtp" arch="x86_64">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="b526618b687ac4dbc6ecdf7f02fd716f487643e18a8308b34c07e2be17a3aa49" name="banshee-extensions-boo" arch="i586">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="a6819297b14377f374d0d509cd48649a2c4d0a951ac759771e4dc7329ff6c48d" name="banshee-extensions-boo" arch="x86_64">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="edbd60d351c44f63efd3ad36de870b89c3e0994d986d202846744c1fed5b9638" name="banshee-extensions-default" arch="i586">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="a860bd5522e868dd34c2cdca01706f64bbe7a6ad8c26011bc2b574c1fa1b7f27" name="banshee-extensions-default" arch="x86_64">
    <version epoch="0" ver="2.6.1" rel="2.4.1"/>

<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="nmarques@opensuse.org" date="1320148800">- Update to 2.2.1:
  + Bug fixes, including:
  - bgo#661467: AmazonMp3: Handle plain text AMZ files now sent
    by Amazon
  - UbuntuOneMusicStore: Ensure u1ms URIs passed at startup get
    loaded
  - Daap: Fix crash while resolving the address of a DAAP service
  - DatabaseImportManager: Support importing .mka files
  - bgo#662906: AudiobookLibrarySource: Fix crash when adding
    tracks
  - bgo#659841: GnomeBackend: Be more robust against GConf
    failures
  - bgo#656533: Notification: Fix application name used in
    internal notify#
  - bgo#649277: NotificationArea: Only use supported tags in the
    notification message
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1321444800">- Update to version 2.3.1:
  + New Features:
  - DVD playback support
  + Enhancements:
  - Several improvements to Muinshee, our alternative UI:
    . Add a Clear button to the toolbar
    . Make double-click on an album do the same as the Play
    button
    . Don't close the dialog when pressing Enqueue
    . Make the Esc key close the dialog if there is no search
    text
    . Use better icons for the Play and Enqueue buttons
  - Add separate options for writing ratings and play counts to
    files
  - Update values for the Smiley Face equalizer preset
  - Set the PulseAudio media.role property
  + Bug fixes, including:
  - Fixes from 2.2.1 release.
  - Notify playlists on rating change through d-bus or command
    line
  - bgo#647898: Try to fetch coverart without an internet
    connection
  - bgo#658803: Prune CoverArtDownloads table when removing
    tracks
- Remove xz BuildRequires as we have a bz2 tarball again.</changelog>
<changelog author="nmarques@opensuse.org" date="1322654400">- Update to version 2.3.2
  + New Features:
  - Configurable browser filters
  + Enhancements:
  - bgo#664424: AsxPlaylistFormat: Add support for external ASX
    playlists
  - bgo#664642: Add support for the NEC LifeTouch Note
  - Dap.MassStorage: Don't sync 'unknown album' metadata
  + Bugs fixed, including:
  - Mpris: Change trackid type from string to DBus object path
  - Gio: Fix encoding of URIs in Directory class and fix values
    in database
  - bgo#662883: Fix activation of UbuntuOneMusicStore source on
    startup
  - bgo#651743: YouTubeTile: Fix construction of the playback
    URI
  - bgo#664381: Dap.MassStorage: Rename Xperia X12 to Xperia
    arc
  - bgo#664079: Skip empty files when importing and show error
  - Importing: when showing an error, use file paths, not URIs
- Remove support for 11.3 builds: 11.3 is nearing end of support
  lifecycle, and it simplifies the packaging.
- Add explicit pkgconfig(gconf-2.0) BuildRequires, following
  upstream change.
- Stop building the soundmenu extension as there is no need for it
  on openSUSE:
  + stop passing --extensions-soundmenu to configure.
  + drop extensions-soundmenu subpackage.
  + add a banshee-extensions-soundmenu Obsoletes to main
    subpackage.</changelog>
<changelog author="nmarques@opensuse.org" date="1324555200">- Update to version 2.3.3
  + Enhancements:
  - StreamPositionLabel: Fix label when loading
  - Preferences: Change wording of Metadata settings
  - bgo#608389: AudiobookLibrarySource: Accept tracks dragged
    from playlists
  - bgo#666493: Emusic.Store: Remove unneeded refresh
  - bgo#666488: Dap.MassStorage: Add and use specific icons for
    Xperia phones
  + Bugs fixed, including:
  - bgo#638130: Fix importing of rating and play count when
    updating track
  - bgo#644145: Fix FileLocation queries for the StartsWith
    operator
  - bgo#656439: Audiobook: Add a button to go back to the list of
    audiobooks
  - bgo#661322: PlaybackShuffleActions: Fix crash when setting
    shuffle mode
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="vuntz@opensuse.org" date="1326801600">- Add banshee Requires to muinshee subpackage as /usr/bin/muinshee
  is a symlink to /usr/bin/banshee. Fix bnc#736777.</changelog>
<changelog author="nmarques@opensuse.org" date="1326974400">- Update to version 2.3.4:
  + Enhancements:
  - Misc code refactorings.
  - bgo#665997: Mpris: Add xesam:userRating field in track
    metadata.
  - bgo#589196: Dap.MassStorage: metadata resync in manual mode.
  + Bugs fixed, including:
  - bgo#648522: Fix race condition when starting multiple
    instances.
  - bgo#667355: SourceWatcher: Fix SQL error caused by incorrect
    escaping.
  - bgo#667184: Booter: Add missing quote in command line help
    message.
  - bgo#667478: Fix build with libmtp 1.1.
- 'youtube' and 'dmp-apple-devices' don't install icons anymore,
  pinged upstream. Commented entries in %files.</changelog>
<changelog author="dimstar@opensuse.org" date="1329393600">- Update to version 2.3.5:
  + New features:
  - UPnP support
  + Enhancements:
  - bgo#587964: Dap: Add support for DOS folder separator in
    playlists
  - bgo#548636: Lastfm: Use a standard directory for last.fm
    caching
  - Add option to hide the artist filter
  - Add a Composer filter in the SearchEntry filter menu
  - AudioscrobblerConnection: Add logging for last.fm scrobbler
  - MusicBrainz: Enable FreeBSD support
  + Bugs fixed:
  - Fix MusicBrainz dllmap for cross-architecture support
  - LibraryWatcher: Catch and log exception when processing
    changes
  - Improve readability of the Last.fm user guide page
  - Prevent missing icons in the source tarball
  + Updated translations.
- Add pkgconfig(mono-upnp) BuildRequires in order to enable the new
  UPnP support module. This is commented out for now, as mono-upnp
  is not in Factory yet.
- 'youtube' and 'dmp-apple-devies' icons are back, package them
  again.</changelog>
<changelog author="vuntz@opensuse.org" date="1329739200">- Add explicit pkgconfig(xrandr) and pkgconfig(xxf86vm)
  BuildRequires, to avoid issues after the big xorg-x11 packaging
  change.</changelog>
<changelog author="zaitor@opensuse.org" date="1331208000">- Update to version 2.3.6:
  + Allow primary sources to marked as temporary (bgo#548366).
  + LibraryWatcher: avoid importing incomplete files (bgo#666981).
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1332936000">- Update to version 2.4.0:
  + Implement SSL certificate validation in browser (bgo#671536).
  + Add support for the Archos Internet Tablet.
  + Better compatibility with some DAAP servers (bgo#659146).
  + Fix crash during scrobbling in Lastfm plugin (bgo#662122).
  + Several bug fixes in UPnP support.
  + Various other bug fixes.
  + Updated translations.
- Add commented out pkgconfig() BuildRequires for UPnP support:
  mono.ssdp, mono.upnp, mono.upnp.dcp.mediaserver1. This is
  commented out as the mono-upnp package is currently broken.</changelog>
<changelog author="vuntz@opensuse.org" date="1333713600">- Uncomment pkgconfig() BuildRequires for UPnP support: mono.ssdp,
  mono.upnp, mono.upnp.dcp.mediaserver1. The pkg-config files
  related to mono-upnp package are now fixed.</changelog>
<changelog author="badshah400@gmail.com" date="1338984000">- Update to version 2.4.1:
  + Bugs fixed:
  - Migo.Syndication: Handle feeds with malformed
    enclosure URLs
  - bgo#626659: ServiceManager: check properly if a service is
    required
  - bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  - bgo#662909: PlaylistParser: Retry HTTP request after
    timeout
  - bgo#666696: DapSource: Flush pending changes when quitting
  - bgo#672744: UPnPServerSource: Fix crash when getting the
    root object
  - bgo#673037: libossifer: Fix certificate validation with
    libsoup 2.38
  - bgo#673416: DbIteratorJob: Abort job after several
    consecutive failures
  - bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling.</changelog>
<changelog author="nmo.marques@gmail.com" date="1346932800">- Update to version 2.5.0:
  + Migo.Syndication: Handle feeds with malformed enclosure URLs
  + bgo#577396: AppleDeviceTrackInfo: Fix reading and writing
    rating values
  + bgo#587756: MassStorage: Save playlists relative to
    BaseDirectory
  + bgo#615219: Don't increment skip counter when restarting
    current track
  + bgo#626659: ServiceManager: check properly if a service is
    required
  + bgo#634063: FileSystemQueueSource: Reload when tracks are
    imported
  + bgo#634758: PlaylistSource: Make sure the right tracks are
    removed
  + bgo#657769: PrimarySource: Make sure AddTrackJob is marked as
    finished
  + bgo#662909: PlaylistParser: Retry HTTP request after timeout
  + bgo#666696: DapSource: Flush pending changes when quitting
  + bgo#671948: DapSource: Put the playlists below the default
    sources
  + bgo#672744: UPnPServerSource: Fix crash when getting the root
    object
  + bgo#673037: libossifer: Fix certificate validation with libsoup
    2.38
  + bgo#673416: DbIteratorJob: Abort job after several consecutive
    failures
  + bgo#676144: PlayQueueSource: Fix high memory usage when
    shuffling
  + bgo#677288: PrimarySource: Fix pruning of artists from the
    database
  + bgo#679260: AppleDevice: Fix a crash when deleting invalid
    tracks
  + bgo#680679: PlayerEngine: Fix reporting of playback errors
- Removed banshee-recent-gpod.patch: merged by upstream</changelog>
<changelog author="nmo.marques@gmail.com" date="1347624000">- Update to version 2.5.1
  + AmazonMp3.Store: Fix URL redirection for sign out action
  + bgo#623974: BasicTrackDetailsPage: Blank year spin button
    when 0
  + bgo#624976: Gui.Canvas.Rect: log invalid values for Width/
    Height
  + bgo#636450: PathPattern: Limit filename length to 200
    characters
  + bgo#682510: Mpris: Only raise PropertiesChanged signal if
    value changed
  + bgo#683359: SourceView: log errors in SetCellDataFunc to avoid
    crashing
  + bgo#661112: Gui.Canvas.Size: log invalid values for
    Width/Height</changelog>
<changelog author="nmo.marques@gmail.com" date="1349092800">- Update to version 2.6.0:
  + For complete reference see the NEWS file in documentation
  + bgo#577396, bgo#587756, bgo#615219, bgo#623974, bgo#624976,
    bgo#626659, bgo#634063, bgo#634758, bgo#636450, bgo#642830,
    bgo#657769, bgo#661112, bgo#662909, bgo#666696, bgo#671948,
    bgo#672744, bgo#673037, bgo#673416, bgo#676144, bgo#677288,
    bgo#679260, bgo#680679, bgo#682510, bgo#682996, bgo#683359,
    bgo#661112, bgo#683498
- Remove banshee-1* Obsoletes/Provides: the name change from
  banshee-1 to banshee happened before openSUSE 12.1 was released
  and as such no supported version of openSUSE still carries that
  name.
- Drop helix-banshee Provides/Obsoletes: last seen in openSUSE
  10.x
- Remove %{_major} macro, only used for the source statement</changelog>
<changelog author="dimstar@opensuse.org" date="1357992000">- Add banshee-dmcs-before-gmcs.patch: Fix runtime issues with mono
  3.0. Banshee favore gmcs as mono compiler, which is a mono 2.0
  profile runtime. This linked in with other components of the
  distribution linked with gmcs (favoring v4.0 runtime) causes
  nasty crashes (bnc#798267). The patch changes the priority of
  the mono compilers and favors dmcs over gmcs (v4.0 over v2.0).
- Add libtool BuildRequires and call to autogen.sh, as above patch
  touches the build system.</changelog>
<changelog author="hpj@opensuse.org" date="1361966400">- Add banshee-avoid-dbus-race.patch: fixing random crashes
  (bnc#800230, bgo#692374).</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 2.6.1:
  + Dap.MassStorage: add product id for (WebOS) Palm Pre 2
    (bgo#697683).
  + DatabaseImportManager: Add .amr to import whitelist.
  + Bugs fixed: bgo#689123, bgo#696700, bgo#696877, bgo#692374,
    bgo#696111, bgo#658142, bgo#684089, bgo#689016, bgo#691694,
    bgo#661902, bgo#688540, bgo#639947, bgo#685920, bgo#685131,
    bgo#679769.
  + Updated translations.
- Drop banshee-avoid-dbus-race.patch: fixed upstream.</changelog>
<changelog author="zaitor@opensuse.org" date="1390651200">- Add pkgconfig(dbus-glib-1) BuildRequires, as upstreams fix for
  bnc#800230 and bgo#692374 requires this (bnc#856100, bgo#692374,
  bgo#720766).
- Drop conditionals for obsolete version of openSUSE.
- Drop xz BuildRequires as it is no longer needed.</changelog>

</package>
<package pkgid="4e742e6ad4c851b3be1d36f6f1db65a3f0616eb0127605eb912f0893e431629a" name="bash" arch="i586">
    <version epoch="0" ver="4.2" rel="68.12.1"/>

<changelog author="werner@suse.de" date="1357646400">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>
<changelog author="werner@suse.de" date="1412078400">- Remove and replace patches
  bash-4.2-CVE-2014-6271.patch
  bash-4.2-BSC898604.patch
  bash-4.2-CVE-2014-7169.patch
  with bash upstream patch 48, patch 49, and patch 50
- Add patch bash-4.2-extra-import-func.patch which is based on the
  BSD patch of Christos.  As further enhancements the option
  import-functions is mentioned in the manual page and a shopt
  switch is added to enable and disable import-functions on the fly</changelog>
<changelog author="werner@suse.de" date="1412078401">- Make bash-4.2-extra-import-func.patch an optional patch due
  instruction</changelog>
<changelog author="werner@suse.de" date="1412164800">- Add patches
  bash-4.2-heredoc-eof-delim.patch for bsc#898812, CVE-2014-6277:
  more troubles with functions
  bash-4.2-parse-exportfunc.patch for bsc#898884, CVE-2014-6278:
  code execution after original 6271 fix</changelog>
<changelog author="werner@suse.de" date="1412251200">- Replace patch bash-4.2-CVE-2014-7187.patch with upstream patch
  level bash42-051</changelog>
<changelog author="werner@suse.de" date="1412596800">- Replace patches bash-4.2-heredoc-eof-delim.patch and
  bash-4.2-parse-exportfunc.patch with the official upstream
  patch levels bash42-052 and bash42-053</changelog>

</package>
<package pkgid="365dbe1f0fc8a563d52d83f10d4eefdd18f17b7089db1b24762a7859e2dac560" name="bash" arch="i586">
    <version epoch="0" ver="4.2" rel="68.4.1"/>

<changelog author="werner@suse.de" date="1342699200">- Do not mask internal _rl symbols as internal as there are many
  tools out there which uses them (gdb as an example)</changelog>
<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>

</package>
<package pkgid="21cdf0f83234207cf1f9558642aeabd8ba0d6300eeab7cbd0025e5f8c50a79ab" name="bash" arch="i586">
    <version epoch="0" ver="4.2" rel="68.8.1"/>

<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>

</package>
<package pkgid="28523546fffb6bf688fbaf542fe735ea768af97994381830e9a52afbb8b6aa91" name="bash" arch="src">
    <version epoch="0" ver="4.2" rel="68.12.1"/>

<changelog author="werner@suse.de" date="1357646400">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>
<changelog author="werner@suse.de" date="1412078400">- Remove and replace patches
  bash-4.2-CVE-2014-6271.patch
  bash-4.2-BSC898604.patch
  bash-4.2-CVE-2014-7169.patch
  with bash upstream patch 48, patch 49, and patch 50
- Add patch bash-4.2-extra-import-func.patch which is based on the
  BSD patch of Christos.  As further enhancements the option
  import-functions is mentioned in the manual page and a shopt
  switch is added to enable and disable import-functions on the fly</changelog>
<changelog author="werner@suse.de" date="1412078401">- Make bash-4.2-extra-import-func.patch an optional patch due
  instruction</changelog>
<changelog author="werner@suse.de" date="1412164800">- Add patches
  bash-4.2-heredoc-eof-delim.patch for bsc#898812, CVE-2014-6277:
  more troubles with functions
  bash-4.2-parse-exportfunc.patch for bsc#898884, CVE-2014-6278:
  code execution after original 6271 fix</changelog>
<changelog author="werner@suse.de" date="1412251200">- Replace patch bash-4.2-CVE-2014-7187.patch with upstream patch
  level bash42-051</changelog>
<changelog author="werner@suse.de" date="1412596800">- Replace patches bash-4.2-heredoc-eof-delim.patch and
  bash-4.2-parse-exportfunc.patch with the official upstream
  patch levels bash42-052 and bash42-053</changelog>

</package>
<package pkgid="e8cfb7f8bb86542ef78c45891570985ffe41a8951548982dd69736023acd3507" name="bash" arch="src">
    <version epoch="0" ver="4.2" rel="68.4.1"/>

<changelog author="werner@suse.de" date="1342699200">- Do not mask internal _rl symbols as internal as there are many
  tools out there which uses them (gdb as an example)</changelog>
<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>

</package>
<package pkgid="b3e7e7d059b7a84d3bc1f560ade4cf950be9541555e392c9ee261da8c23ce3de" name="bash" arch="src">
    <version epoch="0" ver="4.2" rel="68.8.1"/>

<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>

</package>
<package pkgid="270f76fd9bbc2b4aac552faa9b1e5e3fecb46a40c41fd996b03203bcde5e0d46" name="bash" arch="x86_64">
    <version epoch="0" ver="4.2" rel="68.12.1"/>

<changelog author="werner@suse.de" date="1357646400">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>
<changelog author="werner@suse.de" date="1412078400">- Remove and replace patches
  bash-4.2-CVE-2014-6271.patch
  bash-4.2-BSC898604.patch
  bash-4.2-CVE-2014-7169.patch
  with bash upstream patch 48, patch 49, and patch 50
- Add patch bash-4.2-extra-import-func.patch which is based on the
  BSD patch of Christos.  As further enhancements the option
  import-functions is mentioned in the manual page and a shopt
  switch is added to enable and disable import-functions on the fly</changelog>
<changelog author="werner@suse.de" date="1412078401">- Make bash-4.2-extra-import-func.patch an optional patch due
  instruction</changelog>
<changelog author="werner@suse.de" date="1412164800">- Add patches
  bash-4.2-heredoc-eof-delim.patch for bsc#898812, CVE-2014-6277:
  more troubles with functions
  bash-4.2-parse-exportfunc.patch for bsc#898884, CVE-2014-6278:
  code execution after original 6271 fix</changelog>
<changelog author="werner@suse.de" date="1412251200">- Replace patch bash-4.2-CVE-2014-7187.patch with upstream patch
  level bash42-051</changelog>
<changelog author="werner@suse.de" date="1412596800">- Replace patches bash-4.2-heredoc-eof-delim.patch and
  bash-4.2-parse-exportfunc.patch with the official upstream
  patch levels bash42-052 and bash42-053</changelog>

</package>
<package pkgid="ad85cde49a4a357ff627066e7185379dd5beffe03166a536139eecaa9285ee50" name="bash" arch="x86_64">
    <version epoch="0" ver="4.2" rel="68.4.1"/>

<changelog author="werner@suse.de" date="1342699200">- Do not mask internal _rl symbols as internal as there are many
  tools out there which uses them (gdb as an example)</changelog>
<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>

</package>
<package pkgid="8d8d0a5ba54a02908f2bd1beefd162a27469cb79e4a9d76b775cc413baeed695" name="bash" arch="x86_64">
    <version epoch="0" ver="4.2" rel="68.8.1"/>

<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>

</package>
<package pkgid="2b61d64c9b4691e5933e254ec8b4b0533c4bde3feed01e7d40283f2e0a3e291b" name="bash-devel" arch="i586">
    <version epoch="0" ver="4.2" rel="68.12.1"/>

<changelog author="werner@suse.de" date="1357646400">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>
<changelog author="werner@suse.de" date="1412078400">- Remove and replace patches
  bash-4.2-CVE-2014-6271.patch
  bash-4.2-BSC898604.patch
  bash-4.2-CVE-2014-7169.patch
  with bash upstream patch 48, patch 49, and patch 50
- Add patch bash-4.2-extra-import-func.patch which is based on the
  BSD patch of Christos.  As further enhancements the option
  import-functions is mentioned in the manual page and a shopt
  switch is added to enable and disable import-functions on the fly</changelog>
<changelog author="werner@suse.de" date="1412078401">- Make bash-4.2-extra-import-func.patch an optional patch due
  instruction</changelog>
<changelog author="werner@suse.de" date="1412164800">- Add patches
  bash-4.2-heredoc-eof-delim.patch for bsc#898812, CVE-2014-6277:
  more troubles with functions
  bash-4.2-parse-exportfunc.patch for bsc#898884, CVE-2014-6278:
  code execution after original 6271 fix</changelog>
<changelog author="werner@suse.de" date="1412251200">- Replace patch bash-4.2-CVE-2014-7187.patch with upstream patch
  level bash42-051</changelog>
<changelog author="werner@suse.de" date="1412596800">- Replace patches bash-4.2-heredoc-eof-delim.patch and
  bash-4.2-parse-exportfunc.patch with the official upstream
  patch levels bash42-052 and bash42-053</changelog>

</package>
<package pkgid="f36bee6b2a4a737ca42442e6dc3effcfed677b60bfb3f9b5d4b7b40ff20ca5ac" name="bash-devel" arch="i586">
    <version epoch="0" ver="4.2" rel="68.4.1"/>

<changelog author="werner@suse.de" date="1342699200">- Do not mask internal _rl symbols as internal as there are many
  tools out there which uses them (gdb as an example)</changelog>
<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>

</package>
<package pkgid="d101dd597446dd6bd106953974d669ba73dfb72fe81b5a886d13153b9860fa36" name="bash-devel" arch="i586">
    <version epoch="0" ver="4.2" rel="68.8.1"/>

<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>

</package>
<package pkgid="4ed583297cebb1c1c15575fafeb077e811f12ab3b77d9cb95a96df1d2bdff6b1" name="bash-devel" arch="x86_64">
    <version epoch="0" ver="4.2" rel="68.12.1"/>

<changelog author="werner@suse.de" date="1357646400">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>
<changelog author="werner@suse.de" date="1412078400">- Remove and replace patches
  bash-4.2-CVE-2014-6271.patch
  bash-4.2-BSC898604.patch
  bash-4.2-CVE-2014-7169.patch
  with bash upstream patch 48, patch 49, and patch 50
- Add patch bash-4.2-extra-import-func.patch which is based on the
  BSD patch of Christos.  As further enhancements the option
  import-functions is mentioned in the manual page and a shopt
  switch is added to enable and disable import-functions on the fly</changelog>
<changelog author="werner@suse.de" date="1412078401">- Make bash-4.2-extra-import-func.patch an optional patch due
  instruction</changelog>
<changelog author="werner@suse.de" date="1412164800">- Add patches
  bash-4.2-heredoc-eof-delim.patch for bsc#898812, CVE-2014-6277:
  more troubles with functions
  bash-4.2-parse-exportfunc.patch for bsc#898884, CVE-2014-6278:
  code execution after original 6271 fix</changelog>
<changelog author="werner@suse.de" date="1412251200">- Replace patch bash-4.2-CVE-2014-7187.patch with upstream patch
  level bash42-051</changelog>
<changelog author="werner@suse.de" date="1412596800">- Replace patches bash-4.2-heredoc-eof-delim.patch and
  bash-4.2-parse-exportfunc.patch with the official upstream
  patch levels bash42-052 and bash42-053</changelog>

</package>
<package pkgid="9bc07f108160d53b7f7a409e11c7b77054169a96d0ca539806e68c80b2259f42" name="bash-devel" arch="x86_64">
    <version epoch="0" ver="4.2" rel="68.4.1"/>

<changelog author="werner@suse.de" date="1342699200">- Do not mask internal _rl symbols as internal as there are many
  tools out there which uses them (gdb as an example)</changelog>
<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>

</package>
<package pkgid="e2116547f270d4b3b3d1987147a0511c80ca4d4d7b94c0bf69940d37d9186404" name="bash-devel" arch="x86_64">
    <version epoch="0" ver="4.2" rel="68.8.1"/>

<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>

</package>
<package pkgid="204a2087b09d79d751c8e39b7084595d0dad0a30c8ca2b1719ccc9335d956d2b" name="bash-doc" arch="noarch">
    <version epoch="0" ver="4.2" rel="68.12.1"/>

<changelog author="werner@suse.de" date="1357646400">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>
<changelog author="werner@suse.de" date="1412078400">- Remove and replace patches
  bash-4.2-CVE-2014-6271.patch
  bash-4.2-BSC898604.patch
  bash-4.2-CVE-2014-7169.patch
  with bash upstream patch 48, patch 49, and patch 50
- Add patch bash-4.2-extra-import-func.patch which is based on the
  BSD patch of Christos.  As further enhancements the option
  import-functions is mentioned in the manual page and a shopt
  switch is added to enable and disable import-functions on the fly</changelog>
<changelog author="werner@suse.de" date="1412078401">- Make bash-4.2-extra-import-func.patch an optional patch due
  instruction</changelog>
<changelog author="werner@suse.de" date="1412164800">- Add patches
  bash-4.2-heredoc-eof-delim.patch for bsc#898812, CVE-2014-6277:
  more troubles with functions
  bash-4.2-parse-exportfunc.patch for bsc#898884, CVE-2014-6278:
  code execution after original 6271 fix</changelog>
<changelog author="werner@suse.de" date="1412251200">- Replace patch bash-4.2-CVE-2014-7187.patch with upstream patch
  level bash42-051</changelog>
<changelog author="werner@suse.de" date="1412596800">- Replace patches bash-4.2-heredoc-eof-delim.patch and
  bash-4.2-parse-exportfunc.patch with the official upstream
  patch levels bash42-052 and bash42-053</changelog>

</package>
<package pkgid="0648b3d0c80dbef6c2a6d8d1d7a2e16458df193076c5baadceef5c3cb755c023" name="bash-doc" arch="noarch">
    <version epoch="0" ver="4.2" rel="68.4.1"/>

<changelog author="werner@suse.de" date="1342699200">- Do not mask internal _rl symbols as internal as there are many
  tools out there which uses them (gdb as an example)</changelog>
<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>

</package>
<package pkgid="b1c9cf7f081eea312482a47b033b376a0aae72b00588c6620e098c9236053223" name="bash-doc" arch="noarch">
    <version epoch="0" ver="4.2" rel="68.8.1"/>

<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>

</package>
<package pkgid="668a4495e59a8b7256476cc80935ac6766533441b2a28b335d71311943eea8db" name="bash-lang" arch="noarch">
    <version epoch="0" ver="4.2" rel="68.12.1"/>

<changelog author="werner@suse.de" date="1357646400">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>
<changelog author="werner@suse.de" date="1412078400">- Remove and replace patches
  bash-4.2-CVE-2014-6271.patch
  bash-4.2-BSC898604.patch
  bash-4.2-CVE-2014-7169.patch
  with bash upstream patch 48, patch 49, and patch 50
- Add patch bash-4.2-extra-import-func.patch which is based on the
  BSD patch of Christos.  As further enhancements the option
  import-functions is mentioned in the manual page and a shopt
  switch is added to enable and disable import-functions on the fly</changelog>
<changelog author="werner@suse.de" date="1412078401">- Make bash-4.2-extra-import-func.patch an optional patch due
  instruction</changelog>
<changelog author="werner@suse.de" date="1412164800">- Add patches
  bash-4.2-heredoc-eof-delim.patch for bsc#898812, CVE-2014-6277:
  more troubles with functions
  bash-4.2-parse-exportfunc.patch for bsc#898884, CVE-2014-6278:
  code execution after original 6271 fix</changelog>
<changelog author="werner@suse.de" date="1412251200">- Replace patch bash-4.2-CVE-2014-7187.patch with upstream patch
  level bash42-051</changelog>
<changelog author="werner@suse.de" date="1412596800">- Replace patches bash-4.2-heredoc-eof-delim.patch and
  bash-4.2-parse-exportfunc.patch with the official upstream
  patch levels bash42-052 and bash42-053</changelog>

</package>
<package pkgid="4cf0c82cdaca0b877b7a23a64ae2e2b1db6f04879c5698b3feea0372f6b0a48f" name="bash-lang" arch="noarch">
    <version epoch="0" ver="4.2" rel="68.4.1"/>

<changelog author="werner@suse.de" date="1342699200">- Do not mask internal _rl symbols as internal as there are many
  tools out there which uses them (gdb as an example)</changelog>
<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>

</package>
<package pkgid="4400037b4b09facdbad9a1ddb99fb182215f68f34b71b38f0f52debd07822e8c" name="bash-lang" arch="noarch">
    <version epoch="0" ver="4.2" rel="68.8.1"/>

<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>

</package>
<package pkgid="1de5031e8473507b728dc376f30a5fddfc1bfd4e28dc729edb082ccbb6609978" name="bash-loadables" arch="i586">
    <version epoch="0" ver="4.2" rel="68.12.1"/>

<changelog author="werner@suse.de" date="1357646400">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>
<changelog author="werner@suse.de" date="1412078400">- Remove and replace patches
  bash-4.2-CVE-2014-6271.patch
  bash-4.2-BSC898604.patch
  bash-4.2-CVE-2014-7169.patch
  with bash upstream patch 48, patch 49, and patch 50
- Add patch bash-4.2-extra-import-func.patch which is based on the
  BSD patch of Christos.  As further enhancements the option
  import-functions is mentioned in the manual page and a shopt
  switch is added to enable and disable import-functions on the fly</changelog>
<changelog author="werner@suse.de" date="1412078401">- Make bash-4.2-extra-import-func.patch an optional patch due
  instruction</changelog>
<changelog author="werner@suse.de" date="1412164800">- Add patches
  bash-4.2-heredoc-eof-delim.patch for bsc#898812, CVE-2014-6277:
  more troubles with functions
  bash-4.2-parse-exportfunc.patch for bsc#898884, CVE-2014-6278:
  code execution after original 6271 fix</changelog>
<changelog author="werner@suse.de" date="1412251200">- Replace patch bash-4.2-CVE-2014-7187.patch with upstream patch
  level bash42-051</changelog>
<changelog author="werner@suse.de" date="1412596800">- Replace patches bash-4.2-heredoc-eof-delim.patch and
  bash-4.2-parse-exportfunc.patch with the official upstream
  patch levels bash42-052 and bash42-053</changelog>

</package>
<package pkgid="2341b1abc8ed93c380eee439f3211dc192d79c1a25b0c64c097fa0b3c9479d93" name="bash-loadables" arch="i586">
    <version epoch="0" ver="4.2" rel="68.4.1"/>

<changelog author="werner@suse.de" date="1342699200">- Do not mask internal _rl symbols as internal as there are many
  tools out there which uses them (gdb as an example)</changelog>
<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>

</package>
<package pkgid="eaa249318d901d715414ce6d291461b68d8b6966d8adac8a35bf9699277d8c69" name="bash-loadables" arch="i586">
    <version epoch="0" ver="4.2" rel="68.8.1"/>

<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>

</package>
<package pkgid="901cc41791de80ba54d9bddc7278c75076ca92d769e9092cfb59a720dc59e13c" name="bash-loadables" arch="x86_64">
    <version epoch="0" ver="4.2" rel="68.12.1"/>

<changelog author="werner@suse.de" date="1357646400">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>
<changelog author="werner@suse.de" date="1412078400">- Remove and replace patches
  bash-4.2-CVE-2014-6271.patch
  bash-4.2-BSC898604.patch
  bash-4.2-CVE-2014-7169.patch
  with bash upstream patch 48, patch 49, and patch 50
- Add patch bash-4.2-extra-import-func.patch which is based on the
  BSD patch of Christos.  As further enhancements the option
  import-functions is mentioned in the manual page and a shopt
  switch is added to enable and disable import-functions on the fly</changelog>
<changelog author="werner@suse.de" date="1412078401">- Make bash-4.2-extra-import-func.patch an optional patch due
  instruction</changelog>
<changelog author="werner@suse.de" date="1412164800">- Add patches
  bash-4.2-heredoc-eof-delim.patch for bsc#898812, CVE-2014-6277:
  more troubles with functions
  bash-4.2-parse-exportfunc.patch for bsc#898884, CVE-2014-6278:
  code execution after original 6271 fix</changelog>
<changelog author="werner@suse.de" date="1412251200">- Replace patch bash-4.2-CVE-2014-7187.patch with upstream patch
  level bash42-051</changelog>
<changelog author="werner@suse.de" date="1412596800">- Replace patches bash-4.2-heredoc-eof-delim.patch and
  bash-4.2-parse-exportfunc.patch with the official upstream
  patch levels bash42-052 and bash42-053</changelog>

</package>
<package pkgid="b01a434905250a85a74c40f6e2bb12c995058fcd38d810da4847549f89f8d5f2" name="bash-loadables" arch="x86_64">
    <version epoch="0" ver="4.2" rel="68.4.1"/>

<changelog author="werner@suse.de" date="1342699200">- Do not mask internal _rl symbols as internal as there are many
  tools out there which uses them (gdb as an example)</changelog>
<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>

</package>
<package pkgid="72ffca893b00befdfc31d5859f240af1079d347c9fc042e00c9d97f5f39f436d" name="bash-loadables" arch="x86_64">
    <version epoch="0" ver="4.2" rel="68.8.1"/>

<changelog author="werner@suse.de" date="1342785600">- Update bash 4.2 to patch level 37
  * Attempting to redo (using `.') the vi editing mode `cc', `dd',
    or `yy' commands leads to an infinite loop.</changelog>
<changelog author="werner@suse.de" date="1345809600">- Add patch from upstream mailing list to avoids crash</changelog>
<changelog author="werner@suse.de" date="1350475200">- Do not mix xmalloc/xfree of libreadline and bash by making the
  libreadline version weak symbols instead of private symbols</changelog>
<changelog author="werner@suse.de" date="1352116800">- Update bash 4.2 to patch level 39
  * Official fix for the last crash fix
  * Avoid variable expansion in arithmetic expressions when
    evaluation is being suppressed</changelog>
<changelog author="werner@suse.de" date="1357646400">- Update bash 4.2 to patch level 42
  * Missing I/O errors if output redirection applied to builtin
    commands when the file descriptor was closed
  * Process substitution incorrectly inherited a flag that
    inhibited using the temporary environment for variable lookups
    if it was providing the filename to a redirection.
  * Compilation failed after specifying the `minimal config' option</changelog>
<changelog author="werner@suse.de" date="1357646401">- Do not trigger the export of COLUMNS or LINES due enforced
  checkwinsize (bnc#793536)</changelog>
<changelog author="werner@suse.de" date="1357732800">- Avoid autoconf on older products
- Apply audit patch variant to readline as well as we use a shared
  libreadline
- Avoid bash-devel on older products as older GNU make do not have
  a realpath builtin</changelog>
<changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64
- Fix check for negated warning switch</changelog>
<changelog author="werner@suse.de" date="1363348800">- Disable workaround for bnc#382214 due bnc#806628, let's see when
  the old bug will be up again.
- Update bash 4.2 to patch level 45
  * When SIGCHLD is trapped, and a SIGCHLD trap handler runs when
    a pending `read -t' invocation times out and generates SIGALRM,
    bash can crash with a segmentation fault.
  * When converting a multibyte string to a wide character string
    as part of pattern matching, bash does not handle the end of
    the string correctly, causing the search for the NUL to go
    beyond the end of the string and reference random memory.
    Depending on the contents of that memory, bash can produce
    errors or crash.
  * The &lt;&amp;n- and &gt;&amp;n- redirections, which move one file descriptor
    to another, leave the file descriptor closed when applied to
    builtins or compound commands.
- Use screen to provide a controlling terminal for running the
  test suite</changelog>
<changelog author="werner@suse.de" date="1363867200">- Add patch from upstream mailing list to speed up array handling
- Add patch from upstream mailing list to avoid fdleaks
- Use lsdiff to determine the depth of the leading slashes in a
  patch file</changelog>
<changelog author="werner@suse.de" date="1369742400">- Do not restart the sighandler after a trap is reset (bnc#820149)</changelog>
<changelog author="coolo@suse.com" date="1370347200">- add a conflict between readline5 and readline6-32bit</changelog>
<changelog author="werner@suse.de" date="1373284800">- Add bash-4.2-strcpy.patch from upstream mailing list to patch
  collection tar ball to avoid when using \w in the prompt and
  changing the directory outside of HOME the a strcpy work on
  overlapping memory areas.</changelog>
<changelog author="werner@suse.de" date="1373630400">- Reintroduce patch bash-4.2-winch.dif to solve bnc#828877
  accordingly to my test and upstream (search on bug-bash@gnu.org
  for message-id &lt;51DFEB10.8080302@case.edu&gt;)</changelog>
<changelog author="werner@suse.de" date="1395144000">- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
  Even if used only by developers to debug readline library do not
  open temporary files from public location without O_EXCL</changelog>
<changelog author="werner@suse.de" date="1396353600">- Add bash upstream patch 46 to fix a problem introduced by patch
  32 a problem with "$@" and arrays expanding empty positional
  parameters or array elements when using substring expansion,
  pattern substitution, or case modfication.  The empty parameters
  or array elements are removed instead of expanding to empty
  strings ("").
- Add readline upstream patch 5: The readline shared library
  helper script needs to be updated for Mac OS X 10.9</changelog>
<changelog author="werner@suse.de" date="1397563200">- Add bash upstream patch 47 to fix a problem where the function
  that shortens pathnames for $PS1 according to the value of
  $PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
  of memory, when it should use memmove.  The result is garbled
  pathnames in prompt strings.</changelog>
<changelog author="werner@suse.de" date="1410782400">- Add patch bash-4.2-error-getpwd.patch
  which is the backport of the corrected german error message for
  a failing getpwd (bnc#895475)</changelog>
<changelog author="werner@suse.de" date="1411041600">- Add bash-4.2-CVE-2014-6271.patch
  to fix CVE-2014-6271, the unexpected code execution with
  environment variables (bnc#896776)</changelog>
<changelog author="werner@suse.de" date="1411732800">- Add patches
  bash-4.2-BSC898604.patch for bsc#898604: functions via environment
  hardening
  bash-4.2-CVE-2014-7169.patch for bsc#898346, CVE-2014-7169:
  incremental parsing fix for function environment issue
  bash-4.2-CVE-2014-7187.patch for bsc#898603, CVE-2014-7186,
  CVE-2014-7187: bad handling of HERE documents and for loop issue</changelog>

</package>
<package pkgid="3f8c5064dfa7484528a6d2c7185286f9a778fd9979820e3a45880b4a518dc8f1" name="bcache-tools" arch="i586">
    <version epoch="0" ver="0.9" rel="2.4.1"/>

<changelog author="ro@suse.de" date="1298289600">- create package</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Update to new current snapshot
  42c182c6ab1530b5e3b18893f284da3eaec46e74 (0.1.g45)</changelog>
<changelog author="jengelh@inai.de" date="1372248000">- Move udev rules to /usr/lib/udev/rules.d</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
<changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
<changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>

</package>
<package pkgid="a99a5d2001088a8fba4cc0edcee43846d93970aab5314a4764880922c8cc35b0" name="bcache-tools" arch="src">
    <version epoch="0" ver="0.9" rel="2.4.1"/>

<changelog author="ro@suse.de" date="1298289600">- create package</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Update to new current snapshot
  42c182c6ab1530b5e3b18893f284da3eaec46e74 (0.1.g45)</changelog>
<changelog author="jengelh@inai.de" date="1372248000">- Move udev rules to /usr/lib/udev/rules.d</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
<changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
<changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>

</package>
<package pkgid="e4fa920d0e5db57e6f68d5f0139c88eb407d739bc128e6b23b919cf31e8061da" name="bcache-tools" arch="x86_64">
    <version epoch="0" ver="0.9" rel="2.4.1"/>

<changelog author="ro@suse.de" date="1298289600">- create package</changelog>
<changelog author="jengelh@inai.de" date="1361880000">- Update to new current snapshot
  42c182c6ab1530b5e3b18893f284da3eaec46e74 (0.1.g45)</changelog>
<changelog author="jengelh@inai.de" date="1372248000">- Move udev rules to /usr/lib/udev/rules.d</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
<changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
<changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>

</package>
<package pkgid="d6c808f3184ca92bc6828cc1181bb7f02c8058198069e0dec7b80e12e4f52877" name="bijiben" arch="i586">
    <version epoch="0" ver="3.10.2" rel="12.4"/>

<changelog author="dimstar@opensuse.org" date="1362571200">- Initial package, version 3.7.91.</changelog>
<changelog author="dimstar@opensuse.org" date="1364644800">- Update to version 3.8.0:
  + Updated translations.
- Changes from version 3.7.92:
  + Fixes on email sharing.
  + Fix various regressions.
  + Use consistently GPLv3+.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366286400">- Update to version 3.8.1:
  + Switch manual to CC license.
  + Updated translations.
- Change license of main package to GPL-3.0+ and CC-BY-SA-3.0,
  accomodating the new CC licensed manual. The search-provider
  sub-package is licenses GPL-3.0+ only (no documentation in this
  package).</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + Add basis for collections.
  + Initial empty state (empty results box).
  + Initial spinner.
  + Bugs fixed: bgo#697922, bgo#698028.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + Start fixing import dialog, preparing for organize dialog.
  + A first round of code cleanup.
  + Search was really awful (bgo#699656).
  + Updated translations.
- Add pkgconfig(gobject-introspection-1.0) BuildRequires:
  dependency of the imported egg-list-box module.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 3.9.3:
  + Initial ownCloud support and revisit architecture.
  + Bug fixed: bgo#701054.
  + Updated translations.
- Add pkgconfig(goa-1.0) BuildRequires: new dependency for ownCloud
  support.</changelog>
<changelog author="dimstar@opensuse.org" date="1373457600">- Update to version 3.9.4:
  + Rename Notes (bgo#702298).
  + Bugs fixed: bgo#703404, bgo#703017, bgo#702877, bgo#703474,
    bgo#702504, bgo#703497, bgo#703459, bgo#703401, bgo#703401,
    bgo#702865, bgo#703501.
  + Updated translations.
- Replace pkgconfig(zeitgeist-1.0) BuildRequires with
  pkgconfig(zeitgeist-2.0), following upstreams changes.
- Fix post scriptlet to run icon_theme_cache_post instead of
  icon_theme_cache_postun.
- Add %icon_theme_cache_post(un) for HighContrast icon theme to
  post/postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Bugs fixed: bgo#703703, bgo#704521, bgo#703706.
  + Updated translations.
- Pass --disable-update-mimedb to configure: we update the mime
  database on target system using post scriptlets.
- Add %mime_database_* scripts to post/postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Update to version 3.9.90:
  + Settings: revamp the window to add primary book choice.
  + Selection toolbar: update to newer design.
  + Bug Fixes:
  - &lt;name&gt; must match the exact repository's name.
  - Fix the import dialog icon for folders.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 3.9.91:
  + Ship appData.
  + Use native close button.
  + Update the documentation.
  + Update About Dialog.
  + Bug Fixes:
  - Fix selection toolbar buttons valign.
  - Fix the back button.
  - shell-provider: do not abort when tracker connection fails.
  - Delete bjb-icons-colors.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Add instructions to rename help page.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Bugs fixed: bgo#708458, bgo#709820, bgo#708812.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Fix segfault (rh#1026979).
  + Updated translations.</changelog>

</package>
<package pkgid="344af1c8551b7a660f44a25db27d0f031f006c6bdb9be853860edf817142d292" name="bijiben" arch="src">
    <version epoch="0" ver="3.10.2" rel="12.4"/>

<changelog author="dimstar@opensuse.org" date="1362571200">- Initial package, version 3.7.91.</changelog>
<changelog author="dimstar@opensuse.org" date="1364644800">- Update to version 3.8.0:
  + Updated translations.
- Changes from version 3.7.92:
  + Fixes on email sharing.
  + Fix various regressions.
  + Use consistently GPLv3+.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366286400">- Update to version 3.8.1:
  + Switch manual to CC license.
  + Updated translations.
- Change license of main package to GPL-3.0+ and CC-BY-SA-3.0,
  accomodating the new CC licensed manual. The search-provider
  sub-package is licenses GPL-3.0+ only (no documentation in this
  package).</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + Add basis for collections.
  + Initial empty state (empty results box).
  + Initial spinner.
  + Bugs fixed: bgo#697922, bgo#698028.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + Start fixing import dialog, preparing for organize dialog.
  + A first round of code cleanup.
  + Search was really awful (bgo#699656).
  + Updated translations.
- Add pkgconfig(gobject-introspection-1.0) BuildRequires:
  dependency of the imported egg-list-box module.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 3.9.3:
  + Initial ownCloud support and revisit architecture.
  + Bug fixed: bgo#701054.
  + Updated translations.
- Add pkgconfig(goa-1.0) BuildRequires: new dependency for ownCloud
  support.</changelog>
<changelog author="dimstar@opensuse.org" date="1373457600">- Update to version 3.9.4:
  + Rename Notes (bgo#702298).
  + Bugs fixed: bgo#703404, bgo#703017, bgo#702877, bgo#703474,
    bgo#702504, bgo#703497, bgo#703459, bgo#703401, bgo#703401,
    bgo#702865, bgo#703501.
  + Updated translations.
- Replace pkgconfig(zeitgeist-1.0) BuildRequires with
  pkgconfig(zeitgeist-2.0), following upstreams changes.
- Fix post scriptlet to run icon_theme_cache_post instead of
  icon_theme_cache_postun.
- Add %icon_theme_cache_post(un) for HighContrast icon theme to
  post/postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Bugs fixed: bgo#703703, bgo#704521, bgo#703706.
  + Updated translations.
- Pass --disable-update-mimedb to configure: we update the mime
  database on target system using post scriptlets.
- Add %mime_database_* scripts to post/postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Update to version 3.9.90:
  + Settings: revamp the window to add primary book choice.
  + Selection toolbar: update to newer design.
  + Bug Fixes:
  - &lt;name&gt; must match the exact repository's name.
  - Fix the import dialog icon for folders.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 3.9.91:
  + Ship appData.
  + Use native close button.
  + Update the documentation.
  + Update About Dialog.
  + Bug Fixes:
  - Fix selection toolbar buttons valign.
  - Fix the back button.
  - shell-provider: do not abort when tracker connection fails.
  - Delete bjb-icons-colors.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Add instructions to rename help page.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Bugs fixed: bgo#708458, bgo#709820, bgo#708812.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Fix segfault (rh#1026979).
  + Updated translations.</changelog>

</package>
<package pkgid="2a9801b61f2d8d1df1f51cf802ea4903df221be9ba846e14f754ef1822f3f22c" name="bijiben" arch="x86_64">
    <version epoch="0" ver="3.10.2" rel="12.4"/>

<changelog author="dimstar@opensuse.org" date="1362571200">- Initial package, version 3.7.91.</changelog>
<changelog author="dimstar@opensuse.org" date="1364644800">- Update to version 3.8.0:
  + Updated translations.
- Changes from version 3.7.92:
  + Fixes on email sharing.
  + Fix various regressions.
  + Use consistently GPLv3+.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366286400">- Update to version 3.8.1:
  + Switch manual to CC license.
  + Updated translations.
- Change license of main package to GPL-3.0+ and CC-BY-SA-3.0,
  accomodating the new CC licensed manual. The search-provider
  sub-package is licenses GPL-3.0+ only (no documentation in this
  package).</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + Add basis for collections.
  + Initial empty state (empty results box).
  + Initial spinner.
  + Bugs fixed: bgo#697922, bgo#698028.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + Start fixing import dialog, preparing for organize dialog.
  + A first round of code cleanup.
  + Search was really awful (bgo#699656).
  + Updated translations.
- Add pkgconfig(gobject-introspection-1.0) BuildRequires:
  dependency of the imported egg-list-box module.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 3.9.3:
  + Initial ownCloud support and revisit architecture.
  + Bug fixed: bgo#701054.
  + Updated translations.
- Add pkgconfig(goa-1.0) BuildRequires: new dependency for ownCloud
  support.</changelog>
<changelog author="dimstar@opensuse.org" date="1373457600">- Update to version 3.9.4:
  + Rename Notes (bgo#702298).
  + Bugs fixed: bgo#703404, bgo#703017, bgo#702877, bgo#703474,
    bgo#702504, bgo#703497, bgo#703459, bgo#703401, bgo#703401,
    bgo#702865, bgo#703501.
  + Updated translations.
- Replace pkgconfig(zeitgeist-1.0) BuildRequires with
  pkgconfig(zeitgeist-2.0), following upstreams changes.
- Fix post scriptlet to run icon_theme_cache_post instead of
  icon_theme_cache_postun.
- Add %icon_theme_cache_post(un) for HighContrast icon theme to
  post/postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Bugs fixed: bgo#703703, bgo#704521, bgo#703706.
  + Updated translations.
- Pass --disable-update-mimedb to configure: we update the mime
  database on target system using post scriptlets.
- Add %mime_database_* scripts to post/postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Update to version 3.9.90:
  + Settings: revamp the window to add primary book choice.
  + Selection toolbar: update to newer design.
  + Bug Fixes:
  - &lt;name&gt; must match the exact repository's name.
  - Fix the import dialog icon for folders.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 3.9.91:
  + Ship appData.
  + Use native close button.
  + Update the documentation.
  + Update About Dialog.
  + Bug Fixes:
  - Fix selection toolbar buttons valign.
  - Fix the back button.
  - shell-provider: do not abort when tracker connection fails.
  - Delete bjb-icons-colors.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Add instructions to rename help page.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Bugs fixed: bgo#708458, bgo#709820, bgo#708812.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Fix segfault (rh#1026979).
  + Updated translations.</changelog>

</package>
<package pkgid="fbdeb23a45058b23355c3d154f22c28fcb8c01c1a854491cf4671af14c098832" name="bijiben-lang" arch="noarch">
    <version epoch="0" ver="3.10.2" rel="12.4"/>

<changelog author="dimstar@opensuse.org" date="1362571200">- Initial package, version 3.7.91.</changelog>
<changelog author="dimstar@opensuse.org" date="1364644800">- Update to version 3.8.0:
  + Updated translations.
- Changes from version 3.7.92:
  + Fixes on email sharing.
  + Fix various regressions.
  + Use consistently GPLv3+.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366286400">- Update to version 3.8.1:
  + Switch manual to CC license.
  + Updated translations.
- Change license of main package to GPL-3.0+ and CC-BY-SA-3.0,
  accomodating the new CC licensed manual. The search-provider
  sub-package is licenses GPL-3.0+ only (no documentation in this
  package).</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + Add basis for collections.
  + Initial empty state (empty results box).
  + Initial spinner.
  + Bugs fixed: bgo#697922, bgo#698028.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + Start fixing import dialog, preparing for organize dialog.
  + A first round of code cleanup.
  + Search was really awful (bgo#699656).
  + Updated translations.
- Add pkgconfig(gobject-introspection-1.0) BuildRequires:
  dependency of the imported egg-list-box module.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 3.9.3:
  + Initial ownCloud support and revisit architecture.
  + Bug fixed: bgo#701054.
  + Updated translations.
- Add pkgconfig(goa-1.0) BuildRequires: new dependency for ownCloud
  support.</changelog>
<changelog author="dimstar@opensuse.org" date="1373457600">- Update to version 3.9.4:
  + Rename Notes (bgo#702298).
  + Bugs fixed: bgo#703404, bgo#703017, bgo#702877, bgo#703474,
    bgo#702504, bgo#703497, bgo#703459, bgo#703401, bgo#703401,
    bgo#702865, bgo#703501.
  + Updated translations.
- Replace pkgconfig(zeitgeist-1.0) BuildRequires with
  pkgconfig(zeitgeist-2.0), following upstreams changes.
- Fix post scriptlet to run icon_theme_cache_post instead of
  icon_theme_cache_postun.
- Add %icon_theme_cache_post(un) for HighContrast icon theme to
  post/postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Bugs fixed: bgo#703703, bgo#704521, bgo#703706.
  + Updated translations.
- Pass --disable-update-mimedb to configure: we update the mime
  database on target system using post scriptlets.
- Add %mime_database_* scripts to post/postun.</changelog>
<changelog author="dimstar@opensuse.org" date="1376913600">- Update to version 3.9.90:
  + Settings: revamp the window to add primary book choice.
  + Selection toolbar: update to newer design.
  + Bug Fixes:
  - &lt;name&gt; must match the exact repository's name.
  - Fix the import dialog icon for folders.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 3.9.91:
  + Ship appData.
  + Use native close button.
  + Update the documentation.
  + Update About Dialog.
  + Bug Fixes:
  - Fix selection toolbar buttons valign.
  - Fix the back button.
  - shell-provider: do not abort when tracker connection fails.
  - Delete bjb-icons-colors.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Add instructions to rename help page.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Bugs fixed: bgo#708458, bgo#709820, bgo#708812.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Fix segfault (rh#1026979).
  + Updated translations.</changelog>

</package>
<package pkgid="646a3d8ea93037327f02ff03732d99b9e4d2f28c7139affafdac6f5a89dd7be7" name="bind" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="6e809d3a26b22970b3e20371509a9c93ab3922abf8e54caf4d1af5b79dbaf54a" name="bind" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="18d49983bdd58979ad44ee7993e156a73d2ff3bea8a4563621148d59308161fa" name="bind" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="7afa359f76b02bc8cdfbd41dc74c68924f937104304f044ed64a311bee870e3f" name="bind" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="87a0b90f970465534ebdc1e984796794e07256f15c7d191b26b41af94f9ce36b" name="bind" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="e9713efb305c559ebe46a45bca4b4acb1df0c19347cc6fb77c56297adac5be5d" name="bind" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="0964fb45d7e3d0540ed6c76914d6830ae12c82171a69d4ce63b13563d03d7be7" name="bind" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="3827949317e6826112b060ab30b9626ccca28bcbab700152aedacb40a9fe72f8" name="bind" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="1ed45964c306cfc595fdf05b87b8c5c41fbe34987b802f3f543e941fc0681d57" name="bind" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="d2e5f42e5aea4698ef79ff0e55029cb1ccafbabccfd8cd07ca8f21545fa82764" name="bind" arch="src">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="4595a4e3111fb14679bdf62708536b2dc2daa3d980ffde1df0d056970a23812a" name="bind" arch="src">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="4eef1dd6cfda7353e3cd4ef404af17240d20b0e89b72356f2efc4c380b4c0d7b" name="bind" arch="src">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="fe7eb49b832451b169ba1efc29467f4ecba91a0507b201f971c7b81d20c6a41d" name="bind" arch="src">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="8fc68262fc0537b8e095828a847b8c0df9202304fd7af3a75e84d82e7bd62134" name="bind" arch="src">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="66f40d1d99bdfb6a467a2e6119a86ac9b3b94ea939a7bf5a74670fc44d85430e" name="bind" arch="src">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="ef2dcfa1fc282413c4401f286c2088f1c1b1e3a20454446a0d59ce0c8e374da4" name="bind" arch="src">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="5329a8d670eda9123234d9f5691c4ea9695f64e8e57e2c3bebbe00209121ba28" name="bind" arch="src">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="bd3b3db5f56db72fae089d7331d3f5c01e05b31344c519b225c287d67af6886b" name="bind" arch="src">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="2b77118048eefed778ccc4ead76c356f37e2c2df898926c5833a1b97911ef9b8" name="bind" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="b1ed27273737094c73690cf8588223b827f5ba32de0eb5c764e8e33c998ca668" name="bind" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="dd0002566d84841ef88528d42f5ec02c7a08f9f78f7f9188ad5a0dbabc3451cf" name="bind" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="ca9544cf1a75adb94b7a4f30704e997f3c8c101e2788765d58b0d942ede695ae" name="bind" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="d41c148e72119f73b950a7f4ebc8ea00172ff5740825a41548db2402d17ac99c" name="bind" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="07aec2b319b8f97ca383828f8abcd4daae702c8c19ee06f3e45b862f18ca0f64" name="bind" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="8dbaeab84d0664a883d721239e235a144b1d1e172c04ca45d88d5b8fd7a3db11" name="bind" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="fd2fb8df043398d2685ed1e7d724a500891f627c030938aa1a04e81897781205" name="bind" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="d9494a7bc1e8c56f6ff459c414ce844d0a1b01ca5fc0c23eb194e946663592e7" name="bind" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="60bab2a629f60a0d49684acc44337a0d9bebc4d0d1acc3123331e0dbbd2ec39d" name="bind-chrootenv" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="9222276254a527cc570ea6ba239dca80332bad8ddbe5eeff170a75d161f6caf4" name="bind-chrootenv" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="8273b5bf0d6c557c24a2a0a84730a4888d36a163169b30bae63065390e6cb370" name="bind-chrootenv" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="7baffc15925b836b927c6523be9587ddeb43f456e5cda16b6129f9646c2f06d0" name="bind-chrootenv" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="b09e2c797d467b80e9818afb2e1e74799c2ef107990849d0c0a6af4dd78244c9" name="bind-chrootenv" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="188b7c677968eade54cde2e16f2354ee5ef14a1cb1f07f0f5cc63daf69d4aa99" name="bind-chrootenv" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="4517a27608323dd3af14ac385711236d3413bb4e37d4ad750195563ae03db44d" name="bind-chrootenv" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="e18c2f35c6a1848b1559132219c678f42bb140e973bc4081375933e0c37933dc" name="bind-chrootenv" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="a24b4480ffb5d8d79bd21100364e2193a97d377728850d085d895092e3f573bc" name="bind-chrootenv" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="7fcaa6cb99346126185d7166d917d9d0e45c6dc6edbc1dbdef0273afe01008c3" name="bind-chrootenv" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="4816c9458ecdbbdeacf20a034663f2a121ea6c9466bcd6246ecc5be4c00c60e9" name="bind-chrootenv" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="b537763a52bf2e65ffddf2f47bf51f0385742b7aadd5cd8b4b44a5c182dc1569" name="bind-chrootenv" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="831e8f8f845dc8e67a8921ddb3251ca067e97f08a98041e0e129ec7c92fef48a" name="bind-chrootenv" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="7e57b306de118751d85f0588b53b9e9526f6f4ff73416d8a1cef03b59145f265" name="bind-chrootenv" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="db1beff7b2539629a69f1e4b4f7003d015883901b6055de15d08334886d23e65" name="bind-chrootenv" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="9a7deef1f5aa0eafff55b24802aaeed1a4e8ffec4143b93f15e535060de85a25" name="bind-chrootenv" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="9b30748e98a24755fcaed0f5318f6eb36c7ad5bf65b9a2b1a1d48410eda8d5ae" name="bind-chrootenv" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="2d3372e659d38447f35ec46a3c80709b857338fdfa081fecc8f6c04b33c96575" name="bind-chrootenv" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="5845a3deb5d78ecd6a20adc75979efacc600de03435608a26b63399233ebcac1" name="bind-devel" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="b83e10d10829b219f87381087d1de5c762ec921de0052b2362e6562a9d8655e4" name="bind-devel" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="50c5347069e9b5cbe358599800797dd359b78cefe722af2c7a29a8768d689095" name="bind-devel" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="49bfacf36e7727314c2520eb9818e01ff242f4b85ee56fc07fa8cd51897365fa" name="bind-devel" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="f2b979881113c1d29ecd96fd297292e41051b0c6ae357032b8180662e367bdeb" name="bind-devel" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="dbd1f7ced8b1e795a154a00deeefe49037cfcf63fae0924d43d2c445bce1be5c" name="bind-devel" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="76765491a41642380ffc697cca9d9bf31de26a8c6ac72afe5888f6331bf373ca" name="bind-devel" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="8c8e39521705d59cb649808ce689e720b124b742fc4312120c441800da54e2dc" name="bind-devel" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="bf0894d19ba6810a89d40f28477879b944b05e46cbe2dbb527fc68d374ee3e14" name="bind-devel" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="7ba8f8292302649ea020de68d49de57f23faf72289d3ca45f5216c557f089cd7" name="bind-devel" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="e9b3203bf42138f74e1ee264abed9e0d515d9f4270411d14eed033e0ab99c768" name="bind-devel" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="0bf1e02905fd8b191701b66216bc65afee71c3706db0be85a54184a0fbb7c324" name="bind-devel" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="144471d7762a84bcfaeee07aaee0a12dc03654ddd7560fa5b90bef3827acc763" name="bind-devel" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="33487c8fb9d8c9444a8cf85b422c7aadb552028275c7eee90aadaf1ec383e067" name="bind-devel" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="30c9a8f6df7e9a2a485d031082698a00ac561321704bf206dffeafc5dc0af85f" name="bind-devel" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="05e0102a8d346957cb823326bb1698665e22364955e3ac2612dccab74290651f" name="bind-devel" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="343f7ced1eaefb10a6230c857e8e4eeae3cc54ca26790bebe0edd4813b27443a" name="bind-devel" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="e2c4d777b65e7e2ad761086a17b42a4353051d3fe56b5f7d0aa41d1c18de6ffb" name="bind-devel" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="f704dea225f382634faa2d5f57bbaad757fd7a858f781188c22e638250818646" name="bind-doc" arch="noarch">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="43f3d86304909621b5f9fcc713be62ae8fc383bef06415602969598f18416582" name="bind-doc" arch="noarch">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="23c79fb11f981665405d947c2843031961de2a78945d55e24e6f1baf21beb1af" name="bind-doc" arch="noarch">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="f12be6a83631fb083466d9f03c0e151cedc897bddc63922a41157c34659f92b9" name="bind-doc" arch="noarch">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="df1d640eda2aa072ba620892703d39e989279b997de4f6c8592bbcb9eb06b07b" name="bind-doc" arch="noarch">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="442f8281ce3bdb08be4275533d491b0b681ecb9a411d287b65cc17553be90fbd" name="bind-doc" arch="noarch">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="30899b648f9d21e0c2b18b9abef8a30c9480628c904871bd8081baec25aa6376" name="bind-doc" arch="noarch">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="e493fa053376f9145241c62179fa2b053308dea5eb9b968b7633d7f11979ef8f" name="bind-doc" arch="noarch">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="a0fce8ed08431fde8d758041c1ca1a941b3b1e581ef248b0ae38a9b13d714177" name="bind-doc" arch="noarch">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="fd3dc800590b55facbc1904fdedb5c76ec70693cfe494469240a2ce084a6b701" name="bind-libs" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="2e97955dc2b9c520e0f56b88cb0997939a27b2fc3f32eadf874e565e8fe7c2d6" name="bind-libs" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="0cfc0571a5dd05445b292b45403055e90e43da29ce69ee5ea5a9cda2b6f02e5f" name="bind-libs" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="f5ce84d587a40da00bc36760b3aed692d4fcc8abe33b8c1de22cbe7a0d5e7578" name="bind-libs" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="d96f32f29c815f0c82fe8b72e958bbb65d0485933f0923fd7fc1dec9358649d5" name="bind-libs" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="7eebcceab8caa3a9e4dda13bdbe482368861e23746946098806a019d4a6b4b08" name="bind-libs" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="936fb1b190ee50540b0ec518576751d445d5458db46104d173849d546e10cf89" name="bind-libs" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="a836bf12dcaaebeadf6bb4ea78b1eb0c615f46c84dbadeae308b614f4bd99706" name="bind-libs" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="7aa0650cbb87aa0e1a46cd17cecc8e66ce49ce2c8037d3d280a2d529cbaf92d8" name="bind-libs" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="ebb8a2e9f14cbae0aee3decd9667c8ff5288bc34cec0882f9372c015383180d5" name="bind-libs" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="57cd81717f30fb2c05f89d545d3c6e50b6db69e513ef7d832c61f45e3fa7f154" name="bind-libs" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="37b59eaf32528877e1f941e8c9db3af828aa4aa246fb0c304cd779fbb70812a5" name="bind-libs" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="21a773d9d36ce89ae77413e7be61c386ba6a7d840c870681785e4e73486d06c6" name="bind-libs" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="c88aea8a06bb352f58435738b9c0d121ddd782a3c995603edbaeb391687e10c8" name="bind-libs" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="cb9571a4e97dd7808d799ec0f3d9132daf17a61874517eaa2b55f8b90d384ab1" name="bind-libs" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="52eabb6257e7dbb91257803cb36ef3801ead885c34f8e68d5045375e78bf6f2a" name="bind-libs" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="e03e85c8c4100eff0d00cedcb31f63b0d818e370fe45fe2a534c8a846a1242af" name="bind-libs" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="95f62488b85b523fe82e39ae60c0698977d884bba7e0330efed52bf4e2b63af3" name="bind-libs" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="b770aa3c9d15dd4b90ed2a5f5fe06a19fa489d62fe190c4ef4f145e7677cf5f2" name="bind-libs-32bit" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="91b39f0653942112e5e964134e0e3f41730946c5c54200cc32dae705e8550a12" name="bind-libs-32bit" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="0325e9ad8de3caeba00c9bb9a32dcbc734701c16a395282a6a3da0b52cd160e6" name="bind-libs-32bit" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="5fc427736a1949829c70d6a07657b31f1141db5442f78d0ce1153d49f0ccbeb2" name="bind-libs-32bit" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="0c0846f70eee12728aa380b63bc1064ec9ba0169d7eda1dead069616e057017d" name="bind-libs-32bit" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="47fb36c0684fd7dafeb73ec80b5436a82574c3399fc1b6f12c729ba8b99f5e91" name="bind-libs-32bit" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="344351ca1fbc14b556e6e6afaf0de8e7555c665fb12fd58d8fcef3627e77dbe7" name="bind-libs-32bit" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="38da0c4ad607242a71d121014be22970c894c29c6df4990a5108ece4e7a41f2f" name="bind-libs-32bit" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="9fb481c081c46c01136aabae435317bc6b9efb9cdba3f1e3120011527b4b8601" name="bind-libs-32bit" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="d27d1f15332ada14ee9b5b9d88aceb71d5425ae1f9d4c581096ddf0e4ad3957d" name="bind-lwresd" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="7f30d92d6c59fcec2a12abe03adbc2a00ea96d5a62e060a2b257ff266c0ba5a0" name="bind-lwresd" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="ca565ebece8c0ce135927ea6b56fd72891600ac671095ebb591ebbbc6fb0f53c" name="bind-lwresd" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="dc45837566b188eccdb04cb4192274a46e62fd567cd7938be46a23870480abd7" name="bind-lwresd" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="8a9725fe9617f8a139d5691761f48f2cfc6154a7b18963e4e7f1dad4d070a73c" name="bind-lwresd" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="218c976b04f2220b38a602b37c1294d8bda999797d765c031f2c23ff2dbb7b1f" name="bind-lwresd" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="ccff056daa3cd6dc406daa505bef41c4c298cd72a51a5c6f36aacf83e2a98793" name="bind-lwresd" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="98b200316d96593454b31380cfcedd1515bde3e975b608c337d14364bdd9b318" name="bind-lwresd" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="c25fba711f1e77a9a6bd5be290d2558278e020d8bada934d7dbfe6364a0388fe" name="bind-lwresd" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="cd1d47aee7e9e4009709755d6e6a12c1a4893a9f16d938edb32a6829f53cc281" name="bind-lwresd" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="ee9887a0984e729ca1d464a6971f5559d3459f6b84979b7633cc211fca041932" name="bind-lwresd" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="17863a33a16a4e4caf22c092328fa921c7f8b38c62592d1488262d6c5824a42f" name="bind-lwresd" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="d52b9cc1b3e357d64682276a40266b478c45fb398f86d7fba4b6c785c30cf50a" name="bind-lwresd" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="955270d4efc761f7fd68bb6938408804bb84be5a0e1b138ab27a21c6aaaaa373" name="bind-lwresd" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="279458eb729ec5eb3fdcf98a5372befe112e5afae8088c25d0c1c3bf296dcedb" name="bind-lwresd" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="64a6d30340e9e3bac8c3224ac0c9578b7bfc7d38da582282000dc041b9c82d1b" name="bind-lwresd" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="bdf340ebcee48519368b372e38b0afebc0519629f2441155cd38fad383de5511" name="bind-lwresd" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="0d913d7abdbbe1f6b8e0cc008f0cad4339d8fde2725f359e5b50bec2be5f323c" name="bind-lwresd" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="62fb68af92e334833fafc8e76e6b0818edb3c59d79438b135e7280a101ed17e7" name="bind-utils" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="6598fc5ce3315b585d6b03efc278c72c527e93662a93759e9105d03a5f5f2541" name="bind-utils" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="dfe126ed9df8a5ff68a2e4320ff0b87f578c7820e0a1cb89153ca3cfa683de6a" name="bind-utils" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="a0d08145eedf3cb67aeb0f642faef645336385d5f77d21e0465ef76b43da62f8" name="bind-utils" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="cfa010481cd7289581e4defd4fddd3cc1ee18dfd649762de3dc002252d4448cb" name="bind-utils" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="18cbf069bba40edfec29109efc057adf6b44303fb4676699f94bf75cd3c8d1cc" name="bind-utils" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="88d55f7d957bfab2641b22cd23bd57b8ad32650e3d49f7e69dc12fbc3bc82229" name="bind-utils" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="23e5fa1eed1a09269cf4ffff0dc2cb2d06c4655d4835e3ade7d1aae6d6b3c447" name="bind-utils" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="2bbfb71ac196292dfe02908f6c48fe34b9bc6321cef3a04af22f5563ab3546b1" name="bind-utils" arch="i586">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="589cc544d4491154308873a39e476fef998775bcb8959fc83ee7fccae65e7744" name="bind-utils" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.11.1"/>

<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>

</package>
<package pkgid="9ddf91d625a5a8b34966ae469b22f06ab9142f7b4ee6c2334287590696e41e33" name="bind-utils" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.14.1"/>

<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>

</package>
<package pkgid="d9375154ceca92089f1b3d3843183d2a886f1956039748aaae603ad8ca493421" name="bind-utils" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.17.1"/>

<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>

</package>
<package pkgid="9eaf69018281d459ea382cf1cb3acefc238231fd84340695c67d8ff0dac3a3fe" name="bind-utils" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.20.1"/>

<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>

</package>
<package pkgid="d79fc48fc5c82f33b4c8301ef4265ba4b952928b645d34dcff94366dc45653ce" name="bind-utils" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.23.1"/>

<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>

</package>
<package pkgid="4f38f007cdd6b96301ce6f68fee54aa1e105f44de7b743ef71be580aee31c92e" name="bind-utils" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.26.2"/>

<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="664084465e18eb7cc9277e462332af2966afc47f04e1a5e6a44078037b050a6d" name="bind-utils" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.29.1"/>

<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>
<changelog author="max@suse.com" date="1436356800">- A problem with trust anchor management can cause named to crash
  (CVE-2015-1349, bsc#918330)
- Fix resolver crash when validating (CVE-2015-4620, bsc#936476).
- Make sure %version and %pkg_vers are in sync (bnc#937028).</changelog>
<changelog author="max@suse.com" date="1437998400">- Fix DoS against authoritative and recursive servers.
  bnc#939567, CVE-2015-5477</changelog>
<changelog author="max@suse.com" date="1442232000">- Fix DoS against servers performing validation on DNSSEC-signed
  records (CVE-2015-5722, bsc#944066).</changelog>
<changelog author="max@suse.com" date="1450267200">- Fix remote denial of service by misparsing incoming responses
  (CVE-2015-8000, bsc#958861).</changelog>
<changelog author="max@suse.com" date="1453291200">- Fix Specific APL data could trigger an INSIST
  (CVE-2015-8704, bsc#962189).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1457697600">- bind-CVE-2016-1285-1286.patch:
  * remote DoS via malformed data over control channel
    (CVE-2016-1285 bsc#970072)
  * remote DoS via malformed DNAME record
    (CVE-2016-1286 bsc#970073)</changelog>

</package>
<package pkgid="1e3949a4fdc90c275da4ff4d59145d7d4c742ccac02cfe65bc7c3a73913daabb" name="bind-utils" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.4.1"/>

<changelog author="ug@suse.de" date="1336651200">- added patch to fix an assertion failure</changelog>
<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>

</package>
<package pkgid="f3a544f9df74bfabf13a2070f377fddf394327a127d0317193436a26b47fb4ae" name="bind-utils" arch="x86_64">
    <version epoch="0" ver="9.9.4P2" rel="2.8.1"/>

<changelog author="ug@suse.de" date="1337688000">- this version has no new features but only bugfixes
- Addresses a race condition that can cause named to to crash when
  the masters list for a zone is updated via rndc reload/reconfig
- Fixes a race condition in zone.c that can cause named to crash
  during the processing of rndc delzone
- Prevents a named segfault from resolver.c due to procedure
  fctx_finddone() not being thread-safe
- SDB now handles unexpected errors from back-end database drivers
  gracefully instead of exiting on an assert.
- Prevents named crashes as a result of dereferencing a NULL pointer
  in zmgr_start_xfrin_ifquota if the zone was being removed while
  there were zone transfers still pending
- Corrects a parser bug that could cause named to crash while
  reading a malformed zone file
- many more smaller fixes
- version 9.9.1</changelog>
<changelog author="ug@suse.de" date="1338811200">- VUL-0: bind remote DoS via zero length rdata field
  CVE-2012-1667
  bnc#765315
- 9.9.1-P1</changelog>
<changelog author="ug@suse.de" date="1338897600">- updated dnszone-schema.txt</changelog>
<changelog author="cfarrell@suse.com" date="1342094400">- license update: ISC
  ISC is generally seen as the correct license for bind</changelog>
<changelog author="ug@suse.de" date="1343304000">- Prevents a named assert (crash) when validating caused by using
  "Bad cache" data before it has been initialized.  [RT #30025]
  (bnc#772945)
- ISC_QUEUE handling for recursive clients was updated to address a
  race condition that could cause a memory leak.  This rarely occurred
  with UDP clients, but could be a significant problem for a server
  handling a steady rate of TCP queries.  [RT #29539 &amp; #30233]
- Under heavy incoming TCP query loads named could experience a
  memory leak which could lead to significant reductions in query
  response or cause the server to be terminated on systems with
  "out of memory" killers. [RT #29539]
  (bnc#772946)
- A condition has been corrected where improper handling of zero-length
  RDATA could cause undesirable behavior, including termination of
  the named process.  [RT #29644]
- 9.9.1-P2</changelog>
<changelog author="meissner@suse.com" date="1347710400">- Named could die on specially crafted record.
  [RT #30416] (bnc#780157) CVE-2012-4244
- 9.9.1-P3
- updated dnszone-schema.txt from upstream.</changelog>
<changelog author="meissner@suse.com" date="1350648000">- Specially crafted DNS data can cause a lockup in named.
  CVE-2012-5166, bnc#784602.
- 9.9.1-P4</changelog>
<changelog author="meissner@suse.com" date="1352894400">- updated to 9.9.2
  https://kb.isc.org/article/AA-00798
  Security:
  * A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
  * Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
  * Prevents a named assert (crash) when validating caused by using "Bad
    cache" data before it has been initialized. [CVE-2012-3817]  [RT #30025]
  * A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of the
    named process. [CVE-2012-1667]  [RT #29644]
  * ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
  * Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
  * Introduces a new tool "dnssec-checkds" command that checks a zone
    to determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a python
    interpreter.)  [RT #28099]
  * Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
  * Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that can
    be used to specify the maximum rsa exponent size that will be accepted
    when validating [RT #29228]
  Feature Changes
  * Improves OpenSSL error logging [RT #29932]
  * nslookup now returns a nonzero exit code when it is unable to get an answer.  [RT #29492]
  Lots of bugfixes.
- unfuzzed patches:
  perl-path.diff
  pie_compile.diff
  workaround-compile-problem.diff</changelog>
<changelog author="meissner@suse.com" date="1353240000">- added a ratelimiting (draft RFC) patch from Paul Vixie.
  see http://www.redbarn.org/dns/ratelimits
  suggested by Stefan Schaefer &lt;stefan@invis-server.org&gt;</changelog>
<changelog author="meissner@suse.com" date="1354795200">- Updated to 9.9.2-P1 (bnc#792926)
  https://kb.isc.org/article/AA-00828
  * Security Fixes
    Prevents named from aborting with a require assertion failure on
    servers with DNS64 enabled.  These crashes might occur as a result of
    specific queries that are received.  (Note that this fix is a subset
    of a series of updates that will be included in full in BIND 9.8.5
    and 9.9.3 as change #3388, RT #30996).  [CVE-2012-5688] [RT #30792]
    A deliberately constructed combination of records could cause
    named to hang while populating the additional section of a
    response. [CVE-2012-5166] [RT #31090]
    Prevents a named assert (crash) when queried for a record whose
    RDATA exceeds 65535 bytes.  [CVE-2012-4244]  [RT #30416]
    Prevents a named assert (crash) when validating caused by using
    "Bad cache" data before it has been initialized. [CVE-2012-3817]
    [RT #30025]
    A condition has been corrected where improper handling of zero-length
    RDATA could cause undesirable behavior, including termination of
    the named process. [CVE-2012-1667]  [RT #29644]
    ISC_QUEUE handling for recursive clients was updated to address a race
    condition that could cause a memory leak. This rarely occurred with
    UDP clients, but could be a significant problem for a server handling
    a steady rate of TCP queries. [CVE-2012-3868]  [RT #29539 &amp; #30233]
  New Features
    Elliptic Curve Digital Signature Algorithm keys and signatures in
    DNSSEC are now supported per RFC 6605. [RT #21918]
    Introduces a new tool "dnssec-checkds" command that checks a zone to
    determine which DS records should be published in the parent zone,
    or which DLV records should be published in a DLV zone, and queries
    the DNS to ensure that it exists. (Note: This tool depends on python;
    it will not be built or installed on systems that do not have a
    python interpreter.)  [RT #28099]
    Introduces a new tool "dnssec-verify" that validates a signed zone,
    checking for the correctness of signatures and NSEC/NSEC3 chains.
    [RT #23673]
    Adds configuration option "max-rsa-exponent-size &lt;value&gt;;" that
    can be used to specify the maximum rsa exponent size that will be
    accepted when validating [RT #29228]
  Feature Changes
    Improves OpenSSL error logging [RT #29932]
    nslookup now returns a nonzero exit code when it is unable to get
    an answer.  [RT #29492]
  Bug Fixes
    Uses binary mode to open raw files on Windows.  [RT #30944]
    When using DNSSEC inline signing with "rndc signing -nsec3param", a
    salt value of "-" can now be used to indicate 'no salt'.  [RT #30099]
    Prevents race conditions (address use after free) that could be
    encountered when named is shutting down and releasing structures
    used to manage recursive clients.  [RT #30241]
    Static-stub zones now accept "forward" and "fowarders" options
    (often needed for subdomains of the zone referenced to override
    global forwarding options).  These options are already available
    with traditional stub zones and their omission from zones of type
    "static-stub" was an inadvertent oversight. [RT #30482]
    Limits the TTL of signed RRsets in cache when their RRSIGs are
    approaching expiry. This prevents the persistence in cache of
    invalid RRSIGs in order to assist recovery from a situation where
    zone re-signing doesn't occur in a timely manner.   With this change,
    named will attempt to obtain new RRSIGs from the authoritative server
    once the original ones have expired, and even if the TTL of the old
    records would in other circumstances cause them to be kept in cache
    for longer.  [RT #26429]
    Corrects the syntax of isc_atomic_xadd() and isc_atomic_cmpxchg()
    which are employed on Itanium systems to speed up lock management
    by making use of atomic operations.  Without the syntax correction
    it is possible that concurrent access to the same structures could
    accidentally occur with unpredictable results.  [RT #25181]
    Improves OpenSSL error logging [RT #29932]
    The configure script now supports and detects libxml2-2.8.x correctly
    [RT #30440]
    The host command should no longer assert on some architectures
    and builds while handling the time values used with the -w (wait
    forever) option.  [RT #18723]
    Invalid zero settings for max-retry-time, min-retry-time,
    max-refresh-time, min-refresh-time will now be detected during parsing
    of named.conf and an error emitted instead of triggering an assertion
    failure on startup.  [RT #27730]
    Removes spurious newlines from log messages in zone.c [RT #30675]
    When built with readline support (i.e. on a system with readline
    installed) nsupdate no longer terminates unexpectedly in interactive
    mode. [RT #29550]
    All named tasks that perform task-exclusive operations now share the
    same single task.  Prior to this change, there was the possibility of
    a race condition between rndc operations and other functions such as
    re-sizing the adb hash table.  If the race condition was encountered,
    named would in most cases terminate unexpectedly with an assert.
    [RT #29872]
    Ensures that servers are expired from the ADB cache when the timeout
    limit is reached so that their learned attributes can be refreshed.
    Prior to this change, servers that were frequently queried might
    never have their entries removed and reinitialized.  This is of
    particular importance to DNSSEC-validating recursive servers that
    might erroneously set "no-edns" for an authoritative server following
    a period of intermittent connectivity. [RT #29856]
    Adds additional resilience to a previous security change (3218) by
    preventing RRSIG data from being added to cache when a pseudo-record
    matching the covering type and proving non-existence exists at a
    higher trust level. The earlier change prevented this inconsistent
    data from being retrieved from cache in response to client queries  -
    with this additional change, the RRSIG records are no longer inserted
    into cache at all. [RT #26809]
    dnssec-settime will now issue a warning when the writing of a new
    private key file would cause a change in the permissions of the
    existing file. [RT #27724]
    Fixes the defect introduced by change #3314 that was causing failures
    when saving stub zones to disk (resulting in excessive CPU usage in
    some cases).  [RT #29952]
    Address race condition in units tests: asyncload_zone and
    asyncload_zt. [RT #26100]
    It is now possible to using multiple control keys again - this
    functionality was inadvertently broken by change #3924 (RT #28265)
    which addressed a memory leak. [RT #29694]
    Named now holds a zone table reference while performing an
    asynchronous load of a zone.  This removes a race condition that
    could cause named to crash when zones are added using rndc addzone
    or by manually editing named's configuration file followed by rndc
    reconfig/reload. [RT #28326]
    Setting resolver-query-timeout too low could cause named problems
    recovering after a loss of connectivity.  [RT #29623]
    Reduces the potential build-up of stale RRsets in cache on a busy
    recursive nameserver by re-using cached DS and RRSIG rrsets when
    possible [RT #29446]
    Corrects a failure to authenticate non-existence of resource records
    in some circumstances when RPZ has been configured.  Also:
    adds an optional "recursive-only yes|no" to the response-policy
    statement
    adds an optional "max-policy-ttl" to the response-policy statement
    to limit the false data that "recursive-only no" can introduce
    into resolvers' caches
    introduces a predefined encoding of PASSTHRU policy by adding
    "rpz-passthru" to be used as the target of CNAME policy records
    (the old encoding is still accepted.)
    adds a RPZ performance test to bin/tests/system/rpz when queryperf is available.  [RT #26172]
    Upper-case/lower-case handling of RRSIG signer-names is now handled
    consistently: RRSIG records are generated with the signer-name in
    lower case. They are accepted with any case, but if they fail to
    validate, we try again in lower case. [RT #27451]</changelog>
<changelog author="meissner@suse.com" date="1364385600">- Updated to 9.9.2-P2 (bnc#811876)
  Fix for: https://kb.isc.org/article/AA-00871 CVE-2013-2266
  * Security Fixes
    Removed the check for regex.h in configure in order to disable regex
    syntax checking, as it exposes BIND to a critical flaw in libregex
    on some platforms. [RT #32688]
- added gpg key source verification</changelog>
<changelog author="schwab@suse.de" date="1368014400">- Use updated config.guess/sub in the embedded idnkit sources</changelog>
<changelog author="meissner@suse.com" date="1372075200">- Updated to 9.9.3-P1
  Various bugfixes and some feature fixes. (see CHANGES files)
  Security and maintenance issues:
  - [security]	Caching data from an incompletely signed zone could
  trigger an assertion failure in resolver.c [RT #33690]
  - [security]	Support NAPTR regular expression validation on
  all platforms without using libregex, which
  can be vulnerable to memory exhaustion attack
  (CVE-2013-2266). [RT #32688]
  - [security]	RPZ rules to generate A records (but not AAAA records)
  could trigger an assertion failure when used in
  conjunction with DNS64 (CVE-2012-5689). [RT #32141]
  - [bug]		Fixed several Coverity warnings.
  Note: This change includes a fix for a bug that
  was subsequently determined to be an exploitable
  security vulnerability, CVE-2012-5688: named could
  die on specific queries with dns64 enabled.
  [RT #30996]
  - [maint]		Added AAAA for D.ROOT-SERVERS.NET.
  - [maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.
- Updated to current rate limiting + rpz patch from
  http://ss.vix.su/~vjs/rrlrpz.html
- moved dnssec-* helpers to bind-utils package. bnc#813911</changelog>
<changelog author="mls@suse.de" date="1374062400">- the README file is not a directory, drop the dir attribute</changelog>
<changelog author="max@suse.com" date="1374667200">- Remove non-working apparmor profiles (bnc#740327).</changelog>
<changelog author="max@suse.com" date="1375704000">- Update to 9.9.3P2 fixes CVE-2013-4854, bnc#831899.
  * Incorrect bounds checking on private type 'keydata' can lead
    to a remotely triggerable REQUIRE failure.</changelog>
<changelog author="max@suse.com" date="1375790400">- Improve pie_compile.diff (bnc#828874).
- dnssec-checkds and dnssec-coverage need python-base.
- disable rpath in libtool.</changelog>
<changelog author="max@suse.com" date="1375876800">- Systemd doesn't set $TERM, and hence breaks tput (bnc#823175).</changelog>
<changelog author="max@suse.com" date="1390305600">- Update to version 9.9.4P2
  * Fixes named crash when handling malformed NSEC3-signed zones
    (CVE-2014-0591, bnc#858639)
  * Obsoletes workaround-compile-problem.diff
- Replace rpz2+rl-9.9.3-P1.patch by rpz2-9.9.4.patch, rl is now
  supported upstream (--enable-rrl).</changelog>
<changelog author="max@suse.com" date="1392120000">- Fix generation of /etc/named.conf.include
  (bnc#828678, bnc#848777, bnc#814978).</changelog>

</package>
<package pkgid="99dddc1a1d7665bf8832726c2d200d097aee736c989b0f4190778af2776e663b" name="biosdevname" arch="i586">
    <version epoch="0" ver="0.4.1" rel="6.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1304164800">- fix build with gcc 4.6, wrong linker options</changelog>
<changelog author="duwe@suse.de" date="1308225600">- update to 0.3.8, disable rule by default (FATE#312154)
- remove now obsolete patches biosdevname-delete-unused-function.diff,
  biosdevname-policy-all_names.diff and
  biosdevname-0.2.4-wronglinking.patch.</changelog>
<changelog author="duwe@novell.com" date="1310040000">- fix bnc#704182</changelog>
<changelog author="duwe@novell.com" date="1311076800">- version 0.3.8 contains unconditional asm inline, making it
  x86-only (bnc#706622)</changelog>
<changelog author="duwe@novell.com" date="1312200000">- pull patch to restrict SMBIOS version and to disable PIRQ usage
  from upstream.
- use the above to fix bnc#705162</changelog>
<changelog author="duwe@novell.com" date="1312372800">- Enable on all Dell machines (bnc#705109)</changelog>
<changelog author="duwe@suse.com" date="1315396800">- Verify length of VPD on network device (bnc#711172)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="duwe@suse.com" date="1316779200">- fix bnc#706505</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="aj@suse.de" date="1324468800">- Fix download URL.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless automake dependecy</changelog>
<changelog author="p.drouand@gmail.com" date="1354536000">- Update to 0.4.1 version:
  * Use addslot() to track both embedded and physical index per slot
  * Add fixes to ignore NPAR parsing on some cards
- Removed patchs: more-cmdline-args, verify-network-VPD, bug-706505
  fixed on upstream releases bnc#706505</changelog>
<changelog author="idonmez@suse.com" date="1366632000">- Use correct directory for udev rules</changelog>
<changelog author="ohering@suse.de" date="1373630400">- Update mkinitrd helper to look for rules in /lib and /usr/lib (bnc#820216)</changelog>
<changelog author="olaf@aepfle.de" date="1425297600">- Remove eth* check, devices might have been renamed already (bnc#869614)
  Add biosdevname_udevrule_rename_all_network_devices.patch</changelog>

</package>
<package pkgid="3f7c481fcd99f104a616ccce554d63c3532736455a3269fe07c95ca7903de675" name="biosdevname" arch="src">
    <version epoch="0" ver="0.4.1" rel="6.4.1"/>

<changelog author="bwalle@suse.de" date="1190462400">- update to 0.2.4
  o coordinate udev rules usage with udev maintainer
  o fix crashes in pcmcia search, in_ethernet(), and incorrect
    command line parsing.</changelog>
<changelog author="bwalle@suse.de" date="1217505600">- integrate biosdevname to initrd (bnc#403269,  FATE#301528)</changelog>
<changelog author="bwalle@suse.de" date="1223553600">- Delete unused function onboard_device_type() (bnc#433795).</changelog>
<changelog author="bwalle@suse.de" date="1227528000">- Change to --policy=all_names (bnc#441079).</changelog>
<changelog author="crrodriguez@opensuse.org" date="1304164800">- fix build with gcc 4.6, wrong linker options</changelog>
<changelog author="duwe@suse.de" date="1308225600">- update to 0.3.8, disable rule by default (FATE#312154)
- remove now obsolete patches biosdevname-delete-unused-function.diff,
  biosdevname-policy-all_names.diff and
  biosdevname-0.2.4-wronglinking.patch.</changelog>
<changelog author="duwe@novell.com" date="1310040000">- fix bnc#704182</changelog>
<changelog author="duwe@novell.com" date="1311076800">- version 0.3.8 contains unconditional asm inline, making it
  x86-only (bnc#706622)</changelog>
<changelog author="duwe@novell.com" date="1312200000">- pull patch to restrict SMBIOS version and to disable PIRQ usage
  from upstream.
- use the above to fix bnc#705162</changelog>
<changelog author="duwe@novell.com" date="1312372800">- Enable on all Dell machines (bnc#705109)</changelog>
<changelog author="duwe@suse.com" date="1315396800">- Verify length of VPD on network device (bnc#711172)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="duwe@suse.com" date="1316779200">- fix bnc#706505</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="aj@suse.de" date="1324468800">- Fix download URL.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless automake dependecy</changelog>
<changelog author="p.drouand@gmail.com" date="1354536000">- Update to 0.4.1 version:
  * Use addslot() to track both embedded and physical index per slot
  * Add fixes to ignore NPAR parsing on some cards
- Removed patchs: more-cmdline-args, verify-network-VPD, bug-706505
  fixed on upstream releases bnc#706505</changelog>
<changelog author="idonmez@suse.com" date="1366632000">- Use correct directory for udev rules</changelog>
<changelog author="ohering@suse.de" date="1373630400">- Update mkinitrd helper to look for rules in /lib and /usr/lib (bnc#820216)</changelog>
<changelog author="olaf@aepfle.de" date="1425297600">- Remove eth* check, devices might have been renamed already (bnc#869614)
  Add biosdevname_udevrule_rename_all_network_devices.patch</changelog>

</package>
<package pkgid="dfddc88c0bfd9a4a90b1f4b98c30f303023c5713f07e99ce95eeea1185b4d332" name="biosdevname" arch="x86_64">
    <version epoch="0" ver="0.4.1" rel="6.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1304164800">- fix build with gcc 4.6, wrong linker options</changelog>
<changelog author="duwe@suse.de" date="1308225600">- update to 0.3.8, disable rule by default (FATE#312154)
- remove now obsolete patches biosdevname-delete-unused-function.diff,
  biosdevname-policy-all_names.diff and
  biosdevname-0.2.4-wronglinking.patch.</changelog>
<changelog author="duwe@novell.com" date="1310040000">- fix bnc#704182</changelog>
<changelog author="duwe@novell.com" date="1311076800">- version 0.3.8 contains unconditional asm inline, making it
  x86-only (bnc#706622)</changelog>
<changelog author="duwe@novell.com" date="1312200000">- pull patch to restrict SMBIOS version and to disable PIRQ usage
  from upstream.
- use the above to fix bnc#705162</changelog>
<changelog author="duwe@novell.com" date="1312372800">- Enable on all Dell machines (bnc#705109)</changelog>
<changelog author="duwe@suse.com" date="1315396800">- Verify length of VPD on network device (bnc#711172)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="duwe@suse.com" date="1316779200">- fix bnc#706505</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="aj@suse.de" date="1324468800">- Fix download URL.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless automake dependecy</changelog>
<changelog author="p.drouand@gmail.com" date="1354536000">- Update to 0.4.1 version:
  * Use addslot() to track both embedded and physical index per slot
  * Add fixes to ignore NPAR parsing on some cards
- Removed patchs: more-cmdline-args, verify-network-VPD, bug-706505
  fixed on upstream releases bnc#706505</changelog>
<changelog author="idonmez@suse.com" date="1366632000">- Use correct directory for udev rules</changelog>
<changelog author="ohering@suse.de" date="1373630400">- Update mkinitrd helper to look for rules in /lib and /usr/lib (bnc#820216)</changelog>
<changelog author="olaf@aepfle.de" date="1425297600">- Remove eth* check, devices might have been renamed already (bnc#869614)
  Add biosdevname_udevrule_rename_all_network_devices.patch</changelog>

</package>
<package pkgid="71d3ecdcc276d367b384fceaab62e185123c11540f1065b3565f3d14d1374af2" name="blas-devel" arch="i586">
    <version epoch="0" ver="3.4.2" rel="6.4.1"/>

<changelog author="rguenther@novell.com" date="1281614400">- Add baselibs.  [bnc#630656]</changelog>
<changelog author="burnus@net-b.de" date="1305201600">- Update to 3.3.1 [bnc#654560]
  * New procedures to compute the complete CS decomposition of a
    partitioned unitary matrix
  * Level-3 BLAS symmetric indefinite solve (xSYTRS) and symmetric
    indefinite inversion (xSYTRI)
  * Bug fixes
  * Changes see at http://www.netlib.org/lapack/lapack-3.3.1.html
    and http://www.netlib.org/lapack/lapack-3.3.0.html</changelog>
<changelog author="burnus@net-b.de" date="1315569600">- Run BLAS and LAPACK testsuite when building</changelog>
<changelog author="burnus@net-b.de" date="1321444800">- Update to 3.4.0
  * xGEQRT: QR factorization (improved interface)
  * xGEQRT3: recursive QR factorization.
  * xTPQRT: Communication-Avoiding QR sequential kernels.
  * Bug fixes.
  * Changes see http://www.netlib.org/lapack/lapack-3.4.0.html</changelog>
<changelog author="jengelh@medozas.de" date="1322049600">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="saschpe@suse.de" date="1331726400">- Adhere to shared library policy, packages containing *.so or *.h
  files have to be named $FOO-devel, packages containing *.a files either
  have to be named $FOO-devel-static or provide this name
- Set license to 'BSD-3-Clause', according to the file LICENSE and the
  description on http://www.netlib.org/lapack/ it's not public domain
- Package README and LICENSE in library packages
- Removed rpmlint filters
- Use upstream tarball URL</changelog>
<changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
<changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
<changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
<changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
<changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
<changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
<changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
<changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
<changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
<changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
<changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
<changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
<changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>

</package>
<package pkgid="dd497d52163332ea89267b018b6572d54fd9508c3b7281a5b1946f43fdff2e11" name="blas-devel" arch="x86_64">
    <version epoch="0" ver="3.4.2" rel="6.4.1"/>

<changelog author="rguenther@novell.com" date="1281614400">- Add baselibs.  [bnc#630656]</changelog>
<changelog author="burnus@net-b.de" date="1305201600">- Update to 3.3.1 [bnc#654560]
  * New procedures to compute the complete CS decomposition of a
    partitioned unitary matrix
  * Level-3 BLAS symmetric indefinite solve (xSYTRS) and symmetric
    indefinite inversion (xSYTRI)
  * Bug fixes
  * Changes see at http://www.netlib.org/lapack/lapack-3.3.1.html
    and http://www.netlib.org/lapack/lapack-3.3.0.html</changelog>
<changelog author="burnus@net-b.de" date="1315569600">- Run BLAS and LAPACK testsuite when building</changelog>
<changelog author="burnus@net-b.de" date="1321444800">- Update to 3.4.0
  * xGEQRT: QR factorization (improved interface)
  * xGEQRT3: recursive QR factorization.
  * xTPQRT: Communication-Avoiding QR sequential kernels.
  * Bug fixes.
  * Changes see http://www.netlib.org/lapack/lapack-3.4.0.html</changelog>
<changelog author="jengelh@medozas.de" date="1322049600">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="saschpe@suse.de" date="1331726400">- Adhere to shared library policy, packages containing *.so or *.h
  files have to be named $FOO-devel, packages containing *.a files either
  have to be named $FOO-devel-static or provide this name
- Set license to 'BSD-3-Clause', according to the file LICENSE and the
  description on http://www.netlib.org/lapack/ it's not public domain
- Package README and LICENSE in library packages
- Removed rpmlint filters
- Use upstream tarball URL</changelog>
<changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
<changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
<changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
<changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
<changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
<changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
<changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
<changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
<changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
<changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
<changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
<changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
<changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>

</package>
<package pkgid="afe316ee9a93290d56e068ee5b79e653240247406a473dbcbde54e512d2126b9" name="blas-devel-32bit" arch="x86_64">
    <version epoch="0" ver="3.4.2" rel="6.4.1"/>

<changelog author="rguenther@novell.com" date="1281614400">- Add baselibs.  [bnc#630656]</changelog>
<changelog author="burnus@net-b.de" date="1305201600">- Update to 3.3.1 [bnc#654560]
  * New procedures to compute the complete CS decomposition of a
    partitioned unitary matrix
  * Level-3 BLAS symmetric indefinite solve (xSYTRS) and symmetric
    indefinite inversion (xSYTRI)
  * Bug fixes
  * Changes see at http://www.netlib.org/lapack/lapack-3.3.1.html
    and http://www.netlib.org/lapack/lapack-3.3.0.html</changelog>
<changelog author="burnus@net-b.de" date="1315569600">- Run BLAS and LAPACK testsuite when building</changelog>
<changelog author="burnus@net-b.de" date="1321444800">- Update to 3.4.0
  * xGEQRT: QR factorization (improved interface)
  * xGEQRT3: recursive QR factorization.
  * xTPQRT: Communication-Avoiding QR sequential kernels.
  * Bug fixes.
  * Changes see http://www.netlib.org/lapack/lapack-3.4.0.html</changelog>
<changelog author="jengelh@medozas.de" date="1322049600">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="saschpe@suse.de" date="1331726400">- Adhere to shared library policy, packages containing *.so or *.h
  files have to be named $FOO-devel, packages containing *.a files either
  have to be named $FOO-devel-static or provide this name
- Set license to 'BSD-3-Clause', according to the file LICENSE and the
  description on http://www.netlib.org/lapack/ it's not public domain
- Package README and LICENSE in library packages
- Removed rpmlint filters
- Use upstream tarball URL</changelog>
<changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
<changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
<changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
<changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
<changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
<changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
<changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
<changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
<changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
<changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
<changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
<changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
<changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>

</package>
<package pkgid="ffb78762e15720d42d2dd463acdda8fe0bd0e5ae3b90715ba84e880c004163f7" name="blas-devel-static" arch="i586">
    <version epoch="0" ver="3.4.2" rel="6.4.1"/>

<changelog author="rguenther@novell.com" date="1281614400">- Add baselibs.  [bnc#630656]</changelog>
<changelog author="burnus@net-b.de" date="1305201600">- Update to 3.3.1 [bnc#654560]
  * New procedures to compute the complete CS decomposition of a
    partitioned unitary matrix
  * Level-3 BLAS symmetric indefinite solve (xSYTRS) and symmetric
    indefinite inversion (xSYTRI)
  * Bug fixes
  * Changes see at http://www.netlib.org/lapack/lapack-3.3.1.html
    and http://www.netlib.org/lapack/lapack-3.3.0.html</changelog>
<changelog author="burnus@net-b.de" date="1315569600">- Run BLAS and LAPACK testsuite when building</changelog>
<changelog author="burnus@net-b.de" date="1321444800">- Update to 3.4.0
  * xGEQRT: QR factorization (improved interface)
  * xGEQRT3: recursive QR factorization.
  * xTPQRT: Communication-Avoiding QR sequential kernels.
  * Bug fixes.
  * Changes see http://www.netlib.org/lapack/lapack-3.4.0.html</changelog>
<changelog author="jengelh@medozas.de" date="1322049600">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="saschpe@suse.de" date="1331726400">- Adhere to shared library policy, packages containing *.so or *.h
  files have to be named $FOO-devel, packages containing *.a files either
  have to be named $FOO-devel-static or provide this name
- Set license to 'BSD-3-Clause', according to the file LICENSE and the
  description on http://www.netlib.org/lapack/ it's not public domain
- Package README and LICENSE in library packages
- Removed rpmlint filters
- Use upstream tarball URL</changelog>
<changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
<changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
<changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
<changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
<changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
<changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
<changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
<changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
<changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
<changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
<changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
<changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
<changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>

</package>
<package pkgid="216e25f92625b8af25eb95b0a3a6b02d36bec7fef23d634f148cc3fddcc8a40a" name="blas-devel-static" arch="x86_64">
    <version epoch="0" ver="3.4.2" rel="6.4.1"/>

<changelog author="rguenther@novell.com" date="1281614400">- Add baselibs.  [bnc#630656]</changelog>
<changelog author="burnus@net-b.de" date="1305201600">- Update to 3.3.1 [bnc#654560]
  * New procedures to compute the complete CS decomposition of a
    partitioned unitary matrix
  * Level-3 BLAS symmetric indefinite solve (xSYTRS) and symmetric
    indefinite inversion (xSYTRI)
  * Bug fixes
  * Changes see at http://www.netlib.org/lapack/lapack-3.3.1.html
    and http://www.netlib.org/lapack/lapack-3.3.0.html</changelog>
<changelog author="burnus@net-b.de" date="1315569600">- Run BLAS and LAPACK testsuite when building</changelog>
<changelog author="burnus@net-b.de" date="1321444800">- Update to 3.4.0
  * xGEQRT: QR factorization (improved interface)
  * xGEQRT3: recursive QR factorization.
  * xTPQRT: Communication-Avoiding QR sequential kernels.
  * Bug fixes.
  * Changes see http://www.netlib.org/lapack/lapack-3.4.0.html</changelog>
<changelog author="jengelh@medozas.de" date="1322049600">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="saschpe@suse.de" date="1331726400">- Adhere to shared library policy, packages containing *.so or *.h
  files have to be named $FOO-devel, packages containing *.a files either
  have to be named $FOO-devel-static or provide this name
- Set license to 'BSD-3-Clause', according to the file LICENSE and the
  description on http://www.netlib.org/lapack/ it's not public domain
- Package README and LICENSE in library packages
- Removed rpmlint filters
- Use upstream tarball URL</changelog>
<changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
<changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
<changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
<changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
<changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
<changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
<changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
<changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
<changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
<changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
<changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
<changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
<changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>

</package>
<package pkgid="c517ee64359286dfb0ef6655295f589d5750a7ca1374ca658f000a4140c34b90" name="blas-man" arch="noarch">
    <version epoch="0" ver="3.4.2" rel="6.4.1"/>

<changelog author="rguenther@novell.com" date="1281614400">- Add baselibs.  [bnc#630656]</changelog>
<changelog author="burnus@net-b.de" date="1305201600">- Update to 3.3.1 [bnc#654560]
  * New procedures to compute the complete CS decomposition of a
    partitioned unitary matrix
  * Level-3 BLAS symmetric indefinite solve (xSYTRS) and symmetric
    indefinite inversion (xSYTRI)
  * Bug fixes
  * Changes see at http://www.netlib.org/lapack/lapack-3.3.1.html
    and http://www.netlib.org/lapack/lapack-3.3.0.html</changelog>
<changelog author="burnus@net-b.de" date="1315569600">- Run BLAS and LAPACK testsuite when building</changelog>
<changelog author="burnus@net-b.de" date="1321444800">- Update to 3.4.0
  * xGEQRT: QR factorization (improved interface)
  * xGEQRT3: recursive QR factorization.
  * xTPQRT: Communication-Avoiding QR sequential kernels.
  * Bug fixes.
  * Changes see http://www.netlib.org/lapack/lapack-3.4.0.html</changelog>
<changelog author="jengelh@medozas.de" date="1322049600">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="saschpe@suse.de" date="1331726400">- Adhere to shared library policy, packages containing *.so or *.h
  files have to be named $FOO-devel, packages containing *.a files either
  have to be named $FOO-devel-static or provide this name
- Set license to 'BSD-3-Clause', according to the file LICENSE and the
  description on http://www.netlib.org/lapack/ it's not public domain
- Package README and LICENSE in library packages
- Removed rpmlint filters
- Use upstream tarball URL</changelog>
<changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
<changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
<changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
<changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
<changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
<changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
<changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
<changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
<changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
<changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
<changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
<changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
<changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>

</package>
<package pkgid="8a1b5122538da8175b6b2c9da2a4e0c3dd9b5a2d1b36eb3e920563adc911c96e" name="blinken" arch="i586">
    <version epoch="0" ver="4.11.3" rel="28.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="asterios.dramis@gmail.com" date="1357041600">- Removed unneeded build requirements kdebase4-workspace-devel,
  libkdeedu4-devel, ocaml, ocaml-facile and fdupes. Added libkde4-devel.
- Removed unneeded runtime requirement for libkeduvocdocument4.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="60d63cf85324a0128b5f06c65d9abed28a70b51edc7dbbbcc12eafb8d31389e2" name="blinken" arch="i586">
    <version epoch="0" ver="4.11.4" rel="286.3"/>

<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="asterios.dramis@gmail.com" date="1357041600">- Removed unneeded build requirements kdebase4-workspace-devel,
  libkdeedu4-devel, ocaml, ocaml-facile and fdupes. Added libkde4-devel.
- Removed unneeded runtime requirement for libkeduvocdocument4.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="60012b344cd36c002461bacf6f53890edb15394d0fcd6b0dcd2cbe0e93d3476d" name="blinken" arch="i586">
    <version epoch="0" ver="4.11.5" rel="296.1"/>

<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="asterios.dramis@gmail.com" date="1357041600">- Removed unneeded build requirements kdebase4-workspace-devel,
  libkdeedu4-devel, ocaml, ocaml-facile and fdupes. Added libkde4-devel.
- Removed unneeded runtime requirement for libkeduvocdocument4.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="f51618d9ef0569b8b0d4f62c291e7f4c64ea86f1893869291374a1d79a44b9bf" name="blinken" arch="src">
    <version epoch="0" ver="4.11.3" rel="28.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="asterios.dramis@gmail.com" date="1357041600">- Removed unneeded build requirements kdebase4-workspace-devel,
  libkdeedu4-devel, ocaml, ocaml-facile and fdupes. Added libkde4-devel.
- Removed unneeded runtime requirement for libkeduvocdocument4.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="a37d09ce73b99183da28be509dad993d2e85642174c65c1b7e853535945b8432" name="blinken" arch="src">
    <version epoch="0" ver="4.11.4" rel="286.3"/>

<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="asterios.dramis@gmail.com" date="1357041600">- Removed unneeded build requirements kdebase4-workspace-devel,
  libkdeedu4-devel, ocaml, ocaml-facile and fdupes. Added libkde4-devel.
- Removed unneeded runtime requirement for libkeduvocdocument4.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="b90c47564fe97b3a3648817b28c25f80f2f1ec49cc2b088f2541db86590734a3" name="blinken" arch="src">
    <version epoch="0" ver="4.11.5" rel="296.1"/>

<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="asterios.dramis@gmail.com" date="1357041600">- Removed unneeded build requirements kdebase4-workspace-devel,
  libkdeedu4-devel, ocaml, ocaml-facile and fdupes. Added libkde4-devel.
- Removed unneeded runtime requirement for libkeduvocdocument4.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="1d8d4b13dd3423ce85a507f35f8322f84377c77fa064c04129eb874b80f61006" name="blinken" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="28.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="asterios.dramis@gmail.com" date="1357041600">- Removed unneeded build requirements kdebase4-workspace-devel,
  libkdeedu4-devel, ocaml, ocaml-facile and fdupes. Added libkde4-devel.
- Removed unneeded runtime requirement for libkeduvocdocument4.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="7bed7c84aa7a156108eee0b0140ffa43de766a9272f2bf71a8444ca702d46b93" name="blinken" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="286.3"/>

<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="asterios.dramis@gmail.com" date="1357041600">- Removed unneeded build requirements kdebase4-workspace-devel,
  libkdeedu4-devel, ocaml, ocaml-facile and fdupes. Added libkde4-devel.
- Removed unneeded runtime requirement for libkeduvocdocument4.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="bfebbcac422d66e2cb032bdf3016259502442375ac4587c866dedbd025a38238" name="blinken" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="296.1"/>

<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="asterios.dramis@gmail.com" date="1357041600">- Removed unneeded build requirements kdebase4-workspace-devel,
  libkdeedu4-devel, ocaml, ocaml-facile and fdupes. Added libkde4-devel.
- Removed unneeded runtime requirement for libkeduvocdocument4.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="5827585ae23e290d34cf0eb2b4ceaf240e8092f6ea47aed84981dcfd811b7214" name="blogilo" arch="i586">
    <version epoch="0" ver="4.11.3" rel="48.4"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="d62bb57deb9e9f08b4258ae35bfcf278544f93dd8e4c629dde858ad1c3a81654" name="blogilo" arch="i586">
    <version epoch="0" ver="4.11.4" rel="444.11"/>

<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>

</package>
<package pkgid="0393e9cf4863d9ea0406d416845ec5325856cc1ca18b7ca9da3f6e5e35e9d0f1" name="blogilo" arch="i586">
    <version epoch="0" ver="4.11.5" rel="460.5"/>

<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>

</package>
<package pkgid="f01af135c81f79f94ed18e158b334ae1db0d706b039c9087c963e46a4e8f3850" name="blogilo" arch="i586">
    <version epoch="0" ver="4.11.5" rel="464.1"/>

<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>
<changelog author="ctrippe@opensuse.org" date="1397390400">- make it possible to manually select untrusted PGP keys
  (bnc#859984, kde#328311); added patch pgp_key_select.diff</changelog>

</package>
<package pkgid="6790057126751891ba59d6e62612a9031be40421af73419a3bbd66bd9a7e1380" name="blogilo" arch="i586">
    <version epoch="0" ver="4.11.5" rel="468.2"/>

<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>
<changelog author="ctrippe@opensuse.org" date="1397390400">- make it possible to manually select untrusted PGP keys
  (bnc#859984, kde#328311); added patch pgp_key_select.diff</changelog>
<changelog author="ctrippe@opensuse.org" date="1399464000">- Fixes a bug, when the task name field is empty in the ktimetracker
  histroy dialog (bnc#876316, kde#308923);
  added patch ktimetracker_task_name_field_in_histroy.diff</changelog>

</package>
<package pkgid="051ced7c4c4615a891afe9be9c3c9c6806142c5c25ec66fe88168214a02a2b5b" name="blogilo" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="48.4"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="1a5641cee9c652df003dc0fcd46cd2a385d943830274c50df7ce7201ad5d3e08" name="blogilo" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="444.11"/>

<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>

</package>
<package pkgid="5a4e0aea31fbd619c008f105d31d868d0e01ab92636b7a7d005d17d916037fc4" name="blogilo" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="460.5"/>

<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>

</package>
<package pkgid="fa7f74d580a204c2bd03a9bf44f25b6ddb33438eb3d885ca7f4f79e655b97c1c" name="blogilo" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="464.1"/>

<changelog author="wbauer@tmo.at" date="1362398400">- Remove "News" from categories in akregator.desktop (bnc#807301)</changelog>
<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>
<changelog author="ctrippe@opensuse.org" date="1397390400">- make it possible to manually select untrusted PGP keys
  (bnc#859984, kde#328311); added patch pgp_key_select.diff</changelog>

</package>
<package pkgid="01afefbf609d4edda19f6c3626e41f60a8f7ebca227fc935e33f6f430c608286" name="blogilo" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="468.2"/>

<changelog author="mlin@suse.com" date="1363003200">- Update desktop-files.diff
  * Don't removed Icon=kleopatra in kleopatra.desktop (bnc#807946)
- Added patch akregator-bug305494.diff from upstream to (bko#305494)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Contains bug fixes
- Drop akregator-bug305494.diff, it is included upstream</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Add three patches from upstream, those fix mail completion that
  was lost with 4.10.2 (kde#259949):
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch and
  0003-Fix-kmail-autocompletion-from-akonadi.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added 0004-Fix-Bug-316256.patch, fixes build with newer boost
  (kde#316256)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500
- Dropped patches included with this release:
  0001-Add-missing-mimetype-for-contact-groups-in-the-direc.patches,
  0002-Use-the-index-we-just-calculated-a-bit-faster.patch,
  0003-Fix-kmail-autocompletion-from-akonadi.patch and
  0004-Fix-Bug-316256.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
- Added libkactivities-devel, link-grammar-devel and cyrus-sasl-devel
  BuildRequires</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378728000">- Added 0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch
  from upstream, for resolving kde#324493</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches based on upstream inclusion:
  0001-Kontact-crashed-after-trying-to-export-as-WebSite.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387195200">- added patches:
  * fix-a-bug-that-eats-100-of-CPU.patch: resolves kde#323929 (and
    many possible duplicates) where kmail would stuck in a loop
    constantly trying to collect same data</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php
- Drop fix-a-bug-that-eats-100-of-CPU.patch as it was
  included upstream</changelog>
<changelog author="ctrippe@opensuse.org" date="1397390400">- make it possible to manually select untrusted PGP keys
  (bnc#859984, kde#328311); added patch pgp_key_select.diff</changelog>
<changelog author="ctrippe@opensuse.org" date="1399464000">- Fixes a bug, when the task name field is empty in the ktimetracker
  histroy dialog (bnc#876316, kde#308923);
  added patch ktimetracker_task_name_field_in_histroy.diff</changelog>

</package>
<package pkgid="c24f4cc98ffc25f90e026a53679004944008cef0c7c2e88295c01003e6913276" name="bluedevil" arch="i586">
    <version epoch="0" ver="2.1.1" rel="5.1"/>

<changelog author="mlin@suse.com" date="1312545600">- Fix dependencies issue of required obexd-client on openSUSE 11.3</changelog>
<changelog author="wstephenson@suse.com" date="1316779200">- Update to 1.2.1:
  * Allows using a cellphone as modem via Bluetooth
  * Allows DUN and PANU configuration
  * Action Plugins
  * Added support for DUN
  * Added support for PANU
  * A few descriptions changed
  * Fixed the Category mess we had in the .desktop
  * kio_bluetooth
  * Show known devices first
  * Perform discovery in the background
  * Fixed the mimetype mess we had
  * Will work when started without Bluetooth activated
  * Wizard
  * Added another OUI for Apple Wireless Mice
  * Auto select Mice
  * Agent
  * Be able to use Return or Enter to introduce PIN
  * Monolithic
  * Use Configure icon on the configure option
  * KCM
  * Use KMessageWidget if compiled against KDE 4.7</changelog>
<changelog author="wstephenson@suse.com" date="1319716800">- Update to 1.2.2:
  * Fix crash in wizard if scanned devices disappear
    (kde#280908, kde#270064)
  * Fix crash in wizard if no default BT adaptor (kde#281420)
  * Fix crash upon removing USB BT adaptor (kde#282280)
  * Fix crash when different BT client software starts a session
    (kde#269814)
  * Fix crash when scanned BT device changes externally during
    editing (kde#272230)
  * Don't report uninformative errors from obex
    (kde#274772, kde#273144)
- Fix crash when browsing device contents with obexftp
  (bnc#725962, kde#284717)</changelog>
<changelog author="mlin@suse.com" date="1334059200">- Fix the typo value of X-KDE-Library on bluedevilsendfile.desktop
  and refresh typo2.diff</changelog>
<changelog author="dmueller@suse.com" date="1334836800">- fix build for older distros</changelog>
<changelog author="mlin@suse.com" date="1335873600">- Update to version 1.2.3
  * Fix kde#298633 - Crash in kded daemon (ObexFtp module)
  * Fix kde#279911 - Crash after receiving a file
  * Fix kde#297785 - Not confirmed if it is fixed
  * Fix kde#286466 - Be able to pair WiiMotes (needs BlueZ 4.96)
  * Fix kde#276911 - Pairing Keyboards with SSPairing (Bluetooth 2.2)
  * Fix kde#291708 - Now we show again the small overlay icon
  * Updated pin databse for more automatic experience
- Delete unapplied bluedevil-obexsession-iterators.diff
- Refresh typo2.diff</changelog>
<changelog author="mlin@suse.com" date="1349784000">- Update to version 1.2.4
  * Preventing sending files (kde#297785)
  * Fallback to DocumentsLocation if the destination folder is writable (kde#294041)
  * Preventing tethering using PAN (kde#285637)
  * Many graphical fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1357128000">- Update to 1.3
  * Fixed a few crashes in KDED by removing the AgentListener thread
  * Fixed crashes when adapter is unplugged (kde#284052, kde#298633,
    kde#279911, kde#297785, kde#286466, kde#276911, kde#291708)
  * Updated pin databse for more automatic experience
  * Fix preventing sending files (kde#297785)
  * Check if the destination folder is writable, if not fallback
    to DocumentsLocation (kde#294041)
  * Fix preventing tethering using PAN (kde#285637)
  * Do not show PANU in kiobluetooth since it is not supported
  * Use a common version string</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1364558400">- Update to version 1.3.1:
  * Fixed bugs: kde#315066 and kde#314008
  * Implement RequestPin in SSPairing
  * Improvements enabling/disabling monolithic
  * Always Quit helpers when done</changelog>
<changelog author="jslaby@suse.com" date="1367409600">- bluedevil-confirmmodechange-typo.patch: Fix typo when calling
  bluedevil-confirmmodechange (bnc#817958 bko#316314)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378209600">- Update to version 1.3.2:
  * Fixed bug kde#110433: Select devices with a single click
  * Use bluedevil own namespace in kDebug (so we don't spam kded)
  * Make it possible to create DUN/PAN networks with plasma-nm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to a git snapshot of the bluez5 branch. This would allow
  at least some bluetooth functionality in KDE with Bluez5.
  Will be replaced by an official version as soon as available.
- Dropped patch bluedevil-confirmmodechange-typo.patch due to
  upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384689600">- Remove the obex-data-server as runtime require. This is no
  longer needed with Bluez5</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387540800">- Update to 2.0 rc1 - first version officially supporting BlueZ5
- Drop no longer applieable bluedevil-dont-install-headers.diff
- Added remove-unused-bluedevilaction-link-target.patch to make the
  package build: bluedevilaction was forgotten, so linker can't
  find it</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387627200">- Replace the tarball generated from tag, to the official one, from
  KDE mirrors
- Drop remove-unused-bluedevilaction-link-target.patch: it's not
  needed with new tarball</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1417780800">- Update to 2.0 Final:
  * Full Bluez5 support
- Removed checks for ancient openSUSE versions
- Added patches from upstream:
  0001-KCM-Adapters-Adapt-to-changes-in-libbluedevil.patch
  0002-Bluedevil-daemon-Save-and-restore-adapters-state.patch
  0003-daemon-Use-new-functions-for-restoring-adapters-stat.patch
  0004-Monolithic-Don-t-go-online-on-startup-when-there-is-.patch
  0005-daemon-Fix-killing-monolithic-when-there-are-no-adap.patch
  0006-wizard-Fix-accepting-PIN-in-SSP-pairing.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1419336000">- Update to 2.1
  * Remember powered state of all adapters, kde#337193
  * Monolithic (Bluetooth icon) will now be correctly hidden in
    system tray when all adapters are powered off, kde#341768
  * Monolithic will now be removed from system tray when there
    are no adapters
  * Action to send files over Bluetooth will now be shown only
    for file that can actually be sent (only local files)
  * PIN in pairing wizard will now be accepted only after
    clicking "Matches" button
  * kio_obexftp should now better handle errors and correctly
    reconnect after losing connection, kde#321560
  * kio_bluetooth will not crash when trying to access
    invalid device
- Drop patches merged upstream:
  0001-KCM-Adapters-Adapt-to-changes-in-libbluedevil.patch
  0002-Bluedevil-daemon-Save-and-restore-adapters-state.patch
  0003-daemon-Use-new-functions-for-restoring-adapters-stat.patch
  0004-Monolithic-Don-t-go-online-on-startup-when-there-is-.patch
  0005-daemon-Fix-killing-monolithic-when-there-are-no-adap.patch
  0006-wizard-Fix-accepting-PIN-in-SSP-pairing.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1423310400">- Add 0001-daemon-Don-t-try-to-infinitely-kill-monolithic-when-.patch,
  kde#343682</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to 2.1.1
  * Last release based on KDE4.
  * Bugfixes:
  - don't try to infinitely kill monolithic when it fails (bko343682)
  - fix directly opening files from obexftp (eg. images in gwenview)
  - fix one crash in kded module (bko342581)
  - fix obexftp browse files on old S60 devices (bko342259)
- Drop upstream patch Add 0001-daemon-Don-t-try-to-infinitely-kill-monolithic-when-.patch</changelog>

</package>
<package pkgid="b08f5553866a85262837390b78629c91eefb95ebdd740407d330ef029e497f61" name="bluedevil" arch="src">
    <version epoch="0" ver="2.1.1" rel="5.1"/>

<changelog author="mlin@suse.com" date="1312545600">- Fix dependencies issue of required obexd-client on openSUSE 11.3</changelog>
<changelog author="wstephenson@suse.com" date="1316779200">- Update to 1.2.1:
  * Allows using a cellphone as modem via Bluetooth
  * Allows DUN and PANU configuration
  * Action Plugins
  * Added support for DUN
  * Added support for PANU
  * A few descriptions changed
  * Fixed the Category mess we had in the .desktop
  * kio_bluetooth
  * Show known devices first
  * Perform discovery in the background
  * Fixed the mimetype mess we had
  * Will work when started without Bluetooth activated
  * Wizard
  * Added another OUI for Apple Wireless Mice
  * Auto select Mice
  * Agent
  * Be able to use Return or Enter to introduce PIN
  * Monolithic
  * Use Configure icon on the configure option
  * KCM
  * Use KMessageWidget if compiled against KDE 4.7</changelog>
<changelog author="wstephenson@suse.com" date="1319716800">- Update to 1.2.2:
  * Fix crash in wizard if scanned devices disappear
    (kde#280908, kde#270064)
  * Fix crash in wizard if no default BT adaptor (kde#281420)
  * Fix crash upon removing USB BT adaptor (kde#282280)
  * Fix crash when different BT client software starts a session
    (kde#269814)
  * Fix crash when scanned BT device changes externally during
    editing (kde#272230)
  * Don't report uninformative errors from obex
    (kde#274772, kde#273144)
- Fix crash when browsing device contents with obexftp
  (bnc#725962, kde#284717)</changelog>
<changelog author="mlin@suse.com" date="1334059200">- Fix the typo value of X-KDE-Library on bluedevilsendfile.desktop
  and refresh typo2.diff</changelog>
<changelog author="dmueller@suse.com" date="1334836800">- fix build for older distros</changelog>
<changelog author="mlin@suse.com" date="1335873600">- Update to version 1.2.3
  * Fix kde#298633 - Crash in kded daemon (ObexFtp module)
  * Fix kde#279911 - Crash after receiving a file
  * Fix kde#297785 - Not confirmed if it is fixed
  * Fix kde#286466 - Be able to pair WiiMotes (needs BlueZ 4.96)
  * Fix kde#276911 - Pairing Keyboards with SSPairing (Bluetooth 2.2)
  * Fix kde#291708 - Now we show again the small overlay icon
  * Updated pin databse for more automatic experience
- Delete unapplied bluedevil-obexsession-iterators.diff
- Refresh typo2.diff</changelog>
<changelog author="mlin@suse.com" date="1349784000">- Update to version 1.2.4
  * Preventing sending files (kde#297785)
  * Fallback to DocumentsLocation if the destination folder is writable (kde#294041)
  * Preventing tethering using PAN (kde#285637)
  * Many graphical fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1357128000">- Update to 1.3
  * Fixed a few crashes in KDED by removing the AgentListener thread
  * Fixed crashes when adapter is unplugged (kde#284052, kde#298633,
    kde#279911, kde#297785, kde#286466, kde#276911, kde#291708)
  * Updated pin databse for more automatic experience
  * Fix preventing sending files (kde#297785)
  * Check if the destination folder is writable, if not fallback
    to DocumentsLocation (kde#294041)
  * Fix preventing tethering using PAN (kde#285637)
  * Do not show PANU in kiobluetooth since it is not supported
  * Use a common version string</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1364558400">- Update to version 1.3.1:
  * Fixed bugs: kde#315066 and kde#314008
  * Implement RequestPin in SSPairing
  * Improvements enabling/disabling monolithic
  * Always Quit helpers when done</changelog>
<changelog author="jslaby@suse.com" date="1367409600">- bluedevil-confirmmodechange-typo.patch: Fix typo when calling
  bluedevil-confirmmodechange (bnc#817958 bko#316314)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378209600">- Update to version 1.3.2:
  * Fixed bug kde#110433: Select devices with a single click
  * Use bluedevil own namespace in kDebug (so we don't spam kded)
  * Make it possible to create DUN/PAN networks with plasma-nm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to a git snapshot of the bluez5 branch. This would allow
  at least some bluetooth functionality in KDE with Bluez5.
  Will be replaced by an official version as soon as available.
- Dropped patch bluedevil-confirmmodechange-typo.patch due to
  upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384689600">- Remove the obex-data-server as runtime require. This is no
  longer needed with Bluez5</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387540800">- Update to 2.0 rc1 - first version officially supporting BlueZ5
- Drop no longer applieable bluedevil-dont-install-headers.diff
- Added remove-unused-bluedevilaction-link-target.patch to make the
  package build: bluedevilaction was forgotten, so linker can't
  find it</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387627200">- Replace the tarball generated from tag, to the official one, from
  KDE mirrors
- Drop remove-unused-bluedevilaction-link-target.patch: it's not
  needed with new tarball</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1417780800">- Update to 2.0 Final:
  * Full Bluez5 support
- Removed checks for ancient openSUSE versions
- Added patches from upstream:
  0001-KCM-Adapters-Adapt-to-changes-in-libbluedevil.patch
  0002-Bluedevil-daemon-Save-and-restore-adapters-state.patch
  0003-daemon-Use-new-functions-for-restoring-adapters-stat.patch
  0004-Monolithic-Don-t-go-online-on-startup-when-there-is-.patch
  0005-daemon-Fix-killing-monolithic-when-there-are-no-adap.patch
  0006-wizard-Fix-accepting-PIN-in-SSP-pairing.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1419336000">- Update to 2.1
  * Remember powered state of all adapters, kde#337193
  * Monolithic (Bluetooth icon) will now be correctly hidden in
    system tray when all adapters are powered off, kde#341768
  * Monolithic will now be removed from system tray when there
    are no adapters
  * Action to send files over Bluetooth will now be shown only
    for file that can actually be sent (only local files)
  * PIN in pairing wizard will now be accepted only after
    clicking "Matches" button
  * kio_obexftp should now better handle errors and correctly
    reconnect after losing connection, kde#321560
  * kio_bluetooth will not crash when trying to access
    invalid device
- Drop patches merged upstream:
  0001-KCM-Adapters-Adapt-to-changes-in-libbluedevil.patch
  0002-Bluedevil-daemon-Save-and-restore-adapters-state.patch
  0003-daemon-Use-new-functions-for-restoring-adapters-stat.patch
  0004-Monolithic-Don-t-go-online-on-startup-when-there-is-.patch
  0005-daemon-Fix-killing-monolithic-when-there-are-no-adap.patch
  0006-wizard-Fix-accepting-PIN-in-SSP-pairing.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1423310400">- Add 0001-daemon-Don-t-try-to-infinitely-kill-monolithic-when-.patch,
  kde#343682</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to 2.1.1
  * Last release based on KDE4.
  * Bugfixes:
  - don't try to infinitely kill monolithic when it fails (bko343682)
  - fix directly opening files from obexftp (eg. images in gwenview)
  - fix one crash in kded module (bko342581)
  - fix obexftp browse files on old S60 devices (bko342259)
- Drop upstream patch Add 0001-daemon-Don-t-try-to-infinitely-kill-monolithic-when-.patch</changelog>

</package>
<package pkgid="8ef4e7e6c32975390bc3b7fc95aebe675f3d904efad0992598370d3f06d59066" name="bluedevil" arch="x86_64">
    <version epoch="0" ver="2.1.1" rel="5.1"/>

<changelog author="mlin@suse.com" date="1312545600">- Fix dependencies issue of required obexd-client on openSUSE 11.3</changelog>
<changelog author="wstephenson@suse.com" date="1316779200">- Update to 1.2.1:
  * Allows using a cellphone as modem via Bluetooth
  * Allows DUN and PANU configuration
  * Action Plugins
  * Added support for DUN
  * Added support for PANU
  * A few descriptions changed
  * Fixed the Category mess we had in the .desktop
  * kio_bluetooth
  * Show known devices first
  * Perform discovery in the background
  * Fixed the mimetype mess we had
  * Will work when started without Bluetooth activated
  * Wizard
  * Added another OUI for Apple Wireless Mice
  * Auto select Mice
  * Agent
  * Be able to use Return or Enter to introduce PIN
  * Monolithic
  * Use Configure icon on the configure option
  * KCM
  * Use KMessageWidget if compiled against KDE 4.7</changelog>
<changelog author="wstephenson@suse.com" date="1319716800">- Update to 1.2.2:
  * Fix crash in wizard if scanned devices disappear
    (kde#280908, kde#270064)
  * Fix crash in wizard if no default BT adaptor (kde#281420)
  * Fix crash upon removing USB BT adaptor (kde#282280)
  * Fix crash when different BT client software starts a session
    (kde#269814)
  * Fix crash when scanned BT device changes externally during
    editing (kde#272230)
  * Don't report uninformative errors from obex
    (kde#274772, kde#273144)
- Fix crash when browsing device contents with obexftp
  (bnc#725962, kde#284717)</changelog>
<changelog author="mlin@suse.com" date="1334059200">- Fix the typo value of X-KDE-Library on bluedevilsendfile.desktop
  and refresh typo2.diff</changelog>
<changelog author="dmueller@suse.com" date="1334836800">- fix build for older distros</changelog>
<changelog author="mlin@suse.com" date="1335873600">- Update to version 1.2.3
  * Fix kde#298633 - Crash in kded daemon (ObexFtp module)
  * Fix kde#279911 - Crash after receiving a file
  * Fix kde#297785 - Not confirmed if it is fixed
  * Fix kde#286466 - Be able to pair WiiMotes (needs BlueZ 4.96)
  * Fix kde#276911 - Pairing Keyboards with SSPairing (Bluetooth 2.2)
  * Fix kde#291708 - Now we show again the small overlay icon
  * Updated pin databse for more automatic experience
- Delete unapplied bluedevil-obexsession-iterators.diff
- Refresh typo2.diff</changelog>
<changelog author="mlin@suse.com" date="1349784000">- Update to version 1.2.4
  * Preventing sending files (kde#297785)
  * Fallback to DocumentsLocation if the destination folder is writable (kde#294041)
  * Preventing tethering using PAN (kde#285637)
  * Many graphical fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1357128000">- Update to 1.3
  * Fixed a few crashes in KDED by removing the AgentListener thread
  * Fixed crashes when adapter is unplugged (kde#284052, kde#298633,
    kde#279911, kde#297785, kde#286466, kde#276911, kde#291708)
  * Updated pin databse for more automatic experience
  * Fix preventing sending files (kde#297785)
  * Check if the destination folder is writable, if not fallback
    to DocumentsLocation (kde#294041)
  * Fix preventing tethering using PAN (kde#285637)
  * Do not show PANU in kiobluetooth since it is not supported
  * Use a common version string</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1364558400">- Update to version 1.3.1:
  * Fixed bugs: kde#315066 and kde#314008
  * Implement RequestPin in SSPairing
  * Improvements enabling/disabling monolithic
  * Always Quit helpers when done</changelog>
<changelog author="jslaby@suse.com" date="1367409600">- bluedevil-confirmmodechange-typo.patch: Fix typo when calling
  bluedevil-confirmmodechange (bnc#817958 bko#316314)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378209600">- Update to version 1.3.2:
  * Fixed bug kde#110433: Select devices with a single click
  * Use bluedevil own namespace in kDebug (so we don't spam kded)
  * Make it possible to create DUN/PAN networks with plasma-nm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to a git snapshot of the bluez5 branch. This would allow
  at least some bluetooth functionality in KDE with Bluez5.
  Will be replaced by an official version as soon as available.
- Dropped patch bluedevil-confirmmodechange-typo.patch due to
  upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384689600">- Remove the obex-data-server as runtime require. This is no
  longer needed with Bluez5</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387540800">- Update to 2.0 rc1 - first version officially supporting BlueZ5
- Drop no longer applieable bluedevil-dont-install-headers.diff
- Added remove-unused-bluedevilaction-link-target.patch to make the
  package build: bluedevilaction was forgotten, so linker can't
  find it</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387627200">- Replace the tarball generated from tag, to the official one, from
  KDE mirrors
- Drop remove-unused-bluedevilaction-link-target.patch: it's not
  needed with new tarball</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1417780800">- Update to 2.0 Final:
  * Full Bluez5 support
- Removed checks for ancient openSUSE versions
- Added patches from upstream:
  0001-KCM-Adapters-Adapt-to-changes-in-libbluedevil.patch
  0002-Bluedevil-daemon-Save-and-restore-adapters-state.patch
  0003-daemon-Use-new-functions-for-restoring-adapters-stat.patch
  0004-Monolithic-Don-t-go-online-on-startup-when-there-is-.patch
  0005-daemon-Fix-killing-monolithic-when-there-are-no-adap.patch
  0006-wizard-Fix-accepting-PIN-in-SSP-pairing.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1419336000">- Update to 2.1
  * Remember powered state of all adapters, kde#337193
  * Monolithic (Bluetooth icon) will now be correctly hidden in
    system tray when all adapters are powered off, kde#341768
  * Monolithic will now be removed from system tray when there
    are no adapters
  * Action to send files over Bluetooth will now be shown only
    for file that can actually be sent (only local files)
  * PIN in pairing wizard will now be accepted only after
    clicking "Matches" button
  * kio_obexftp should now better handle errors and correctly
    reconnect after losing connection, kde#321560
  * kio_bluetooth will not crash when trying to access
    invalid device
- Drop patches merged upstream:
  0001-KCM-Adapters-Adapt-to-changes-in-libbluedevil.patch
  0002-Bluedevil-daemon-Save-and-restore-adapters-state.patch
  0003-daemon-Use-new-functions-for-restoring-adapters-stat.patch
  0004-Monolithic-Don-t-go-online-on-startup-when-there-is-.patch
  0005-daemon-Fix-killing-monolithic-when-there-are-no-adap.patch
  0006-wizard-Fix-accepting-PIN-in-SSP-pairing.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1423310400">- Add 0001-daemon-Don-t-try-to-infinitely-kill-monolithic-when-.patch,
  kde#343682</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to 2.1.1
  * Last release based on KDE4.
  * Bugfixes:
  - don't try to infinitely kill monolithic when it fails (bko343682)
  - fix directly opening files from obexftp (eg. images in gwenview)
  - fix one crash in kded module (bko342581)
  - fix obexftp browse files on old S60 devices (bko342259)
- Drop upstream patch Add 0001-daemon-Don-t-try-to-infinitely-kill-monolithic-when-.patch</changelog>

</package>
<package pkgid="e847350b6fd827c3122ee53b584d272c474ac306c5f580caa0ed53cdcf127c38" name="bluedevil-lang" arch="noarch">
    <version epoch="0" ver="2.1.1" rel="5.1"/>

<changelog author="mlin@suse.com" date="1312545600">- Fix dependencies issue of required obexd-client on openSUSE 11.3</changelog>
<changelog author="wstephenson@suse.com" date="1316779200">- Update to 1.2.1:
  * Allows using a cellphone as modem via Bluetooth
  * Allows DUN and PANU configuration
  * Action Plugins
  * Added support for DUN
  * Added support for PANU
  * A few descriptions changed
  * Fixed the Category mess we had in the .desktop
  * kio_bluetooth
  * Show known devices first
  * Perform discovery in the background
  * Fixed the mimetype mess we had
  * Will work when started without Bluetooth activated
  * Wizard
  * Added another OUI for Apple Wireless Mice
  * Auto select Mice
  * Agent
  * Be able to use Return or Enter to introduce PIN
  * Monolithic
  * Use Configure icon on the configure option
  * KCM
  * Use KMessageWidget if compiled against KDE 4.7</changelog>
<changelog author="wstephenson@suse.com" date="1319716800">- Update to 1.2.2:
  * Fix crash in wizard if scanned devices disappear
    (kde#280908, kde#270064)
  * Fix crash in wizard if no default BT adaptor (kde#281420)
  * Fix crash upon removing USB BT adaptor (kde#282280)
  * Fix crash when different BT client software starts a session
    (kde#269814)
  * Fix crash when scanned BT device changes externally during
    editing (kde#272230)
  * Don't report uninformative errors from obex
    (kde#274772, kde#273144)
- Fix crash when browsing device contents with obexftp
  (bnc#725962, kde#284717)</changelog>
<changelog author="mlin@suse.com" date="1334059200">- Fix the typo value of X-KDE-Library on bluedevilsendfile.desktop
  and refresh typo2.diff</changelog>
<changelog author="dmueller@suse.com" date="1334836800">- fix build for older distros</changelog>
<changelog author="mlin@suse.com" date="1335873600">- Update to version 1.2.3
  * Fix kde#298633 - Crash in kded daemon (ObexFtp module)
  * Fix kde#279911 - Crash after receiving a file
  * Fix kde#297785 - Not confirmed if it is fixed
  * Fix kde#286466 - Be able to pair WiiMotes (needs BlueZ 4.96)
  * Fix kde#276911 - Pairing Keyboards with SSPairing (Bluetooth 2.2)
  * Fix kde#291708 - Now we show again the small overlay icon
  * Updated pin databse for more automatic experience
- Delete unapplied bluedevil-obexsession-iterators.diff
- Refresh typo2.diff</changelog>
<changelog author="mlin@suse.com" date="1349784000">- Update to version 1.2.4
  * Preventing sending files (kde#297785)
  * Fallback to DocumentsLocation if the destination folder is writable (kde#294041)
  * Preventing tethering using PAN (kde#285637)
  * Many graphical fixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1357128000">- Update to 1.3
  * Fixed a few crashes in KDED by removing the AgentListener thread
  * Fixed crashes when adapter is unplugged (kde#284052, kde#298633,
    kde#279911, kde#297785, kde#286466, kde#276911, kde#291708)
  * Updated pin databse for more automatic experience
  * Fix preventing sending files (kde#297785)
  * Check if the destination folder is writable, if not fallback
    to DocumentsLocation (kde#294041)
  * Fix preventing tethering using PAN (kde#285637)
  * Do not show PANU in kiobluetooth since it is not supported
  * Use a common version string</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1364558400">- Update to version 1.3.1:
  * Fixed bugs: kde#315066 and kde#314008
  * Implement RequestPin in SSPairing
  * Improvements enabling/disabling monolithic
  * Always Quit helpers when done</changelog>
<changelog author="jslaby@suse.com" date="1367409600">- bluedevil-confirmmodechange-typo.patch: Fix typo when calling
  bluedevil-confirmmodechange (bnc#817958 bko#316314)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378209600">- Update to version 1.3.2:
  * Fixed bug kde#110433: Select devices with a single click
  * Use bluedevil own namespace in kDebug (so we don't spam kded)
  * Make it possible to create DUN/PAN networks with plasma-nm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to a git snapshot of the bluez5 branch. This would allow
  at least some bluetooth functionality in KDE with Bluez5.
  Will be replaced by an official version as soon as available.
- Dropped patch bluedevil-confirmmodechange-typo.patch due to
  upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384689600">- Remove the obex-data-server as runtime require. This is no
  longer needed with Bluez5</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387540800">- Update to 2.0 rc1 - first version officially supporting BlueZ5
- Drop no longer applieable bluedevil-dont-install-headers.diff
- Added remove-unused-bluedevilaction-link-target.patch to make the
  package build: bluedevilaction was forgotten, so linker can't
  find it</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1387627200">- Replace the tarball generated from tag, to the official one, from
  KDE mirrors
- Drop remove-unused-bluedevilaction-link-target.patch: it's not
  needed with new tarball</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1417780800">- Update to 2.0 Final:
  * Full Bluez5 support
- Removed checks for ancient openSUSE versions
- Added patches from upstream:
  0001-KCM-Adapters-Adapt-to-changes-in-libbluedevil.patch
  0002-Bluedevil-daemon-Save-and-restore-adapters-state.patch
  0003-daemon-Use-new-functions-for-restoring-adapters-stat.patch
  0004-Monolithic-Don-t-go-online-on-startup-when-there-is-.patch
  0005-daemon-Fix-killing-monolithic-when-there-are-no-adap.patch
  0006-wizard-Fix-accepting-PIN-in-SSP-pairing.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1419336000">- Update to 2.1
  * Remember powered state of all adapters, kde#337193
  * Monolithic (Bluetooth icon) will now be correctly hidden in
    system tray when all adapters are powered off, kde#341768
  * Monolithic will now be removed from system tray when there
    are no adapters
  * Action to send files over Bluetooth will now be shown only
    for file that can actually be sent (only local files)
  * PIN in pairing wizard will now be accepted only after
    clicking "Matches" button
  * kio_obexftp should now better handle errors and correctly
    reconnect after losing connection, kde#321560
  * kio_bluetooth will not crash when trying to access
    invalid device
- Drop patches merged upstream:
  0001-KCM-Adapters-Adapt-to-changes-in-libbluedevil.patch
  0002-Bluedevil-daemon-Save-and-restore-adapters-state.patch
  0003-daemon-Use-new-functions-for-restoring-adapters-stat.patch
  0004-Monolithic-Don-t-go-online-on-startup-when-there-is-.patch
  0005-daemon-Fix-killing-monolithic-when-there-are-no-adap.patch
  0006-wizard-Fix-accepting-PIN-in-SSP-pairing.patch</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1423310400">- Add 0001-daemon-Don-t-try-to-infinitely-kill-monolithic-when-.patch,
  kde#343682</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to 2.1.1
  * Last release based on KDE4.
  * Bugfixes:
  - don't try to infinitely kill monolithic when it fails (bko343682)
  - fix directly opening files from obexftp (eg. images in gwenview)
  - fix one crash in kded module (bko342581)
  - fix obexftp browse files on old S60 devices (bko342259)
- Drop upstream patch Add 0001-daemon-Don-t-try-to-infinitely-kill-monolithic-when-.patch</changelog>

</package>
<package pkgid="c782bece8a31f7eafd9d04fffa2430edfc8af48c747aebfac8444722fcb67e07" name="bluez" arch="i586">
    <version epoch="0" ver="5.8" rel="3.5.1"/>

<changelog author="seife+obs@b1-systems.com" date="1340798400">- ver 4.101:
  - Fix issue with missing BlueZ service file.
  - Fix issue with aborting A2DP setup during AVDTP start.
  - Fix issue with handling of multiple A2DP indication.
  - Fix issue with handling AVDTP abort with invalid SEID.
  - Fix issue with rejecting AVDTP abort commands.
  - Add support for handling AVDTP command collision.
- our bluez-4.100 patches are applied upstream
- apitest was removed and is thus no longer in bluez-test</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>

</package>
<package pkgid="48e45716abf51066b20215ca2f06bf97b9d8bfdabc9c7b524cdbca49d458e11c" name="bluez" arch="i586">
    <version epoch="0" ver="5.8" rel="3.9.1"/>

<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1394280000">- Add bluez-5.11-logitech-hid2hci.patch: fix logitech mx5500 mouse
  and keyboard, bnc#850478, bnc#681049</changelog>

</package>
<package pkgid="f3a0d13a1b783d2c4e6a97fe03a09c6fe5bf790c91b82b2acda999bb0ee5574b" name="bluez" arch="src">
    <version epoch="0" ver="5.8" rel="3.5.1"/>

<changelog author="seife+obs@b1-systems.com" date="1340798400">- ver 4.101:
  - Fix issue with missing BlueZ service file.
  - Fix issue with aborting A2DP setup during AVDTP start.
  - Fix issue with handling of multiple A2DP indication.
  - Fix issue with handling AVDTP abort with invalid SEID.
  - Fix issue with rejecting AVDTP abort commands.
  - Add support for handling AVDTP command collision.
- our bluez-4.100 patches are applied upstream
- apitest was removed and is thus no longer in bluez-test</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>

</package>
<package pkgid="1704fff708f6db75e22d1128aab0febe01ca0b580381c7a14ad11371edecfd81" name="bluez" arch="src">
    <version epoch="0" ver="5.8" rel="3.9.1"/>

<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1394280000">- Add bluez-5.11-logitech-hid2hci.patch: fix logitech mx5500 mouse
  and keyboard, bnc#850478, bnc#681049</changelog>

</package>
<package pkgid="e83d96ac0303e50628665d132defef1464c87c61c7f1e1a699fcb79d253cdcf0" name="bluez" arch="x86_64">
    <version epoch="0" ver="5.8" rel="3.5.1"/>

<changelog author="seife+obs@b1-systems.com" date="1340798400">- ver 4.101:
  - Fix issue with missing BlueZ service file.
  - Fix issue with aborting A2DP setup during AVDTP start.
  - Fix issue with handling of multiple A2DP indication.
  - Fix issue with handling AVDTP abort with invalid SEID.
  - Fix issue with rejecting AVDTP abort commands.
  - Add support for handling AVDTP command collision.
- our bluez-4.100 patches are applied upstream
- apitest was removed and is thus no longer in bluez-test</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>

</package>
<package pkgid="ef405838382fe0ae67e72d34f893833f3cd08dee17c49ecd1b01818ba464a999" name="bluez" arch="x86_64">
    <version epoch="0" ver="5.8" rel="3.9.1"/>

<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1394280000">- Add bluez-5.11-logitech-hid2hci.patch: fix logitech mx5500 mouse
  and keyboard, bnc#850478, bnc#681049</changelog>

</package>
<package pkgid="6285c59907b6665109f5a4568cbd9f2dcb1fa3f25ecfe9550b49de8fb61b67c0" name="bluez-cups" arch="i586">
    <version epoch="0" ver="5.8" rel="3.5.1"/>

<changelog author="seife+obs@b1-systems.com" date="1340798400">- ver 4.101:
  - Fix issue with missing BlueZ service file.
  - Fix issue with aborting A2DP setup during AVDTP start.
  - Fix issue with handling of multiple A2DP indication.
  - Fix issue with handling AVDTP abort with invalid SEID.
  - Fix issue with rejecting AVDTP abort commands.
  - Add support for handling AVDTP command collision.
- our bluez-4.100 patches are applied upstream
- apitest was removed and is thus no longer in bluez-test</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>

</package>
<package pkgid="75504cca6098a1f5477c274e8c9191aa45d420e5f3bd9525777da15006442c13" name="bluez-cups" arch="i586">
    <version epoch="0" ver="5.8" rel="3.9.1"/>

<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1394280000">- Add bluez-5.11-logitech-hid2hci.patch: fix logitech mx5500 mouse
  and keyboard, bnc#850478, bnc#681049</changelog>

</package>
<package pkgid="7d968c23e0e9c599fcf369d4533f27f633fe6ad61a6c7c96cb9829809e647d5a" name="bluez-cups" arch="x86_64">
    <version epoch="0" ver="5.8" rel="3.5.1"/>

<changelog author="seife+obs@b1-systems.com" date="1340798400">- ver 4.101:
  - Fix issue with missing BlueZ service file.
  - Fix issue with aborting A2DP setup during AVDTP start.
  - Fix issue with handling of multiple A2DP indication.
  - Fix issue with handling AVDTP abort with invalid SEID.
  - Fix issue with rejecting AVDTP abort commands.
  - Add support for handling AVDTP command collision.
- our bluez-4.100 patches are applied upstream
- apitest was removed and is thus no longer in bluez-test</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>

</package>
<package pkgid="a22af0377f847dc276ff34f4f6d9e6de1b7c2bf214a0c5a294b1b4dc8ccb19b4" name="bluez-cups" arch="x86_64">
    <version epoch="0" ver="5.8" rel="3.9.1"/>

<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1394280000">- Add bluez-5.11-logitech-hid2hci.patch: fix logitech mx5500 mouse
  and keyboard, bnc#850478, bnc#681049</changelog>

</package>
<package pkgid="c613b3ac4f6d59abff67c4786c74dbfebcd9c3038df042c0a6aff9409c6dd090" name="bluez-devel" arch="i586">
    <version epoch="0" ver="5.8" rel="3.5.1"/>

<changelog author="seife+obs@b1-systems.com" date="1340798400">- ver 4.101:
  - Fix issue with missing BlueZ service file.
  - Fix issue with aborting A2DP setup during AVDTP start.
  - Fix issue with handling of multiple A2DP indication.
  - Fix issue with handling AVDTP abort with invalid SEID.
  - Fix issue with rejecting AVDTP abort commands.
  - Add support for handling AVDTP command collision.
- our bluez-4.100 patches are applied upstream
- apitest was removed and is thus no longer in bluez-test</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>

</package>
<package pkgid="9d8b540f26773764dc526338efc06b1979cd9babcb31733957a8a17bf62c4114" name="bluez-devel" arch="i586">
    <version epoch="0" ver="5.8" rel="3.9.1"/>

<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1394280000">- Add bluez-5.11-logitech-hid2hci.patch: fix logitech mx5500 mouse
  and keyboard, bnc#850478, bnc#681049</changelog>

</package>
<package pkgid="3b322cc8d6a49a0f93bbd71641bd5aa06d18a5210ad10f2a289bf5fc22907982" name="bluez-devel" arch="x86_64">
    <version epoch="0" ver="5.8" rel="3.5.1"/>

<changelog author="seife+obs@b1-systems.com" date="1340798400">- ver 4.101:
  - Fix issue with missing BlueZ service file.
  - Fix issue with aborting A2DP setup during AVDTP start.
  - Fix issue with handling of multiple A2DP indication.
  - Fix issue with handling AVDTP abort with invalid SEID.
  - Fix issue with rejecting AVDTP abort commands.
  - Add support for handling AVDTP command collision.
- our bluez-4.100 patches are applied upstream
- apitest was removed and is thus no longer in bluez-test</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>

</package>
<package pkgid="107b0453f745d42e0857cc8cb935e7828a51d34e1089d563acd9a3c947a7c19e" name="bluez-devel" arch="x86_64">
    <version epoch="0" ver="5.8" rel="3.9.1"/>

<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1394280000">- Add bluez-5.11-logitech-hid2hci.patch: fix logitech mx5500 mouse
  and keyboard, bnc#850478, bnc#681049</changelog>

</package>
<package pkgid="d30069243f8a2151ceaa5e9919ce214664e804d30ae26e7cf9f59cbdc098e43d" name="bluez-devel-32bit" arch="x86_64">
    <version epoch="0" ver="5.8" rel="3.5.1"/>

<changelog author="seife+obs@b1-systems.com" date="1340798400">- ver 4.101:
  - Fix issue with missing BlueZ service file.
  - Fix issue with aborting A2DP setup during AVDTP start.
  - Fix issue with handling of multiple A2DP indication.
  - Fix issue with handling AVDTP abort with invalid SEID.
  - Fix issue with rejecting AVDTP abort commands.
  - Add support for handling AVDTP command collision.
- our bluez-4.100 patches are applied upstream
- apitest was removed and is thus no longer in bluez-test</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>

</package>
<package pkgid="253a23f77ddee4f47a3278457b764620f1d24b38d07642d871fb12c1189b8d1e" name="bluez-devel-32bit" arch="x86_64">
    <version epoch="0" ver="5.8" rel="3.9.1"/>

<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1394280000">- Add bluez-5.11-logitech-hid2hci.patch: fix logitech mx5500 mouse
  and keyboard, bnc#850478, bnc#681049</changelog>

</package>
<package pkgid="2826119c1dec9568f92ad8627c8a82a3f63c045be02ef20d2e97af91fcc2b95f" name="bluez-test" arch="i586">
    <version epoch="0" ver="5.8" rel="3.5.1"/>

<changelog author="seife+obs@b1-systems.com" date="1340798400">- ver 4.101:
  - Fix issue with missing BlueZ service file.
  - Fix issue with aborting A2DP setup during AVDTP start.
  - Fix issue with handling of multiple A2DP indication.
  - Fix issue with handling AVDTP abort with invalid SEID.
  - Fix issue with rejecting AVDTP abort commands.
  - Add support for handling AVDTP command collision.
- our bluez-4.100 patches are applied upstream
- apitest was removed and is thus no longer in bluez-test</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>

</package>
<package pkgid="d616084f40db1623dcf50548ab62a548e183b6e724d8729fb997a7d669ffae17" name="bluez-test" arch="i586">
    <version epoch="0" ver="5.8" rel="3.9.1"/>

<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1394280000">- Add bluez-5.11-logitech-hid2hci.patch: fix logitech mx5500 mouse
  and keyboard, bnc#850478, bnc#681049</changelog>

</package>
<package pkgid="b03bc9c8c31cb75f47ebd246a2b3c3a3a2f1a59d89a630c30232a7b9506c4668" name="bluez-test" arch="x86_64">
    <version epoch="0" ver="5.8" rel="3.5.1"/>

<changelog author="seife+obs@b1-systems.com" date="1340798400">- ver 4.101:
  - Fix issue with missing BlueZ service file.
  - Fix issue with aborting A2DP setup during AVDTP start.
  - Fix issue with handling of multiple A2DP indication.
  - Fix issue with handling AVDTP abort with invalid SEID.
  - Fix issue with rejecting AVDTP abort commands.
  - Add support for handling AVDTP command collision.
- our bluez-4.100 patches are applied upstream
- apitest was removed and is thus no longer in bluez-test</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>

</package>
<package pkgid="fcb6170ae3334c4a999dae657525f97d095c9217a7d68ae8ee229431fef2fd61" name="bluez-test" arch="x86_64">
    <version epoch="0" ver="5.8" rel="3.9.1"/>

<changelog author="seife+obs@b1-systems.com" date="1342008000">- remove unused bluetooth.sh, bluez-4.75-udev-use-helperscript.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1342785600">- add patch from upstream git to fix bluez networking</changelog>
<changelog author="seife+obs@b1-systems.com" date="1343476800">- remove unused service file (now in upstream tarball)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1346155200">- enable bluetooth.service on install (bnc#772455)</changelog>
<changelog author="fcrozat@suse.com" date="1350475200">- Change udev rules location with udev &gt; 190</changelog>
<changelog author="fcrozat@suse.com" date="1350475201">- Fix build with new systemd / udev location.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1350475202">- remove unused 001-remove-rule-dell-mouse.patch</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351684800">- bluez-coldplug init script is forced but it s not needed
  when using systemd with dbus activation.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1357905600">- Add changelog entry for older change so factory-auto wont reject this.
- This requests removes sbc building and packaging from bluez.
  SBC recently gets its own package and sources are even stripped out ot
  Bluez in current git master (future 5.0).
  On top of that current bluez-devel package conflicts with sbc-devel.
  Note: This change may broke packages which use sbc from bluez-devel
  as new sbc-devel package use different include path.
  This change is required to properly build PulseAudio 3.0</changelog>
<changelog author="dimstar@opensuse.org" date="1358769600">- Unconditionally enable the systemd bluetooth service (actual
  activation of bluez is triggered by udev) (bnc#796671).
- Run spec-cleaner.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1359115200">- also run spec-cleaner on bluez-gstreamer.spec, add README for
  packagers, fix bluez-gstreamer changelog</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362052800">- add bluez-4.101-new-automake.diff, fix build with automake-1.13.1</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="guillaume@opensuse.org" date="1376481600">- Disable check when building with qemu (fix armv6)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376568000">- update to bluez-5.4
  Huge, incompatible update. Some points:
  * hcidump merged
  * obexd merged
  * no unix socket anymore (only d-bus)
  * libbluetooth and bluez-devel is *deprecated* and will be
    removed. Only included for now to keep the breakage smaller.
- dropped patches (no longer needed):
  * 0001-network-fix-network-Connect-method-parameters.patch
  * bluez-4.101-new-automake.diff
- new patch to suppress a stupid compiler warning:
  * bluez-5.4-compilerwarning.diff</changelog>
<changelog author="seife+obs@b1-systems.com" date="1376654400">- update to bluez-5.8
  * changelog is in the package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1379160000">- place socket in /run , not /var/run (bluez-sdp-unix-path.patch)</changelog>
<changelog author="dimstar@opensuse.org" date="1381233600">- Do not package systemd user session service file.
- Change DBus user service to be self-contained, and not rely on
  Systemd activation (bnc#842688).</changelog>
<changelog author="dimstar@opensuse.org" date="1384344000">- Add bluez-usercache.patch: obex: Use user's cache dir as a
  default root. Taken from git; part of bnc#850083.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1394280000">- Add bluez-5.11-logitech-hid2hci.patch: fix logitech mx5500 mouse
  and keyboard, bnc#850478, bnc#681049</changelog>

</package>
<package pkgid="5df4d22451b7042dce46ff2b44475ce8b3f10840ab56683b7b2cb6463145e028" name="boinc-client" arch="i586">
    <version epoch="0" ver="6.12.43" rel="6.12.1"/>

<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304251200">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328443200">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328875200">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328875201">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>
<changelog author="chris@computersalat.de" date="1394971200">- fix for bnc#779335
  * disabled boinc-completion.patch</changelog>

</package>
<package pkgid="393bbc5b38f55c444e10e7a48df2e2a34b846f1adb5a6fde933d11307d0ead43" name="boinc-client" arch="i586">
    <version epoch="0" ver="6.12.43" rel="6.8.1"/>

<changelog author="saigkill@opensuse.org" date="1303905600">- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-client-NotebookWxPanel.patch (Fixed Upstream)
- Removed boinc-client-wxWindowListNode.patch (Fixed Upstream)</changelog>
<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304337600">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529601">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328961601">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961602">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>

</package>
<package pkgid="aae0c78bf46574c7138b7e5e019cb67041500cb33420371e1771bcd4b8f7dec7" name="boinc-client" arch="src">
    <version epoch="0" ver="6.12.43" rel="6.12.1"/>

<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304251200">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328443200">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328875200">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328875201">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>
<changelog author="chris@computersalat.de" date="1394971200">- fix for bnc#779335
  * disabled boinc-completion.patch</changelog>

</package>
<package pkgid="37563f433c7c26dd7388a362c75e3362aa315ad168aa304c919def3b821d9632" name="boinc-client" arch="src">
    <version epoch="0" ver="6.12.43" rel="6.8.1"/>

<changelog author="saigkill@opensuse.org" date="1303905600">- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-client-NotebookWxPanel.patch (Fixed Upstream)
- Removed boinc-client-wxWindowListNode.patch (Fixed Upstream)</changelog>
<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304337600">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529601">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328961601">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961602">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>

</package>
<package pkgid="c2a33ecbc02b421fd41bfae4c15f7be717c14a8551a47b86224d22949eda3bdd" name="boinc-client" arch="x86_64">
    <version epoch="0" ver="6.12.43" rel="6.12.1"/>

<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304251200">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328443200">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328875200">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328875201">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>
<changelog author="chris@computersalat.de" date="1394971200">- fix for bnc#779335
  * disabled boinc-completion.patch</changelog>

</package>
<package pkgid="efbef88138f2838755789c52a19f2c39b76c16943f7e8f2b50ec1a0ddee03d77" name="boinc-client" arch="x86_64">
    <version epoch="0" ver="6.12.43" rel="6.8.1"/>

<changelog author="saigkill@opensuse.org" date="1303905600">- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-client-NotebookWxPanel.patch (Fixed Upstream)
- Removed boinc-client-wxWindowListNode.patch (Fixed Upstream)</changelog>
<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304337600">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529601">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328961601">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961602">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>

</package>
<package pkgid="3e199ff165d79e480b796ed16b38978ed56c56801f74187be2d31b885940a182" name="boinc-client-devel" arch="i586">
    <version epoch="0" ver="6.12.43" rel="6.12.1"/>

<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304251200">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328443200">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328875200">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328875201">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>
<changelog author="chris@computersalat.de" date="1394971200">- fix for bnc#779335
  * disabled boinc-completion.patch</changelog>

</package>
<package pkgid="bcd8518d3620c2ee245c1bd7a9563407d32366886129b1bceef4100ff6fe8401" name="boinc-client-devel" arch="i586">
    <version epoch="0" ver="6.12.43" rel="6.8.1"/>

<changelog author="saigkill@opensuse.org" date="1303905600">- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-client-NotebookWxPanel.patch (Fixed Upstream)
- Removed boinc-client-wxWindowListNode.patch (Fixed Upstream)</changelog>
<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304337600">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529601">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328961601">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961602">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>

</package>
<package pkgid="4dfab8706b21479411c301a81ac07b2f86af6f848ef229f0f141b6d1b647307d" name="boinc-client-devel" arch="x86_64">
    <version epoch="0" ver="6.12.43" rel="6.12.1"/>

<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304251200">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328443200">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328875200">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328875201">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>
<changelog author="chris@computersalat.de" date="1394971200">- fix for bnc#779335
  * disabled boinc-completion.patch</changelog>

</package>
<package pkgid="20bbac8287a4918f2f682921eafd77396ca8a52e76075cbccb83bd63dc830791" name="boinc-client-devel" arch="x86_64">
    <version epoch="0" ver="6.12.43" rel="6.8.1"/>

<changelog author="saigkill@opensuse.org" date="1303905600">- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-client-NotebookWxPanel.patch (Fixed Upstream)
- Removed boinc-client-wxWindowListNode.patch (Fixed Upstream)</changelog>
<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304337600">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529601">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328961601">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961602">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>

</package>
<package pkgid="a2dc655762f82686185e24d3eb54c9656097f6ab7cd696ec0099c3a7acd60c77" name="boinc-client-doc" arch="noarch">
    <version epoch="0" ver="6.12.43" rel="6.12.1"/>

<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304251200">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328443200">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328875200">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328875201">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>
<changelog author="chris@computersalat.de" date="1394971200">- fix for bnc#779335
  * disabled boinc-completion.patch</changelog>

</package>
<package pkgid="060c1fbac529a868256496ea8822d1dfd42b890b3695b56c5967a4778dd3dc59" name="boinc-client-doc" arch="noarch">
    <version epoch="0" ver="6.12.43" rel="6.8.1"/>

<changelog author="saigkill@opensuse.org" date="1303905600">- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-client-NotebookWxPanel.patch (Fixed Upstream)
- Removed boinc-client-wxWindowListNode.patch (Fixed Upstream)</changelog>
<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304337600">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529601">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328961601">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961602">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>

</package>
<package pkgid="5e27335007937045dd321a727408986e9a9251c395b8265a3740a295ebea3132" name="boinc-client-lang" arch="noarch">
    <version epoch="0" ver="6.12.43" rel="6.12.1"/>

<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304251200">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328443200">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328875200">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328875201">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>
<changelog author="chris@computersalat.de" date="1394971200">- fix for bnc#779335
  * disabled boinc-completion.patch</changelog>

</package>
<package pkgid="4db88305c8a44ea288aafaa50320c8b1412fcaefed1cbdfc5c04ea49355df37d" name="boinc-client-lang" arch="noarch">
    <version epoch="0" ver="6.12.43" rel="6.8.1"/>

<changelog author="saigkill@opensuse.org" date="1303905600">- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-client-NotebookWxPanel.patch (Fixed Upstream)
- Removed boinc-client-wxWindowListNode.patch (Fixed Upstream)</changelog>
<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304337600">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529601">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328961601">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961602">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>

</package>
<package pkgid="7a8b44b5f590f2f1c77455f2ebe5116e9ff4fa105124bee1642c46ae9467e64d" name="boinc-manager" arch="i586">
    <version epoch="0" ver="6.12.43" rel="6.12.1"/>

<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304251200">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328443200">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328875200">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328875201">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>
<changelog author="chris@computersalat.de" date="1394971200">- fix for bnc#779335
  * disabled boinc-completion.patch</changelog>

</package>
<package pkgid="9b9fb607e74af6da882b5e36d3a720a5e8dd005bf2ac5d70f436490cde5faf9c" name="boinc-manager" arch="i586">
    <version epoch="0" ver="6.12.43" rel="6.8.1"/>

<changelog author="saigkill@opensuse.org" date="1303905600">- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-client-NotebookWxPanel.patch (Fixed Upstream)
- Removed boinc-client-wxWindowListNode.patch (Fixed Upstream)</changelog>
<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304337600">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529601">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328961601">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961602">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>

</package>
<package pkgid="6260c31dfcf44a9a733f0f9febb7d023e3e3f0693b05f94c8a05670a8975086d" name="boinc-manager" arch="x86_64">
    <version epoch="0" ver="6.12.43" rel="6.12.1"/>

<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304251200">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328443200">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328875200">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328875201">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>
<changelog author="chris@computersalat.de" date="1394971200">- fix for bnc#779335
  * disabled boinc-completion.patch</changelog>

</package>
<package pkgid="8769d53d94e035723d3ab1048a230c6702b4c7892683ce599cc1c4cb24d4afb0" name="boinc-manager" arch="x86_64">
    <version epoch="0" ver="6.12.43" rel="6.8.1"/>

<changelog author="saigkill@opensuse.org" date="1303905600">- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-client-NotebookWxPanel.patch (Fixed Upstream)
- Removed boinc-client-wxWindowListNode.patch (Fixed Upstream)</changelog>
<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304337600">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529601">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328961601">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961602">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>

</package>
<package pkgid="6ac93040af025a63bab189dca77b1bf301516ec73fa4fb168f2d620bb8de6c50" name="boinc-manager-lang" arch="noarch">
    <version epoch="0" ver="6.12.43" rel="6.12.1"/>

<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304251200">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328443200">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328875200">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328875201">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>
<changelog author="chris@computersalat.de" date="1394971200">- fix for bnc#779335
  * disabled boinc-completion.patch</changelog>

</package>
<package pkgid="e850461bb2ac990dc5369701adb9005ab82078eec9f31039cdcf1288ea9e6ce1" name="boinc-manager-lang" arch="noarch">
    <version epoch="0" ver="6.12.43" rel="6.8.1"/>

<changelog author="saigkill@opensuse.org" date="1303905600">- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-bnc_465676.patch (Fixed Upstream)
- Removed boinc-client-NotebookWxPanel.patch (Fixed Upstream)
- Removed boinc-client-wxWindowListNode.patch (Fixed Upstream)</changelog>
<changelog author="saigkill@opensuse.org" date="1303992000">- Rewritten the Spec based on Malcolm Lewis Improvements (THX)</changelog>
<changelog author="saigkill@opensuse.org" date="1304078400">- filed shared-lib-calls-exit in boinc as
  http://boinc.berkeley.edu/trac/ticket/1098
- filed binary-or-shlib-calls-gethostbyname as
  http://boinc.berkeley.edu/trac/ticket/1099</changelog>
<changelog author="chris@computersalat.de" date="1304337600">- update to 6.10.60
  * Fix: Project list issue in the attach wizard that lead to a crash
- fix deps
  o wxGTK-devel
- enable parallel build</changelog>
<changelog author="pth@suse.de" date="1305547200">- Avoid buffer overflow in filesys.cpp(dir_size).</changelog>
<changelog author="Sascha.Manns@open-slx.de" date="1314705600">- fixed Bug bnc#714623 (/var/lock/subsys unsupported)</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="chris@computersalat.de" date="1328184000">- rework patches
- rework sysconfig file
- rework logrotate file
- add SuSElike init script
- fix user add
  * boinc needs a shell
- fix wrapper
  * replace boincmanager with boinc-manager and add symlink for
    backward compatibility
  * fix boinc_gui -&gt; boinc-gui
- fix License
  * LGPLv3
- fix for bnc#689499
  * a blocked boinc client, the manager works</changelog>
<changelog author="chris@computersalat.de" date="1328356800">- fix deps for boinc-client
  * Requires libboinc6</changelog>
<changelog author="chris@computersalat.de" date="1328529600">- remove client dep of manager
  * manager does not really need a local boinc-client ;)
- fix desktop file</changelog>
<changelog author="chris@computersalat.de" date="1328529601">- fix License (http://www.spdx.org/licenses/)
  * LGPL-3.0</changelog>
<changelog author="chris@computersalat.de" date="1328702400">- fix for bnc#745887 ( Confirm licensing of boinc-client 6.10.60 )
- fix for bnc#744612 ( File /usr/bin/boinc_gui incorrectly named )
- fix for bnc#744389 ( boinc-client will not run )
- fix for bnc#732118 ( BOINC installs but will not run )</changelog>
<changelog author="chris@computersalat.de" date="1328961600">- fix sed for boinc-manager</changelog>
<changelog author="chris@computersalat.de" date="1328961601">- update tp 6.12.43
  * sorry but there is no ChangeLog :(
- rework patches
- remove obsolete patches
  * boinc-server.patch
  * boinc-client-str_util.patch
- add boinc-client-lang subpkg
- fix DSOLinkChange for suse &gt;= 1210
  * see https://fedoraproject.org/wiki/UnderstandingDSOLinkChange
    for more info, special thanks to Stefan Dirsch :)</changelog>
<changelog author="chris@computersalat.de" date="1328961602">- add glib_h patch</changelog>
<changelog author="chris@computersalat.de" date="1341144000">- add BOINC_DIR to sysconfig
  * make BOINC_DIR configurable (a proposal of Carsten Neumann)</changelog>
<changelog author="coolo@suse.com" date="1341921600">- fix compilation for factory and 12.2</changelog>
<changelog author="chris@computersalat.de" date="1341921601">- rename patch
  * fix-automake-conditional to boinc-client-AM_CONDITIONAL patch
- fix build for SLE_11
  * AM_CONDITIONAL patch &gt;= 12.2</changelog>
<changelog author="coolo@suse.com" date="1364990400">- do not own bash directories</changelog>
<changelog author="pth@suse.de" date="1392897600">- Add libX11 and libgtk-x11-2.0 to the libraries boincmgr is
  linked to: boinc-add_libs_for_boincmgr.patch
- Remove INSTALL from package documentation.</changelog>

</package>
<package pkgid="26a99eb697354c87ce1b2fc10674c3fe0d93bfc7337b65cc8f9f84b2e4f818b4" name="bomber" arch="i586">
    <version epoch="0" ver="4.11.3" rel="14.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
- Package was split of from kdegames4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="ab62ea70e0f50dcb48ff8df3e20cfa6628a0faf267a41bf233e36984daacd584" name="bomber" arch="i586">
    <version epoch="0" ver="4.11.4" rel="146.3"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
- Package was split of from kdegames4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="167634ed24d0ed98b07b6536e89ae47d0cd7290e72a024e65fa22aa674f35234" name="bomber" arch="i586">
    <version epoch="0" ver="4.11.5" rel="156.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="2ef8f99aab848d4b335a24d1f014a85e3497a1fdeec07c9bc85454efdc813cb6" name="bomber" arch="src">
    <version epoch="0" ver="4.11.3" rel="14.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
- Package was split of from kdegames4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="af50d9df5c0c89c3426e52013f7761cb319f8eda8ac8c2c77d537e26a17ba771" name="bomber" arch="src">
    <version epoch="0" ver="4.11.4" rel="146.3"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
- Package was split of from kdegames4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="69f1e37f32f20ba17a387005e8371f014418d08d1c8c05e982730b7539030b94" name="bomber" arch="src">
    <version epoch="0" ver="4.11.5" rel="156.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="6112a383fd8cce7abbc914f87b0d47c167be6288c129561d0181346eff160832" name="bomber" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="14.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
- Package was split of from kdegames4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="5fbbdb44956108c121dfa697c0ff4927742c6ce04eba24287837d980f201bca7" name="bomber" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="146.3"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
- Package was split of from kdegames4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="7939a125650c29ffa645727e7eb196f500045957946d076e12a3145870c4517f" name="bomber" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="156.1"/>

<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="e6e12b7ef1aec77f97219bd487f1dcf0746571d03198a1353e046ad63c2f427b" name="bot-sentry" arch="src">
    <version epoch="0" ver="1.3.0" rel="6.4.1"/>

<changelog author="sbrabec@suse.cz" date="1157371200">- New SuSE package, version 0.10.0 (#183858).</changelog>
<changelog author="maw@suse.de" date="1167134400">- Move to /usr.</changelog>
<changelog author="sbrabec@suse.cz" date="1180353600">- Package renamed to pidgin-bs and updated to version 1.0.0:
  * Support for pidgin.
  * Automatically change any conflicting settings found in the
    Psychic plugin.</changelog>
<changelog author="sbrabec@suse.cz" date="1185451200">- Package renamed to pidgin-bot-sentry (bot-sentry in upstream).
- Updated to version 1.1.0:
  * adds support for enabling/disabling for individual accounts
  * bug fixes, improvements and translation updates</changelog>
<changelog author="maw@suse.de" date="1186488000">- Use %fdupes
- Split off a -lang subpackage.</changelog>
<changelog author="sbrabec@suse.cz" date="1193227200">- Do not call (too old) autoconf in older SuSE versions.</changelog>
<changelog author="sbrabec@suse.cz" date="1220529600">- Updated to version 1.3.0:
  * smart handling of auth requests.
  * partial disabling of challenge by keeping setup blank
  * translation updates
  * UI improvements
  * better support for the latest pidgin</changelog>
<changelog author="sbrabec@suse.cz" date="1221480000">- Removed superfluous --libdir.</changelog>
<changelog author="puzel@suse.cz" date="1244721600">- fix build</changelog>
<changelog author="andreas.stieger@gmx.de" date="1316865600">- remove dependency on licenses, package no longer in Factory</changelog>
<changelog author="lazy.kent@opensuse.org" date="1322913600">- Build requires libtool.
- Requires pidgin.
- Build doesn't require fdupes.
- Corrected License tag
- Use full URL as a source.
- Removed check for obsolete versions of openSUSE.
- Doesn't require lang_package (recommends).
- Spec clean up.</changelog>
<changelog author="vuntz@opensuse.org" date="1326369600">- Cleanup for Factory:
  + Rename source package from pidgin-bot-sentry to bot-sentry,
    following upstream name.
  + Create a libpurple-plugin-bot-sentry binary package for the
    plugin.
  + Add appropriate Provides/Obsoletes for smooth migration.
  + Do not use a patch and autoreconf call to rename a translation,
    just move the files in %install.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Add a comment about the fact that the COPYING file in the tarball
  most likely wrongfully states the program is GPL-3.0(+): the code
  is GPL-2.0+ and this COPYING file seems to come from autotools
  magic, and not from the author. Fix bnc#741048.</changelog>

</package>
<package pkgid="cf5062752b80749c4fefeadd5fcd22fe0ec8c133fb8d6719911f96869c384fdf" name="bouncycastle" arch="noarch">
    <version epoch="0" ver="1.53" rel="8.3.1"/>

<changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
<changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
<changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
<changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
<changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
<changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
<changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
<changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
<changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
<changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
<changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>

</package>
<package pkgid="fa1de28c5050f201e07cf06fab3ff6b712281540b47acd42945a532297595ef6" name="bouncycastle" arch="src">
    <version epoch="0" ver="1.53" rel="8.3.1"/>

<changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
<changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
<changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
<changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
<changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
<changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
<changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
<changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
<changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
<changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
<changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>

</package>
<package pkgid="087432800c44a45100c5547e0716873d920ca0a0b6ee5f54fc2d1582dc66d001" name="bouncycastle-javadoc" arch="noarch">
    <version epoch="0" ver="1.53" rel="8.3.1"/>

<changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
<changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
<changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
<changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
<changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
<changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
<changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
<changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
<changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
<changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
<changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>

</package>
<package pkgid="d544a138bcd08d299a37e884b1fd95166653ab42304126297b1f3bbec621f7ad" name="bovo" arch="i586">
    <version epoch="0" ver="4.11.3" rel="14.8"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php
- Package was split of from kdegames4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="48de245ae7fc58f61e8c64c77ea83c37c1fb2099fadc0438dfe9ea1ee0f22d9f" name="bovo" arch="i586">
    <version epoch="0" ver="4.11.4" rel="146.29"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php
- Package was split of from kdegames4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="a5f78137feb863203170685ed06e535cd0e43877cf9eeb9affb803192daab7d6" name="bovo" arch="i586">
    <version epoch="0" ver="4.11.5" rel="156.15"/>

<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="1604975035d339714eab1f713e7d02daa51becaca9cc84b14c46ac5ff26aa154" name="bovo" arch="src">
    <version epoch="0" ver="4.11.3" rel="14.8"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php
- Package was split of from kdegames4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="8be03ce09c6272941a0ef7a644c6f710da04b3a3b52f4b75155c51a065cd64d7" name="bovo" arch="src">
    <version epoch="0" ver="4.11.4" rel="146.29"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php
- Package was split of from kdegames4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="3b527a2564a063901531adbcaa2c22bc7d2087795d93bce4b62bc2ab5b5f76e5" name="bovo" arch="src">
    <version epoch="0" ver="4.11.5" rel="156.15"/>

<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="aa18f299c302be8148cb8cbf455bc42116c08f5fd11a9e18fee9d6d9e55fb4d5" name="bovo" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="14.8"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php
- Package was split of from kdegames4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="a9f90e24f4da5d5ccad46793ed78663bffeb686af0fcdb9b51f8fc07b4cf3aa7" name="bovo" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="146.29"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php
- Package was split of from kdegames4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="177a5f28e065d37ce91b5c5801ffa066a6ce5275814deb2d14e218733e9c622d" name="bovo" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="156.15"/>

<changelog author="tittiatcoke@gmail.com" date="1353844800">- Drop patch 4_9_branch.diff as it is not used at all</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="228c32115a522886bb62c65e8f409c87d38d3ddad84708c9dad3e56abfa4202e" name="branding-basedonopensuse" arch="i586">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="8dc2de165df2cd2f16301a6558ea07f37956bb9c4f38494343443d77534e7ca1" name="branding-basedonopensuse" arch="src">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="b216bcdc36e9e64871375326578644d9b0614774020994ec04b087129473144f" name="branding-basedonopensuse" arch="x86_64">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="5e15ebf04fd6bdffe6d7b88deb4009b07a16cd2603bc3348c63627f429e3ce5e" name="brasero" arch="i586">
    <version epoch="0" ver="3.10.0" rel="3.6.3"/>

<changelog author="vuntz@opensuse.org" date="1317124800">- Update to version 3.2.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="vuntz@opensuse.org" date="1317902400">- Change categories in brasero.desktop so that brasero doesn't
  appear twice in the gnome-shell list of applications.
  Fix bnc#722215.</changelog>
<changelog author="rbrownccb@opensuse.org" date="1323259200">- Add wodim Requires to fix burning of CDs (bnc#729984).</changelog>
<changelog author="vuntz@opensuse.org" date="1324641600">- Split typelib file from libbrasero-burn3-1 into
  typelib-1_0-BraseroBurn-3_2_0 and from libbrasero-media3-1 into
  typelib-1_0-BraseroMedia-3_2_0.
- Add typelib-1_0-BraseroBurn-3_2_0 and
  typelib-1_0-BraseroMedia-3_2_0 Requires to devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Add support for tracker 0.13/0.14:
  + Add brasero-tracker-0.14.patch.
  + Add gnome-common BuildRequires and call to gnome-autogen.sh,
    needed for above patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1329652800">- Add pkgconfig(ice) and pkgconfig(sm) BuildRequires: they used to
  be pulled in by something else before.</changelog>
<changelog author="reddwarf@opensuse.org" date="1330948800">- Enable libburnia plugins:
  + Add pkgconfig(lbburn-1) and pkgconfig(libisofs-1) BuildRequires
  + Pass --enable-libburnia to configure</changelog>
<changelog author="dimstar@opensuse.org" date="1330948801">- Update to version 3.3.91:
  + Correct CD cover dimensions (bgo#660918).
  + Call gettext() where translated string array items are used.
  + Add a fix for optical drive not selected by default.
  + Update categories in brasero.desktop
  + Use g_mkdtemp() rather than mkdtemp() (bgo#623890)
  + Support build against tracker 0.13/0.14
  + Build fixes (including bgo#641650)
  + Documentation improvements.
  + Updated translations.
- Drop brasero-tracker-0.14.patch: fixed upstream
- Remove hack to change categories in brasero.desktop: fixed
  upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh:
  they were only needed for above patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1332244800">- Update to version 3.3.92:
  + Fix formatting error in man page.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 3.4.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1341144000">- Add cdrdao and cdrkit-cdrtools-compat Requires: Those packages
  are required for CD Audio copy features (bnc#743601).</changelog>
<changelog author="dimstar@opensuse.org" date="1347969600">- Update to version 3.5.92:
  + Fix build against gstreamer-plugins-base-1.0
  + Fix build without preview
  + build: Require gstpbutils-1.0 instead of 0.10
  + Port to new documentation infrastructure
  + Port brasero to GStreamer 1.0
  + brasero-project: include libxml/xmlerror.h for xmlError
  + Put settings in the correct path
  + Add Desktop Actions for Unity
  + Updated translations.
- Replace gnome-doc-utils-devel with yelp-tools, following
  upstreams port o the new documentation infrastructure.
- Replace BuildRequires for the switch to GStreamer 1.0:
  + Old: pkgconfig(gstreamer-0.10),
    pkgconfig(gstreamer-plugins-base-0.10)
  + New: pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-video-1.0),
    pkgconfig(gstreamer-tag-1.0), pkgconfig(gstreamer-pbutils-1.0),
    pkgconfig(gstreamer-plugins-base-1.0)
- Replace Requires for the switch to GStreamer 1.0:
  + Old: gstreamer010, gstreamer010-plugins-base,
    gstreamer010-plugins-oil, gstreamer010-plugins-bad
  + New: gstreamer, gstreamer-plugins-base, gstreamer-plugins-bad.
- Add explicit pkgconfig(gdk-x11-3.0) BuildRequires: configure
  checks for it. This does not cause any change for our package, as
  it is being pulled in indirectly anyway.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Fix build, link libbrasero-burn against libm (for ceil(3))
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352721600">- Update to version 3.6.1:
  + Libburnia plugin: Fix while loop in
    `brasero_libisofs_write_image_to_fd_thread()` (bgo#685983)
  + Remove nonexisting options from the man page
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 3.7.91:
  + Add a question mark to a question.
  + Support notification filtering.
  + Remove nonexisting options from the man page.
  + Fix while loop in `brasero_libisofs_write_image_to_fd_thread.
  + Updated translations.
- Add brasero-tracker-0.16.patch: Fix build with tracker 0.16.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 3.8.0:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="davejplater@gmail.com" date="1367755200">- Allow wodim as well as cdrecord as backends:
  + Drop wodim Requires.
  + Add /usr/bin/cdrecord, /usr/bin/mkisofs and /usr/bin/readcd
    Requires: they are provided by wodim and cdrtools.
  + Add /usr/bin/cdda2wav Requires: provided by
    cdrkit-cdrtools-compat and cdrtools.</changelog>
<changelog author="zaitor@opensuse.org" date="1388059200">- Update to version 3.10.0 (bnc#871232):
  + Fixed drawing issues in media selection combo boxes.
  + Fix several crashers.
  + Fixes for new autotools.
  + Disable audio normalisation - it's broken since GStreamer 1.0.
  + Updated translations.
- Drop brasero-tracker-0.16.patch, fixed upstream.
- Drop gnome-common BuildRequires, and stop using autoreconf, not
  needed anymore since we do not carry any patches.
- Stop passing --disable-scrollkeeper, no longer needed nor
  recognized.
- Add pkgconfig(libburn-1) and pkgconfig(libisofs-1) BuildRequires
  in order to build the libburnia plugin, we already pass
  - -enable-libburnia to configure.</changelog>

</package>
<package pkgid="c3020d382e7910769df370e41c914c46160e64c14dedda439cfc4a6938bcb6a6" name="brasero" arch="src">
    <version epoch="0" ver="3.10.0" rel="3.6.3"/>

<changelog author="vuntz@opensuse.org" date="1317124800">- Update to version 3.2.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="vuntz@opensuse.org" date="1317902400">- Change categories in brasero.desktop so that brasero doesn't
  appear twice in the gnome-shell list of applications.
  Fix bnc#722215.</changelog>
<changelog author="rbrownccb@opensuse.org" date="1323259200">- Add wodim Requires to fix burning of CDs (bnc#729984).</changelog>
<changelog author="vuntz@opensuse.org" date="1324641600">- Split typelib file from libbrasero-burn3-1 into
  typelib-1_0-BraseroBurn-3_2_0 and from libbrasero-media3-1 into
  typelib-1_0-BraseroMedia-3_2_0.
- Add typelib-1_0-BraseroBurn-3_2_0 and
  typelib-1_0-BraseroMedia-3_2_0 Requires to devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Add support for tracker 0.13/0.14:
  + Add brasero-tracker-0.14.patch.
  + Add gnome-common BuildRequires and call to gnome-autogen.sh,
    needed for above patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1329652800">- Add pkgconfig(ice) and pkgconfig(sm) BuildRequires: they used to
  be pulled in by something else before.</changelog>
<changelog author="reddwarf@opensuse.org" date="1330948800">- Enable libburnia plugins:
  + Add pkgconfig(lbburn-1) and pkgconfig(libisofs-1) BuildRequires
  + Pass --enable-libburnia to configure</changelog>
<changelog author="dimstar@opensuse.org" date="1330948801">- Update to version 3.3.91:
  + Correct CD cover dimensions (bgo#660918).
  + Call gettext() where translated string array items are used.
  + Add a fix for optical drive not selected by default.
  + Update categories in brasero.desktop
  + Use g_mkdtemp() rather than mkdtemp() (bgo#623890)
  + Support build against tracker 0.13/0.14
  + Build fixes (including bgo#641650)
  + Documentation improvements.
  + Updated translations.
- Drop brasero-tracker-0.14.patch: fixed upstream
- Remove hack to change categories in brasero.desktop: fixed
  upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh:
  they were only needed for above patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1332244800">- Update to version 3.3.92:
  + Fix formatting error in man page.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 3.4.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1341144000">- Add cdrdao and cdrkit-cdrtools-compat Requires: Those packages
  are required for CD Audio copy features (bnc#743601).</changelog>
<changelog author="dimstar@opensuse.org" date="1347969600">- Update to version 3.5.92:
  + Fix build against gstreamer-plugins-base-1.0
  + Fix build without preview
  + build: Require gstpbutils-1.0 instead of 0.10
  + Port to new documentation infrastructure
  + Port brasero to GStreamer 1.0
  + brasero-project: include libxml/xmlerror.h for xmlError
  + Put settings in the correct path
  + Add Desktop Actions for Unity
  + Updated translations.
- Replace gnome-doc-utils-devel with yelp-tools, following
  upstreams port o the new documentation infrastructure.
- Replace BuildRequires for the switch to GStreamer 1.0:
  + Old: pkgconfig(gstreamer-0.10),
    pkgconfig(gstreamer-plugins-base-0.10)
  + New: pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-video-1.0),
    pkgconfig(gstreamer-tag-1.0), pkgconfig(gstreamer-pbutils-1.0),
    pkgconfig(gstreamer-plugins-base-1.0)
- Replace Requires for the switch to GStreamer 1.0:
  + Old: gstreamer010, gstreamer010-plugins-base,
    gstreamer010-plugins-oil, gstreamer010-plugins-bad
  + New: gstreamer, gstreamer-plugins-base, gstreamer-plugins-bad.
- Add explicit pkgconfig(gdk-x11-3.0) BuildRequires: configure
  checks for it. This does not cause any change for our package, as
  it is being pulled in indirectly anyway.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Fix build, link libbrasero-burn against libm (for ceil(3))
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352721600">- Update to version 3.6.1:
  + Libburnia plugin: Fix while loop in
    `brasero_libisofs_write_image_to_fd_thread()` (bgo#685983)
  + Remove nonexisting options from the man page
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 3.7.91:
  + Add a question mark to a question.
  + Support notification filtering.
  + Remove nonexisting options from the man page.
  + Fix while loop in `brasero_libisofs_write_image_to_fd_thread.
  + Updated translations.
- Add brasero-tracker-0.16.patch: Fix build with tracker 0.16.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 3.8.0:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="davejplater@gmail.com" date="1367755200">- Allow wodim as well as cdrecord as backends:
  + Drop wodim Requires.
  + Add /usr/bin/cdrecord, /usr/bin/mkisofs and /usr/bin/readcd
    Requires: they are provided by wodim and cdrtools.
  + Add /usr/bin/cdda2wav Requires: provided by
    cdrkit-cdrtools-compat and cdrtools.</changelog>
<changelog author="zaitor@opensuse.org" date="1388059200">- Update to version 3.10.0 (bnc#871232):
  + Fixed drawing issues in media selection combo boxes.
  + Fix several crashers.
  + Fixes for new autotools.
  + Disable audio normalisation - it's broken since GStreamer 1.0.
  + Updated translations.
- Drop brasero-tracker-0.16.patch, fixed upstream.
- Drop gnome-common BuildRequires, and stop using autoreconf, not
  needed anymore since we do not carry any patches.
- Stop passing --disable-scrollkeeper, no longer needed nor
  recognized.
- Add pkgconfig(libburn-1) and pkgconfig(libisofs-1) BuildRequires
  in order to build the libburnia plugin, we already pass
  - -enable-libburnia to configure.</changelog>

</package>
<package pkgid="c87e02a628f69666459c1962f18c523185cccbf8a1e2d841c15fd1397331cdfa" name="brasero" arch="x86_64">
    <version epoch="0" ver="3.10.0" rel="3.6.3"/>

<changelog author="vuntz@opensuse.org" date="1317124800">- Update to version 3.2.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="vuntz@opensuse.org" date="1317902400">- Change categories in brasero.desktop so that brasero doesn't
  appear twice in the gnome-shell list of applications.
  Fix bnc#722215.</changelog>
<changelog author="rbrownccb@opensuse.org" date="1323259200">- Add wodim Requires to fix burning of CDs (bnc#729984).</changelog>
<changelog author="vuntz@opensuse.org" date="1324641600">- Split typelib file from libbrasero-burn3-1 into
  typelib-1_0-BraseroBurn-3_2_0 and from libbrasero-media3-1 into
  typelib-1_0-BraseroMedia-3_2_0.
- Add typelib-1_0-BraseroBurn-3_2_0 and
  typelib-1_0-BraseroMedia-3_2_0 Requires to devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Add support for tracker 0.13/0.14:
  + Add brasero-tracker-0.14.patch.
  + Add gnome-common BuildRequires and call to gnome-autogen.sh,
    needed for above patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1329652800">- Add pkgconfig(ice) and pkgconfig(sm) BuildRequires: they used to
  be pulled in by something else before.</changelog>
<changelog author="reddwarf@opensuse.org" date="1330948800">- Enable libburnia plugins:
  + Add pkgconfig(lbburn-1) and pkgconfig(libisofs-1) BuildRequires
  + Pass --enable-libburnia to configure</changelog>
<changelog author="dimstar@opensuse.org" date="1330948801">- Update to version 3.3.91:
  + Correct CD cover dimensions (bgo#660918).
  + Call gettext() where translated string array items are used.
  + Add a fix for optical drive not selected by default.
  + Update categories in brasero.desktop
  + Use g_mkdtemp() rather than mkdtemp() (bgo#623890)
  + Support build against tracker 0.13/0.14
  + Build fixes (including bgo#641650)
  + Documentation improvements.
  + Updated translations.
- Drop brasero-tracker-0.14.patch: fixed upstream
- Remove hack to change categories in brasero.desktop: fixed
  upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh:
  they were only needed for above patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1332244800">- Update to version 3.3.92:
  + Fix formatting error in man page.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 3.4.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1341144000">- Add cdrdao and cdrkit-cdrtools-compat Requires: Those packages
  are required for CD Audio copy features (bnc#743601).</changelog>
<changelog author="dimstar@opensuse.org" date="1347969600">- Update to version 3.5.92:
  + Fix build against gstreamer-plugins-base-1.0
  + Fix build without preview
  + build: Require gstpbutils-1.0 instead of 0.10
  + Port to new documentation infrastructure
  + Port brasero to GStreamer 1.0
  + brasero-project: include libxml/xmlerror.h for xmlError
  + Put settings in the correct path
  + Add Desktop Actions for Unity
  + Updated translations.
- Replace gnome-doc-utils-devel with yelp-tools, following
  upstreams port o the new documentation infrastructure.
- Replace BuildRequires for the switch to GStreamer 1.0:
  + Old: pkgconfig(gstreamer-0.10),
    pkgconfig(gstreamer-plugins-base-0.10)
  + New: pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-video-1.0),
    pkgconfig(gstreamer-tag-1.0), pkgconfig(gstreamer-pbutils-1.0),
    pkgconfig(gstreamer-plugins-base-1.0)
- Replace Requires for the switch to GStreamer 1.0:
  + Old: gstreamer010, gstreamer010-plugins-base,
    gstreamer010-plugins-oil, gstreamer010-plugins-bad
  + New: gstreamer, gstreamer-plugins-base, gstreamer-plugins-bad.
- Add explicit pkgconfig(gdk-x11-3.0) BuildRequires: configure
  checks for it. This does not cause any change for our package, as
  it is being pulled in indirectly anyway.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Fix build, link libbrasero-burn against libm (for ceil(3))
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352721600">- Update to version 3.6.1:
  + Libburnia plugin: Fix while loop in
    `brasero_libisofs_write_image_to_fd_thread()` (bgo#685983)
  + Remove nonexisting options from the man page
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 3.7.91:
  + Add a question mark to a question.
  + Support notification filtering.
  + Remove nonexisting options from the man page.
  + Fix while loop in `brasero_libisofs_write_image_to_fd_thread.
  + Updated translations.
- Add brasero-tracker-0.16.patch: Fix build with tracker 0.16.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 3.8.0:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="davejplater@gmail.com" date="1367755200">- Allow wodim as well as cdrecord as backends:
  + Drop wodim Requires.
  + Add /usr/bin/cdrecord, /usr/bin/mkisofs and /usr/bin/readcd
    Requires: they are provided by wodim and cdrtools.
  + Add /usr/bin/cdda2wav Requires: provided by
    cdrkit-cdrtools-compat and cdrtools.</changelog>
<changelog author="zaitor@opensuse.org" date="1388059200">- Update to version 3.10.0 (bnc#871232):
  + Fixed drawing issues in media selection combo boxes.
  + Fix several crashers.
  + Fixes for new autotools.
  + Disable audio normalisation - it's broken since GStreamer 1.0.
  + Updated translations.
- Drop brasero-tracker-0.16.patch, fixed upstream.
- Drop gnome-common BuildRequires, and stop using autoreconf, not
  needed anymore since we do not carry any patches.
- Stop passing --disable-scrollkeeper, no longer needed nor
  recognized.
- Add pkgconfig(libburn-1) and pkgconfig(libisofs-1) BuildRequires
  in order to build the libburnia plugin, we already pass
  - -enable-libburnia to configure.</changelog>

</package>
<package pkgid="28d2b3b8b04d4d60d2b74fd47e1372c65a0962427917a0f7b291accc8a76a4cb" name="brasero-devel" arch="i586">
    <version epoch="0" ver="3.10.0" rel="3.6.3"/>

<changelog author="vuntz@opensuse.org" date="1317124800">- Update to version 3.2.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="vuntz@opensuse.org" date="1317902400">- Change categories in brasero.desktop so that brasero doesn't
  appear twice in the gnome-shell list of applications.
  Fix bnc#722215.</changelog>
<changelog author="rbrownccb@opensuse.org" date="1323259200">- Add wodim Requires to fix burning of CDs (bnc#729984).</changelog>
<changelog author="vuntz@opensuse.org" date="1324641600">- Split typelib file from libbrasero-burn3-1 into
  typelib-1_0-BraseroBurn-3_2_0 and from libbrasero-media3-1 into
  typelib-1_0-BraseroMedia-3_2_0.
- Add typelib-1_0-BraseroBurn-3_2_0 and
  typelib-1_0-BraseroMedia-3_2_0 Requires to devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Add support for tracker 0.13/0.14:
  + Add brasero-tracker-0.14.patch.
  + Add gnome-common BuildRequires and call to gnome-autogen.sh,
    needed for above patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1329652800">- Add pkgconfig(ice) and pkgconfig(sm) BuildRequires: they used to
  be pulled in by something else before.</changelog>
<changelog author="reddwarf@opensuse.org" date="1330948800">- Enable libburnia plugins:
  + Add pkgconfig(lbburn-1) and pkgconfig(libisofs-1) BuildRequires
  + Pass --enable-libburnia to configure</changelog>
<changelog author="dimstar@opensuse.org" date="1330948801">- Update to version 3.3.91:
  + Correct CD cover dimensions (bgo#660918).
  + Call gettext() where translated string array items are used.
  + Add a fix for optical drive not selected by default.
  + Update categories in brasero.desktop
  + Use g_mkdtemp() rather than mkdtemp() (bgo#623890)
  + Support build against tracker 0.13/0.14
  + Build fixes (including bgo#641650)
  + Documentation improvements.
  + Updated translations.
- Drop brasero-tracker-0.14.patch: fixed upstream
- Remove hack to change categories in brasero.desktop: fixed
  upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh:
  they were only needed for above patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1332244800">- Update to version 3.3.92:
  + Fix formatting error in man page.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 3.4.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1341144000">- Add cdrdao and cdrkit-cdrtools-compat Requires: Those packages
  are required for CD Audio copy features (bnc#743601).</changelog>
<changelog author="dimstar@opensuse.org" date="1347969600">- Update to version 3.5.92:
  + Fix build against gstreamer-plugins-base-1.0
  + Fix build without preview
  + build: Require gstpbutils-1.0 instead of 0.10
  + Port to new documentation infrastructure
  + Port brasero to GStreamer 1.0
  + brasero-project: include libxml/xmlerror.h for xmlError
  + Put settings in the correct path
  + Add Desktop Actions for Unity
  + Updated translations.
- Replace gnome-doc-utils-devel with yelp-tools, following
  upstreams port o the new documentation infrastructure.
- Replace BuildRequires for the switch to GStreamer 1.0:
  + Old: pkgconfig(gstreamer-0.10),
    pkgconfig(gstreamer-plugins-base-0.10)
  + New: pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-video-1.0),
    pkgconfig(gstreamer-tag-1.0), pkgconfig(gstreamer-pbutils-1.0),
    pkgconfig(gstreamer-plugins-base-1.0)
- Replace Requires for the switch to GStreamer 1.0:
  + Old: gstreamer010, gstreamer010-plugins-base,
    gstreamer010-plugins-oil, gstreamer010-plugins-bad
  + New: gstreamer, gstreamer-plugins-base, gstreamer-plugins-bad.
- Add explicit pkgconfig(gdk-x11-3.0) BuildRequires: configure
  checks for it. This does not cause any change for our package, as
  it is being pulled in indirectly anyway.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Fix build, link libbrasero-burn against libm (for ceil(3))
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352721600">- Update to version 3.6.1:
  + Libburnia plugin: Fix while loop in
    `brasero_libisofs_write_image_to_fd_thread()` (bgo#685983)
  + Remove nonexisting options from the man page
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 3.7.91:
  + Add a question mark to a question.
  + Support notification filtering.
  + Remove nonexisting options from the man page.
  + Fix while loop in `brasero_libisofs_write_image_to_fd_thread.
  + Updated translations.
- Add brasero-tracker-0.16.patch: Fix build with tracker 0.16.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 3.8.0:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="davejplater@gmail.com" date="1367755200">- Allow wodim as well as cdrecord as backends:
  + Drop wodim Requires.
  + Add /usr/bin/cdrecord, /usr/bin/mkisofs and /usr/bin/readcd
    Requires: they are provided by wodim and cdrtools.
  + Add /usr/bin/cdda2wav Requires: provided by
    cdrkit-cdrtools-compat and cdrtools.</changelog>
<changelog author="zaitor@opensuse.org" date="1388059200">- Update to version 3.10.0 (bnc#871232):
  + Fixed drawing issues in media selection combo boxes.
  + Fix several crashers.
  + Fixes for new autotools.
  + Disable audio normalisation - it's broken since GStreamer 1.0.
  + Updated translations.
- Drop brasero-tracker-0.16.patch, fixed upstream.
- Drop gnome-common BuildRequires, and stop using autoreconf, not
  needed anymore since we do not carry any patches.
- Stop passing --disable-scrollkeeper, no longer needed nor
  recognized.
- Add pkgconfig(libburn-1) and pkgconfig(libisofs-1) BuildRequires
  in order to build the libburnia plugin, we already pass
  - -enable-libburnia to configure.</changelog>

</package>
<package pkgid="22fa0bc8a214cf36887be0235320a84aef6d1dbf9feb54546a539391e201f2ac" name="brasero-devel" arch="x86_64">
    <version epoch="0" ver="3.10.0" rel="3.6.3"/>

<changelog author="vuntz@opensuse.org" date="1317124800">- Update to version 3.2.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="vuntz@opensuse.org" date="1317902400">- Change categories in brasero.desktop so that brasero doesn't
  appear twice in the gnome-shell list of applications.
  Fix bnc#722215.</changelog>
<changelog author="rbrownccb@opensuse.org" date="1323259200">- Add wodim Requires to fix burning of CDs (bnc#729984).</changelog>
<changelog author="vuntz@opensuse.org" date="1324641600">- Split typelib file from libbrasero-burn3-1 into
  typelib-1_0-BraseroBurn-3_2_0 and from libbrasero-media3-1 into
  typelib-1_0-BraseroMedia-3_2_0.
- Add typelib-1_0-BraseroBurn-3_2_0 and
  typelib-1_0-BraseroMedia-3_2_0 Requires to devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Add support for tracker 0.13/0.14:
  + Add brasero-tracker-0.14.patch.
  + Add gnome-common BuildRequires and call to gnome-autogen.sh,
    needed for above patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1329652800">- Add pkgconfig(ice) and pkgconfig(sm) BuildRequires: they used to
  be pulled in by something else before.</changelog>
<changelog author="reddwarf@opensuse.org" date="1330948800">- Enable libburnia plugins:
  + Add pkgconfig(lbburn-1) and pkgconfig(libisofs-1) BuildRequires
  + Pass --enable-libburnia to configure</changelog>
<changelog author="dimstar@opensuse.org" date="1330948801">- Update to version 3.3.91:
  + Correct CD cover dimensions (bgo#660918).
  + Call gettext() where translated string array items are used.
  + Add a fix for optical drive not selected by default.
  + Update categories in brasero.desktop
  + Use g_mkdtemp() rather than mkdtemp() (bgo#623890)
  + Support build against tracker 0.13/0.14
  + Build fixes (including bgo#641650)
  + Documentation improvements.
  + Updated translations.
- Drop brasero-tracker-0.14.patch: fixed upstream
- Remove hack to change categories in brasero.desktop: fixed
  upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh:
  they were only needed for above patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1332244800">- Update to version 3.3.92:
  + Fix formatting error in man page.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 3.4.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1341144000">- Add cdrdao and cdrkit-cdrtools-compat Requires: Those packages
  are required for CD Audio copy features (bnc#743601).</changelog>
<changelog author="dimstar@opensuse.org" date="1347969600">- Update to version 3.5.92:
  + Fix build against gstreamer-plugins-base-1.0
  + Fix build without preview
  + build: Require gstpbutils-1.0 instead of 0.10
  + Port to new documentation infrastructure
  + Port brasero to GStreamer 1.0
  + brasero-project: include libxml/xmlerror.h for xmlError
  + Put settings in the correct path
  + Add Desktop Actions for Unity
  + Updated translations.
- Replace gnome-doc-utils-devel with yelp-tools, following
  upstreams port o the new documentation infrastructure.
- Replace BuildRequires for the switch to GStreamer 1.0:
  + Old: pkgconfig(gstreamer-0.10),
    pkgconfig(gstreamer-plugins-base-0.10)
  + New: pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-video-1.0),
    pkgconfig(gstreamer-tag-1.0), pkgconfig(gstreamer-pbutils-1.0),
    pkgconfig(gstreamer-plugins-base-1.0)
- Replace Requires for the switch to GStreamer 1.0:
  + Old: gstreamer010, gstreamer010-plugins-base,
    gstreamer010-plugins-oil, gstreamer010-plugins-bad
  + New: gstreamer, gstreamer-plugins-base, gstreamer-plugins-bad.
- Add explicit pkgconfig(gdk-x11-3.0) BuildRequires: configure
  checks for it. This does not cause any change for our package, as
  it is being pulled in indirectly anyway.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Fix build, link libbrasero-burn against libm (for ceil(3))
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352721600">- Update to version 3.6.1:
  + Libburnia plugin: Fix while loop in
    `brasero_libisofs_write_image_to_fd_thread()` (bgo#685983)
  + Remove nonexisting options from the man page
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 3.7.91:
  + Add a question mark to a question.
  + Support notification filtering.
  + Remove nonexisting options from the man page.
  + Fix while loop in `brasero_libisofs_write_image_to_fd_thread.
  + Updated translations.
- Add brasero-tracker-0.16.patch: Fix build with tracker 0.16.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 3.8.0:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="davejplater@gmail.com" date="1367755200">- Allow wodim as well as cdrecord as backends:
  + Drop wodim Requires.
  + Add /usr/bin/cdrecord, /usr/bin/mkisofs and /usr/bin/readcd
    Requires: they are provided by wodim and cdrtools.
  + Add /usr/bin/cdda2wav Requires: provided by
    cdrkit-cdrtools-compat and cdrtools.</changelog>
<changelog author="zaitor@opensuse.org" date="1388059200">- Update to version 3.10.0 (bnc#871232):
  + Fixed drawing issues in media selection combo boxes.
  + Fix several crashers.
  + Fixes for new autotools.
  + Disable audio normalisation - it's broken since GStreamer 1.0.
  + Updated translations.
- Drop brasero-tracker-0.16.patch, fixed upstream.
- Drop gnome-common BuildRequires, and stop using autoreconf, not
  needed anymore since we do not carry any patches.
- Stop passing --disable-scrollkeeper, no longer needed nor
  recognized.
- Add pkgconfig(libburn-1) and pkgconfig(libisofs-1) BuildRequires
  in order to build the libburnia plugin, we already pass
  - -enable-libburnia to configure.</changelog>

</package>
<package pkgid="4f9b0f8383592c857940a4d31ff15614101a021e6de76cbf8bd3dccc3a3e86a0" name="brasero-lang" arch="noarch">
    <version epoch="0" ver="3.10.0" rel="3.6.3"/>

<changelog author="vuntz@opensuse.org" date="1317124800">- Update to version 3.2.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="vuntz@opensuse.org" date="1317902400">- Change categories in brasero.desktop so that brasero doesn't
  appear twice in the gnome-shell list of applications.
  Fix bnc#722215.</changelog>
<changelog author="rbrownccb@opensuse.org" date="1323259200">- Add wodim Requires to fix burning of CDs (bnc#729984).</changelog>
<changelog author="vuntz@opensuse.org" date="1324641600">- Split typelib file from libbrasero-burn3-1 into
  typelib-1_0-BraseroBurn-3_2_0 and from libbrasero-media3-1 into
  typelib-1_0-BraseroMedia-3_2_0.
- Add typelib-1_0-BraseroBurn-3_2_0 and
  typelib-1_0-BraseroMedia-3_2_0 Requires to devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Add support for tracker 0.13/0.14:
  + Add brasero-tracker-0.14.patch.
  + Add gnome-common BuildRequires and call to gnome-autogen.sh,
    needed for above patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1329652800">- Add pkgconfig(ice) and pkgconfig(sm) BuildRequires: they used to
  be pulled in by something else before.</changelog>
<changelog author="reddwarf@opensuse.org" date="1330948800">- Enable libburnia plugins:
  + Add pkgconfig(lbburn-1) and pkgconfig(libisofs-1) BuildRequires
  + Pass --enable-libburnia to configure</changelog>
<changelog author="dimstar@opensuse.org" date="1330948801">- Update to version 3.3.91:
  + Correct CD cover dimensions (bgo#660918).
  + Call gettext() where translated string array items are used.
  + Add a fix for optical drive not selected by default.
  + Update categories in brasero.desktop
  + Use g_mkdtemp() rather than mkdtemp() (bgo#623890)
  + Support build against tracker 0.13/0.14
  + Build fixes (including bgo#641650)
  + Documentation improvements.
  + Updated translations.
- Drop brasero-tracker-0.14.patch: fixed upstream
- Remove hack to change categories in brasero.desktop: fixed
  upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh:
  they were only needed for above patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1332244800">- Update to version 3.3.92:
  + Fix formatting error in man page.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 3.4.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1341144000">- Add cdrdao and cdrkit-cdrtools-compat Requires: Those packages
  are required for CD Audio copy features (bnc#743601).</changelog>
<changelog author="dimstar@opensuse.org" date="1347969600">- Update to version 3.5.92:
  + Fix build against gstreamer-plugins-base-1.0
  + Fix build without preview
  + build: Require gstpbutils-1.0 instead of 0.10
  + Port to new documentation infrastructure
  + Port brasero to GStreamer 1.0
  + brasero-project: include libxml/xmlerror.h for xmlError
  + Put settings in the correct path
  + Add Desktop Actions for Unity
  + Updated translations.
- Replace gnome-doc-utils-devel with yelp-tools, following
  upstreams port o the new documentation infrastructure.
- Replace BuildRequires for the switch to GStreamer 1.0:
  + Old: pkgconfig(gstreamer-0.10),
    pkgconfig(gstreamer-plugins-base-0.10)
  + New: pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-video-1.0),
    pkgconfig(gstreamer-tag-1.0), pkgconfig(gstreamer-pbutils-1.0),
    pkgconfig(gstreamer-plugins-base-1.0)
- Replace Requires for the switch to GStreamer 1.0:
  + Old: gstreamer010, gstreamer010-plugins-base,
    gstreamer010-plugins-oil, gstreamer010-plugins-bad
  + New: gstreamer, gstreamer-plugins-base, gstreamer-plugins-bad.
- Add explicit pkgconfig(gdk-x11-3.0) BuildRequires: configure
  checks for it. This does not cause any change for our package, as
  it is being pulled in indirectly anyway.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Fix build, link libbrasero-burn against libm (for ceil(3))
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352721600">- Update to version 3.6.1:
  + Libburnia plugin: Fix while loop in
    `brasero_libisofs_write_image_to_fd_thread()` (bgo#685983)
  + Remove nonexisting options from the man page
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 3.7.91:
  + Add a question mark to a question.
  + Support notification filtering.
  + Remove nonexisting options from the man page.
  + Fix while loop in `brasero_libisofs_write_image_to_fd_thread.
  + Updated translations.
- Add brasero-tracker-0.16.patch: Fix build with tracker 0.16.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 3.8.0:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="davejplater@gmail.com" date="1367755200">- Allow wodim as well as cdrecord as backends:
  + Drop wodim Requires.
  + Add /usr/bin/cdrecord, /usr/bin/mkisofs and /usr/bin/readcd
    Requires: they are provided by wodim and cdrtools.
  + Add /usr/bin/cdda2wav Requires: provided by
    cdrkit-cdrtools-compat and cdrtools.</changelog>
<changelog author="zaitor@opensuse.org" date="1388059200">- Update to version 3.10.0 (bnc#871232):
  + Fixed drawing issues in media selection combo boxes.
  + Fix several crashers.
  + Fixes for new autotools.
  + Disable audio normalisation - it's broken since GStreamer 1.0.
  + Updated translations.
- Drop brasero-tracker-0.16.patch, fixed upstream.
- Drop gnome-common BuildRequires, and stop using autoreconf, not
  needed anymore since we do not carry any patches.
- Stop passing --disable-scrollkeeper, no longer needed nor
  recognized.
- Add pkgconfig(libburn-1) and pkgconfig(libisofs-1) BuildRequires
  in order to build the libburnia plugin, we already pass
  - -enable-libburnia to configure.</changelog>

</package>
<package pkgid="7017e09bfe06b446b72df5ebcb787968c98c0087f5019aa3d2066acf8d218780" name="brasero-nautilus" arch="i586">
    <version epoch="0" ver="3.10.0" rel="3.6.3"/>

<changelog author="vuntz@opensuse.org" date="1317124800">- Update to version 3.2.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="vuntz@opensuse.org" date="1317902400">- Change categories in brasero.desktop so that brasero doesn't
  appear twice in the gnome-shell list of applications.
  Fix bnc#722215.</changelog>
<changelog author="rbrownccb@opensuse.org" date="1323259200">- Add wodim Requires to fix burning of CDs (bnc#729984).</changelog>
<changelog author="vuntz@opensuse.org" date="1324641600">- Split typelib file from libbrasero-burn3-1 into
  typelib-1_0-BraseroBurn-3_2_0 and from libbrasero-media3-1 into
  typelib-1_0-BraseroMedia-3_2_0.
- Add typelib-1_0-BraseroBurn-3_2_0 and
  typelib-1_0-BraseroMedia-3_2_0 Requires to devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Add support for tracker 0.13/0.14:
  + Add brasero-tracker-0.14.patch.
  + Add gnome-common BuildRequires and call to gnome-autogen.sh,
    needed for above patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1329652800">- Add pkgconfig(ice) and pkgconfig(sm) BuildRequires: they used to
  be pulled in by something else before.</changelog>
<changelog author="reddwarf@opensuse.org" date="1330948800">- Enable libburnia plugins:
  + Add pkgconfig(lbburn-1) and pkgconfig(libisofs-1) BuildRequires
  + Pass --enable-libburnia to configure</changelog>
<changelog author="dimstar@opensuse.org" date="1330948801">- Update to version 3.3.91:
  + Correct CD cover dimensions (bgo#660918).
  + Call gettext() where translated string array items are used.
  + Add a fix for optical drive not selected by default.
  + Update categories in brasero.desktop
  + Use g_mkdtemp() rather than mkdtemp() (bgo#623890)
  + Support build against tracker 0.13/0.14
  + Build fixes (including bgo#641650)
  + Documentation improvements.
  + Updated translations.
- Drop brasero-tracker-0.14.patch: fixed upstream
- Remove hack to change categories in brasero.desktop: fixed
  upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh:
  they were only needed for above patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1332244800">- Update to version 3.3.92:
  + Fix formatting error in man page.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 3.4.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1341144000">- Add cdrdao and cdrkit-cdrtools-compat Requires: Those packages
  are required for CD Audio copy features (bnc#743601).</changelog>
<changelog author="dimstar@opensuse.org" date="1347969600">- Update to version 3.5.92:
  + Fix build against gstreamer-plugins-base-1.0
  + Fix build without preview
  + build: Require gstpbutils-1.0 instead of 0.10
  + Port to new documentation infrastructure
  + Port brasero to GStreamer 1.0
  + brasero-project: include libxml/xmlerror.h for xmlError
  + Put settings in the correct path
  + Add Desktop Actions for Unity
  + Updated translations.
- Replace gnome-doc-utils-devel with yelp-tools, following
  upstreams port o the new documentation infrastructure.
- Replace BuildRequires for the switch to GStreamer 1.0:
  + Old: pkgconfig(gstreamer-0.10),
    pkgconfig(gstreamer-plugins-base-0.10)
  + New: pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-video-1.0),
    pkgconfig(gstreamer-tag-1.0), pkgconfig(gstreamer-pbutils-1.0),
    pkgconfig(gstreamer-plugins-base-1.0)
- Replace Requires for the switch to GStreamer 1.0:
  + Old: gstreamer010, gstreamer010-plugins-base,
    gstreamer010-plugins-oil, gstreamer010-plugins-bad
  + New: gstreamer, gstreamer-plugins-base, gstreamer-plugins-bad.
- Add explicit pkgconfig(gdk-x11-3.0) BuildRequires: configure
  checks for it. This does not cause any change for our package, as
  it is being pulled in indirectly anyway.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Fix build, link libbrasero-burn against libm (for ceil(3))
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352721600">- Update to version 3.6.1:
  + Libburnia plugin: Fix while loop in
    `brasero_libisofs_write_image_to_fd_thread()` (bgo#685983)
  + Remove nonexisting options from the man page
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 3.7.91:
  + Add a question mark to a question.
  + Support notification filtering.
  + Remove nonexisting options from the man page.
  + Fix while loop in `brasero_libisofs_write_image_to_fd_thread.
  + Updated translations.
- Add brasero-tracker-0.16.patch: Fix build with tracker 0.16.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 3.8.0:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="davejplater@gmail.com" date="1367755200">- Allow wodim as well as cdrecord as backends:
  + Drop wodim Requires.
  + Add /usr/bin/cdrecord, /usr/bin/mkisofs and /usr/bin/readcd
    Requires: they are provided by wodim and cdrtools.
  + Add /usr/bin/cdda2wav Requires: provided by
    cdrkit-cdrtools-compat and cdrtools.</changelog>
<changelog author="zaitor@opensuse.org" date="1388059200">- Update to version 3.10.0 (bnc#871232):
  + Fixed drawing issues in media selection combo boxes.
  + Fix several crashers.
  + Fixes for new autotools.
  + Disable audio normalisation - it's broken since GStreamer 1.0.
  + Updated translations.
- Drop brasero-tracker-0.16.patch, fixed upstream.
- Drop gnome-common BuildRequires, and stop using autoreconf, not
  needed anymore since we do not carry any patches.
- Stop passing --disable-scrollkeeper, no longer needed nor
  recognized.
- Add pkgconfig(libburn-1) and pkgconfig(libisofs-1) BuildRequires
  in order to build the libburnia plugin, we already pass
  - -enable-libburnia to configure.</changelog>

</package>
<package pkgid="64e537e5975fafc339cadfa460e8579f5b8669cd3e362b196e95688751bca09c" name="brasero-nautilus" arch="x86_64">
    <version epoch="0" ver="3.10.0" rel="3.6.3"/>

<changelog author="vuntz@opensuse.org" date="1317124800">- Update to version 3.2.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1317643200">- Add explicit shared-mime-info BuildRequires since we use the
  %mime_database_* macros.</changelog>
<changelog author="vuntz@opensuse.org" date="1317902400">- Change categories in brasero.desktop so that brasero doesn't
  appear twice in the gnome-shell list of applications.
  Fix bnc#722215.</changelog>
<changelog author="rbrownccb@opensuse.org" date="1323259200">- Add wodim Requires to fix burning of CDs (bnc#729984).</changelog>
<changelog author="vuntz@opensuse.org" date="1324641600">- Split typelib file from libbrasero-burn3-1 into
  typelib-1_0-BraseroBurn-3_2_0 and from libbrasero-media3-1 into
  typelib-1_0-BraseroMedia-3_2_0.
- Add typelib-1_0-BraseroBurn-3_2_0 and
  typelib-1_0-BraseroMedia-3_2_0 Requires to devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1326974400">- Add support for tracker 0.13/0.14:
  + Add brasero-tracker-0.14.patch.
  + Add gnome-common BuildRequires and call to gnome-autogen.sh,
    needed for above patch.</changelog>
<changelog author="dimstar@opensuse.org" date="1329652800">- Add pkgconfig(ice) and pkgconfig(sm) BuildRequires: they used to
  be pulled in by something else before.</changelog>
<changelog author="reddwarf@opensuse.org" date="1330948800">- Enable libburnia plugins:
  + Add pkgconfig(lbburn-1) and pkgconfig(libisofs-1) BuildRequires
  + Pass --enable-libburnia to configure</changelog>
<changelog author="dimstar@opensuse.org" date="1330948801">- Update to version 3.3.91:
  + Correct CD cover dimensions (bgo#660918).
  + Call gettext() where translated string array items are used.
  + Add a fix for optical drive not selected by default.
  + Update categories in brasero.desktop
  + Use g_mkdtemp() rather than mkdtemp() (bgo#623890)
  + Support build against tracker 0.13/0.14
  + Build fixes (including bgo#641650)
  + Documentation improvements.
  + Updated translations.
- Drop brasero-tracker-0.14.patch: fixed upstream
- Remove hack to change categories in brasero.desktop: fixed
  upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh:
  they were only needed for above patch.</changelog>
<changelog author="vuntz@opensuse.org" date="1332244800">- Update to version 3.3.92:
  + Fix formatting error in man page.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 3.4.0:
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1341144000">- Add cdrdao and cdrkit-cdrtools-compat Requires: Those packages
  are required for CD Audio copy features (bnc#743601).</changelog>
<changelog author="dimstar@opensuse.org" date="1347969600">- Update to version 3.5.92:
  + Fix build against gstreamer-plugins-base-1.0
  + Fix build without preview
  + build: Require gstpbutils-1.0 instead of 0.10
  + Port to new documentation infrastructure
  + Port brasero to GStreamer 1.0
  + brasero-project: include libxml/xmlerror.h for xmlError
  + Put settings in the correct path
  + Add Desktop Actions for Unity
  + Updated translations.
- Replace gnome-doc-utils-devel with yelp-tools, following
  upstreams port o the new documentation infrastructure.
- Replace BuildRequires for the switch to GStreamer 1.0:
  + Old: pkgconfig(gstreamer-0.10),
    pkgconfig(gstreamer-plugins-base-0.10)
  + New: pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-video-1.0),
    pkgconfig(gstreamer-tag-1.0), pkgconfig(gstreamer-pbutils-1.0),
    pkgconfig(gstreamer-plugins-base-1.0)
- Replace Requires for the switch to GStreamer 1.0:
  + Old: gstreamer010, gstreamer010-plugins-base,
    gstreamer010-plugins-oil, gstreamer010-plugins-bad
  + New: gstreamer, gstreamer-plugins-base, gstreamer-plugins-bad.
- Add explicit pkgconfig(gdk-x11-3.0) BuildRequires: configure
  checks for it. This does not cause any change for our package, as
  it is being pulled in indirectly anyway.</changelog>
<changelog author="dimstar@opensuse.org" date="1348574400">- Update to version 3.6.0:
  + Fix build, link libbrasero-burn against libm (for ceil(3))
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352721600">- Update to version 3.6.1:
  + Libburnia plugin: Fix while loop in
    `brasero_libisofs_write_image_to_fd_thread()` (bgo#685983)
  + Remove nonexisting options from the man page
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362657600">- Update to version 3.7.91:
  + Add a question mark to a question.
  + Support notification filtering.
  + Remove nonexisting options from the man page.
  + Fix while loop in `brasero_libisofs_write_image_to_fd_thread.
  + Updated translations.
- Add brasero-tracker-0.16.patch: Fix build with tracker 0.16.
- Add gnome-common BuildRequires and call to autoreconf, as above
  patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1364299200">- Update to version 3.8.0:
  + Documentation fixes.
  + Updated translations.</changelog>
<changelog author="davejplater@gmail.com" date="1367755200">- Allow wodim as well as cdrecord as backends:
  + Drop wodim Requires.
  + Add /usr/bin/cdrecord, /usr/bin/mkisofs and /usr/bin/readcd
    Requires: they are provided by wodim and cdrtools.
  + Add /usr/bin/cdda2wav Requires: provided by
    cdrkit-cdrtools-compat and cdrtools.</changelog>
<changelog author="zaitor@opensuse.org" date="1388059200">- Update to version 3.10.0 (bnc#871232):
  + Fixed drawing issues in media selection combo boxes.
  + Fix several crashers.
  + Fixes for new autotools.
  + Disable audio normalisation - it's broken since GStreamer 1.0.
  + Updated translations.
- Drop brasero-tracker-0.16.patch, fixed upstream.
- Drop gnome-common BuildRequires, and stop using autoreconf, not
  needed anymore since we do not carry any patches.
- Stop passing --disable-scrollkeeper, no longer needed nor
  recognized.
- Add pkgconfig(libburn-1) and pkgconfig(libisofs-1) BuildRequires
  in order to build the libburnia plugin, we already pass
  - -enable-libburnia to configure.</changelog>

</package>
<package pkgid="1e0d23deef532cb21dfc9ef16ccdc7ac7d9a05f3107fcf7ce7c7db6b9412e998" name="brise" arch="i586">
    <version epoch="0" ver="0.30" rel="7.4.1"/>

<changelog author="i@marguerite.su" date="1342872000">- initial version 0.9.2
  * chord-typing support: combine multiple keys to compose a syllable at once.
  * configuration: global page_size setting.
  * inline mode: extend the API to support inline mode.
  * table translator: add option to filter candidates by character set.
  * user dictionary: automatic recovery for corrupted databases.
  * user dictionary: fixed a bug that was responsible for missing user phrases.
  * rime_deployer: a utility program to prepare Rime's workspace.
  * rime_dict_manager: a utility program to import/export user dictionaries.
  * librime package: include 'brise', a collection of preset schemata in the package.
  * new schema: Middle Chinese Phonetic Transcription.
  * new schema: IPA input method in X-SAMPA.</changelog>
<changelog author="i@marguerite.su" date="1349956800">- update version 0.13
  * install data files from a separate package.
  * update: luna_pinyin, terra_pinyin, jyutping tables.
  * update: essay database.
  * new schema: emoji.</changelog>
<changelog author="i@marguerite.su" date="1359720000">- although this package only have a /usr/share/rime-data,
  but it need building, 32-bit and 64-bit results are different.
  So remove BuildArch: noarch tag to fix ibus/fcitx-rime crash.</changelog>
<changelog author="i@marguerite.su" date="1372507200">- update version 0.22
  * essay.txt, luna_pinyin, terra_pinyin: lots of bug-fixes.
  * wubi86: auto-commit complete words. (max_code_length: 4)
  * luna_pinyin*: enable user created custom_phrase.txt (rime&gt;=0.9.9)</changelog>
<changelog author="i@marguerite.su" date="1384084800">- update version 0.30
  * default.yaml, symbols.yaml: prefer middle dot U+00B7 to U+30FB.
  * bopomofo_tw: bopomofo, output in Taiwan standard.
  * jyutping: include more characters.
  * luna_pinyin_simp: enable hotkey Control+Shift+4 to toggle
    simplified/traditional Chinese mode.
  * essay.txt, luna_pinyin, terra_pinyin: lots of improvements.</changelog>
<changelog author="hillwood@linuxfans.org" date="1391515200">- Fix bnc#862135</changelog>

</package>
<package pkgid="d238a93cd98e1e0f5dc66f08570d6cab8f8bab2eb74de38557ccd6c1fe9bc72e" name="brise" arch="src">
    <version epoch="0" ver="0.30" rel="7.4.1"/>

<changelog author="i@marguerite.su" date="1342872000">- initial version 0.9.2
  * chord-typing support: combine multiple keys to compose a syllable at once.
  * configuration: global page_size setting.
  * inline mode: extend the API to support inline mode.
  * table translator: add option to filter candidates by character set.
  * user dictionary: automatic recovery for corrupted databases.
  * user dictionary: fixed a bug that was responsible for missing user phrases.
  * rime_deployer: a utility program to prepare Rime's workspace.
  * rime_dict_manager: a utility program to import/export user dictionaries.
  * librime package: include 'brise', a collection of preset schemata in the package.
  * new schema: Middle Chinese Phonetic Transcription.
  * new schema: IPA input method in X-SAMPA.</changelog>
<changelog author="i@marguerite.su" date="1349956800">- update version 0.13
  * install data files from a separate package.
  * update: luna_pinyin, terra_pinyin, jyutping tables.
  * update: essay database.
  * new schema: emoji.</changelog>
<changelog author="i@marguerite.su" date="1359720000">- although this package only have a /usr/share/rime-data,
  but it need building, 32-bit and 64-bit results are different.
  So remove BuildArch: noarch tag to fix ibus/fcitx-rime crash.</changelog>
<changelog author="i@marguerite.su" date="1372507200">- update version 0.22
  * essay.txt, luna_pinyin, terra_pinyin: lots of bug-fixes.
  * wubi86: auto-commit complete words. (max_code_length: 4)
  * luna_pinyin*: enable user created custom_phrase.txt (rime&gt;=0.9.9)</changelog>
<changelog author="i@marguerite.su" date="1384084800">- update version 0.30
  * default.yaml, symbols.yaml: prefer middle dot U+00B7 to U+30FB.
  * bopomofo_tw: bopomofo, output in Taiwan standard.
  * jyutping: include more characters.
  * luna_pinyin_simp: enable hotkey Control+Shift+4 to toggle
    simplified/traditional Chinese mode.
  * essay.txt, luna_pinyin, terra_pinyin: lots of improvements.</changelog>
<changelog author="hillwood@linuxfans.org" date="1391515200">- Fix bnc#862135</changelog>

</package>
<package pkgid="ddf3a927a6c1b583cbd3b0efa71a8c2eaa57248ff93cfc879f6eaa958de21772" name="brise" arch="x86_64">
    <version epoch="0" ver="0.30" rel="7.4.1"/>

<changelog author="i@marguerite.su" date="1342872000">- initial version 0.9.2
  * chord-typing support: combine multiple keys to compose a syllable at once.
  * configuration: global page_size setting.
  * inline mode: extend the API to support inline mode.
  * table translator: add option to filter candidates by character set.
  * user dictionary: automatic recovery for corrupted databases.
  * user dictionary: fixed a bug that was responsible for missing user phrases.
  * rime_deployer: a utility program to prepare Rime's workspace.
  * rime_dict_manager: a utility program to import/export user dictionaries.
  * librime package: include 'brise', a collection of preset schemata in the package.
  * new schema: Middle Chinese Phonetic Transcription.
  * new schema: IPA input method in X-SAMPA.</changelog>
<changelog author="i@marguerite.su" date="1349956800">- update version 0.13
  * install data files from a separate package.
  * update: luna_pinyin, terra_pinyin, jyutping tables.
  * update: essay database.
  * new schema: emoji.</changelog>
<changelog author="i@marguerite.su" date="1359720000">- although this package only have a /usr/share/rime-data,
  but it need building, 32-bit and 64-bit results are different.
  So remove BuildArch: noarch tag to fix ibus/fcitx-rime crash.</changelog>
<changelog author="i@marguerite.su" date="1372507200">- update version 0.22
  * essay.txt, luna_pinyin, terra_pinyin: lots of bug-fixes.
  * wubi86: auto-commit complete words. (max_code_length: 4)
  * luna_pinyin*: enable user created custom_phrase.txt (rime&gt;=0.9.9)</changelog>
<changelog author="i@marguerite.su" date="1384084800">- update version 0.30
  * default.yaml, symbols.yaml: prefer middle dot U+00B7 to U+30FB.
  * bopomofo_tw: bopomofo, output in Taiwan standard.
  * jyutping: include more characters.
  * luna_pinyin_simp: enable hotkey Control+Shift+4 to toggle
    simplified/traditional Chinese mode.
  * essay.txt, luna_pinyin, terra_pinyin: lots of improvements.</changelog>
<changelog author="hillwood@linuxfans.org" date="1391515200">- Fix bnc#862135</changelog>

</package>
<package pkgid="01d3a59995d2bf7659a5109370a9fbd9b13a5e2da297f9946e7a802b4c54d144" name="bsdtar" arch="i586">
    <version epoch="0" ver="3.1.2" rel="3.5.1"/>

<changelog author="puzel@novell.com" date="1289476800">- udpate to libarchive-2.8.4
  - see /usr/share/doc/packages/libarchive2/NEWS for changes
- drop libarchive-2.5.5_fix_testsuite.patch (upstream)
- update libarchive-2.5.5_handle_ENOSYS_from_lutimes.patch
- clean up specfile
- disable make check for now</changelog>
<changelog author="idoenmez@novell.com" date="1303214400">- Add suport for xz and xar archives
- Add libarchive-2.8.4-iso9660-data-types.patch:
  fix ISO9660 reader data type mismatches</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add baselibs.conf for PackageKit to use</changelog>
<changelog author="coolo@suse.com" date="1323172800">- Update to libarchive 2.8.5 (from werner)
  * Fix issue 134: Improve handling of open failures
  * Fix issue 119: Relax ISO verification
  * Fix issue 121: mtree parsing
  * Fix extraction of GNU tar 'D' directory entries
  * Be less demanding in LZMA/XZ compression tests</changelog>
<changelog author="coolo@suse.com" date="1323172801">- rename main package to libarchive</changelog>
<changelog author="werner@suse.de" date="1324555200">- For SLES11 work around missing rpm macro</changelog>
<changelog author="idonmez@suse.com" date="1328702400">- Use %makeinstall to be SLES compatible</changelog>
<changelog author="dvaleev@suse.com" date="1329134400">- fix failed tests on ppc</changelog>
<changelog author="werner@suse.de" date="1336392000">- Enforce usage of reentrant versions of libc functions</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 3.0.4:
  + libarchive development moved to http://libarchive.github.com/
- Changes from version 3.0.2:
  + Various fixes merged from FreeBSD
  + Symlink support in Zip reader and writer
  + Robustness fixes to 7Zip reader
- Changes from version 3.0.1b:
  + 7Zip reader
  + Small fixes to ISO and Zip to improve robustness with corrupted
    input
  + Improve streaming Zip reader's support for uncompressed entries
  + New seeking Zip reader supports SFX Zip archives
  + Build fixes on Windows
- For more changes since 2.8.5, please see NEWS file
- Update URL Tag to represent new home of the project.
- Rename libarchive2 to libarchive12, following upstreams soname
  bumps.
- Add libarchive-fix-checks.patch: Fix gcc 4.7 side effects.
- Drop libarchive-test-fuzz.patch: fixed upstream.
- Drop libarchive-ignore-sigpipe-in-test-suite.patch: fixed
  upstream.
- Drop libarchive-2.5.5_handle_ENOSYS_from_lutimes.patch: upstream
  rejected the patch. Seems to be too theoretical problem.</changelog>
<changelog author="cfarrell@suse.com" date="1344513600">- license update: BSD-2-Clause
  The COPYING file shows that the package is predominantly BSD-2-Clause
  licensed</changelog>
<changelog author="dvaleev@suse.com" date="1345723200">- libarchive-ppc64.patch:
  fix http://code.google.com/p/libarchive/issues/detail?id=277
  test_option_b and test_option_nodump are failing on ppc64</changelog>
<changelog author="p.drouand@gmail.com" date="1360065600">- Update to version 3.1.1:
  + Fix an issue with the soname versioning in builds of libarchive
    using cmake
- Removed patchs; fixed and merged on upstream release:
  * libarchive-fix-checks.patch
  * libarchive-ppc64.patch
- The soname has changed and pass to 13.</changelog>
<changelog author="werner@suse.de" date="1360756800">- Use %libname macro to be consistent throughout the spec file</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires (and sort those)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1376654400">- update to 3.1.2
  This is a maintenance update to fix issues with the new RAR
  seeking feature.
- libarchive's new website moved to http://www.libarchive.org.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376913600">- libarchive-openssl.patch: Call OPENSSL_config where needed,
  otherwise on systems configured to use openSSL engines such
  as via-padlock wont benefit from hardware acceleration.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377000000">- remove artificial dependencies on libacl-devel, libbz2-devel,
  zlib-devel from libarchive-devel.</changelog>
<changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
<changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870) CVE-2015-2304</changelog>

</package>
<package pkgid="37a82853d31a47f685a12ceffca14152825dbb31b58f17d272f89fc583051e64" name="bsdtar" arch="x86_64">
    <version epoch="0" ver="3.1.2" rel="3.5.1"/>

<changelog author="puzel@novell.com" date="1289476800">- udpate to libarchive-2.8.4
  - see /usr/share/doc/packages/libarchive2/NEWS for changes
- drop libarchive-2.5.5_fix_testsuite.patch (upstream)
- update libarchive-2.5.5_handle_ENOSYS_from_lutimes.patch
- clean up specfile
- disable make check for now</changelog>
<changelog author="idoenmez@novell.com" date="1303214400">- Add suport for xz and xar archives
- Add libarchive-2.8.4-iso9660-data-types.patch:
  fix ISO9660 reader data type mismatches</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add baselibs.conf for PackageKit to use</changelog>
<changelog author="coolo@suse.com" date="1323172800">- Update to libarchive 2.8.5 (from werner)
  * Fix issue 134: Improve handling of open failures
  * Fix issue 119: Relax ISO verification
  * Fix issue 121: mtree parsing
  * Fix extraction of GNU tar 'D' directory entries
  * Be less demanding in LZMA/XZ compression tests</changelog>
<changelog author="coolo@suse.com" date="1323172801">- rename main package to libarchive</changelog>
<changelog author="werner@suse.de" date="1324555200">- For SLES11 work around missing rpm macro</changelog>
<changelog author="idonmez@suse.com" date="1328702400">- Use %makeinstall to be SLES compatible</changelog>
<changelog author="dvaleev@suse.com" date="1329134400">- fix failed tests on ppc</changelog>
<changelog author="werner@suse.de" date="1336392000">- Enforce usage of reentrant versions of libc functions</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 3.0.4:
  + libarchive development moved to http://libarchive.github.com/
- Changes from version 3.0.2:
  + Various fixes merged from FreeBSD
  + Symlink support in Zip reader and writer
  + Robustness fixes to 7Zip reader
- Changes from version 3.0.1b:
  + 7Zip reader
  + Small fixes to ISO and Zip to improve robustness with corrupted
    input
  + Improve streaming Zip reader's support for uncompressed entries
  + New seeking Zip reader supports SFX Zip archives
  + Build fixes on Windows
- For more changes since 2.8.5, please see NEWS file
- Update URL Tag to represent new home of the project.
- Rename libarchive2 to libarchive12, following upstreams soname
  bumps.
- Add libarchive-fix-checks.patch: Fix gcc 4.7 side effects.
- Drop libarchive-test-fuzz.patch: fixed upstream.
- Drop libarchive-ignore-sigpipe-in-test-suite.patch: fixed
  upstream.
- Drop libarchive-2.5.5_handle_ENOSYS_from_lutimes.patch: upstream
  rejected the patch. Seems to be too theoretical problem.</changelog>
<changelog author="cfarrell@suse.com" date="1344513600">- license update: BSD-2-Clause
  The COPYING file shows that the package is predominantly BSD-2-Clause
  licensed</changelog>
<changelog author="dvaleev@suse.com" date="1345723200">- libarchive-ppc64.patch:
  fix http://code.google.com/p/libarchive/issues/detail?id=277
  test_option_b and test_option_nodump are failing on ppc64</changelog>
<changelog author="p.drouand@gmail.com" date="1360065600">- Update to version 3.1.1:
  + Fix an issue with the soname versioning in builds of libarchive
    using cmake
- Removed patchs; fixed and merged on upstream release:
  * libarchive-fix-checks.patch
  * libarchive-ppc64.patch
- The soname has changed and pass to 13.</changelog>
<changelog author="werner@suse.de" date="1360756800">- Use %libname macro to be consistent throughout the spec file</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires (and sort those)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1376654400">- update to 3.1.2
  This is a maintenance update to fix issues with the new RAR
  seeking feature.
- libarchive's new website moved to http://www.libarchive.org.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376913600">- libarchive-openssl.patch: Call OPENSSL_config where needed,
  otherwise on systems configured to use openSSL engines such
  as via-padlock wont benefit from hardware acceleration.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1377000000">- remove artificial dependencies on libacl-devel, libbz2-devel,
  zlib-devel from libarchive-devel.</changelog>
<changelog author="jsegitz@novell.com" date="1415707200">- Added CVE-2013-0211.patch to fix CVE-2013-0211 (bnc#800024)</changelog>
<changelog author="adrian@suse.com" date="1425556800">- fix a directory traversal in cpio tool (bnc#920870) CVE-2015-2304</changelog>

</package>
<package pkgid="11e0d253c6d619488d0ca46c6b8a5773cf57868064a45e89f5c628b5a6536fa6" name="btrfsprogs" arch="i586">
    <version epoch="0" ver="0.20" rel="4.10.1"/>

<changelog author="dsterba@suse.cz" date="1312459200">- add patch for local version override as we do not build from
  git, and avoid doubled "Btrfs" in output of 'btrfs'</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="dsterba@suse.cz" date="1317729600">- btrfsck: ignore -a (bnc#655906)
- btrfsck: fix strerror value</changelog>
<changelog author="dsterba@suse.cz" date="1320840000">- add several tools to mkinitrd if root fs is btrfs
- pull upstream branch and delete local patches</changelog>
<changelog author="dsterba@suse.cz" date="1323345600">- updated mkinitrd script to scan devices before mount (bnc#727383)</changelog>
<changelog author="dsterba@suse.cz" date="1323691200">- pull upstream, replace existing patches, spec update
- update 'restore' utility
  - lzo support
  - tools may now take earlies superblock when opening the fs
  - other fixes
- pull integration-20111030 branch
  - mkfs: force mkfs if desired
  - other fixes
- add btrfs-dump-super to mkinitrd
- other fixes
  - skip non-existent devices or without media
  - documentation updates
  - scrubbing single device
  - graceful error handling when opening fs fails</changelog>
<changelog author="dkukawka@suse.de" date="1323691201">- btrfs-progs-fix-open_ctree_usage_segfaults.patch: fix
  segfaults from bnc#710486 due to unchecked usage of return
  value of open_ctree()
  [fixed compilation warnings]</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dsterba@suse.cz" date="1330948800">- add btrfsck repair options for:
  - rebuild extent records
  - fix block group accounting
  - reset csums for rescue nodatasum mount
  - prune corrupt extent allocation tree blocks
- device scanning fixes for dm and multipath (bnc#749540)
- initrd support: move btrfs device scan after block device setup
- documentation updates
- add csize for file commpressed size
- updated restore utility</changelog>
<changelog author="rschweikert@suse.com" date="1331294400">- place binaries in /usr tree (UsrMerge project)
- adjust mkinitrd scrippt accordingly</changelog>
<changelog author="dsterba@suse.cz" date="1333713600">- add btrfs-debug-tree to initrd
- adjust fs size to correct size (bnc#744593)
- man page documentation updates
- do not package obsolete utilities
- mkfs: store correct size of device in superblock (bnc#730103)
- updated restriper/balance commands to match kernel version</changelog>
<changelog author="dsterba@suse.cz" date="1333713601">- fix build failure</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1334059200">- set correct file mode if writing replacement fsck</changelog>
<changelog author="dsterba@suse.cz" date="1334318400">- initrd support: add module (bnc#750185, bnc#727383)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Make requirement on libattr-devel explicit</changelog>
<changelog author="dsterba@suse.cz" date="1372939200">- update to upstream master (f00dd8386a57d241d0f7c)</changelog>
<changelog author="ohering@suse.de" date="1374494400">- Simplify checks in mkinitrd scripts.
  They are always true because they come from the same package
  Use relative paths to binaries
- Move udev rules to /usr.
- Adjust rules to call binary from /usr
- Simplify fsck.btrfs, its just a dummy until fixed</changelog>
<changelog author="dsterba@suse.cz" date="1376049600">- added 0040-btrfs-progs-fix-loop-device-mount-checks.patch: fix
  loop mount detection again (bnc#834173)</changelog>
<changelog author="dsterba@suse.cz" date="1378382400">- btrfs-progs-mkfs-default-extref.diff: turn on extended refs by
  default, (aka hardlink count limtitation) (bnc#835695)</changelog>
<changelog author="jeffm@suse.com" date="1379332800">- update to upstream master (194aa4a1)
  - btrfs-restore: deal with NULL returns from read_node_slot
  - btrfs-restore: use the correct leafsize when reading the FS location
  - btrfs-find-root: Add options to control generation and level
  - btrfsck: fix incorrect casting on items in the corrupt_blocks tree
  - Btrfs-progs: fix closing of devices
  - Btrfs-progs: enhance btrfs-image to restore image onto multiple disks
  - Btrfs-progs: cleanup btrfs-image usage
  - Btrfs-progs: delete fs_devices itself from fs_uuid list before freeing
  - Btrfs-progs: skip open devices which is missing
  - Btrfs-progs: fix misuse of skinny metadata in btrfs-image
  - Btrfs-progs: recover raid0/raid10/raid5/raid6 metadata chunk
  - Btrfs-progs: Add chunk rebuild function for RAID1/SINGLE/DUP
  - Btrfs-progs: introduce list_{first, next}_entry/list_splice_tail{_init}
  - Btrfs-progs: Add chunk recover function - using old chunk items
  - Btrfs-progs: Add block group check funtion
  - Btrfs-progs: extend the extent cache for the device extent
  - Btrfs-progs: use rb-tree instead of extent cache tree for fs/file roots
  - Btrfs-progs: introduce common insert/search/delete functions for rb-tree
  - Btrfs-progs: cleanup similar code in open_ctree_* and close_ctree
  - Btrfs-progs: Don't free the devices when close the ctree
  - Btrfs-progs: don't close the file descriptor 0 when closing a device
  - Btrfs-progs: fix missing recow roots when making btrfs filesystem
- Add fix for passing super_nr while opening ctree</changelog>

</package>
<package pkgid="6eaf7d103214f3e882f7738d30ef21c93412a390bae6b105fc2fbbad8ce284a0" name="btrfsprogs" arch="i586">
    <version epoch="0" ver="0.20" rel="4.14.1"/>

<changelog author="dsterba@suse.cz" date="1320840000">- add several tools to mkinitrd if root fs is btrfs
- pull upstream branch and delete local patches</changelog>
<changelog author="dsterba@suse.cz" date="1323432000">- updated mkinitrd script to scan devices before mount (bnc#727383)</changelog>
<changelog author="dsterba@suse.cz" date="1323691200">- pull upstream, replace existing patches, spec update
- update 'restore' utility
  - lzo support
  - tools may now take earlies superblock when opening the fs
  - other fixes
- pull integration-20111030 branch
  - mkfs: force mkfs if desired
  - other fixes
- add btrfs-dump-super to mkinitrd
- other fixes
  - skip non-existent devices or without media
  - documentation updates
  - scrubbing single device
  - graceful error handling when opening fs fails</changelog>
<changelog author="dkukawka@suse.de" date="1323691201">- btrfs-progs-fix-open_ctree_usage_segfaults.patch: fix
  segfaults from bnc#710486 due to unchecked usage of return
  value of open_ctree()
  [fixed compilation warnings]</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dsterba@suse.cz" date="1330948800">- add btrfsck repair options for:
  - rebuild extent records
  - fix block group accounting
  - reset csums for rescue nodatasum mount
  - prune corrupt extent allocation tree blocks
- device scanning fixes for dm and multipath (bnc#749540)
- initrd support: move btrfs device scan after block device setup
- documentation updates
- add csize for file commpressed size
- updated restore utility</changelog>
<changelog author="rschweikert@suse.com" date="1331294400">- place binaries in /usr tree (UsrMerge project)
- adjust mkinitrd scrippt accordingly</changelog>
<changelog author="dsterba@suse.cz" date="1333713600">- add btrfs-debug-tree to initrd
- adjust fs size to correct size (bnc#744593)
- man page documentation updates
- do not package obsolete utilities
- mkfs: store correct size of device in superblock (bnc#730103)
- updated restriper/balance commands to match kernel version</changelog>
<changelog author="dsterba@suse.cz" date="1333713601">- fix build failure</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1334059200">- set correct file mode if writing replacement fsck</changelog>
<changelog author="dsterba@suse.cz" date="1334318400">- initrd support: add module (bnc#750185, bnc#727383)</changelog>
<changelog author="jengelh@inai.de" date="1371470400">- Make requirement on libattr-devel explicit</changelog>
<changelog author="dsterba@suse.cz" date="1372939200">- update to upstream master (f00dd8386a57d241d0f7c)</changelog>
<changelog author="ohering@suse.de" date="1374494400">- Simplify checks in mkinitrd scripts.
  They are always true because they come from the same package
  Use relative paths to binaries
- Move udev rules to /usr.
- Adjust rules to call binary from /usr
- Simplify fsck.btrfs, its just a dummy until fixed</changelog>
<changelog author="dsterba@suse.cz" date="1376049600">- added 0040-btrfs-progs-fix-loop-device-mount-checks.patch: fix
  loop mount detection again (bnc#834173)</changelog>
<changelog author="dsterba@suse.cz" date="1378382400">- btrfs-progs-mkfs-default-extref.diff: turn on extended refs by
  default, (aka hardlink count limtitation) (bnc#835695)</changelog>
<changelog author="jeffm@suse.com" date="1379332800">- update to upstream master (194aa4a1)
  - btrfs-restore: deal with NULL returns from read_node_slot
  - btrfs-restore: use the correct leafsize when reading the FS location
  - btrfs-find-root: Add options to control generation and level
  - btrfsck: fix incorrect casting on items in the corrupt_blocks tree
  - Btrfs-progs: fix closing of devices
  - Btrfs-progs: enhance btrfs-image to restore image onto multiple disks
  - Btrfs-progs: cleanup btrfs-image usage
  - Btrfs-progs: delete fs_devices itself from fs_uuid list before freeing
  - Btrfs-progs: skip open devices which is missing
  - Btrfs-progs: fix misuse of skinny metadata in btrfs-image
  - Btrfs-progs: recover raid0/raid10/raid5/raid6 metadata chunk
  - Btrfs-progs: Add chunk rebuild function for RAID1/SINGLE/DUP
  - Btrfs-progs: introduce list_{first, next}_entry/list_splice_tail{_init}
  - Btrfs-progs: Add chunk recover function - using old chunk items
  - Btrfs-progs: Add block group check funtion
  - Btrfs-progs: extend the extent cache for the device extent
  - Btrfs-progs: use rb-tree instead of extent cache tree for fs/file roots
  - Btrfs-progs: introduce common insert/search/delete functions for rb-tree
  - Btrfs-progs: cleanup similar code in open_ctree_* and close_ctree
  - Btrfs-progs: Don't free the devices when close the ctree
  - Btrfs-progs: don't close the file descriptor 0 when closing a device
  - Btrfs-progs: fix missing recow roots when making btrfs filesystem
- Add fix for passing super_nr while opening ctree</changelog>
<changelog author="jeffm@suse.com" date="1380196800">- Remove udev rules file - udev packages one itself (bnc#839960).</changelog>
<changelog author="rgoldwyn@suse.com" date="1380888000">- Change udev rule filename in setup-btrfs.sh to
  /usr/lib/udev/rules.d/64-btrfs.rules from
  from /usr/lib/udev/rules.d/80-btrfs.rules (bnc#839960 comment#7)</changelog>
<changelog author="dsterba@suse.cz" date="1383220800">- fsck updates
- more mkfs sanity checks
- qgroup rescan wait
- Added patches:
  * 0050-Btrfs-progs-commit-the-csum_root-if-we-do-init-csum-.patch
  * 0051-btrfs-progs-Fix-getopt-on-arm-ppc-platforms.patch
  * 0052-btrfs-progs-fix-duplicate-__-su-typedefs-on-ppc64.patch
  * 0053-btrfs-progs-use-reentrant-localtime.patch
  * 0054-btrfs-progs-don-t-have-to-report-ENOMEDIUM-error-dur.patch
  * 0055-Btrfs-progs-added-btrfs-quota-rescan-w-switch-wait.patch
  * 0056-btrfs-progs-fix-qgroup-realloc-inheritance.patch
  * 0057-Btrfs-progs-fix-restore-command-leaving-corrupted-fi.patch
  * 0058-btrfs-progs-avoid-write-to-the-disk-before-sure-to-c.patch
  * 0059-btrfs-progs-error-if-device-for-mkfs-is-too-small.patch
  * 0060-btrfs-progs-error-if-device-have-no-space-to-make-pr.patch
  * 0061-btrfs-progs-calculate-available-blocks-on-device-pro.patch
  * 0062-Btrfs-progs-keep-track-of-transid-failures-and-fix-t.patch</changelog>

</package>
<package pkgid="6125b75393a0be18c9473eaa2e4e7c49cb42dc55f3650b087331e62f19f5c57e" name="btrfsprogs" arch="i586">
    <version epoch="0" ver="3.12" rel="4.18.1"/>

<changelog author="dsterba@suse.cz" date="1323432000">- updated mkinitrd script to scan devices before mount (bnc#727383)</changelog>
<changelog author="dsterba@suse.cz" date="1323691200">- pull upstream, replace existing patches, spec update
- update 'restore' utility
  - lzo support
  - tools may now take earlies superblock when opening the fs
  - other fixes
- pull integration-20111030 branch
  - mkfs: force mkfs if desired
  - other fixes
- add btrfs-dump-super to mkinitrd
- other fixes
  - skip non-existent devices or without media
  - documentation updates
  - scrubbing single device
  - graceful error handling when opening fs fails</changelog>
<changelog author="dkukawka@suse.de" date="1323691201">- btrfs-progs-fix-open_ctree_usage_segfaults.patch: fix
  segfaults from bnc#710486 due to unchecked usage of return
  value of open_ctree()
  [fixed compilation warnings]</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dsterba@suse.cz" date="1330948800">- add btrfsck repair options for:
  - rebuild extent records
  - fix block group accounting
  - reset csums for rescue nodatasum mount
  - prune corrupt extent allocation tree blocks
- device scanning fixes for dm and multipath (bnc#749540)
- initrd support: move btrfs device scan after block device setup
- documentation updates
- add csize for file commpressed size
- updated restore utility</changelog>
<changelog author="rschweikert@suse.com" date="1331294400">- place binaries in /usr tree (UsrMerge project)
- adjust mkinitrd scrippt accordingly</changelog>
<changelog author="dsterba@suse.cz" date="1333713600">- add btrfs-debug-tree to initrd
- adjust fs size to correct size (bnc#744593)
- man page documentation updates
- do not package obsolete utilities
- mkfs: store correct size of device in superblock (bnc#730103)
- updated restriper/balance commands to match kernel version</changelog>
<changelog author="dsterba@suse.cz" date="1333713601">- fix build failure</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1334059200">- set correct file mode if writing replacement fsck</changelog>
<changelog author="dsterba@suse.cz" date="1334318400">- initrd support: add module (bnc#750185, bnc#727383)</changelog>
<changelog author="jengelh@inai.de" date="1371470400">- Make requirement on libattr-devel explicit</changelog>
<changelog author="dsterba@suse.cz" date="1372939200">- update to upstream master (f00dd8386a57d241d0f7c)</changelog>
<changelog author="ohering@suse.de" date="1374494400">- Simplify checks in mkinitrd scripts.
  They are always true because they come from the same package
  Use relative paths to binaries
- Move udev rules to /usr.
- Adjust rules to call binary from /usr
- Simplify fsck.btrfs, its just a dummy until fixed</changelog>
<changelog author="dsterba@suse.cz" date="1376049600">- added 0040-btrfs-progs-fix-loop-device-mount-checks.patch: fix
  loop mount detection again (bnc#834173)</changelog>
<changelog author="dsterba@suse.cz" date="1378382400">- btrfs-progs-mkfs-default-extref.diff: turn on extended refs by
  default, (aka hardlink count limtitation) (bnc#835695)</changelog>
<changelog author="jeffm@suse.com" date="1379332800">- update to upstream master (194aa4a1)
  - btrfs-restore: deal with NULL returns from read_node_slot
  - btrfs-restore: use the correct leafsize when reading the FS location
  - btrfs-find-root: Add options to control generation and level
  - btrfsck: fix incorrect casting on items in the corrupt_blocks tree
  - Btrfs-progs: fix closing of devices
  - Btrfs-progs: enhance btrfs-image to restore image onto multiple disks
  - Btrfs-progs: cleanup btrfs-image usage
  - Btrfs-progs: delete fs_devices itself from fs_uuid list before freeing
  - Btrfs-progs: skip open devices which is missing
  - Btrfs-progs: fix misuse of skinny metadata in btrfs-image
  - Btrfs-progs: recover raid0/raid10/raid5/raid6 metadata chunk
  - Btrfs-progs: Add chunk rebuild function for RAID1/SINGLE/DUP
  - Btrfs-progs: introduce list_{first, next}_entry/list_splice_tail{_init}
  - Btrfs-progs: Add chunk recover function - using old chunk items
  - Btrfs-progs: Add block group check funtion
  - Btrfs-progs: extend the extent cache for the device extent
  - Btrfs-progs: use rb-tree instead of extent cache tree for fs/file roots
  - Btrfs-progs: introduce common insert/search/delete functions for rb-tree
  - Btrfs-progs: cleanup similar code in open_ctree_* and close_ctree
  - Btrfs-progs: Don't free the devices when close the ctree
  - Btrfs-progs: don't close the file descriptor 0 when closing a device
  - Btrfs-progs: fix missing recow roots when making btrfs filesystem
- Add fix for passing super_nr while opening ctree</changelog>
<changelog author="jeffm@suse.com" date="1380196800">- Remove udev rules file - udev packages one itself (bnc#839960).</changelog>
<changelog author="rgoldwyn@suse.com" date="1380888000">- Change udev rule filename in setup-btrfs.sh to
  /usr/lib/udev/rules.d/64-btrfs.rules from
  from /usr/lib/udev/rules.d/80-btrfs.rules (bnc#839960 comment#7)</changelog>
<changelog author="dsterba@suse.cz" date="1383220800">- fsck updates
- more mkfs sanity checks
- qgroup rescan wait
- Added patches:
  * 0050-Btrfs-progs-commit-the-csum_root-if-we-do-init-csum-.patch
  * 0051-btrfs-progs-Fix-getopt-on-arm-ppc-platforms.patch
  * 0052-btrfs-progs-fix-duplicate-__-su-typedefs-on-ppc64.patch
  * 0053-btrfs-progs-use-reentrant-localtime.patch
  * 0054-btrfs-progs-don-t-have-to-report-ENOMEDIUM-error-dur.patch
  * 0055-Btrfs-progs-added-btrfs-quota-rescan-w-switch-wait.patch
  * 0056-btrfs-progs-fix-qgroup-realloc-inheritance.patch
  * 0057-Btrfs-progs-fix-restore-command-leaving-corrupted-fi.patch
  * 0058-btrfs-progs-avoid-write-to-the-disk-before-sure-to-c.patch
  * 0059-btrfs-progs-error-if-device-for-mkfs-is-too-small.patch
  * 0060-btrfs-progs-error-if-device-have-no-space-to-make-pr.patch
  * 0061-btrfs-progs-calculate-available-blocks-on-device-pro.patch
  * 0062-Btrfs-progs-keep-track-of-transid-failures-and-fix-t.patch</changelog>
<changelog author="dsterba@suse.cz" date="1385467200">- update to version 3.12 (bnc#852425)
  - update tarball and remove upstreamed patches
  - remove stale btrfs-dev-clear-sb utility
- mkfs:
  - extrefs (aka. hardlink limitation) feature is set by default
  - fs options can be specified via -O option
- fsck, btrfs-image: various improvements and fixes
- restore:
  - recover extended attributes
  - able to sanitize filenames and xattrs
- fi df: size units are printed in powers of two
- fi defrag: -r recursively processes directories
- qgroup show: improved output
- subvol list: able to show deleted subvolumes
- new subcommand rescue for last-resort rescue operations
  - chunk tree recovery
  - super block recovery
- btrfs-calc-size prints more stats
- more manpages, help text updates
- device detection uses blkid cache
- code passed through static checkers
- Added patches:
  - 0162-btrfs-progs-fix-loop-device-mount-checks.patch
  - 0163-btrfs-progs-fsck-fix-segfault.patch
  - 0164-btrfs-progs-convert-set-label-or-copy-from-origin.patch
  - 0165-Revert-btrfs-progs-update-options-in-find-root.c.patch
  - 0166-Btrfs-progs-add-some-verbose-output-to-find-root.patch
  - 0167-Btrfs-progs-make-find_and_setup_root-return-an-error.patch
  - 0168-Btrfs-progs-don-t-bug-out-if-we-can-t-find-the-last-.patch
  - 0169-btrfs-progs-Check-metadata-mirrors-in-find-root.patch
  - 0170-btrfs-progs-In-find-root-dump-bytenr-for-every-slot.patch</changelog>

</package>
<package pkgid="01551237c836c3ed9760cdb0ed13ec88de2f87280c55d01175c0fe2757cb9974" name="btrfsprogs" arch="i586">
    <version epoch="0" ver="3.12" rel="4.22.1"/>

<changelog author="dsterba@suse.cz" date="1323691200">- pull upstream, replace existing patches, spec update
- update 'restore' utility
  - lzo support
  - tools may now take earlies superblock when opening the fs
  - other fixes
- pull integration-20111030 branch
  - mkfs: force mkfs if desired
  - other fixes
- add btrfs-dump-super to mkinitrd
- other fixes
  - skip non-existent devices or without media
  - documentation updates
  - scrubbing single device
  - graceful error handling when opening fs fails</changelog>
<changelog author="dkukawka@suse.de" date="1323691201">- btrfs-progs-fix-open_ctree_usage_segfaults.patch: fix
  segfaults from bnc#710486 due to unchecked usage of return
  value of open_ctree()
  [fixed compilation warnings]</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dsterba@suse.cz" date="1330948800">- add btrfsck repair options for:
  - rebuild extent records
  - fix block group accounting
  - reset csums for rescue nodatasum mount
  - prune corrupt extent allocation tree blocks
- device scanning fixes for dm and multipath (bnc#749540)
- initrd support: move btrfs device scan after block device setup
- documentation updates
- add csize for file commpressed size
- updated restore utility</changelog>
<changelog author="rschweikert@suse.com" date="1331294400">- place binaries in /usr tree (UsrMerge project)
- adjust mkinitrd scrippt accordingly</changelog>
<changelog author="dsterba@suse.cz" date="1333713600">- add btrfs-debug-tree to initrd
- adjust fs size to correct size (bnc#744593)
- man page documentation updates
- do not package obsolete utilities
- mkfs: store correct size of device in superblock (bnc#730103)
- updated restriper/balance commands to match kernel version</changelog>
<changelog author="dsterba@suse.cz" date="1333713601">- fix build failure</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1334059200">- set correct file mode if writing replacement fsck</changelog>
<changelog author="dsterba@suse.cz" date="1334318400">- initrd support: add module (bnc#750185, bnc#727383)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Make requirement on libattr-devel explicit</changelog>
<changelog author="dsterba@suse.cz" date="1372939200">- update to upstream master (f00dd8386a57d241d0f7c)</changelog>
<changelog author="ohering@suse.de" date="1374494400">- Simplify checks in mkinitrd scripts.
  They are always true because they come from the same package
  Use relative paths to binaries
- Move udev rules to /usr.
- Adjust rules to call binary from /usr
- Simplify fsck.btrfs, its just a dummy until fixed</changelog>
<changelog author="dsterba@suse.cz" date="1376049600">- added 0040-btrfs-progs-fix-loop-device-mount-checks.patch: fix
  loop mount detection again (bnc#834173)</changelog>
<changelog author="dsterba@suse.cz" date="1378382400">- btrfs-progs-mkfs-default-extref.diff: turn on extended refs by
  default, (aka hardlink count limtitation) (bnc#835695)</changelog>
<changelog author="jeffm@suse.com" date="1379332800">- update to upstream master (194aa4a1)
  - btrfs-restore: deal with NULL returns from read_node_slot
  - btrfs-restore: use the correct leafsize when reading the FS location
  - btrfs-find-root: Add options to control generation and level
  - btrfsck: fix incorrect casting on items in the corrupt_blocks tree
  - Btrfs-progs: fix closing of devices
  - Btrfs-progs: enhance btrfs-image to restore image onto multiple disks
  - Btrfs-progs: cleanup btrfs-image usage
  - Btrfs-progs: delete fs_devices itself from fs_uuid list before freeing
  - Btrfs-progs: skip open devices which is missing
  - Btrfs-progs: fix misuse of skinny metadata in btrfs-image
  - Btrfs-progs: recover raid0/raid10/raid5/raid6 metadata chunk
  - Btrfs-progs: Add chunk rebuild function for RAID1/SINGLE/DUP
  - Btrfs-progs: introduce list_{first, next}_entry/list_splice_tail{_init}
  - Btrfs-progs: Add chunk recover function - using old chunk items
  - Btrfs-progs: Add block group check funtion
  - Btrfs-progs: extend the extent cache for the device extent
  - Btrfs-progs: use rb-tree instead of extent cache tree for fs/file roots
  - Btrfs-progs: introduce common insert/search/delete functions for rb-tree
  - Btrfs-progs: cleanup similar code in open_ctree_* and close_ctree
  - Btrfs-progs: Don't free the devices when close the ctree
  - Btrfs-progs: don't close the file descriptor 0 when closing a device
  - Btrfs-progs: fix missing recow roots when making btrfs filesystem
- Add fix for passing super_nr while opening ctree</changelog>
<changelog author="jeffm@suse.com" date="1380196800">- Remove udev rules file - udev packages one itself (bnc#839960).</changelog>
<changelog author="rgoldwyn@suse.com" date="1380888000">- Change udev rule filename in setup-btrfs.sh to
  /usr/lib/udev/rules.d/64-btrfs.rules from
  from /usr/lib/udev/rules.d/80-btrfs.rules (bnc#839960 comment#7)</changelog>
<changelog author="dsterba@suse.cz" date="1383220800">- fsck updates
- more mkfs sanity checks
- qgroup rescan wait
- Added patches:
  * 0050-Btrfs-progs-commit-the-csum_root-if-we-do-init-csum-.patch
  * 0051-btrfs-progs-Fix-getopt-on-arm-ppc-platforms.patch
  * 0052-btrfs-progs-fix-duplicate-__-su-typedefs-on-ppc64.patch
  * 0053-btrfs-progs-use-reentrant-localtime.patch
  * 0054-btrfs-progs-don-t-have-to-report-ENOMEDIUM-error-dur.patch
  * 0055-Btrfs-progs-added-btrfs-quota-rescan-w-switch-wait.patch
  * 0056-btrfs-progs-fix-qgroup-realloc-inheritance.patch
  * 0057-Btrfs-progs-fix-restore-command-leaving-corrupted-fi.patch
  * 0058-btrfs-progs-avoid-write-to-the-disk-before-sure-to-c.patch
  * 0059-btrfs-progs-error-if-device-for-mkfs-is-too-small.patch
  * 0060-btrfs-progs-error-if-device-have-no-space-to-make-pr.patch
  * 0061-btrfs-progs-calculate-available-blocks-on-device-pro.patch
  * 0062-Btrfs-progs-keep-track-of-transid-failures-and-fix-t.patch</changelog>
<changelog author="dsterba@suse.cz" date="1385467200">- update to version 3.12 (bnc#852425)
  - update tarball and remove upstreamed patches
  - remove stale btrfs-dev-clear-sb utility
- mkfs:
  - extrefs (aka. hardlink limitation) feature is set by default
  - fs options can be specified via -O option
- fsck, btrfs-image: various improvements and fixes
- restore:
  - recover extended attributes
  - able to sanitize filenames and xattrs
- fi df: size units are printed in powers of two
- fi defrag: -r recursively processes directories
- qgroup show: improved output
- subvol list: able to show deleted subvolumes
- new subcommand rescue for last-resort rescue operations
  - chunk tree recovery
  - super block recovery
- btrfs-calc-size prints more stats
- more manpages, help text updates
- device detection uses blkid cache
- code passed through static checkers
- Added patches:
  - 0162-btrfs-progs-fix-loop-device-mount-checks.patch
  - 0163-btrfs-progs-fsck-fix-segfault.patch
  - 0164-btrfs-progs-convert-set-label-or-copy-from-origin.patch
  - 0165-Revert-btrfs-progs-update-options-in-find-root.c.patch
  - 0166-Btrfs-progs-add-some-verbose-output-to-find-root.patch
  - 0167-Btrfs-progs-make-find_and_setup_root-return-an-error.patch
  - 0168-Btrfs-progs-don-t-bug-out-if-we-can-t-find-the-last-.patch
  - 0169-btrfs-progs-Check-metadata-mirrors-in-find-root.patch
  - 0170-btrfs-progs-In-find-root-dump-bytenr-for-every-slot.patch</changelog>
<changelog author="fcastelli@suse.com" date="1424779200">- Ship version.h with libbtrfs-devel (bnc#919260)
- Added patch:
  - install_version_header.diff</changelog>

</package>
<package pkgid="c0d1eddb44b742a33feaee0a8a0c5210dd8534e0a4bcb4cb3207eace7de42809" name="btrfsprogs" arch="src">
    <version epoch="0" ver="0.20" rel="4.10.1"/>

<changelog author="dsterba@suse.cz" date="1312459200">- add patch for local version override as we do not build from
  git, and avoid doubled "Btrfs" in output of 'btrfs'</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="dsterba@suse.cz" date="1317729600">- btrfsck: ignore -a (bnc#655906)
- btrfsck: fix strerror value</changelog>
<changelog author="dsterba@suse.cz" date="1320840000">- add several tools to mkinitrd if root fs is btrfs
- pull upstream branch and delete local patches</changelog>
<changelog author="dsterba@suse.cz" date="1323345600">- updated mkinitrd script to scan devices before mount (bnc#727383)</changelog>
<changelog author="dsterba@suse.cz" date="1323691200">- pull upstream, replace existing patches, spec update
- update 'restore' utility
  - lzo support
  - tools may now take earlies superblock when opening the fs
  - other fixes
- pull integration-20111030 branch
  - mkfs: force mkfs if desired
  - other fixes
- add btrfs-dump-super to mkinitrd
- other fixes
  - skip non-existent devices or without media
  - documentation updates
  - scrubbing single device
  - graceful error handling when opening fs fails</changelog>
<changelog author="dkukawka@suse.de" date="1323691201">- btrfs-progs-fix-open_ctree_usage_segfaults.patch: fix
  segfaults from bnc#710486 due to unchecked usage of return
  value of open_ctree()
  [fixed compilation warnings]</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dsterba@suse.cz" date="1330948800">- add btrfsck repair options for:
  - rebuild extent records
  - fix block group accounting
  - reset csums for rescue nodatasum mount
  - prune corrupt extent allocation tree blocks
- device scanning fixes for dm and multipath (bnc#749540)
- initrd support: move btrfs device scan after block device setup
- documentation updates
- add csize for file commpressed size
- updated restore utility</changelog>
<changelog author="rschweikert@suse.com" date="1331294400">- place binaries in /usr tree (UsrMerge project)
- adjust mkinitrd scrippt accordingly</changelog>
<changelog author="dsterba@suse.cz" date="1333713600">- add btrfs-debug-tree to initrd
- adjust fs size to correct size (bnc#744593)
- man page documentation updates
- do not package obsolete utilities
- mkfs: store correct size of device in superblock (bnc#730103)
- updated restriper/balance commands to match kernel version</changelog>
<changelog author="dsterba@suse.cz" date="1333713601">- fix build failure</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1334059200">- set correct file mode if writing replacement fsck</changelog>
<changelog author="dsterba@suse.cz" date="1334318400">- initrd support: add module (bnc#750185, bnc#727383)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Make requirement on libattr-devel explicit</changelog>
<changelog author="dsterba@suse.cz" date="1372939200">- update to upstream master (f00dd8386a57d241d0f7c)</changelog>
<changelog author="ohering@suse.de" date="1374494400">- Simplify checks in mkinitrd scripts.
  They are always true because they come from the same package
  Use relative paths to binaries
- Move udev rules to /usr.
- Adjust rules to call binary from /usr
- Simplify fsck.btrfs, its just a dummy until fixed</changelog>
<changelog author="dsterba@suse.cz" date="1376049600">- added 0040-btrfs-progs-fix-loop-device-mount-checks.patch: fix
  loop mount detection again (bnc#834173)</changelog>
<changelog author="dsterba@suse.cz" date="1378382400">- btrfs-progs-mkfs-default-extref.diff: turn on extended refs by
  default, (aka hardlink count limtitation) (bnc#835695)</changelog>
<changelog author="jeffm@suse.com" date="1379332800">- update to upstream master (194aa4a1)
  - btrfs-restore: deal with NULL returns from read_node_slot
  - btrfs-restore: use the correct leafsize when reading the FS location
  - btrfs-find-root: Add options to control generation and level
  - btrfsck: fix incorrect casting on items in the corrupt_blocks tree
  - Btrfs-progs: fix closing of devices
  - Btrfs-progs: enhance btrfs-image to restore image onto multiple disks
  - Btrfs-progs: cleanup btrfs-image usage
  - Btrfs-progs: delete fs_devices itself from fs_uuid list before freeing
  - Btrfs-progs: skip open devices which is missing
  - Btrfs-progs: fix misuse of skinny metadata in btrfs-image
  - Btrfs-progs: recover raid0/raid10/raid5/raid6 metadata chunk
  - Btrfs-progs: Add chunk rebuild function for RAID1/SINGLE/DUP
  - Btrfs-progs: introduce list_{first, next}_entry/list_splice_tail{_init}
  - Btrfs-progs: Add chunk recover function - using old chunk items
  - Btrfs-progs: Add block group check funtion
  - Btrfs-progs: extend the extent cache for the device extent
  - Btrfs-progs: use rb-tree instead of extent cache tree for fs/file roots
  - Btrfs-progs: introduce common insert/search/delete functions for rb-tree
  - Btrfs-progs: cleanup similar code in open_ctree_* and close_ctree
  - Btrfs-progs: Don't free the devices when close the ctree
  - Btrfs-progs: don't close the file descriptor 0 when closing a device
  - Btrfs-progs: fix missing recow roots when making btrfs filesystem
- Add fix for passing super_nr while opening ctree</changelog>

</package>
<package pkgid="dd7c628f0bec6668f43230d680be2656ef79aa3ea0a36fbbc1642098373de4b4" name="btrfsprogs" arch="src">
    <version epoch="0" ver="0.20" rel="4.14.1"/>

<changelog author="dsterba@suse.cz" date="1320840000">- add several tools to mkinitrd if root fs is btrfs
- pull upstream branch and delete local patches</changelog>
<changelog author="dsterba@suse.cz" date="1323432000">- updated mkinitrd script to scan devices before mount (bnc#727383)</changelog>
<changelog author="dsterba@suse.cz" date="1323691200">- pull upstream, replace existing patches, spec update
- update 'restore' utility
  - lzo support
  - tools may now take earlies superblock when opening the fs
  - other fixes
- pull integration-20111030 branch
  - mkfs: force mkfs if desired
  - other fixes
- add btrfs-dump-super to mkinitrd
- other fixes
  - skip non-existent devices or without media
  - documentation updates
  - scrubbing single device
  - graceful error handling when opening fs fails</changelog>
<changelog author="dkukawka@suse.de" date="1323691201">- btrfs-progs-fix-open_ctree_usage_segfaults.patch: fix
  segfaults from bnc#710486 due to unchecked usage of return
  value of open_ctree()
  [fixed compilation warnings]</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dsterba@suse.cz" date="1330948800">- add btrfsck repair options for:
  - rebuild extent records
  - fix block group accounting
  - reset csums for rescue nodatasum mount
  - prune corrupt extent allocation tree blocks
- device scanning fixes for dm and multipath (bnc#749540)
- initrd support: move btrfs device scan after block device setup
- documentation updates
- add csize for file commpressed size
- updated restore utility</changelog>
<changelog author="rschweikert@suse.com" date="1331294400">- place binaries in /usr tree (UsrMerge project)
- adjust mkinitrd scrippt accordingly</changelog>
<changelog author="dsterba@suse.cz" date="1333713600">- add btrfs-debug-tree to initrd
- adjust fs size to correct size (bnc#744593)
- man page documentation updates
- do not package obsolete utilities
- mkfs: store correct size of device in superblock (bnc#730103)
- updated restriper/balance commands to match kernel version</changelog>
<changelog author="dsterba@suse.cz" date="1333713601">- fix build failure</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1334059200">- set correct file mode if writing replacement fsck</changelog>
<changelog author="dsterba@suse.cz" date="1334318400">- initrd support: add module (bnc#750185, bnc#727383)</changelog>
<changelog author="jengelh@inai.de" date="1371470400">- Make requirement on libattr-devel explicit</changelog>
<changelog author="dsterba@suse.cz" date="1372939200">- update to upstream master (f00dd8386a57d241d0f7c)</changelog>
<changelog author="ohering@suse.de" date="1374494400">- Simplify checks in mkinitrd scripts.
  They are always true because they come from the same package
  Use relative paths to binaries
- Move udev rules to /usr.
- Adjust rules to call binary from /usr
- Simplify fsck.btrfs, its just a dummy until fixed</changelog>
<changelog author="dsterba@suse.cz" date="1376049600">- added 0040-btrfs-progs-fix-loop-device-mount-checks.patch: fix
  loop mount detection again (bnc#834173)</changelog>
<changelog author="dsterba@suse.cz" date="1378382400">- btrfs-progs-mkfs-default-extref.diff: turn on extended refs by
  default, (aka hardlink count limtitation) (bnc#835695)</changelog>
<changelog author="jeffm@suse.com" date="1379332800">- update to upstream master (194aa4a1)
  - btrfs-restore: deal with NULL returns from read_node_slot
  - btrfs-restore: use the correct leafsize when reading the FS location
  - btrfs-find-root: Add options to control generation and level
  - btrfsck: fix incorrect casting on items in the corrupt_blocks tree
  - Btrfs-progs: fix closing of devices
  - Btrfs-progs: enhance btrfs-image to restore image onto multiple disks
  - Btrfs-progs: cleanup btrfs-image usage
  - Btrfs-progs: delete fs_devices itself from fs_uuid list before freeing
  - Btrfs-progs: skip open devices which is missing
  - Btrfs-progs: fix misuse of skinny metadata in btrfs-image
  - Btrfs-progs: recover raid0/raid10/raid5/raid6 metadata chunk
  - Btrfs-progs: Add chunk rebuild function for RAID1/SINGLE/DUP
  - Btrfs-progs: introduce list_{first, next}_entry/list_splice_tail{_init}
  - Btrfs-progs: Add chunk recover function - using old chunk items
  - Btrfs-progs: Add block group check funtion
  - Btrfs-progs: extend the extent cache for the device extent
  - Btrfs-progs: use rb-tree instead of extent cache tree for fs/file roots
  - Btrfs-progs: introduce common insert/search/delete functions for rb-tree
  - Btrfs-progs: cleanup similar code in open_ctree_* and close_ctree
  - Btrfs-progs: Don't free the devices when close the ctree
  - Btrfs-progs: don't close the file descriptor 0 when closing a device
  - Btrfs-progs: fix missing recow roots when making btrfs filesystem
- Add fix for passing super_nr while opening ctree</changelog>
<changelog author="jeffm@suse.com" date="1380196800">- Remove udev rules file - udev packages one itself (bnc#839960).</changelog>
<changelog author="rgoldwyn@suse.com" date="1380888000">- Change udev rule filename in setup-btrfs.sh to
  /usr/lib/udev/rules.d/64-btrfs.rules from
  from /usr/lib/udev/rules.d/80-btrfs.rules (bnc#839960 comment#7)</changelog>
<changelog author="dsterba@suse.cz" date="1383220800">- fsck updates
- more mkfs sanity checks
- qgroup rescan wait
- Added patches:
  * 0050-Btrfs-progs-commit-the-csum_root-if-we-do-init-csum-.patch
  * 0051-btrfs-progs-Fix-getopt-on-arm-ppc-platforms.patch
  * 0052-btrfs-progs-fix-duplicate-__-su-typedefs-on-ppc64.patch
  * 0053-btrfs-progs-use-reentrant-localtime.patch
  * 0054-btrfs-progs-don-t-have-to-report-ENOMEDIUM-error-dur.patch
  * 0055-Btrfs-progs-added-btrfs-quota-rescan-w-switch-wait.patch
  * 0056-btrfs-progs-fix-qgroup-realloc-inheritance.patch
  * 0057-Btrfs-progs-fix-restore-command-leaving-corrupted-fi.patch
  * 0058-btrfs-progs-avoid-write-to-the-disk-before-sure-to-c.patch
  * 0059-btrfs-progs-error-if-device-for-mkfs-is-too-small.patch
  * 0060-btrfs-progs-error-if-device-have-no-space-to-make-pr.patch
  * 0061-btrfs-progs-calculate-available-blocks-on-device-pro.patch
  * 0062-Btrfs-progs-keep-track-of-transid-failures-and-fix-t.patch</changelog>

</package>
<package pkgid="2dc4136f7d839f715665aff933902a655a8c5dc977d1ea3ff195544977c88d35" name="btrfsprogs" arch="src">
    <version epoch="0" ver="3.12" rel="4.18.1"/>

<changelog author="dsterba@suse.cz" date="1323432000">- updated mkinitrd script to scan devices before mount (bnc#727383)</changelog>
<changelog author="dsterba@suse.cz" date="1323691200">- pull upstream, replace existing patches, spec update
- update 'restore' utility
  - lzo support
  - tools may now take earlies superblock when opening the fs
  - other fixes
- pull integration-20111030 branch
  - mkfs: force mkfs if desired
  - other fixes
- add btrfs-dump-super to mkinitrd
- other fixes
  - skip non-existent devices or without media
  - documentation updates
  - scrubbing single device
  - graceful error handling when opening fs fails</changelog>
<changelog author="dkukawka@suse.de" date="1323691201">- btrfs-progs-fix-open_ctree_usage_segfaults.patch: fix
  segfaults from bnc#710486 due to unchecked usage of return
  value of open_ctree()
  [fixed compilation warnings]</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dsterba@suse.cz" date="1330948800">- add btrfsck repair options for:
  - rebuild extent records
  - fix block group accounting
  - reset csums for rescue nodatasum mount
  - prune corrupt extent allocation tree blocks
- device scanning fixes for dm and multipath (bnc#749540)
- initrd support: move btrfs device scan after block device setup
- documentation updates
- add csize for file commpressed size
- updated restore utility</changelog>
<changelog author="rschweikert@suse.com" date="1331294400">- place binaries in /usr tree (UsrMerge project)
- adjust mkinitrd scrippt accordingly</changelog>
<changelog author="dsterba@suse.cz" date="1333713600">- add btrfs-debug-tree to initrd
- adjust fs size to correct size (bnc#744593)
- man page documentation updates
- do not package obsolete utilities
- mkfs: store correct size of device in superblock (bnc#730103)
- updated restriper/balance commands to match kernel version</changelog>
<changelog author="dsterba@suse.cz" date="1333713601">- fix build failure</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1334059200">- set correct file mode if writing replacement fsck</changelog>
<changelog author="dsterba@suse.cz" date="1334318400">- initrd support: add module (bnc#750185, bnc#727383)</changelog>
<changelog author="jengelh@inai.de" date="1371470400">- Make requirement on libattr-devel explicit</changelog>
<changelog author="dsterba@suse.cz" date="1372939200">- update to upstream master (f00dd8386a57d241d0f7c)</changelog>
<changelog author="ohering@suse.de" date="1374494400">- Simplify checks in mkinitrd scripts.
  They are always true because they come from the same package
  Use relative paths to binaries
- Move udev rules to /usr.
- Adjust rules to call binary from /usr
- Simplify fsck.btrfs, its just a dummy until fixed</changelog>
<changelog author="dsterba@suse.cz" date="1376049600">- added 0040-btrfs-progs-fix-loop-device-mount-checks.patch: fix
  loop mount detection again (bnc#834173)</changelog>
<changelog author="dsterba@suse.cz" date="1378382400">- btrfs-progs-mkfs-default-extref.diff: turn on extended refs by
  default, (aka hardlink count limtitation) (bnc#835695)</changelog>
<changelog author="jeffm@suse.com" date="1379332800">- update to upstream master (194aa4a1)
  - btrfs-restore: deal with NULL returns from read_node_slot
  - btrfs-restore: use the correct leafsize when reading the FS location
  - btrfs-find-root: Add options to control generation and level
  - btrfsck: fix incorrect casting on items in the corrupt_blocks tree
  - Btrfs-progs: fix closing of devices
  - Btrfs-progs: enhance btrfs-image to restore image onto multiple disks
  - Btrfs-progs: cleanup btrfs-image usage
  - Btrfs-progs: delete fs_devices itself from fs_uuid list before freeing
  - Btrfs-progs: skip open devices which is missing
  - Btrfs-progs: fix misuse of skinny metadata in btrfs-image
  - Btrfs-progs: recover raid0/raid10/raid5/raid6 metadata chunk
  - Btrfs-progs: Add chunk rebuild function for RAID1/SINGLE/DUP
  - Btrfs-progs: introduce list_{first, next}_entry/list_splice_tail{_init}
  - Btrfs-progs: Add chunk recover function - using old chunk items
  - Btrfs-progs: Add block group check funtion
  - Btrfs-progs: extend the extent cache for the device extent
  - Btrfs-progs: use rb-tree instead of extent cache tree for fs/file roots
  - Btrfs-progs: introduce common insert/search/delete functions for rb-tree
  - Btrfs-progs: cleanup similar code in open_ctree_* and close_ctree
  - Btrfs-progs: Don't free the devices when close the ctree
  - Btrfs-progs: don't close the file descriptor 0 when closing a device
  - Btrfs-progs: fix missing recow roots when making btrfs filesystem
- Add fix for passing super_nr while opening ctree</changelog>
<changelog author="jeffm@suse.com" date="1380196800">- Remove udev rules file - udev packages one itself (bnc#839960).</changelog>
<changelog author="rgoldwyn@suse.com" date="1380888000">- Change udev rule filename in setup-btrfs.sh to
  /usr/lib/udev/rules.d/64-btrfs.rules from
  from /usr/lib/udev/rules.d/80-btrfs.rules (bnc#839960 comment#7)</changelog>
<changelog author="dsterba@suse.cz" date="1383220800">- fsck updates
- more mkfs sanity checks
- qgroup rescan wait
- Added patches:
  * 0050-Btrfs-progs-commit-the-csum_root-if-we-do-init-csum-.patch
  * 0051-btrfs-progs-Fix-getopt-on-arm-ppc-platforms.patch
  * 0052-btrfs-progs-fix-duplicate-__-su-typedefs-on-ppc64.patch
  * 0053-btrfs-progs-use-reentrant-localtime.patch
  * 0054-btrfs-progs-don-t-have-to-report-ENOMEDIUM-error-dur.patch
  * 0055-Btrfs-progs-added-btrfs-quota-rescan-w-switch-wait.patch
  * 0056-btrfs-progs-fix-qgroup-realloc-inheritance.patch
  * 0057-Btrfs-progs-fix-restore-command-leaving-corrupted-fi.patch
  * 0058-btrfs-progs-avoid-write-to-the-disk-before-sure-to-c.patch
  * 0059-btrfs-progs-error-if-device-for-mkfs-is-too-small.patch
  * 0060-btrfs-progs-error-if-device-have-no-space-to-make-pr.patch
  * 0061-btrfs-progs-calculate-available-blocks-on-device-pro.patch
  * 0062-Btrfs-progs-keep-track-of-transid-failures-and-fix-t.patch</changelog>
<changelog author="dsterba@suse.cz" date="1385467200">- update to version 3.12 (bnc#852425)
  - update tarball and remove upstreamed patches
  - remove stale btrfs-dev-clear-sb utility
- mkfs:
  - extrefs (aka. hardlink limitation) feature is set by default
  - fs options can be specified via -O option
- fsck, btrfs-image: various improvements and fixes
- restore:
  - recover extended attributes
  - able to sanitize filenames and xattrs
- fi df: size units are printed in powers of two
- fi defrag: -r recursively processes directories
- qgroup show: improved output
- subvol list: able to show deleted subvolumes
- new subcommand rescue for last-resort rescue operations
  - chunk tree recovery
  - super block recovery
- btrfs-calc-size prints more stats
- more manpages, help text updates
- device detection uses blkid cache
- code passed through static checkers
- Added patches:
  - 0162-btrfs-progs-fix-loop-device-mount-checks.patch
  - 0163-btrfs-progs-fsck-fix-segfault.patch
  - 0164-btrfs-progs-convert-set-label-or-copy-from-origin.patch
  - 0165-Revert-btrfs-progs-update-options-in-find-root.c.patch
  - 0166-Btrfs-progs-add-some-verbose-output-to-find-root.patch
  - 0167-Btrfs-progs-make-find_and_setup_root-return-an-error.patch
  - 0168-Btrfs-progs-don-t-bug-out-if-we-can-t-find-the-last-.patch
  - 0169-btrfs-progs-Check-metadata-mirrors-in-find-root.patch
  - 0170-btrfs-progs-In-find-root-dump-bytenr-for-every-slot.patch</changelog>

</package>
<package pkgid="a432f265b81f7431d2bf96f9f439c8fa8feddecd72c0a2e302d7a23d16c9ed29" name="btrfsprogs" arch="src">
    <version epoch="0" ver="3.12" rel="4.22.1"/>

<changelog author="dsterba@suse.cz" date="1323691200">- pull upstream, replace existing patches, spec update
- update 'restore' utility
  - lzo support
  - tools may now take earlies superblock when opening the fs
  - other fixes
- pull integration-20111030 branch
  - mkfs: force mkfs if desired
  - other fixes
- add btrfs-dump-super to mkinitrd
- other fixes
  - skip non-existent devices or without media
  - documentation updates
  - scrubbing single device
  - graceful error handling when opening fs fails</changelog>
<changelog author="dkukawka@suse.de" date="1323691201">- btrfs-progs-fix-open_ctree_usage_segfaults.patch: fix
  segfaults from bnc#710486 due to unchecked usage of return
  value of open_ctree()
  [fixed compilation warnings]</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dsterba@suse.cz" date="1330948800">- add btrfsck repair options for:
  - rebuild extent records
  - fix block group accounting
  - reset csums for rescue nodatasum mount
  - prune corrupt extent allocation tree blocks
- device scanning fixes for dm and multipath (bnc#749540)
- initrd support: move btrfs device scan after block device setup
- documentation updates
- add csize for file commpressed size
- updated restore utility</changelog>
<changelog author="rschweikert@suse.com" date="1331294400">- place binaries in /usr tree (UsrMerge project)
- adjust mkinitrd scrippt accordingly</changelog>
<changelog author="dsterba@suse.cz" date="1333713600">- add btrfs-debug-tree to initrd
- adjust fs size to correct size (bnc#744593)
- man page documentation updates
- do not package obsolete utilities
- mkfs: store correct size of device in superblock (bnc#730103)
- updated restriper/balance commands to match kernel version</changelog>
<changelog author="dsterba@suse.cz" date="1333713601">- fix build failure</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1334059200">- set correct file mode if writing replacement fsck</changelog>
<changelog author="dsterba@suse.cz" date="1334318400">- initrd support: add module (bnc#750185, bnc#727383)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Make requirement on libattr-devel explicit</changelog>
<changelog author="dsterba@suse.cz" date="1372939200">- update to upstream master (f00dd8386a57d241d0f7c)</changelog>
<changelog author="ohering@suse.de" date="1374494400">- Simplify checks in mkinitrd scripts.
  They are always true because they come from the same package
  Use relative paths to binaries
- Move udev rules to /usr.
- Adjust rules to call binary from /usr
- Simplify fsck.btrfs, its just a dummy until fixed</changelog>
<changelog author="dsterba@suse.cz" date="1376049600">- added 0040-btrfs-progs-fix-loop-device-mount-checks.patch: fix
  loop mount detection again (bnc#834173)</changelog>
<changelog author="dsterba@suse.cz" date="1378382400">- btrfs-progs-mkfs-default-extref.diff: turn on extended refs by
  default, (aka hardlink count limtitation) (bnc#835695)</changelog>
<changelog author="jeffm@suse.com" date="1379332800">- update to upstream master (194aa4a1)
  - btrfs-restore: deal with NULL returns from read_node_slot
  - btrfs-restore: use the correct leafsize when reading the FS location
  - btrfs-find-root: Add options to control generation and level
  - btrfsck: fix incorrect casting on items in the corrupt_blocks tree
  - Btrfs-progs: fix closing of devices
  - Btrfs-progs: enhance btrfs-image to restore image onto multiple disks
  - Btrfs-progs: cleanup btrfs-image usage
  - Btrfs-progs: delete fs_devices itself from fs_uuid list before freeing
  - Btrfs-progs: skip open devices which is missing
  - Btrfs-progs: fix misuse of skinny metadata in btrfs-image
  - Btrfs-progs: recover raid0/raid10/raid5/raid6 metadata chunk
  - Btrfs-progs: Add chunk rebuild function for RAID1/SINGLE/DUP
  - Btrfs-progs: introduce list_{first, next}_entry/list_splice_tail{_init}
  - Btrfs-progs: Add chunk recover function - using old chunk items
  - Btrfs-progs: Add block group check funtion
  - Btrfs-progs: extend the extent cache for the device extent
  - Btrfs-progs: use rb-tree instead of extent cache tree for fs/file roots
  - Btrfs-progs: introduce common insert/search/delete functions for rb-tree
  - Btrfs-progs: cleanup similar code in open_ctree_* and close_ctree
  - Btrfs-progs: Don't free the devices when close the ctree
  - Btrfs-progs: don't close the file descriptor 0 when closing a device
  - Btrfs-progs: fix missing recow roots when making btrfs filesystem
- Add fix for passing super_nr while opening ctree</changelog>
<changelog author="jeffm@suse.com" date="1380196800">- Remove udev rules file - udev packages one itself (bnc#839960).</changelog>
<changelog author="rgoldwyn@suse.com" date="1380888000">- Change udev rule filename in setup-btrfs.sh to
  /usr/lib/udev/rules.d/64-btrfs.rules from
  from /usr/lib/udev/rules.d/80-btrfs.rules (bnc#839960 comment#7)</changelog>
<changelog author="dsterba@suse.cz" date="1383220800">- fsck updates
- more mkfs sanity checks
- qgroup rescan wait
- Added patches:
  * 0050-Btrfs-progs-commit-the-csum_root-if-we-do-init-csum-.patch
  * 0051-btrfs-progs-Fix-getopt-on-arm-ppc-platforms.patch
  * 0052-btrfs-progs-fix-duplicate-__-su-typedefs-on-ppc64.patch
  * 0053-btrfs-progs-use-reentrant-localtime.patch
  * 0054-btrfs-progs-don-t-have-to-report-ENOMEDIUM-error-dur.patch
  * 0055-Btrfs-progs-added-btrfs-quota-rescan-w-switch-wait.patch
  * 0056-btrfs-progs-fix-qgroup-realloc-inheritance.patch
  * 0057-Btrfs-progs-fix-restore-command-leaving-corrupted-fi.patch
  * 0058-btrfs-progs-avoid-write-to-the-disk-before-sure-to-c.patch
  * 0059-btrfs-progs-error-if-device-for-mkfs-is-too-small.patch
  * 0060-btrfs-progs-error-if-device-have-no-space-to-make-pr.patch
  * 0061-btrfs-progs-calculate-available-blocks-on-device-pro.patch
  * 0062-Btrfs-progs-keep-track-of-transid-failures-and-fix-t.patch</changelog>
<changelog author="dsterba@suse.cz" date="1385467200">- update to version 3.12 (bnc#852425)
  - update tarball and remove upstreamed patches
  - remove stale btrfs-dev-clear-sb utility
- mkfs:
  - extrefs (aka. hardlink limitation) feature is set by default
  - fs options can be specified via -O option
- fsck, btrfs-image: various improvements and fixes
- restore:
  - recover extended attributes
  - able to sanitize filenames and xattrs
- fi df: size units are printed in powers of two
- fi defrag: -r recursively processes directories
- qgroup show: improved output
- subvol list: able to show deleted subvolumes
- new subcommand rescue for last-resort rescue operations
  - chunk tree recovery
  - super block recovery
- btrfs-calc-size prints more stats
- more manpages, help text updates
- device detection uses blkid cache
- code passed through static checkers
- Added patches:
  - 0162-btrfs-progs-fix-loop-device-mount-checks.patch
  - 0163-btrfs-progs-fsck-fix-segfault.patch
  - 0164-btrfs-progs-convert-set-label-or-copy-from-origin.patch
  - 0165-Revert-btrfs-progs-update-options-in-find-root.c.patch
  - 0166-Btrfs-progs-add-some-verbose-output-to-find-root.patch
  - 0167-Btrfs-progs-make-find_and_setup_root-return-an-error.patch
  - 0168-Btrfs-progs-don-t-bug-out-if-we-can-t-find-the-last-.patch
  - 0169-btrfs-progs-Check-metadata-mirrors-in-find-root.patch
  - 0170-btrfs-progs-In-find-root-dump-bytenr-for-every-slot.patch</changelog>
<changelog author="fcastelli@suse.com" date="1424779200">- Ship version.h with libbtrfs-devel (bnc#919260)
- Added patch:
  - install_version_header.diff</changelog>

</package>
<package pkgid="b9641feee430abf6840bed175ec56264f729dfebcdbc7afce4510a2dd98bda40" name="btrfsprogs" arch="x86_64">
    <version epoch="0" ver="0.20" rel="4.10.1"/>

<changelog author="dsterba@suse.cz" date="1312459200">- add patch for local version override as we do not build from
  git, and avoid doubled "Btrfs" in output of 'btrfs'</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="dsterba@suse.cz" date="1317729600">- btrfsck: ignore -a (bnc#655906)
- btrfsck: fix strerror value</changelog>
<changelog author="dsterba@suse.cz" date="1320840000">- add several tools to mkinitrd if root fs is btrfs
- pull upstream branch and delete local patches</changelog>
<changelog author="dsterba@suse.cz" date="1323345600">- updated mkinitrd script to scan devices before mount (bnc#727383)</changelog>
<changelog author="dsterba@suse.cz" date="1323691200">- pull upstream, replace existing patches, spec update
- update 'restore' utility
  - lzo support
  - tools may now take earlies superblock when opening the fs
  - other fixes
- pull integration-20111030 branch
  - mkfs: force mkfs if desired
  - other fixes
- add btrfs-dump-super to mkinitrd
- other fixes
  - skip non-existent devices or without media
  - documentation updates
  - scrubbing single device
  - graceful error handling when opening fs fails</changelog>
<changelog author="dkukawka@suse.de" date="1323691201">- btrfs-progs-fix-open_ctree_usage_segfaults.patch: fix
  segfaults from bnc#710486 due to unchecked usage of return
  value of open_ctree()
  [fixed compilation warnings]</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dsterba@suse.cz" date="1330948800">- add btrfsck repair options for:
  - rebuild extent records
  - fix block group accounting
  - reset csums for rescue nodatasum mount
  - prune corrupt extent allocation tree blocks
- device scanning fixes for dm and multipath (bnc#749540)
- initrd support: move btrfs device scan after block device setup
- documentation updates
- add csize for file commpressed size
- updated restore utility</changelog>
<changelog author="rschweikert@suse.com" date="1331294400">- place binaries in /usr tree (UsrMerge project)
- adjust mkinitrd scrippt accordingly</changelog>
<changelog author="dsterba@suse.cz" date="1333713600">- add btrfs-debug-tree to initrd
- adjust fs size to correct size (bnc#744593)
- man page documentation updates
- do not package obsolete utilities
- mkfs: store correct size of device in superblock (bnc#730103)
- updated restriper/balance commands to match kernel version</changelog>
<changelog author="dsterba@suse.cz" date="1333713601">- fix build failure</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1334059200">- set correct file mode if writing replacement fsck</changelog>
<changelog author="dsterba@suse.cz" date="1334318400">- initrd support: add module (bnc#750185, bnc#727383)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Make requirement on libattr-devel explicit</changelog>
<changelog author="dsterba@suse.cz" date="1372939200">- update to upstream master (f00dd8386a57d241d0f7c)</changelog>
<changelog author="ohering@suse.de" date="1374494400">- Simplify checks in mkinitrd scripts.
  They are always true because they come from the same package
  Use relative paths to binaries
- Move udev rules to /usr.
- Adjust rules to call binary from /usr
- Simplify fsck.btrfs, its just a dummy until fixed</changelog>
<changelog author="dsterba@suse.cz" date="1376049600">- added 0040-btrfs-progs-fix-loop-device-mount-checks.patch: fix
  loop mount detection again (bnc#834173)</changelog>
<changelog author="dsterba@suse.cz" date="1378382400">- btrfs-progs-mkfs-default-extref.diff: turn on extended refs by
  default, (aka hardlink count limtitation) (bnc#835695)</changelog>
<changelog author="jeffm@suse.com" date="1379332800">- update to upstream master (194aa4a1)
  - btrfs-restore: deal with NULL returns from read_node_slot
  - btrfs-restore: use the correct leafsize when reading the FS location
  - btrfs-find-root: Add options to control generation and level
  - btrfsck: fix incorrect casting on items in the corrupt_blocks tree
  - Btrfs-progs: fix closing of devices
  - Btrfs-progs: enhance btrfs-image to restore image onto multiple disks
  - Btrfs-progs: cleanup btrfs-image usage
  - Btrfs-progs: delete fs_devices itself from fs_uuid list before freeing
  - Btrfs-progs: skip open devices which is missing
  - Btrfs-progs: fix misuse of skinny metadata in btrfs-image
  - Btrfs-progs: recover raid0/raid10/raid5/raid6 metadata chunk
  - Btrfs-progs: Add chunk rebuild function for RAID1/SINGLE/DUP
  - Btrfs-progs: introduce list_{first, next}_entry/list_splice_tail{_init}
  - Btrfs-progs: Add chunk recover function - using old chunk items
  - Btrfs-progs: Add block group check funtion
  - Btrfs-progs: extend the extent cache for the device extent
  - Btrfs-progs: use rb-tree instead of extent cache tree for fs/file roots
  - Btrfs-progs: introduce common insert/search/delete functions for rb-tree
  - Btrfs-progs: cleanup similar code in open_ctree_* and close_ctree
  - Btrfs-progs: Don't free the devices when close the ctree
  - Btrfs-progs: don't close the file descriptor 0 when closing a device
  - Btrfs-progs: fix missing recow roots when making btrfs filesystem
- Add fix for passing super_nr while opening ctree</changelog>

</package>
<package pkgid="2c99931c44dd63f39b2e183ac8fc4edc338dfa564d174601ee02266cac74d74e" name="btrfsprogs" arch="x86_64">
    <version epoch="0" ver="0.20" rel="4.14.1"/>

<changelog author="dsterba@suse.cz" date="1320840000">- add several tools to mkinitrd if root fs is btrfs
- pull upstream branch and delete local patches</changelog>
<changelog author="dsterba@suse.cz" date="1323432000">- updated mkinitrd script to scan devices before mount (bnc#727383)</changelog>
<changelog author="dsterba@suse.cz" date="1323691200">- pull upstream, replace existing patches, spec update
- update 'restore' utility
  - lzo support
  - tools may now take earlies superblock when opening the fs
  - other fixes
- pull integration-20111030 branch
  - mkfs: force mkfs if desired
  - other fixes
- add btrfs-dump-super to mkinitrd
- other fixes
  - skip non-existent devices or without media
  - documentation updates
  - scrubbing single device
  - graceful error handling when opening fs fails</changelog>
<changelog author="dkukawka@suse.de" date="1323691201">- btrfs-progs-fix-open_ctree_usage_segfaults.patch: fix
  segfaults from bnc#710486 due to unchecked usage of return
  value of open_ctree()
  [fixed compilation warnings]</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dsterba@suse.cz" date="1330948800">- add btrfsck repair options for:
  - rebuild extent records
  - fix block group accounting
  - reset csums for rescue nodatasum mount
  - prune corrupt extent allocation tree blocks
- device scanning fixes for dm and multipath (bnc#749540)
- initrd support: move btrfs device scan after block device setup
- documentation updates
- add csize for file commpressed size
- updated restore utility</changelog>
<changelog author="rschweikert@suse.com" date="1331294400">- place binaries in /usr tree (UsrMerge project)
- adjust mkinitrd scrippt accordingly</changelog>
<changelog author="dsterba@suse.cz" date="1333713600">- add btrfs-debug-tree to initrd
- adjust fs size to correct size (bnc#744593)
- man page documentation updates
- do not package obsolete utilities
- mkfs: store correct size of device in superblock (bnc#730103)
- updated restriper/balance commands to match kernel version</changelog>
<changelog author="dsterba@suse.cz" date="1333713601">- fix build failure</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1334059200">- set correct file mode if writing replacement fsck</changelog>
<changelog author="dsterba@suse.cz" date="1334318400">- initrd support: add module (bnc#750185, bnc#727383)</changelog>
<changelog author="jengelh@inai.de" date="1371470400">- Make requirement on libattr-devel explicit</changelog>
<changelog author="dsterba@suse.cz" date="1372939200">- update to upstream master (f00dd8386a57d241d0f7c)</changelog>
<changelog author="ohering@suse.de" date="1374494400">- Simplify checks in mkinitrd scripts.
  They are always true because they come from the same package
  Use relative paths to binaries
- Move udev rules to /usr.
- Adjust rules to call binary from /usr
- Simplify fsck.btrfs, its just a dummy until fixed</changelog>
<changelog author="dsterba@suse.cz" date="1376049600">- added 0040-btrfs-progs-fix-loop-device-mount-checks.patch: fix
  loop mount detection again (bnc#834173)</changelog>
<changelog author="dsterba@suse.cz" date="1378382400">- btrfs-progs-mkfs-default-extref.diff: turn on extended refs by
  default, (aka hardlink count limtitation) (bnc#835695)</changelog>
<changelog author="jeffm@suse.com" date="1379332800">- update to upstream master (194aa4a1)
  - btrfs-restore: deal with NULL returns from read_node_slot
  - btrfs-restore: use the correct leafsize when reading the FS location
  - btrfs-find-root: Add options to control generation and level
  - btrfsck: fix incorrect casting on items in the corrupt_blocks tree
  - Btrfs-progs: fix closing of devices
  - Btrfs-progs: enhance btrfs-image to restore image onto multiple disks
  - Btrfs-progs: cleanup btrfs-image usage
  - Btrfs-progs: delete fs_devices itself from fs_uuid list before freeing
  - Btrfs-progs: skip open devices which is missing
  - Btrfs-progs: fix misuse of skinny metadata in btrfs-image
  - Btrfs-progs: recover raid0/raid10/raid5/raid6 metadata chunk
  - Btrfs-progs: Add chunk rebuild function for RAID1/SINGLE/DUP
  - Btrfs-progs: introduce list_{first, next}_entry/list_splice_tail{_init}
  - Btrfs-progs: Add chunk recover function - using old chunk items
  - Btrfs-progs: Add block group check funtion
  - Btrfs-progs: extend the extent cache for the device extent
  - Btrfs-progs: use rb-tree instead of extent cache tree for fs/file roots
  - Btrfs-progs: introduce common insert/search/delete functions for rb-tree
  - Btrfs-progs: cleanup similar code in open_ctree_* and close_ctree
  - Btrfs-progs: Don't free the devices when close the ctree
  - Btrfs-progs: don't close the file descriptor 0 when closing a device
  - Btrfs-progs: fix missing recow roots when making btrfs filesystem
- Add fix for passing super_nr while opening ctree</changelog>
<changelog author="jeffm@suse.com" date="1380196800">- Remove udev rules file - udev packages one itself (bnc#839960).</changelog>
<changelog author="rgoldwyn@suse.com" date="1380888000">- Change udev rule filename in setup-btrfs.sh to
  /usr/lib/udev/rules.d/64-btrfs.rules from
  from /usr/lib/udev/rules.d/80-btrfs.rules (bnc#839960 comment#7)</changelog>
<changelog author="dsterba@suse.cz" date="1383220800">- fsck updates
- more mkfs sanity checks
- qgroup rescan wait
- Added patches:
  * 0050-Btrfs-progs-commit-the-csum_root-if-we-do-init-csum-.patch
  * 0051-btrfs-progs-Fix-getopt-on-arm-ppc-platforms.patch
  * 0052-btrfs-progs-fix-duplicate-__-su-typedefs-on-ppc64.patch
  * 0053-btrfs-progs-use-reentrant-localtime.patch
  * 0054-btrfs-progs-don-t-have-to-report-ENOMEDIUM-error-dur.patch
  * 0055-Btrfs-progs-added-btrfs-quota-rescan-w-switch-wait.patch
  * 0056-btrfs-progs-fix-qgroup-realloc-inheritance.patch
  * 0057-Btrfs-progs-fix-restore-command-leaving-corrupted-fi.patch
  * 0058-btrfs-progs-avoid-write-to-the-disk-before-sure-to-c.patch
  * 0059-btrfs-progs-error-if-device-for-mkfs-is-too-small.patch
  * 0060-btrfs-progs-error-if-device-have-no-space-to-make-pr.patch
  * 0061-btrfs-progs-calculate-available-blocks-on-device-pro.patch
  * 0062-Btrfs-progs-keep-track-of-transid-failures-and-fix-t.patch</changelog>

</package>
<package pkgid="d6a198f3fb49766c936e35b529245d0fc558243aa022866aff348b6ab3093bca" name="btrfsprogs" arch="x86_64">
    <version epoch="0" ver="3.12" rel="4.18.1"/>

<changelog author="dsterba@suse.cz" date="1323432000">- updated mkinitrd script to scan devices before mount (bnc#727383)</changelog>
<changelog author="dsterba@suse.cz" date="1323691200">- pull upstream, replace existing patches, spec update
- update 'restore' utility
  - lzo support
  - tools may now take earlies superblock when opening the fs
  - other fixes
- pull integration-20111030 branch
  - mkfs: force mkfs if desired
  - other fixes
- add btrfs-dump-super to mkinitrd
- other fixes
  - skip non-existent devices or without media
  - documentation updates
  - scrubbing single device
  - graceful error handling when opening fs fails</changelog>
<changelog author="dkukawka@suse.de" date="1323691201">- btrfs-progs-fix-open_ctree_usage_segfaults.patch: fix
  segfaults from bnc#710486 due to unchecked usage of return
  value of open_ctree()
  [fixed compilation warnings]</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dsterba@suse.cz" date="1330948800">- add btrfsck repair options for:
  - rebuild extent records
  - fix block group accounting
  - reset csums for rescue nodatasum mount
  - prune corrupt extent allocation tree blocks
- device scanning fixes for dm and multipath (bnc#749540)
- initrd support: move btrfs device scan after block device setup
- documentation updates
- add csize for file commpressed size
- updated restore utility</changelog>
<changelog author="rschweikert@suse.com" date="1331294400">- place binaries in /usr tree (UsrMerge project)
- adjust mkinitrd scrippt accordingly</changelog>
<changelog author="dsterba@suse.cz" date="1333713600">- add btrfs-debug-tree to initrd
- adjust fs size to correct size (bnc#744593)
- man page documentation updates
- do not package obsolete utilities
- mkfs: store correct size of device in superblock (bnc#730103)
- updated restriper/balance commands to match kernel version</changelog>
<changelog author="dsterba@suse.cz" date="1333713601">- fix build failure</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1334059200">- set correct file mode if writing replacement fsck</changelog>
<changelog author="dsterba@suse.cz" date="1334318400">- initrd support: add module (bnc#750185, bnc#727383)</changelog>
<changelog author="jengelh@inai.de" date="1371470400">- Make requirement on libattr-devel explicit</changelog>
<changelog author="dsterba@suse.cz" date="1372939200">- update to upstream master (f00dd8386a57d241d0f7c)</changelog>
<changelog author="ohering@suse.de" date="1374494400">- Simplify checks in mkinitrd scripts.
  They are always true because they come from the same package
  Use relative paths to binaries
- Move udev rules to /usr.
- Adjust rules to call binary from /usr
- Simplify fsck.btrfs, its just a dummy until fixed</changelog>
<changelog author="dsterba@suse.cz" date="1376049600">- added 0040-btrfs-progs-fix-loop-device-mount-checks.patch: fix
  loop mount detection again (bnc#834173)</changelog>
<changelog author="dsterba@suse.cz" date="1378382400">- btrfs-progs-mkfs-default-extref.diff: turn on extended refs by
  default, (aka hardlink count limtitation) (bnc#835695)</changelog>
<changelog author="jeffm@suse.com" date="1379332800">- update to upstream master (194aa4a1)
  - btrfs-restore: deal with NULL returns from read_node_slot
  - btrfs-restore: use the correct leafsize when reading the FS location
  - btrfs-find-root: Add options to control generation and level
  - btrfsck: fix incorrect casting on items in the corrupt_blocks tree
  - Btrfs-progs: fix closing of devices
  - Btrfs-progs: enhance btrfs-image to restore image onto multiple disks
  - Btrfs-progs: cleanup btrfs-image usage
  - Btrfs-progs: delete fs_devices itself from fs_uuid list before freeing
  - Btrfs-progs: skip open devices which is missing
  - Btrfs-progs: fix misuse of skinny metadata in btrfs-image
  - Btrfs-progs: recover raid0/raid10/raid5/raid6 metadata chunk
  - Btrfs-progs: Add chunk rebuild function for RAID1/SINGLE/DUP
  - Btrfs-progs: introduce list_{first, next}_entry/list_splice_tail{_init}
  - Btrfs-progs: Add chunk recover function - using old chunk items
  - Btrfs-progs: Add block group check funtion
  - Btrfs-progs: extend the extent cache for the device extent
  - Btrfs-progs: use rb-tree instead of extent cache tree for fs/file roots
  - Btrfs-progs: introduce common insert/search/delete functions for rb-tree
  - Btrfs-progs: cleanup similar code in open_ctree_* and close_ctree
  - Btrfs-progs: Don't free the devices when close the ctree
  - Btrfs-progs: don't close the file descriptor 0 when closing a device
  - Btrfs-progs: fix missing recow roots when making btrfs filesystem
- Add fix for passing super_nr while opening ctree</changelog>
<changelog author="jeffm@suse.com" date="1380196800">- Remove udev rules file - udev packages one itself (bnc#839960).</changelog>
<changelog author="rgoldwyn@suse.com" date="1380888000">- Change udev rule filename in setup-btrfs.sh to
  /usr/lib/udev/rules.d/64-btrfs.rules from
  from /usr/lib/udev/rules.d/80-btrfs.rules (bnc#839960 comment#7)</changelog>
<changelog author="dsterba@suse.cz" date="1383220800">- fsck updates
- more mkfs sanity checks
- qgroup rescan wait
- Added patches:
  * 0050-Btrfs-progs-commit-the-csum_root-if-we-do-init-csum-.patch
  * 0051-btrfs-progs-Fix-getopt-on-arm-ppc-platforms.patch
  * 0052-btrfs-progs-fix-duplicate-__-su-typedefs-on-ppc64.patch
  * 0053-btrfs-progs-use-reentrant-localtime.patch
  * 0054-btrfs-progs-don-t-have-to-report-ENOMEDIUM-error-dur.patch
  * 0055-Btrfs-progs-added-btrfs-quota-rescan-w-switch-wait.patch
  * 0056-btrfs-progs-fix-qgroup-realloc-inheritance.patch
  * 0057-Btrfs-progs-fix-restore-command-leaving-corrupted-fi.patch
  * 0058-btrfs-progs-avoid-write-to-the-disk-before-sure-to-c.patch
  * 0059-btrfs-progs-error-if-device-for-mkfs-is-too-small.patch
  * 0060-btrfs-progs-error-if-device-have-no-space-to-make-pr.patch
  * 0061-btrfs-progs-calculate-available-blocks-on-device-pro.patch
  * 0062-Btrfs-progs-keep-track-of-transid-failures-and-fix-t.patch</changelog>
<changelog author="dsterba@suse.cz" date="1385467200">- update to version 3.12 (bnc#852425)
  - update tarball and remove upstreamed patches
  - remove stale btrfs-dev-clear-sb utility
- mkfs:
  - extrefs (aka. hardlink limitation) feature is set by default
  - fs options can be specified via -O option
- fsck, btrfs-image: various improvements and fixes
- restore:
  - recover extended attributes
  - able to sanitize filenames and xattrs
- fi df: size units are printed in powers of two
- fi defrag: -r recursively processes directories
- qgroup show: improved output
- subvol list: able to show deleted subvolumes
- new subcommand rescue for last-resort rescue operations
  - chunk tree recovery
  - super block recovery
- btrfs-calc-size prints more stats
- more manpages, help text updates
- device detection uses blkid cache
- code passed through static checkers
- Added patches:
  - 0162-btrfs-progs-fix-loop-device-mount-checks.patch
  - 0163-btrfs-progs-fsck-fix-segfault.patch
  - 0164-btrfs-progs-convert-set-label-or-copy-from-origin.patch
  - 0165-Revert-btrfs-progs-update-options-in-find-root.c.patch
  - 0166-Btrfs-progs-add-some-verbose-output-to-find-root.patch
  - 0167-Btrfs-progs-make-find_and_setup_root-return-an-error.patch
  - 0168-Btrfs-progs-don-t-bug-out-if-we-can-t-find-the-last-.patch
  - 0169-btrfs-progs-Check-metadata-mirrors-in-find-root.patch
  - 0170-btrfs-progs-In-find-root-dump-bytenr-for-every-slot.patch</changelog>

</package>
<package pkgid="23059669606845d97c5ae6b249b18b03ef2f9205823a23ab38fd421eb552b54b" name="btrfsprogs" arch="x86_64">
    <version epoch="0" ver="3.12" rel="4.22.1"/>

<changelog author="dsterba@suse.cz" date="1323691200">- pull upstream, replace existing patches, spec update
- update 'restore' utility
  - lzo support
  - tools may now take earlies superblock when opening the fs
  - other fixes
- pull integration-20111030 branch
  - mkfs: force mkfs if desired
  - other fixes
- add btrfs-dump-super to mkinitrd
- other fixes
  - skip non-existent devices or without media
  - documentation updates
  - scrubbing single device
  - graceful error handling when opening fs fails</changelog>
<changelog author="dkukawka@suse.de" date="1323691201">- btrfs-progs-fix-open_ctree_usage_segfaults.patch: fix
  segfaults from bnc#710486 due to unchecked usage of return
  value of open_ctree()
  [fixed compilation warnings]</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="dsterba@suse.cz" date="1330948800">- add btrfsck repair options for:
  - rebuild extent records
  - fix block group accounting
  - reset csums for rescue nodatasum mount
  - prune corrupt extent allocation tree blocks
- device scanning fixes for dm and multipath (bnc#749540)
- initrd support: move btrfs device scan after block device setup
- documentation updates
- add csize for file commpressed size
- updated restore utility</changelog>
<changelog author="rschweikert@suse.com" date="1331294400">- place binaries in /usr tree (UsrMerge project)
- adjust mkinitrd scrippt accordingly</changelog>
<changelog author="dsterba@suse.cz" date="1333713600">- add btrfs-debug-tree to initrd
- adjust fs size to correct size (bnc#744593)
- man page documentation updates
- do not package obsolete utilities
- mkfs: store correct size of device in superblock (bnc#730103)
- updated restriper/balance commands to match kernel version</changelog>
<changelog author="dsterba@suse.cz" date="1333713601">- fix build failure</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1334059200">- set correct file mode if writing replacement fsck</changelog>
<changelog author="dsterba@suse.cz" date="1334318400">- initrd support: add module (bnc#750185, bnc#727383)</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Make requirement on libattr-devel explicit</changelog>
<changelog author="dsterba@suse.cz" date="1372939200">- update to upstream master (f00dd8386a57d241d0f7c)</changelog>
<changelog author="ohering@suse.de" date="1374494400">- Simplify checks in mkinitrd scripts.
  They are always true because they come from the same package
  Use relative paths to binaries
- Move udev rules to /usr.
- Adjust rules to call binary from /usr
- Simplify fsck.btrfs, its just a dummy until fixed</changelog>
<changelog author="dsterba@suse.cz" date="1376049600">- added 0040-btrfs-progs-fix-loop-device-mount-checks.patch: fix
  loop mount detection again (bnc#834173)</changelog>
<changelog author="dsterba@suse.cz" date="1378382400">- btrfs-progs-mkfs-default-extref.diff: turn on extended refs by
  default, (aka hardlink count limtitation) (bnc#835695)</changelog>
<changelog author="jeffm@suse.com" date="1379332800">- update to upstream master (194aa4a1)
  - btrfs-restore: deal with NULL returns from read_node_slot
  - btrfs-restore: use the correct leafsize when reading the FS location
  - btrfs-find-root: Add options to control generation and level
  - btrfsck: fix incorrect casting on items in the corrupt_blocks tree
  - Btrfs-progs: fix closing of devices
  - Btrfs-progs: enhance btrfs-image to restore image onto multiple disks
  - Btrfs-progs: cleanup btrfs-image usage
  - Btrfs-progs: delete fs_devices itself from fs_uuid list before freeing
  - Btrfs-progs: skip open devices which is missing
  - Btrfs-progs: fix misuse of skinny metadata in btrfs-image
  - Btrfs-progs: recover raid0/raid10/raid5/raid6 metadata chunk
  - Btrfs-progs: Add chunk rebuild function for RAID1/SINGLE/DUP
  - Btrfs-progs: introduce list_{first, next}_entry/list_splice_tail{_init}
  - Btrfs-progs: Add chunk recover function - using old chunk items
  - Btrfs-progs: Add block group check funtion
  - Btrfs-progs: extend the extent cache for the device extent
  - Btrfs-progs: use rb-tree instead of extent cache tree for fs/file roots
  - Btrfs-progs: introduce common insert/search/delete functions for rb-tree
  - Btrfs-progs: cleanup similar code in open_ctree_* and close_ctree
  - Btrfs-progs: Don't free the devices when close the ctree
  - Btrfs-progs: don't close the file descriptor 0 when closing a device
  - Btrfs-progs: fix missing recow roots when making btrfs filesystem
- Add fix for passing super_nr while opening ctree</changelog>
<changelog author="jeffm@suse.com" date="1380196800">- Remove udev rules file - udev packages one itself (bnc#839960).</changelog>
<changelog author="rgoldwyn@suse.com" date="1380888000">- Change udev rule filename in setup-btrfs.sh to
  /usr/lib/udev/rules.d/64-btrfs.rules from
  from /usr/lib/udev/rules.d/80-btrfs.rules (bnc#839960 comment#7)</changelog>
<changelog author="dsterba@suse.cz" date="1383220800">- fsck updates
- more mkfs sanity checks
- qgroup rescan wait
- Added patches:
  * 0050-Btrfs-progs-commit-the-csum_root-if-we-do-init-csum-.patch
  * 0051-btrfs-progs-Fix-getopt-on-arm-ppc-platforms.patch
  * 0052-btrfs-progs-fix-duplicate-__-su-typedefs-on-ppc64.patch
  * 0053-btrfs-progs-use-reentrant-localtime.patch
  * 0054-btrfs-progs-don-t-have-to-report-ENOMEDIUM-error-dur.patch
  * 0055-Btrfs-progs-added-btrfs-quota-rescan-w-switch-wait.patch
  * 0056-btrfs-progs-fix-qgroup-realloc-inheritance.patch
  * 0057-Btrfs-progs-fix-restore-command-leaving-corrupted-fi.patch
  * 0058-btrfs-progs-avoid-write-to-the-disk-before-sure-to-c.patch
  * 0059-btrfs-progs-error-if-device-for-mkfs-is-too-small.patch
  * 0060-btrfs-progs-error-if-device-have-no-space-to-make-pr.patch
  * 0061-btrfs-progs-calculate-available-blocks-on-device-pro.patch
  * 0062-Btrfs-progs-keep-track-of-transid-failures-and-fix-t.patch</changelog>
<changelog author="dsterba@suse.cz" date="1385467200">- update to version 3.12 (bnc#852425)
  - update tarball and remove upstreamed patches
  - remove stale btrfs-dev-clear-sb utility
- mkfs:
  - extrefs (aka. hardlink limitation) feature is set by default
  - fs options can be specified via -O option
- fsck, btrfs-image: various improvements and fixes
- restore:
  - recover extended attributes
  - able to sanitize filenames and xattrs
- fi df: size units are printed in powers of two
- fi defrag: -r recursively processes directories
- qgroup show: improved output
- subvol list: able to show deleted subvolumes
- new subcommand rescue for last-resort rescue operations
  - chunk tree recovery
  - super block recovery
- btrfs-calc-size prints more stats
- more manpages, help text updates
- device detection uses blkid cache
- code passed through static checkers
- Added patches:
  - 0162-btrfs-progs-fix-loop-device-mount-checks.patch
  - 0163-btrfs-progs-fsck-fix-segfault.patch
  - 0164-btrfs-progs-convert-set-label-or-copy-from-origin.patch
  - 0165-Revert-btrfs-progs-update-options-in-find-root.c.patch
  - 0166-Btrfs-progs-add-some-verbose-output-to-find-root.patch
  - 0167-Btrfs-progs-make-find_and_setup_root-return-an-error.patch
  - 0168-Btrfs-progs-don-t-bug-out-if-we-can-t-find-the-last-.patch
  - 0169-btrfs-progs-Check-metadata-mirrors-in-find-root.patch
  - 0170-btrfs-progs-In-find-root-dump-bytenr-for-every-slot.patch</changelog>
<changelog author="fcastelli@suse.com" date="1424779200">- Ship version.h with libbtrfs-devel (bnc#919260)
- Added patch:
  - install_version_header.diff</changelog>

</package>
<package pkgid="add0ac9ecdcd98e11e1d2c7770e24203f2fe527861a173cb08cf7fd71d002852" name="build" arch="noarch">
    <version epoch="0" ver="20150115" rel="4.1"/>

<changelog author="adrian@suse.de" date="1366977600">- cloud support for Amanzon EC2 and openstack
- fixed SPEC_REL support
- fixed zvm build
- fixed uml support
- fixing ext4 usage on old distros
- final openSUSE 12.3 config
- arm build support fixes</changelog>
<changelog author="adrian@suse.de" date="1367236800">- disabling fsync again for newer rpm versions to speed up
  installation phase again.</changelog>
<changelog author="adrian@suse.de" date="1368014400">- support multi architecture initvm binaries
  =&gt; vminit gets build as subpackage now again
- De-hardcode hugetlbfs from ppc
- Do not emulate VGA
- support new nameing scheme of install images of kiwi builds</changelog>
<changelog author="adrian@suse.de" date="1368532800">- debian builds call linitian now if installed
- Arch Linux: support new pacman tool syntax
- support kiwi installation medias with new kiwi versions
- fixed regression using build host rpm instead of the version from chroot
- fixed repository priority ordering, when only some repos have a priority
  and kiwi appliances get build</changelog>
<changelog author="adrian@suse.de" date="1368619200">- fix qemu-binfmt registration in chroot builds</changelog>
<changelog author="adrian@suse.de" date="1368792000">- fix a number of issues regarding statistics collection
  =&gt; works with more udev versions now</changelog>
<changelog author="adrian@suse.de" date="1368792001">- fix build for non-SUSE rpm distros</changelog>
<changelog author="dvlaeev@suse.com" date="1375444800">- add requires for Fedora</changelog>
<changelog author="adrian@suse.de" date="1381838400">- update openSUSE 13.1 build configuration
- add openSUSE 13.2 build configuration
- add support for m86k
- add support for Tizen changelog date format
- export .packages, .verified and .ova files for kiwi
- initvm code cleanup
- Do not specify compression format for Arch packages when extracting
- export kiwi-image:$type for kiwi files with schemaversion 5.6 or newer
- mount tmpfs on $BUILD_ROOT/dev/shm
- Create devices nodes if udev is not running
- more arm architectures
- make version '0' a valid version
- fix the call to lintian, lintian gets a dsc file as input
- adding generic parameter to hand over kiwi parameters</changelog>
<changelog author="adrian@suse.de" date="1386158400">- support for project side configured VM kernels
- ppc64le support
- minor fixes</changelog>
<changelog author="adrian@suse.de" date="1386244800">- fix vc tool regression from "minor fixes"</changelog>
<changelog author="adrian@suse.de" date="1386244801">- fix ppc64le vs. ppc64 emulator check (none needed)</changelog>
<changelog author="adrian@suse.de" date="1392897600">- bugfix release
  - /sys mounting
  - binfmtmisc setup</changelog>
<changelog author="adrian@suse.de" date="1398340800">- build script got refactored and split in multiple modules</changelog>
<changelog author="adrian@suse.de" date="1410868800">- add SLE 12 config (bnc#893618)
- build-vm-kvm: Always use -mem-prealloc when using -mem-path
- debian livebuild support
- various ppc handling fixes
- various smaller fixes</changelog>
<changelog author="adrian@suse.de" date="1411041600">- fix syntax error in SLE 12 config</changelog>
<changelog author="adrian@suse.de" date="1411128000">- drop not available packages from SLE 12 config</changelog>
<changelog author="adrian@suse.de" date="1414411200">- add support for new chroot tool
  * fixes Ubuntu 14.10 builds
- man pages for unrpm and vc</changelog>
<changelog author="adrian@suse.de" date="1416830400">- Add releasesuffix hack for new PTF handling
- support parallel build jobs for debs
- Fix repocfg usage in the "exact match" case
- Improve exclarch handling for deb builds
- rewritten workaround for broken chroot tool</changelog>
<changelog author="adrian@suse.de" date="1422619200">- add recommend to perl(Net::SSL) (bnc#880212)
- add support for debian debootstrap build engine
- Update arch config
- Add support for conflicts, addselfprovides, weakdeps to query functions
- installed package handling works also for arch and debian now
- large code cleanup
- bugfixes and documentation updates</changelog>

</package>
<package pkgid="ec97e85eb48f20c3205103260c2b41361b70b5fde9808e4072a7c77e1889b364" name="build" arch="src">
    <version epoch="0" ver="20150115" rel="4.1"/>

<changelog author="adrian@suse.de" date="1366977600">- cloud support for Amanzon EC2 and openstack
- fixed SPEC_REL support
- fixed zvm build
- fixed uml support
- fixing ext4 usage on old distros
- final openSUSE 12.3 config
- arm build support fixes</changelog>
<changelog author="adrian@suse.de" date="1367236800">- disabling fsync again for newer rpm versions to speed up
  installation phase again.</changelog>
<changelog author="adrian@suse.de" date="1368014400">- support multi architecture initvm binaries
  =&gt; vminit gets build as subpackage now again
- De-hardcode hugetlbfs from ppc
- Do not emulate VGA
- support new nameing scheme of install images of kiwi builds</changelog>
<changelog author="adrian@suse.de" date="1368532800">- debian builds call linitian now if installed
- Arch Linux: support new pacman tool syntax
- support kiwi installation medias with new kiwi versions
- fixed regression using build host rpm instead of the version from chroot
- fixed repository priority ordering, when only some repos have a priority
  and kiwi appliances get build</changelog>
<changelog author="adrian@suse.de" date="1368619200">- fix qemu-binfmt registration in chroot builds</changelog>
<changelog author="adrian@suse.de" date="1368792000">- fix a number of issues regarding statistics collection
  =&gt; works with more udev versions now</changelog>
<changelog author="adrian@suse.de" date="1368792001">- fix build for non-SUSE rpm distros</changelog>
<changelog author="dvlaeev@suse.com" date="1375444800">- add requires for Fedora</changelog>
<changelog author="adrian@suse.de" date="1381838400">- update openSUSE 13.1 build configuration
- add openSUSE 13.2 build configuration
- add support for m86k
- add support for Tizen changelog date format
- export .packages, .verified and .ova files for kiwi
- initvm code cleanup
- Do not specify compression format for Arch packages when extracting
- export kiwi-image:$type for kiwi files with schemaversion 5.6 or newer
- mount tmpfs on $BUILD_ROOT/dev/shm
- Create devices nodes if udev is not running
- more arm architectures
- make version '0' a valid version
- fix the call to lintian, lintian gets a dsc file as input
- adding generic parameter to hand over kiwi parameters</changelog>
<changelog author="adrian@suse.de" date="1386158400">- support for project side configured VM kernels
- ppc64le support
- minor fixes</changelog>
<changelog author="adrian@suse.de" date="1386244800">- fix vc tool regression from "minor fixes"</changelog>
<changelog author="adrian@suse.de" date="1386244801">- fix ppc64le vs. ppc64 emulator check (none needed)</changelog>
<changelog author="adrian@suse.de" date="1392897600">- bugfix release
  - /sys mounting
  - binfmtmisc setup</changelog>
<changelog author="adrian@suse.de" date="1398340800">- build script got refactored and split in multiple modules</changelog>
<changelog author="adrian@suse.de" date="1410868800">- add SLE 12 config (bnc#893618)
- build-vm-kvm: Always use -mem-prealloc when using -mem-path
- debian livebuild support
- various ppc handling fixes
- various smaller fixes</changelog>
<changelog author="adrian@suse.de" date="1411041600">- fix syntax error in SLE 12 config</changelog>
<changelog author="adrian@suse.de" date="1411128000">- drop not available packages from SLE 12 config</changelog>
<changelog author="adrian@suse.de" date="1414411200">- add support for new chroot tool
  * fixes Ubuntu 14.10 builds
- man pages for unrpm and vc</changelog>
<changelog author="adrian@suse.de" date="1416830400">- Add releasesuffix hack for new PTF handling
- support parallel build jobs for debs
- Fix repocfg usage in the "exact match" case
- Improve exclarch handling for deb builds
- rewritten workaround for broken chroot tool</changelog>
<changelog author="adrian@suse.de" date="1422619200">- add recommend to perl(Net::SSL) (bnc#880212)
- add support for debian debootstrap build engine
- Update arch config
- Add support for conflicts, addselfprovides, weakdeps to query functions
- installed package handling works also for arch and debian now
- large code cleanup
- bugfixes and documentation updates</changelog>

</package>
<package pkgid="0d0183480b70354764365a41a48697fe967eae02648e03173224d01a72998e46" name="build-initvm-i586" arch="noarch">
    <version epoch="0" ver="20150115" rel="4.1"/>

<changelog author="adrian@suse.de" date="1366977600">- cloud support for Amanzon EC2 and openstack
- fixed SPEC_REL support
- fixed zvm build
- fixed uml support
- fixing ext4 usage on old distros
- final openSUSE 12.3 config
- arm build support fixes</changelog>
<changelog author="adrian@suse.de" date="1367236800">- disabling fsync again for newer rpm versions to speed up
  installation phase again.</changelog>
<changelog author="adrian@suse.de" date="1368014400">- support multi architecture initvm binaries
  =&gt; vminit gets build as subpackage now again
- De-hardcode hugetlbfs from ppc
- Do not emulate VGA
- support new nameing scheme of install images of kiwi builds</changelog>
<changelog author="adrian@suse.de" date="1368532800">- debian builds call linitian now if installed
- Arch Linux: support new pacman tool syntax
- support kiwi installation medias with new kiwi versions
- fixed regression using build host rpm instead of the version from chroot
- fixed repository priority ordering, when only some repos have a priority
  and kiwi appliances get build</changelog>
<changelog author="adrian@suse.de" date="1368619200">- fix qemu-binfmt registration in chroot builds</changelog>
<changelog author="adrian@suse.de" date="1368792000">- fix a number of issues regarding statistics collection
  =&gt; works with more udev versions now</changelog>
<changelog author="adrian@suse.de" date="1368792001">- fix build for non-SUSE rpm distros</changelog>
<changelog author="dvlaeev@suse.com" date="1375444800">- add requires for Fedora</changelog>
<changelog author="adrian@suse.de" date="1381838400">- update openSUSE 13.1 build configuration
- add openSUSE 13.2 build configuration
- add support for m86k
- add support for Tizen changelog date format
- export .packages, .verified and .ova files for kiwi
- initvm code cleanup
- Do not specify compression format for Arch packages when extracting
- export kiwi-image:$type for kiwi files with schemaversion 5.6 or newer
- mount tmpfs on $BUILD_ROOT/dev/shm
- Create devices nodes if udev is not running
- more arm architectures
- make version '0' a valid version
- fix the call to lintian, lintian gets a dsc file as input
- adding generic parameter to hand over kiwi parameters</changelog>
<changelog author="adrian@suse.de" date="1386158400">- support for project side configured VM kernels
- ppc64le support
- minor fixes</changelog>
<changelog author="adrian@suse.de" date="1386244800">- fix vc tool regression from "minor fixes"</changelog>
<changelog author="adrian@suse.de" date="1386244801">- fix ppc64le vs. ppc64 emulator check (none needed)</changelog>
<changelog author="adrian@suse.de" date="1392897600">- bugfix release
  - /sys mounting
  - binfmtmisc setup</changelog>
<changelog author="adrian@suse.de" date="1398340800">- build script got refactored and split in multiple modules</changelog>
<changelog author="adrian@suse.de" date="1410868800">- add SLE 12 config (bnc#893618)
- build-vm-kvm: Always use -mem-prealloc when using -mem-path
- debian livebuild support
- various ppc handling fixes
- various smaller fixes</changelog>
<changelog author="adrian@suse.de" date="1411041600">- fix syntax error in SLE 12 config</changelog>
<changelog author="adrian@suse.de" date="1411128000">- drop not available packages from SLE 12 config</changelog>
<changelog author="adrian@suse.de" date="1414411200">- add support for new chroot tool
  * fixes Ubuntu 14.10 builds
- man pages for unrpm and vc</changelog>
<changelog author="adrian@suse.de" date="1416830400">- Add releasesuffix hack for new PTF handling
- support parallel build jobs for debs
- Fix repocfg usage in the "exact match" case
- Improve exclarch handling for deb builds
- rewritten workaround for broken chroot tool</changelog>
<changelog author="adrian@suse.de" date="1422619200">- add recommend to perl(Net::SSL) (bnc#880212)
- add support for debian debootstrap build engine
- Update arch config
- Add support for conflicts, addselfprovides, weakdeps to query functions
- installed package handling works also for arch and debian now
- large code cleanup
- bugfixes and documentation updates</changelog>

</package>
<package pkgid="e6d0fbbe0809b8b27bd8abdd51ce4a26c884e9bfd26c7b4956f5442a71e6144a" name="build-initvm-x86_64" arch="noarch">
    <version epoch="0" ver="20150115" rel="4.1"/>

<changelog author="adrian@suse.de" date="1366977600">- cloud support for Amanzon EC2 and openstack
- fixed SPEC_REL support
- fixed zvm build
- fixed uml support
- fixing ext4 usage on old distros
- final openSUSE 12.3 config
- arm build support fixes</changelog>
<changelog author="adrian@suse.de" date="1367236800">- disabling fsync again for newer rpm versions to speed up
  installation phase again.</changelog>
<changelog author="adrian@suse.de" date="1368014400">- support multi architecture initvm binaries
  =&gt; vminit gets build as subpackage now again
- De-hardcode hugetlbfs from ppc
- Do not emulate VGA
- support new nameing scheme of install images of kiwi builds</changelog>
<changelog author="adrian@suse.de" date="1368532800">- debian builds call linitian now if installed
- Arch Linux: support new pacman tool syntax
- support kiwi installation medias with new kiwi versions
- fixed regression using build host rpm instead of the version from chroot
- fixed repository priority ordering, when only some repos have a priority
  and kiwi appliances get build</changelog>
<changelog author="adrian@suse.de" date="1368619200">- fix qemu-binfmt registration in chroot builds</changelog>
<changelog author="adrian@suse.de" date="1368792000">- fix a number of issues regarding statistics collection
  =&gt; works with more udev versions now</changelog>
<changelog author="adrian@suse.de" date="1368792001">- fix build for non-SUSE rpm distros</changelog>
<changelog author="dvlaeev@suse.com" date="1375444800">- add requires for Fedora</changelog>
<changelog author="adrian@suse.de" date="1381838400">- update openSUSE 13.1 build configuration
- add openSUSE 13.2 build configuration
- add support for m86k
- add support for Tizen changelog date format
- export .packages, .verified and .ova files for kiwi
- initvm code cleanup
- Do not specify compression format for Arch packages when extracting
- export kiwi-image:$type for kiwi files with schemaversion 5.6 or newer
- mount tmpfs on $BUILD_ROOT/dev/shm
- Create devices nodes if udev is not running
- more arm architectures
- make version '0' a valid version
- fix the call to lintian, lintian gets a dsc file as input
- adding generic parameter to hand over kiwi parameters</changelog>
<changelog author="adrian@suse.de" date="1386158400">- support for project side configured VM kernels
- ppc64le support
- minor fixes</changelog>
<changelog author="adrian@suse.de" date="1386244800">- fix vc tool regression from "minor fixes"</changelog>
<changelog author="adrian@suse.de" date="1386244801">- fix ppc64le vs. ppc64 emulator check (none needed)</changelog>
<changelog author="adrian@suse.de" date="1392897600">- bugfix release
  - /sys mounting
  - binfmtmisc setup</changelog>
<changelog author="adrian@suse.de" date="1398340800">- build script got refactored and split in multiple modules</changelog>
<changelog author="adrian@suse.de" date="1410868800">- add SLE 12 config (bnc#893618)
- build-vm-kvm: Always use -mem-prealloc when using -mem-path
- debian livebuild support
- various ppc handling fixes
- various smaller fixes</changelog>
<changelog author="adrian@suse.de" date="1411041600">- fix syntax error in SLE 12 config</changelog>
<changelog author="adrian@suse.de" date="1411128000">- drop not available packages from SLE 12 config</changelog>
<changelog author="adrian@suse.de" date="1414411200">- add support for new chroot tool
  * fixes Ubuntu 14.10 builds
- man pages for unrpm and vc</changelog>
<changelog author="adrian@suse.de" date="1416830400">- Add releasesuffix hack for new PTF handling
- support parallel build jobs for debs
- Fix repocfg usage in the "exact match" case
- Improve exclarch handling for deb builds
- rewritten workaround for broken chroot tool</changelog>
<changelog author="adrian@suse.de" date="1422619200">- add recommend to perl(Net::SSL) (bnc#880212)
- add support for debian debootstrap build engine
- Update arch config
- Add support for conflicts, addselfprovides, weakdeps to query functions
- installed package handling works also for arch and debian now
- large code cleanup
- bugfixes and documentation updates</changelog>

</package>
<package pkgid="841f5cdf2635930c97f67ab2eb26822cd7fbbbfda2d0cc16178cc91630960599" name="build-mkbaselibs" arch="noarch">
    <version epoch="0" ver="20150115" rel="4.1"/>

<changelog author="adrian@suse.de" date="1366977600">- cloud support for Amanzon EC2 and openstack
- fixed SPEC_REL support
- fixed zvm build
- fixed uml support
- fixing ext4 usage on old distros
- final openSUSE 12.3 config
- arm build support fixes</changelog>
<changelog author="adrian@suse.de" date="1367236800">- disabling fsync again for newer rpm versions to speed up
  installation phase again.</changelog>
<changelog author="adrian@suse.de" date="1368014400">- support multi architecture initvm binaries
  =&gt; vminit gets build as subpackage now again
- De-hardcode hugetlbfs from ppc
- Do not emulate VGA
- support new nameing scheme of install images of kiwi builds</changelog>
<changelog author="adrian@suse.de" date="1368532800">- debian builds call linitian now if installed
- Arch Linux: support new pacman tool syntax
- support kiwi installation medias with new kiwi versions
- fixed regression using build host rpm instead of the version from chroot
- fixed repository priority ordering, when only some repos have a priority
  and kiwi appliances get build</changelog>
<changelog author="adrian@suse.de" date="1368619200">- fix qemu-binfmt registration in chroot builds</changelog>
<changelog author="adrian@suse.de" date="1368792000">- fix a number of issues regarding statistics collection
  =&gt; works with more udev versions now</changelog>
<changelog author="adrian@suse.de" date="1368792001">- fix build for non-SUSE rpm distros</changelog>
<changelog author="dvlaeev@suse.com" date="1375444800">- add requires for Fedora</changelog>
<changelog author="adrian@suse.de" date="1381838400">- update openSUSE 13.1 build configuration
- add openSUSE 13.2 build configuration
- add support for m86k
- add support for Tizen changelog date format
- export .packages, .verified and .ova files for kiwi
- initvm code cleanup
- Do not specify compression format for Arch packages when extracting
- export kiwi-image:$type for kiwi files with schemaversion 5.6 or newer
- mount tmpfs on $BUILD_ROOT/dev/shm
- Create devices nodes if udev is not running
- more arm architectures
- make version '0' a valid version
- fix the call to lintian, lintian gets a dsc file as input
- adding generic parameter to hand over kiwi parameters</changelog>
<changelog author="adrian@suse.de" date="1386158400">- support for project side configured VM kernels
- ppc64le support
- minor fixes</changelog>
<changelog author="adrian@suse.de" date="1386244800">- fix vc tool regression from "minor fixes"</changelog>
<changelog author="adrian@suse.de" date="1386244801">- fix ppc64le vs. ppc64 emulator check (none needed)</changelog>
<changelog author="adrian@suse.de" date="1392897600">- bugfix release
  - /sys mounting
  - binfmtmisc setup</changelog>
<changelog author="adrian@suse.de" date="1398340800">- build script got refactored and split in multiple modules</changelog>
<changelog author="adrian@suse.de" date="1410868800">- add SLE 12 config (bnc#893618)
- build-vm-kvm: Always use -mem-prealloc when using -mem-path
- debian livebuild support
- various ppc handling fixes
- various smaller fixes</changelog>
<changelog author="adrian@suse.de" date="1411041600">- fix syntax error in SLE 12 config</changelog>
<changelog author="adrian@suse.de" date="1411128000">- drop not available packages from SLE 12 config</changelog>
<changelog author="adrian@suse.de" date="1414411200">- add support for new chroot tool
  * fixes Ubuntu 14.10 builds
- man pages for unrpm and vc</changelog>
<changelog author="adrian@suse.de" date="1416830400">- Add releasesuffix hack for new PTF handling
- support parallel build jobs for debs
- Fix repocfg usage in the "exact match" case
- Improve exclarch handling for deb builds
- rewritten workaround for broken chroot tool</changelog>
<changelog author="adrian@suse.de" date="1422619200">- add recommend to perl(Net::SSL) (bnc#880212)
- add support for debian debootstrap build engine
- Update arch config
- Add support for conflicts, addselfprovides, weakdeps to query functions
- installed package handling works also for arch and debian now
- large code cleanup
- bugfixes and documentation updates</changelog>

</package>
<package pkgid="025cd3e2d15d8d2e5c742c19ddeec1f26dca0596a6f485eb2adfe89d7158f732" name="build-mkdrpms" arch="noarch">
    <version epoch="0" ver="20150115" rel="4.1"/>

<changelog author="adrian@suse.de" date="1366977600">- cloud support for Amanzon EC2 and openstack
- fixed SPEC_REL support
- fixed zvm build
- fixed uml support
- fixing ext4 usage on old distros
- final openSUSE 12.3 config
- arm build support fixes</changelog>
<changelog author="adrian@suse.de" date="1367236800">- disabling fsync again for newer rpm versions to speed up
  installation phase again.</changelog>
<changelog author="adrian@suse.de" date="1368014400">- support multi architecture initvm binaries
  =&gt; vminit gets build as subpackage now again
- De-hardcode hugetlbfs from ppc
- Do not emulate VGA
- support new nameing scheme of install images of kiwi builds</changelog>
<changelog author="adrian@suse.de" date="1368532800">- debian builds call linitian now if installed
- Arch Linux: support new pacman tool syntax
- support kiwi installation medias with new kiwi versions
- fixed regression using build host rpm instead of the version from chroot
- fixed repository priority ordering, when only some repos have a priority
  and kiwi appliances get build</changelog>
<changelog author="adrian@suse.de" date="1368619200">- fix qemu-binfmt registration in chroot builds</changelog>
<changelog author="adrian@suse.de" date="1368792000">- fix a number of issues regarding statistics collection
  =&gt; works with more udev versions now</changelog>
<changelog author="adrian@suse.de" date="1368792001">- fix build for non-SUSE rpm distros</changelog>
<changelog author="dvlaeev@suse.com" date="1375444800">- add requires for Fedora</changelog>
<changelog author="adrian@suse.de" date="1381838400">- update openSUSE 13.1 build configuration
- add openSUSE 13.2 build configuration
- add support for m86k
- add support for Tizen changelog date format
- export .packages, .verified and .ova files for kiwi
- initvm code cleanup
- Do not specify compression format for Arch packages when extracting
- export kiwi-image:$type for kiwi files with schemaversion 5.6 or newer
- mount tmpfs on $BUILD_ROOT/dev/shm
- Create devices nodes if udev is not running
- more arm architectures
- make version '0' a valid version
- fix the call to lintian, lintian gets a dsc file as input
- adding generic parameter to hand over kiwi parameters</changelog>
<changelog author="adrian@suse.de" date="1386158400">- support for project side configured VM kernels
- ppc64le support
- minor fixes</changelog>
<changelog author="adrian@suse.de" date="1386244800">- fix vc tool regression from "minor fixes"</changelog>
<changelog author="adrian@suse.de" date="1386244801">- fix ppc64le vs. ppc64 emulator check (none needed)</changelog>
<changelog author="adrian@suse.de" date="1392897600">- bugfix release
  - /sys mounting
  - binfmtmisc setup</changelog>
<changelog author="adrian@suse.de" date="1398340800">- build script got refactored and split in multiple modules</changelog>
<changelog author="adrian@suse.de" date="1410868800">- add SLE 12 config (bnc#893618)
- build-vm-kvm: Always use -mem-prealloc when using -mem-path
- debian livebuild support
- various ppc handling fixes
- various smaller fixes</changelog>
<changelog author="adrian@suse.de" date="1411041600">- fix syntax error in SLE 12 config</changelog>
<changelog author="adrian@suse.de" date="1411128000">- drop not available packages from SLE 12 config</changelog>
<changelog author="adrian@suse.de" date="1414411200">- add support for new chroot tool
  * fixes Ubuntu 14.10 builds
- man pages for unrpm and vc</changelog>
<changelog author="adrian@suse.de" date="1416830400">- Add releasesuffix hack for new PTF handling
- support parallel build jobs for debs
- Fix repocfg usage in the "exact match" case
- Improve exclarch handling for deb builds
- rewritten workaround for broken chroot tool</changelog>
<changelog author="adrian@suse.de" date="1422619200">- add recommend to perl(Net::SSL) (bnc#880212)
- add support for debian debootstrap build engine
- Update arch config
- Add support for conflicts, addselfprovides, weakdeps to query functions
- installed package handling works also for arch and debian now
- large code cleanup
- bugfixes and documentation updates</changelog>

</package>
<package pkgid="a224aee3dce02b4dbcf795eb7a6095b2c09839c8deae5b8151ac9a54e6529082" name="busybox" arch="i586">
    <version epoch="0" ver="1.20.2" rel="5.3.1"/>

<changelog author="aj@suse.de" date="1249387200">- Fix build with updated kernel headers (busybox-buildfix.patch)</changelog>
<changelog author="coolo@novell.com" date="1284984000">- add backported fix for make 3.82</changelog>
<changelog author="aj@suse.de" date="1286366400">- Update to busybox 1.17.2:
  * obsoletes patches busybox.dmesg-size.patch, busybox-1.17.1-make.patch,
    busybox-buildfix.patch
  * see http://www.busybox.net/ for full changelog</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="chris@computersalat.de" date="1299931200">- update to 1.18.13
  see http://www.busybox.net/ for full changelog
- add upstream patches
  o buildsys.patch
  o cksum.patch
  o klogd.patch
  o menuconfig.patch
  o modutils24.patch
  o wget.patch
- rework libunarchive-array patch
  o -&gt; libarchive patch
- remove .gitignore files
- added missing BusyBox.1 as S:1
- added export CFLAGS="{optflags} -fno-strict-aliasing"</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro, set HOSTCC</changelog>
<changelog author="ro@suse.de" date="1334059200">- update to 1.19.4
  - fix getty, mdev, modinfo and wget
- update to 1.19.3
  - fix chpasswd, crond, inetd, syslogd, tail, tftp
- update to 1.19.2
  - fix ash/hush, cttyhack, find, grep, less, patch, sed, top,
    uncompress
- update to 1.19.0:
  - countless fixes in all utility programs, please see
    http://www.busybox.net/ for details
- remove obsolete patches previously marked as upstreamed</changelog>
<changelog author="ro@suse.de" date="1334059201">- busybox-1.19.4-typedef_umode_t.patch:
  fix compile as umode_t is only defined with KERNEL and is
  used in header linux/linux/ext2_fs.h</changelog>
<changelog author="seife+obs@b1-systems.com" date="1338984000">- busybox-1.19.4-ext2fs_h.diff:
  more complete fix for latest ext2_fs.h breakage from busybox git,
  drop busybox-1.19.4-typedef_umode_t.patch</changelog>
<changelog author="aj@suse.de" date="1342612800">- Add missing sys/resource include (glibc 2.16)</changelog>
<changelog author="lnussel@suse.de" date="1343822400">- fix path in busybox.install (bnc#680153)</changelog>
<changelog author="p.drouand@gmail.com" date="1355054400">- Update to 1.20.2 (Bug fix release):
  * fix for variable expansion in redirection
  * fix for "pre-up" and "pre-down" handling
  * fixes for compressed man pages handling
  * important fix! due to misplaced s_mkfs_time field, ext4 driver
    couldn't mount our images
  * fix for getting uptime on non-Linux platforms
  * fix base-256 decoding
- Remove busybox-1.19.4-ext2fs_h.diff: fixed on upstream release</changelog>
<changelog author="meissner@suse.com" date="1433851200">- busybox-CVE-2014-9645.patch: fixed a potential modprobe filter
  bypassing rule by filtering / (CVE-2014-9645 bsc#914660)</changelog>

</package>
<package pkgid="4adb75aafb2d955c4b4ff0745ba448b1a87fa33500143d1bf6ce4e16a07fb557" name="busybox" arch="src">
    <version epoch="0" ver="1.20.2" rel="5.3.1"/>

<changelog author="hare@suse.de" date="1216814400">- Include mkinitrd scriptlets.</changelog>
<changelog author="prusnak@suse.cz" date="1219406400">- enabled SELinux support [Fate#303662]</changelog>
<changelog author="hare@suse.de" date="1220443200">- Call mkinitrd_setup during %post and %postun (bnc#413709)</changelog>
<changelog author="sassmann@suse.de" date="1224072000">- update to 1.12.1
  see http://www.busybox.net/ for full changelog
- removed patches included upstream
  * busybox-1.8.2-arping.patch
  * busybox-1.8.2-static
  * busybox-1.8.2-vi.patch
- refreshed patches
  * busybox.libunarchive-array.patch
  * busybox.dmesg-size.patch
- updated config file
  * removed awk math support and dc to get rid of libm</changelog>
<changelog author="sassmann@suse.de" date="1225800000">- updated config file to use a single config for
  both busybox and busybox-static</changelog>
<changelog author="sassmann@suse.de" date="1229601600">- update to 1.12.3 bugfix release
  * has fixes for option parsing and line editing</changelog>
<changelog author="aj@suse.de" date="1249387200">- Fix build with updated kernel headers (busybox-buildfix.patch)</changelog>
<changelog author="coolo@novell.com" date="1284984000">- add backported fix for make 3.82</changelog>
<changelog author="aj@suse.de" date="1286366400">- Update to busybox 1.17.2:
  * obsoletes patches busybox.dmesg-size.patch, busybox-1.17.1-make.patch,
    busybox-buildfix.patch
  * see http://www.busybox.net/ for full changelog</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="chris@computersalat.de" date="1299931200">- update to 1.18.13
  see http://www.busybox.net/ for full changelog
- add upstream patches
  o buildsys.patch
  o cksum.patch
  o klogd.patch
  o menuconfig.patch
  o modutils24.patch
  o wget.patch
- rework libunarchive-array patch
  o -&gt; libarchive patch
- remove .gitignore files
- added missing BusyBox.1 as S:1
- added export CFLAGS="{optflags} -fno-strict-aliasing"</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro, set HOSTCC</changelog>
<changelog author="ro@suse.de" date="1334059200">- update to 1.19.4
  - fix getty, mdev, modinfo and wget
- update to 1.19.3
  - fix chpasswd, crond, inetd, syslogd, tail, tftp
- update to 1.19.2
  - fix ash/hush, cttyhack, find, grep, less, patch, sed, top,
    uncompress
- update to 1.19.0:
  - countless fixes in all utility programs, please see
    http://www.busybox.net/ for details
- remove obsolete patches previously marked as upstreamed</changelog>
<changelog author="ro@suse.de" date="1334059201">- busybox-1.19.4-typedef_umode_t.patch:
  fix compile as umode_t is only defined with KERNEL and is
  used in header linux/linux/ext2_fs.h</changelog>
<changelog author="seife+obs@b1-systems.com" date="1338984000">- busybox-1.19.4-ext2fs_h.diff:
  more complete fix for latest ext2_fs.h breakage from busybox git,
  drop busybox-1.19.4-typedef_umode_t.patch</changelog>
<changelog author="aj@suse.de" date="1342612800">- Add missing sys/resource include (glibc 2.16)</changelog>
<changelog author="lnussel@suse.de" date="1343822400">- fix path in busybox.install (bnc#680153)</changelog>
<changelog author="p.drouand@gmail.com" date="1355054400">- Update to 1.20.2 (Bug fix release):
  * fix for variable expansion in redirection
  * fix for "pre-up" and "pre-down" handling
  * fixes for compressed man pages handling
  * important fix! due to misplaced s_mkfs_time field, ext4 driver
    couldn't mount our images
  * fix for getting uptime on non-Linux platforms
  * fix base-256 decoding
- Remove busybox-1.19.4-ext2fs_h.diff: fixed on upstream release</changelog>
<changelog author="meissner@suse.com" date="1433851200">- busybox-CVE-2014-9645.patch: fixed a potential modprobe filter
  bypassing rule by filtering / (CVE-2014-9645 bsc#914660)</changelog>

</package>
<package pkgid="0c52d244eaf7a7f03d89e2328d329cd28a52032905a0fe6a42582a5322bc188b" name="busybox" arch="x86_64">
    <version epoch="0" ver="1.20.2" rel="5.3.1"/>

<changelog author="aj@suse.de" date="1249387200">- Fix build with updated kernel headers (busybox-buildfix.patch)</changelog>
<changelog author="coolo@novell.com" date="1284984000">- add backported fix for make 3.82</changelog>
<changelog author="aj@suse.de" date="1286366400">- Update to busybox 1.17.2:
  * obsoletes patches busybox.dmesg-size.patch, busybox-1.17.1-make.patch,
    busybox-buildfix.patch
  * see http://www.busybox.net/ for full changelog</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="chris@computersalat.de" date="1299931200">- update to 1.18.13
  see http://www.busybox.net/ for full changelog
- add upstream patches
  o buildsys.patch
  o cksum.patch
  o klogd.patch
  o menuconfig.patch
  o modutils24.patch
  o wget.patch
- rework libunarchive-array patch
  o -&gt; libarchive patch
- remove .gitignore files
- added missing BusyBox.1 as S:1
- added export CFLAGS="{optflags} -fno-strict-aliasing"</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro, set HOSTCC</changelog>
<changelog author="ro@suse.de" date="1334059200">- update to 1.19.4
  - fix getty, mdev, modinfo and wget
- update to 1.19.3
  - fix chpasswd, crond, inetd, syslogd, tail, tftp
- update to 1.19.2
  - fix ash/hush, cttyhack, find, grep, less, patch, sed, top,
    uncompress
- update to 1.19.0:
  - countless fixes in all utility programs, please see
    http://www.busybox.net/ for details
- remove obsolete patches previously marked as upstreamed</changelog>
<changelog author="ro@suse.de" date="1334059201">- busybox-1.19.4-typedef_umode_t.patch:
  fix compile as umode_t is only defined with KERNEL and is
  used in header linux/linux/ext2_fs.h</changelog>
<changelog author="seife+obs@b1-systems.com" date="1338984000">- busybox-1.19.4-ext2fs_h.diff:
  more complete fix for latest ext2_fs.h breakage from busybox git,
  drop busybox-1.19.4-typedef_umode_t.patch</changelog>
<changelog author="aj@suse.de" date="1342612800">- Add missing sys/resource include (glibc 2.16)</changelog>
<changelog author="lnussel@suse.de" date="1343822400">- fix path in busybox.install (bnc#680153)</changelog>
<changelog author="p.drouand@gmail.com" date="1355054400">- Update to 1.20.2 (Bug fix release):
  * fix for variable expansion in redirection
  * fix for "pre-up" and "pre-down" handling
  * fixes for compressed man pages handling
  * important fix! due to misplaced s_mkfs_time field, ext4 driver
    couldn't mount our images
  * fix for getting uptime on non-Linux platforms
  * fix base-256 decoding
- Remove busybox-1.19.4-ext2fs_h.diff: fixed on upstream release</changelog>
<changelog author="meissner@suse.com" date="1433851200">- busybox-CVE-2014-9645.patch: fixed a potential modprobe filter
  bypassing rule by filtering / (CVE-2014-9645 bsc#914660)</changelog>

</package>
<package pkgid="00ae4d34cde20175bfa4c5cf1f6c42b3d20b1bfddea2ea47b1931fd8b4695947" name="busybox-static" arch="i586">
    <version epoch="0" ver="1.20.2" rel="5.3.1"/>

<changelog author="aj@suse.de" date="1249387200">- Fix build with newer kernel headers (busybox-buildfix.patch)</changelog>
<changelog author="coolo@novell.com" date="1284984000">- add backported fix for make 3.82</changelog>
<changelog author="aj@suse.de" date="1286366400">- Update to busybox 1.17.2:
  * obsoletes patches busybox.dmesg-size.patch, busybox-1.17.1-make.patch,
    busybox-buildfix.patch
  * see http://www.busybox.net/ for full changelog</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="chris@computersalat.de" date="1299931200">- update to 1.18.13
  see http://www.busybox.net/ for full changelog
- add upstream patches
  o buildsys.patch
  o cksum.patch
  o klogd.patch
  o menuconfig.patch
  o modutils24.patch
  o wget.patch
- rework libunarchive-array patch
  o -&gt; libarchive patch
- remove .gitignore files
- added missing BusyBox.1 as S:1
- added export CFLAGS="{optflags} -fno-strict-aliasing"</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Remove unexplained ExcludeArch directive</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro, set HOSTCC</changelog>
<changelog author="ro@suse.de" date="1334059200">- update to 1.19.4
  - fix getty, mdev, modinfo and wget
- update to 1.19.3
  - fix chpasswd, crond, inetd, syslogd, tail, tftp
- update to 1.19.2
  - fix ash/hush, cttyhack, find, grep, less, patch, sed, top,
    uncompress
- update to 1.19.0:
  - countless fixes in all utility programs, please see
    http://www.busybox.net/ for details
- remove obsolete patches previously marked as upstreamed</changelog>
<changelog author="ro@suse.de" date="1334059201">- busybox-1.19.4-typedef_umode_t.patch:
  fix compile as umode_t is only defined with KERNEL and is
  used in header linux/linux/ext2_fs.h</changelog>
<changelog author="seife+obs@b1-systems.com" date="1338984000">- busybox-1.19.4-ext2fs_h.diff:
  more complete fix for latest ext2_fs.h breakage from busybox git,
  drop busybox-1.19.4-typedef_umode_t.patch</changelog>
<changelog author="aj@suse.de" date="1342612800">- Add missing sys/resource include (glibc 2.16)</changelog>
<changelog author="p.drouand@gmail.com" date="1355054400">- Update to 1.20.2 (Bug fix release):
  * fix for variable expansion in redirection
  * fix for "pre-up" and "pre-down" handling
  * fixes for compressed man pages handling
  * important fix! due to misplaced s_mkfs_time field, ext4 driver
    couldn't mount our images
  * fix for getting uptime on non-Linux platforms
  * fix base-256 decoding
- Remove busybox-1.19.4-ext2fs_h.diff: fixed on upstream release</changelog>
<changelog author="ddiss@suse.com" date="1370520000">- Build against glibc-devel-static to work around uClibc segfault;
  (bnc#758843).
  * Remove uClibc specific busybox.uClibc-build-fix.patch.
  * Add busybox-static.SuSE.config, which specifies CONFIG_STATIC=y.</changelog>
<changelog author="meissner@suse.com" date="1433851200">- busybox-CVE-2014-9645.patch: fixed a potential modprobe filter
  bypassing rule by filtering / (CVE-2014-9645 bsc#914660)</changelog>

</package>
<package pkgid="1b368682c2325414b37a16a3a868d668eca7918558409fc69199a17f419ec28a" name="busybox-static" arch="src">
    <version epoch="0" ver="1.20.2" rel="5.3.1"/>

<changelog author="sassmann@suse.de" date="1225800000">- initial release of busybox-static (version 1.12.1)</changelog>
<changelog author="sassmann@suse.de" date="1229601600">- update to 1.12.3 bugfix release
  * has fixes for option parsing and line editing</changelog>
<changelog author="aj@suse.de" date="1249387200">- Fix build with newer kernel headers (busybox-buildfix.patch)</changelog>
<changelog author="coolo@novell.com" date="1284984000">- add backported fix for make 3.82</changelog>
<changelog author="aj@suse.de" date="1286366400">- Update to busybox 1.17.2:
  * obsoletes patches busybox.dmesg-size.patch, busybox-1.17.1-make.patch,
    busybox-buildfix.patch
  * see http://www.busybox.net/ for full changelog</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="chris@computersalat.de" date="1299931200">- update to 1.18.13
  see http://www.busybox.net/ for full changelog
- add upstream patches
  o buildsys.patch
  o cksum.patch
  o klogd.patch
  o menuconfig.patch
  o modutils24.patch
  o wget.patch
- rework libunarchive-array patch
  o -&gt; libarchive patch
- remove .gitignore files
- added missing BusyBox.1 as S:1
- added export CFLAGS="{optflags} -fno-strict-aliasing"</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Remove unexplained ExcludeArch directive</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro, set HOSTCC</changelog>
<changelog author="ro@suse.de" date="1334059200">- update to 1.19.4
  - fix getty, mdev, modinfo and wget
- update to 1.19.3
  - fix chpasswd, crond, inetd, syslogd, tail, tftp
- update to 1.19.2
  - fix ash/hush, cttyhack, find, grep, less, patch, sed, top,
    uncompress
- update to 1.19.0:
  - countless fixes in all utility programs, please see
    http://www.busybox.net/ for details
- remove obsolete patches previously marked as upstreamed</changelog>
<changelog author="ro@suse.de" date="1334059201">- busybox-1.19.4-typedef_umode_t.patch:
  fix compile as umode_t is only defined with KERNEL and is
  used in header linux/linux/ext2_fs.h</changelog>
<changelog author="seife+obs@b1-systems.com" date="1338984000">- busybox-1.19.4-ext2fs_h.diff:
  more complete fix for latest ext2_fs.h breakage from busybox git,
  drop busybox-1.19.4-typedef_umode_t.patch</changelog>
<changelog author="aj@suse.de" date="1342612800">- Add missing sys/resource include (glibc 2.16)</changelog>
<changelog author="p.drouand@gmail.com" date="1355054400">- Update to 1.20.2 (Bug fix release):
  * fix for variable expansion in redirection
  * fix for "pre-up" and "pre-down" handling
  * fixes for compressed man pages handling
  * important fix! due to misplaced s_mkfs_time field, ext4 driver
    couldn't mount our images
  * fix for getting uptime on non-Linux platforms
  * fix base-256 decoding
- Remove busybox-1.19.4-ext2fs_h.diff: fixed on upstream release</changelog>
<changelog author="ddiss@suse.com" date="1370520000">- Build against glibc-devel-static to work around uClibc segfault;
  (bnc#758843).
  * Remove uClibc specific busybox.uClibc-build-fix.patch.
  * Add busybox-static.SuSE.config, which specifies CONFIG_STATIC=y.</changelog>
<changelog author="meissner@suse.com" date="1433851200">- busybox-CVE-2014-9645.patch: fixed a potential modprobe filter
  bypassing rule by filtering / (CVE-2014-9645 bsc#914660)</changelog>

</package>
<package pkgid="6662570c8246e6484145fc53b55d82315b3f100f55353ad44cc2ecc0ec618d19" name="busybox-static" arch="x86_64">
    <version epoch="0" ver="1.20.2" rel="5.3.1"/>

<changelog author="aj@suse.de" date="1249387200">- Fix build with newer kernel headers (busybox-buildfix.patch)</changelog>
<changelog author="coolo@novell.com" date="1284984000">- add backported fix for make 3.82</changelog>
<changelog author="aj@suse.de" date="1286366400">- Update to busybox 1.17.2:
  * obsoletes patches busybox.dmesg-size.patch, busybox-1.17.1-make.patch,
    busybox-buildfix.patch
  * see http://www.busybox.net/ for full changelog</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="chris@computersalat.de" date="1299931200">- update to 1.18.13
  see http://www.busybox.net/ for full changelog
- add upstream patches
  o buildsys.patch
  o cksum.patch
  o klogd.patch
  o menuconfig.patch
  o modutils24.patch
  o wget.patch
- rework libunarchive-array patch
  o -&gt; libarchive patch
- remove .gitignore files
- added missing BusyBox.1 as S:1
- added export CFLAGS="{optflags} -fno-strict-aliasing"</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Remove unexplained ExcludeArch directive</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro, set HOSTCC</changelog>
<changelog author="ro@suse.de" date="1334059200">- update to 1.19.4
  - fix getty, mdev, modinfo and wget
- update to 1.19.3
  - fix chpasswd, crond, inetd, syslogd, tail, tftp
- update to 1.19.2
  - fix ash/hush, cttyhack, find, grep, less, patch, sed, top,
    uncompress
- update to 1.19.0:
  - countless fixes in all utility programs, please see
    http://www.busybox.net/ for details
- remove obsolete patches previously marked as upstreamed</changelog>
<changelog author="ro@suse.de" date="1334059201">- busybox-1.19.4-typedef_umode_t.patch:
  fix compile as umode_t is only defined with KERNEL and is
  used in header linux/linux/ext2_fs.h</changelog>
<changelog author="seife+obs@b1-systems.com" date="1338984000">- busybox-1.19.4-ext2fs_h.diff:
  more complete fix for latest ext2_fs.h breakage from busybox git,
  drop busybox-1.19.4-typedef_umode_t.patch</changelog>
<changelog author="aj@suse.de" date="1342612800">- Add missing sys/resource include (glibc 2.16)</changelog>
<changelog author="p.drouand@gmail.com" date="1355054400">- Update to 1.20.2 (Bug fix release):
  * fix for variable expansion in redirection
  * fix for "pre-up" and "pre-down" handling
  * fixes for compressed man pages handling
  * important fix! due to misplaced s_mkfs_time field, ext4 driver
    couldn't mount our images
  * fix for getting uptime on non-Linux platforms
  * fix base-256 decoding
- Remove busybox-1.19.4-ext2fs_h.diff: fixed on upstream release</changelog>
<changelog author="ddiss@suse.com" date="1370520000">- Build against glibc-devel-static to work around uClibc segfault;
  (bnc#758843).
  * Remove uClibc specific busybox.uClibc-build-fix.patch.
  * Add busybox-static.SuSE.config, which specifies CONFIG_STATIC=y.</changelog>
<changelog author="meissner@suse.com" date="1433851200">- busybox-CVE-2014-9645.patch: fixed a potential modprobe filter
  bypassing rule by filtering / (CVE-2014-9645 bsc#914660)</changelog>

</package>
<package pkgid="10a2c43a6c3f79e3cdd8f44a2077fafa09671ee3837eb6611d238d0a175b4999" name="ca-certificates" arch="noarch">
    <version epoch="0" ver="1_201312011643" rel="4.1"/>

<changelog author="lnussel@suse.de" date="1270728000">- obsolete openssl-certs (bnc#594434)
- update manpage (bnc#594501)</changelog>
<changelog author="lnussel@suse.de" date="1270728001">- it's ca-bundle.pem rather than cert.pem</changelog>
<changelog author="lnussel@suse.de" date="1270728002">- actually install certbundle.run (bnc#594501)</changelog>
<changelog author="lnussel@suse.de" date="1271851200">- force rebuilding all certificate stores in %post
  This also makes sure we update the hash links in /etc/ssl/certs
  as openssl changed the hash format between 0.9.8 and 1.0</changelog>
<changelog author="lnussel@suse.de" date="1272369600">- also use hooks from /usr/lib/ca-certificates/update.d
- replace bundle file with symlink to file in /var as it's auto
  generated</changelog>
<changelog author="lnussel@suse.de" date="1274270400">- create java bundles</changelog>
<changelog author="mvyskocil@suse.cz" date="1274443200">* Use the gcc-java and fastjar for build to avoid dependency problems
  * build keystore.class only to allow noarch package</changelog>
<changelog author="lnussel@suse.de" date="1285588800">- catch FileNotFoundException (bnc#623365)</changelog>
<changelog author="lnussel@suse.de" date="1308571200">- fix spurious rpm warning if no java exists (bnc#634793)
- move java.run to java-ca-certificates</changelog>
<changelog author="coolo@suse.com" date="1319457600">- require coreutils for %post script</changelog>
<changelog author="lnussel@suse.de" date="1336132800">- give hint about SSL_CTX_set_default_verify_paths in cert bundle</changelog>
<changelog author="lnussel@suse.de" date="1371729600">- use p11-kit to generate the files</changelog>
<changelog author="lnussel@suse.de" date="1372075200">- update manpage</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1372075201">- Explicitly require p11-kit, otherwise trusted certificates won't
  be generated</changelog>
<changelog author="lnussel@suse.de" date="1372334400">- disable generating ca-bundle for now again so people don't submit
  new packages that use this file.</changelog>
<changelog author="lnussel@suse.de" date="1375704000">- don't remove symlinks to other locations in /etc/ssl/certs
- use the trust binary instead of p11-kit to extract trust</changelog>
<changelog author="lnussel@suse.de" date="1377604800">- make sure we have p11-kit &gt;= 0.19.3 which has the 'trust' command
  (bnc#836560)</changelog>
<changelog author="lnussel@suse.de" date="1377604801">- re-enable the CA bundle again for glib-networking (bnc#825903)</changelog>
<changelog author="lnussel@suse.de" date="1381924800">- fix typo in README (bnc#845500)
- remove old extractcerts.pl</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- etc_ssl.run: fix typo (bnc#855711)</changelog>

</package>
<package pkgid="25287ff78820b9164852c32740138051b8bf64406d6007884d1b43e858d449d2" name="ca-certificates" arch="src">
    <version epoch="0" ver="1_201312011643" rel="4.1"/>

<changelog author="lnussel@suse.de" date="1270728000">- obsolete openssl-certs (bnc#594434)
- update manpage (bnc#594501)</changelog>
<changelog author="lnussel@suse.de" date="1270728001">- it's ca-bundle.pem rather than cert.pem</changelog>
<changelog author="lnussel@suse.de" date="1270728002">- actually install certbundle.run (bnc#594501)</changelog>
<changelog author="lnussel@suse.de" date="1271851200">- force rebuilding all certificate stores in %post
  This also makes sure we update the hash links in /etc/ssl/certs
  as openssl changed the hash format between 0.9.8 and 1.0</changelog>
<changelog author="lnussel@suse.de" date="1272369600">- also use hooks from /usr/lib/ca-certificates/update.d
- replace bundle file with symlink to file in /var as it's auto
  generated</changelog>
<changelog author="lnussel@suse.de" date="1274270400">- create java bundles</changelog>
<changelog author="mvyskocil@suse.cz" date="1274443200">* Use the gcc-java and fastjar for build to avoid dependency problems
  * build keystore.class only to allow noarch package</changelog>
<changelog author="lnussel@suse.de" date="1285588800">- catch FileNotFoundException (bnc#623365)</changelog>
<changelog author="lnussel@suse.de" date="1308571200">- fix spurious rpm warning if no java exists (bnc#634793)
- move java.run to java-ca-certificates</changelog>
<changelog author="coolo@suse.com" date="1319457600">- require coreutils for %post script</changelog>
<changelog author="lnussel@suse.de" date="1336132800">- give hint about SSL_CTX_set_default_verify_paths in cert bundle</changelog>
<changelog author="lnussel@suse.de" date="1371729600">- use p11-kit to generate the files</changelog>
<changelog author="lnussel@suse.de" date="1372075200">- update manpage</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1372075201">- Explicitly require p11-kit, otherwise trusted certificates won't
  be generated</changelog>
<changelog author="lnussel@suse.de" date="1372334400">- disable generating ca-bundle for now again so people don't submit
  new packages that use this file.</changelog>
<changelog author="lnussel@suse.de" date="1375704000">- don't remove symlinks to other locations in /etc/ssl/certs
- use the trust binary instead of p11-kit to extract trust</changelog>
<changelog author="lnussel@suse.de" date="1377604800">- make sure we have p11-kit &gt;= 0.19.3 which has the 'trust' command
  (bnc#836560)</changelog>
<changelog author="lnussel@suse.de" date="1377604801">- re-enable the CA bundle again for glib-networking (bnc#825903)</changelog>
<changelog author="lnussel@suse.de" date="1381924800">- fix typo in README (bnc#845500)
- remove old extractcerts.pl</changelog>
<changelog author="lnussel@suse.de" date="1387281600">- etc_ssl.run: fix typo (bnc#855711)</changelog>

</package>
<package pkgid="e5f4e14712b1634bca2b86b53b06e554ce5641be7d272aab63d341b90580816f" name="ca-certificates-cacert" arch="noarch">
    <version epoch="0" ver="1" rel="15.3.1"/>

<changelog author="lnussel@suse.de" date="1269432000">- new package</changelog>
<changelog author="lnussel@suse.de" date="1336651200">- include root distribution license (bnc#761554)</changelog>
<changelog author="lnussel@suse.de" date="1371729600">- adjust to new filesytem location</changelog>
<changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
<changelog author="meissner@suse.com" date="1406721600">- replaced the "Class 3 PKI Key" by the current version. Changes its
  signature algorithm from RSA-MD5 to RSA-SHA256. (bnc#868884)</changelog>

</package>
<package pkgid="5c9e9635b488fe61b8b8cc515f5b9090d292be3354194f52564ae6423462bf90" name="ca-certificates-cacert" arch="src">
    <version epoch="0" ver="1" rel="15.3.1"/>

<changelog author="lnussel@suse.de" date="1269432000">- new package</changelog>
<changelog author="lnussel@suse.de" date="1336651200">- include root distribution license (bnc#761554)</changelog>
<changelog author="lnussel@suse.de" date="1371729600">- adjust to new filesytem location</changelog>
<changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
<changelog author="meissner@suse.com" date="1406721600">- replaced the "Class 3 PKI Key" by the current version. Changes its
  signature algorithm from RSA-MD5 to RSA-SHA256. (bnc#868884)</changelog>

</package>
<package pkgid="b4ae31ddcb290a763b077f68a4b077682958565b0e4b0ee12b7c65cd0a3d5234" name="ca-certificates-mozilla" arch="noarch">
    <version epoch="0" ver="1.95" rel="3.4.1"/>

<changelog author="lnussel@suse.de" date="1270728000">- require ca-certificates also for postun</changelog>
<changelog author="lnussel@suse.de" date="1274443200">- update certificates to revision 1.64
  * removed "RSA Security 1024 V3" certificate</changelog>
<changelog author="lnussel@suse.de" date="1285588800">- update certificates to revision 1.65
  * new: E_Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.pem
  * new: GlobalSign_Root_CA_R3.pem
  * new: Microsec_e_Szigno_Root_CA_2009.pem
  * new: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * new: Verisign_Class_3_Public_Primary_Certification_Authority.1.pem</changelog>
<changelog author="lnussel@suse.de" date="1296475200">- update certificates to revision 1.70
  * new: AddTrust_Qualified_Certificates_Root.pem
  * new: Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
  * new: Chambers_of_Commerce_Root_2008.pem
  * new: Global_Chambersign_Root_2008.pem
  * new: Izenpe_com.pem
  * new: TC_TrustCenter_Universal_CA_III.pem</changelog>
<changelog author="lnussel@suse.de" date="1314792000">- update certificates to revision 1.76
  * new: Go_Daddy_Root_Certificate_Authority_G2.pem
  * new: Starfield_Root_Certificate_Authority_G2.pem
  * new: Starfield_Services_Root_Certificate_Authority_G2.pem
  * new: AffirmTrust_Commercial.pem
  * new: AffirmTrust_Networking.pem
  * new: AffirmTrust_Premium.pem
  * new: AffirmTrust_Premium_ECC.pem
  * new: Certum_Trusted_Network_CA.pem
  * new: Certinomis_Autorit_Racine.pem
  * new: Root_CA_Generalitat_Valenciana.pem
  * new: A_Trust_nQual_03.pem
  * new: TWCA_Root_Certification_Authority.pem
  * removed: DigiNotar_Root_CA.pem (bnc#714931)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cfarrell@suse.com" date="1326456000">- license update: MPL-1.1 or GPL-2.0+ or LGPL-2.1+
  SPDX format and correct GPL and LGPL tags to include or later</changelog>
<changelog author="lnussel@suse.de" date="1336046400">- update certificates to revision 1.83 (bnc#760503)
  * new: EC_ACC.pem
  * new: Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
  * new: Security_Communication_RootCA2.pem
  * removed: TC_TrustCenter_Germany_Class_2_CA.pem
  * removed: TC_TrustCenter_Germany_Class_3_CA.pem
  * removed: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * removed: Verisign_Class_2_Public_Primary_Certification_Authority.pem
  * removed: Verisign_Class_4_Public_Primary_Certification_Authority_G2.pem
- license change to MPL-2.0</changelog>
<changelog author="meissner@suse.com" date="1349870400">- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection</changelog>
<changelog author="idonmez@suse.com" date="1357214400">- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST</changelog>
<changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
<changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
<changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
<changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
<changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
<changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
<changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
<changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>

</package>
<package pkgid="f1e96b25719210d857fc758d843215ffe3c38a5bdca70a01d1fda397f8a4305e" name="ca-certificates-mozilla" arch="noarch">
    <version epoch="0" ver="1.96" rel="3.8.1"/>

<changelog author="lnussel@suse.de" date="1274443200">- update certificates to revision 1.64
  * removed "RSA Security 1024 V3" certificate</changelog>
<changelog author="lnussel@suse.de" date="1285588800">- update certificates to revision 1.65
  * new: E_Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.pem
  * new: GlobalSign_Root_CA_R3.pem
  * new: Microsec_e_Szigno_Root_CA_2009.pem
  * new: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * new: Verisign_Class_3_Public_Primary_Certification_Authority.1.pem</changelog>
<changelog author="lnussel@suse.de" date="1296475200">- update certificates to revision 1.70
  * new: AddTrust_Qualified_Certificates_Root.pem
  * new: Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
  * new: Chambers_of_Commerce_Root_2008.pem
  * new: Global_Chambersign_Root_2008.pem
  * new: Izenpe_com.pem
  * new: TC_TrustCenter_Universal_CA_III.pem</changelog>
<changelog author="lnussel@suse.de" date="1314792000">- update certificates to revision 1.76
  * new: Go_Daddy_Root_Certificate_Authority_G2.pem
  * new: Starfield_Root_Certificate_Authority_G2.pem
  * new: Starfield_Services_Root_Certificate_Authority_G2.pem
  * new: AffirmTrust_Commercial.pem
  * new: AffirmTrust_Networking.pem
  * new: AffirmTrust_Premium.pem
  * new: AffirmTrust_Premium_ECC.pem
  * new: Certum_Trusted_Network_CA.pem
  * new: Certinomis_Autorit_Racine.pem
  * new: Root_CA_Generalitat_Valenciana.pem
  * new: A_Trust_nQual_03.pem
  * new: TWCA_Root_Certification_Authority.pem
  * removed: DigiNotar_Root_CA.pem (bnc#714931)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cfarrell@suse.com" date="1326456000">- license update: MPL-1.1 or GPL-2.0+ or LGPL-2.1+
  SPDX format and correct GPL and LGPL tags to include or later</changelog>
<changelog author="lnussel@suse.de" date="1336046400">- update certificates to revision 1.83 (bnc#760503)
  * new: EC_ACC.pem
  * new: Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
  * new: Security_Communication_RootCA2.pem
  * removed: TC_TrustCenter_Germany_Class_2_CA.pem
  * removed: TC_TrustCenter_Germany_Class_3_CA.pem
  * removed: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * removed: Verisign_Class_2_Public_Primary_Certification_Authority.pem
  * removed: Verisign_Class_4_Public_Primary_Certification_Authority_G2.pem
- license change to MPL-2.0</changelog>
<changelog author="meissner@suse.com" date="1349870400">- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection</changelog>
<changelog author="idonmez@suse.com" date="1357214400">- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST</changelog>
<changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
<changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
<changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
<changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
<changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
<changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
<changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
<changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
<changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>

</package>
<package pkgid="2160ecd023cfccfc8a31be54c7e1e39aa8e33ecbec692249a92bf1ff061bce89" name="ca-certificates-mozilla" arch="noarch">
    <version epoch="0" ver="1.97" rel="3.12.1"/>

<changelog author="lnussel@suse.de" date="1285588800">- update certificates to revision 1.65
  * new: E_Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.pem
  * new: GlobalSign_Root_CA_R3.pem
  * new: Microsec_e_Szigno_Root_CA_2009.pem
  * new: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * new: Verisign_Class_3_Public_Primary_Certification_Authority.1.pem</changelog>
<changelog author="lnussel@suse.de" date="1296475200">- update certificates to revision 1.70
  * new: AddTrust_Qualified_Certificates_Root.pem
  * new: Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
  * new: Chambers_of_Commerce_Root_2008.pem
  * new: Global_Chambersign_Root_2008.pem
  * new: Izenpe_com.pem
  * new: TC_TrustCenter_Universal_CA_III.pem</changelog>
<changelog author="lnussel@suse.de" date="1314792000">- update certificates to revision 1.76
  * new: Go_Daddy_Root_Certificate_Authority_G2.pem
  * new: Starfield_Root_Certificate_Authority_G2.pem
  * new: Starfield_Services_Root_Certificate_Authority_G2.pem
  * new: AffirmTrust_Commercial.pem
  * new: AffirmTrust_Networking.pem
  * new: AffirmTrust_Premium.pem
  * new: AffirmTrust_Premium_ECC.pem
  * new: Certum_Trusted_Network_CA.pem
  * new: Certinomis_Autorit_Racine.pem
  * new: Root_CA_Generalitat_Valenciana.pem
  * new: A_Trust_nQual_03.pem
  * new: TWCA_Root_Certification_Authority.pem
  * removed: DigiNotar_Root_CA.pem (bnc#714931)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cfarrell@suse.com" date="1326456000">- license update: MPL-1.1 or GPL-2.0+ or LGPL-2.1+
  SPDX format and correct GPL and LGPL tags to include or later</changelog>
<changelog author="lnussel@suse.de" date="1336046400">- update certificates to revision 1.83 (bnc#760503)
  * new: EC_ACC.pem
  * new: Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
  * new: Security_Communication_RootCA2.pem
  * removed: TC_TrustCenter_Germany_Class_2_CA.pem
  * removed: TC_TrustCenter_Germany_Class_3_CA.pem
  * removed: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * removed: Verisign_Class_2_Public_Primary_Certification_Authority.pem
  * removed: Verisign_Class_4_Public_Primary_Certification_Authority_G2.pem
- license change to MPL-2.0</changelog>
<changelog author="meissner@suse.com" date="1349870400">- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection</changelog>
<changelog author="idonmez@suse.com" date="1357214400">- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST</changelog>
<changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
<changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
<changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
<changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
<changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
<changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
<changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
<changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
<changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
<changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>

</package>
<package pkgid="78e5e6a98c4a78ac33c05ffe037d44d556040b496fda1272e91fa35393b038a6" name="ca-certificates-mozilla" arch="noarch">
    <version epoch="0" ver="2.2" rel="3.17.1"/>

<changelog author="cfarrell@suse.com" date="1326456000">- license update: MPL-1.1 or GPL-2.0+ or LGPL-2.1+
  SPDX format and correct GPL and LGPL tags to include or later</changelog>
<changelog author="lnussel@suse.de" date="1336046400">- update certificates to revision 1.83 (bnc#760503)
  * new: EC_ACC.pem
  * new: Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
  * new: Security_Communication_RootCA2.pem
  * removed: TC_TrustCenter_Germany_Class_2_CA.pem
  * removed: TC_TrustCenter_Germany_Class_3_CA.pem
  * removed: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * removed: Verisign_Class_2_Public_Primary_Certification_Authority.pem
  * removed: Verisign_Class_4_Public_Primary_Certification_Authority_G2.pem
- license change to MPL-2.0</changelog>
<changelog author="meissner@suse.com" date="1349870400">- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection</changelog>
<changelog author="idonmez@suse.com" date="1357214400">- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST</changelog>
<changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
<changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
<changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
<changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
<changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
<changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
<changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
<changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
<changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
<changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
<changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
<changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
<changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
<changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
<changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>

</package>
<package pkgid="e44f0acdf83ea33eb81686b6a5482b928e064cdf71e5b76425ba76a7ab07ade3" name="ca-certificates-mozilla" arch="src">
    <version epoch="0" ver="1.95" rel="3.4.1"/>

<changelog author="lnussel@suse.de" date="1270728000">- require ca-certificates also for postun</changelog>
<changelog author="lnussel@suse.de" date="1274443200">- update certificates to revision 1.64
  * removed "RSA Security 1024 V3" certificate</changelog>
<changelog author="lnussel@suse.de" date="1285588800">- update certificates to revision 1.65
  * new: E_Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.pem
  * new: GlobalSign_Root_CA_R3.pem
  * new: Microsec_e_Szigno_Root_CA_2009.pem
  * new: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * new: Verisign_Class_3_Public_Primary_Certification_Authority.1.pem</changelog>
<changelog author="lnussel@suse.de" date="1296475200">- update certificates to revision 1.70
  * new: AddTrust_Qualified_Certificates_Root.pem
  * new: Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
  * new: Chambers_of_Commerce_Root_2008.pem
  * new: Global_Chambersign_Root_2008.pem
  * new: Izenpe_com.pem
  * new: TC_TrustCenter_Universal_CA_III.pem</changelog>
<changelog author="lnussel@suse.de" date="1314792000">- update certificates to revision 1.76
  * new: Go_Daddy_Root_Certificate_Authority_G2.pem
  * new: Starfield_Root_Certificate_Authority_G2.pem
  * new: Starfield_Services_Root_Certificate_Authority_G2.pem
  * new: AffirmTrust_Commercial.pem
  * new: AffirmTrust_Networking.pem
  * new: AffirmTrust_Premium.pem
  * new: AffirmTrust_Premium_ECC.pem
  * new: Certum_Trusted_Network_CA.pem
  * new: Certinomis_Autorit_Racine.pem
  * new: Root_CA_Generalitat_Valenciana.pem
  * new: A_Trust_nQual_03.pem
  * new: TWCA_Root_Certification_Authority.pem
  * removed: DigiNotar_Root_CA.pem (bnc#714931)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cfarrell@suse.com" date="1326456000">- license update: MPL-1.1 or GPL-2.0+ or LGPL-2.1+
  SPDX format and correct GPL and LGPL tags to include or later</changelog>
<changelog author="lnussel@suse.de" date="1336046400">- update certificates to revision 1.83 (bnc#760503)
  * new: EC_ACC.pem
  * new: Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
  * new: Security_Communication_RootCA2.pem
  * removed: TC_TrustCenter_Germany_Class_2_CA.pem
  * removed: TC_TrustCenter_Germany_Class_3_CA.pem
  * removed: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * removed: Verisign_Class_2_Public_Primary_Certification_Authority.pem
  * removed: Verisign_Class_4_Public_Primary_Certification_Authority_G2.pem
- license change to MPL-2.0</changelog>
<changelog author="meissner@suse.com" date="1349870400">- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection</changelog>
<changelog author="idonmez@suse.com" date="1357214400">- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST</changelog>
<changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
<changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
<changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
<changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
<changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
<changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
<changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
<changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>

</package>
<package pkgid="3d15f574acd3f033795e917d1abfd234d3ba09588fd7d191559cb5a49cb53e59" name="ca-certificates-mozilla" arch="src">
    <version epoch="0" ver="1.96" rel="3.8.1"/>

<changelog author="lnussel@suse.de" date="1274443200">- update certificates to revision 1.64
  * removed "RSA Security 1024 V3" certificate</changelog>
<changelog author="lnussel@suse.de" date="1285588800">- update certificates to revision 1.65
  * new: E_Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.pem
  * new: GlobalSign_Root_CA_R3.pem
  * new: Microsec_e_Szigno_Root_CA_2009.pem
  * new: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * new: Verisign_Class_3_Public_Primary_Certification_Authority.1.pem</changelog>
<changelog author="lnussel@suse.de" date="1296475200">- update certificates to revision 1.70
  * new: AddTrust_Qualified_Certificates_Root.pem
  * new: Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
  * new: Chambers_of_Commerce_Root_2008.pem
  * new: Global_Chambersign_Root_2008.pem
  * new: Izenpe_com.pem
  * new: TC_TrustCenter_Universal_CA_III.pem</changelog>
<changelog author="lnussel@suse.de" date="1314792000">- update certificates to revision 1.76
  * new: Go_Daddy_Root_Certificate_Authority_G2.pem
  * new: Starfield_Root_Certificate_Authority_G2.pem
  * new: Starfield_Services_Root_Certificate_Authority_G2.pem
  * new: AffirmTrust_Commercial.pem
  * new: AffirmTrust_Networking.pem
  * new: AffirmTrust_Premium.pem
  * new: AffirmTrust_Premium_ECC.pem
  * new: Certum_Trusted_Network_CA.pem
  * new: Certinomis_Autorit_Racine.pem
  * new: Root_CA_Generalitat_Valenciana.pem
  * new: A_Trust_nQual_03.pem
  * new: TWCA_Root_Certification_Authority.pem
  * removed: DigiNotar_Root_CA.pem (bnc#714931)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cfarrell@suse.com" date="1326456000">- license update: MPL-1.1 or GPL-2.0+ or LGPL-2.1+
  SPDX format and correct GPL and LGPL tags to include or later</changelog>
<changelog author="lnussel@suse.de" date="1336046400">- update certificates to revision 1.83 (bnc#760503)
  * new: EC_ACC.pem
  * new: Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
  * new: Security_Communication_RootCA2.pem
  * removed: TC_TrustCenter_Germany_Class_2_CA.pem
  * removed: TC_TrustCenter_Germany_Class_3_CA.pem
  * removed: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * removed: Verisign_Class_2_Public_Primary_Certification_Authority.pem
  * removed: Verisign_Class_4_Public_Primary_Certification_Authority_G2.pem
- license change to MPL-2.0</changelog>
<changelog author="meissner@suse.com" date="1349870400">- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection</changelog>
<changelog author="idonmez@suse.com" date="1357214400">- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST</changelog>
<changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
<changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
<changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
<changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
<changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
<changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
<changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
<changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
<changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>

</package>
<package pkgid="fc62ad557d3399974b7924fd6adf601d5d2d9e3f66b76647044b8fab50b16829" name="ca-certificates-mozilla" arch="src">
    <version epoch="0" ver="1.97" rel="3.12.1"/>

<changelog author="lnussel@suse.de" date="1285588800">- update certificates to revision 1.65
  * new: E_Guven_Kok_Elektronik_Sertifika_Hizmet_Saglayicisi.pem
  * new: GlobalSign_Root_CA_R3.pem
  * new: Microsec_e_Szigno_Root_CA_2009.pem
  * new: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * new: Verisign_Class_3_Public_Primary_Certification_Authority.1.pem</changelog>
<changelog author="lnussel@suse.de" date="1296475200">- update certificates to revision 1.70
  * new: AddTrust_Qualified_Certificates_Root.pem
  * new: Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem
  * new: Chambers_of_Commerce_Root_2008.pem
  * new: Global_Chambersign_Root_2008.pem
  * new: Izenpe_com.pem
  * new: TC_TrustCenter_Universal_CA_III.pem</changelog>
<changelog author="lnussel@suse.de" date="1314792000">- update certificates to revision 1.76
  * new: Go_Daddy_Root_Certificate_Authority_G2.pem
  * new: Starfield_Root_Certificate_Authority_G2.pem
  * new: Starfield_Services_Root_Certificate_Authority_G2.pem
  * new: AffirmTrust_Commercial.pem
  * new: AffirmTrust_Networking.pem
  * new: AffirmTrust_Premium.pem
  * new: AffirmTrust_Premium_ECC.pem
  * new: Certum_Trusted_Network_CA.pem
  * new: Certinomis_Autorit_Racine.pem
  * new: Root_CA_Generalitat_Valenciana.pem
  * new: A_Trust_nQual_03.pem
  * new: TWCA_Root_Certification_Authority.pem
  * removed: DigiNotar_Root_CA.pem (bnc#714931)</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
<changelog author="cfarrell@suse.com" date="1326456000">- license update: MPL-1.1 or GPL-2.0+ or LGPL-2.1+
  SPDX format and correct GPL and LGPL tags to include or later</changelog>
<changelog author="lnussel@suse.de" date="1336046400">- update certificates to revision 1.83 (bnc#760503)
  * new: EC_ACC.pem
  * new: Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
  * new: Security_Communication_RootCA2.pem
  * removed: TC_TrustCenter_Germany_Class_2_CA.pem
  * removed: TC_TrustCenter_Germany_Class_3_CA.pem
  * removed: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * removed: Verisign_Class_2_Public_Primary_Certification_Authority.pem
  * removed: Verisign_Class_4_Public_Primary_Certification_Authority_G2.pem
- license change to MPL-2.0</changelog>
<changelog author="meissner@suse.com" date="1349870400">- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection</changelog>
<changelog author="idonmez@suse.com" date="1357214400">- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST</changelog>
<changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
<changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
<changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
<changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
<changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
<changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
<changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
<changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
<changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
<changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>

</package>
<package pkgid="3cfb3fe30d3b5a8be459390247d4a496b3210dcf99d1b9735a9944999d1314de" name="ca-certificates-mozilla" arch="src">
    <version epoch="0" ver="2.2" rel="3.17.1"/>

<changelog author="cfarrell@suse.com" date="1326456000">- license update: MPL-1.1 or GPL-2.0+ or LGPL-2.1+
  SPDX format and correct GPL and LGPL tags to include or later</changelog>
<changelog author="lnussel@suse.de" date="1336046400">- update certificates to revision 1.83 (bnc#760503)
  * new: EC_ACC.pem
  * new: Hellenic_Academic_and_Research_Institutions_RootCA_2011.pem
  * new: Security_Communication_RootCA2.pem
  * removed: TC_TrustCenter_Germany_Class_2_CA.pem
  * removed: TC_TrustCenter_Germany_Class_3_CA.pem
  * removed: Verisign_Class_1_Public_Primary_Certification_Authority.1.pem
  * removed: Verisign_Class_2_Public_Primary_Certification_Authority.pem
  * removed: Verisign_Class_4_Public_Primary_Certification_Authority_G2.pem
- license change to MPL-2.0</changelog>
<changelog author="meissner@suse.com" date="1349870400">- updated certificates to revision 1.85 (bnc#783509)
  * new "Actalis Authentication Root CA"
  * new "Trustis FPS Root CA"
  * new "StartCom Certification Authority"
  * new "StartCom Certification Authority G2"
  * new "Buypass Class 2 Root CA"
  * new "Buypass Class 3 Root CA"
  * updated: "Sonera Class2 CA": remove code-signing
  * updated: "thawte Primary Root CA": added code-signing
  * updated: "Trustis_FPS_Root_CA.pem": added code-signing
  * updated: VeriSign Class 3 Public Primary Certification Authority - G5":
    added code-signing, email-protection</changelog>
<changelog author="idonmez@suse.com" date="1357214400">- update certificates to revision 1.87 (bnc#796628)
  * new "EE Certification Centre Root CA"
  * new "T-TeleSec GlobalRoot Class 3"
  * revoke mis-issued intermediate CAs from TURKTRUST</changelog>
<changelog author="lnussel@suse.de" date="1371643200">- new location of CA certificate anchors is
  /usr/share/ca-certificates/anchors</changelog>
<changelog author="lnussel@suse.de" date="1371816000">- use correct 'anchors' subdirectory</changelog>
<changelog author="lnussel@suse.de" date="1372334400">- use certdata2pem.py from Fedora to extract all certs</changelog>
<changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
<changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
<changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
<changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
<changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
<changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
<changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
<changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
<changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
<changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
<changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA 沃通根证书
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
<changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
<changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>

</package>
<package pkgid="fbb36a0eee489cf62ac49cf7729aefbb4564852cf111f5aed410864c0aca7c86" name="cacti" arch="noarch">
    <version epoch="0" ver="0.8.8b" rel="4.1"/>

<changelog author="joop_boonen@web.de" date="1240660800">- Updated BuildRequires to libdb-4_5-devel</changelog>
<changelog author="joop.boonen@opensuse.org" date="1242993600">- Working with prefix</changelog>
<changelog author="prusnak@suse.cz" date="1245067200">- reverted BuildRequires from libdb-4_5-devel to db-devel</changelog>
<changelog author="puzel@novell.com" date="1251460800">- update to cacti-0.8.7e.tar.bz2
  - bug#0001044: Creating a DS, Output field can't be selected for
    DT with a DIM when "Use Per-Data Source Value" is on
  - bug#0001341: SNMP query: add oid_suffix for weird SNMP queries
  - bug#0001345: Overwriting $snmp_index in query_snmp_host() breaks
    SNMP Data query if using get method
  - bug#0001346: Strip out noisy 'No Such Instance currently exists
    at this OID'
  - bug#0001404: timeout in "function ping_icmp" (lib/ping.php)
  - bug#0001405: Spaces in DS when .rrd file is created, so it fails
  - bug#0001407: Place graph thumbnail into div to lower page length
    changes on load graphs
  - bug#0001410: Thumbnail Columns is not honored for host display
    with snmp index group style
  - bug#0001411: Graph searching issue
  - bug#0001413: strip_quotes fails
  - bug#0001426: multiple form opening due to bug in draw_edit_form()
  - bug#0001436: CSV Export Start Date and End Date are always
    1970-01-01 01:00:00
  - bug#0001443: format_snmp_string can return a number with a leading space
  - bug#0001446: Wrong dates override in CSV export
  - bug#0001456: oid_uptime is not parsed correctly
  - bug#0001460: Skiping input parameters in data_query_field_list()
    may lead to SQL errors
  - bug#0001464: Typo in install/index.php
  - bug#0001467: Customisable oid index parse regexp for weird MIBs
  - bug#0001468: Tree is not expanded correctly
  - bug#0001469: Tree is not being expanded if user followed link
    outside of cacti
  - bug#0001476: Mark stacked columns in rrdtool_function_xport() output
  - bug#0001477: Spelling error in a variable in html_tree.php
  - bug#0001478: Combo boxes on Graph Management page produce URLs
    with leading spaces
  - bug: Top Graph Header Breaks When Plugins Used
  - bug: SNMP v3 Password issue caused by Firefox's Password AutoFill
  - bug: Strip Quotes does not properly handle the value 'U'
  - bug: Changes to the graph tree would not show up immediately for
    current user
- bzip sources</changelog>
<changelog author="joop.boonen@opensuse.org" date="1251720000">- Minor change in the name of the patch file</changelog>
<changelog author="joop.boonen@opensuse.org" date="1257940800">- Added the missing cli directory</changelog>
<changelog author="joop.boonen@opensuse.org" date="1274529600">- update to cacti-0.8.7f</changelog>
<changelog author="joop.boonen@opensuse.org" date="1278763200">- update to cacti-0.8.7g</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- added 'Provides' to make cactid installable</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317729600">- Upgrade to version 0.8.7h</changelog>
<changelog author="joop.boonen@opensuse.org" date="1323777600">- Build version 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1325246400">- Added official settings_checkbox patch</changelog>
<changelog author="joop.boonen@boonen.org" date="1326024000">- Reformated the spec file to the openSUSE standard</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1334059200">- Minor changes in the spec file, updated version to 0.8.8</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334059201">- Install cacti in /srv/www/cacti/  from openSUSE 12.2 onwards
- Passed the spec file through spec-cleaner
- Cacti-PA can be removed as cacti includes the Plugin Architure</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334577600">- Corrected the crontab file for openSUSE &gt;= 12.2
- Some cross distro fixes so plugins will also build for other distros</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New version 0.8.8a
- Fixed an rpmlint warning</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1338811200">- Added official cacti 0.8.8a patch</changelog>
<changelog author="joop.boonen@opensuse.org" date="1375963200">- Update to version 0.8.8b
  - bug: Fixed issue with custom data source information being lost when saved from edit
  - bug: Repopulate the poller cache on new installations
  - bug: Fix issue with poller not escaping the script query path correctly
  - bug: Allow snmpv3 priv proto none
  - bug: Fix issue where host activate may flush the entire poller item cache
  - security: SQL injection and shell escaping issues</changelog>
<changelog author="aj@ajaissle.de" date="1397390400">- Add cacti-0.8.8b_security.patch:
  - Fixes [bnc#870821]:
  - CVE-2014-2326: Unspecified HTML Injection Vulnerability
  - Fixes CVE-2014-2328:
  - Unspecified Remote Command Execution Vulnerability
  - Fixes [bnc#872008]:
  - CVE-2014-2708: Unspecified SQL Injection Vulnerability
  - CVE-2014-2709: Unspecified Remote Command Execution Vulnerability
- Add cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch:
  - Fixes [bnc#837440]:
  - CVE-2013-5588: HTML Injection Vulnerability
  - CVE-2013-5589: SQL Injection Vulnerability</changelog>

</package>
<package pkgid="30fe085503fdd26115572cf295ad8d8d152674d5d67cad98b1e6ff3c10a5619a" name="cacti" arch="noarch">
    <version epoch="0" ver="0.8.8c" rel="8.1"/>

<changelog author="joop.boonen@opensuse.org" date="1242993600">- Working with prefix</changelog>
<changelog author="prusnak@suse.cz" date="1245067200">- reverted BuildRequires from libdb-4_5-devel to db-devel</changelog>
<changelog author="puzel@novell.com" date="1251460800">- update to cacti-0.8.7e.tar.bz2
  - bug#0001044: Creating a DS, Output field can't be selected for
    DT with a DIM when "Use Per-Data Source Value" is on
  - bug#0001341: SNMP query: add oid_suffix for weird SNMP queries
  - bug#0001345: Overwriting $snmp_index in query_snmp_host() breaks
    SNMP Data query if using get method
  - bug#0001346: Strip out noisy 'No Such Instance currently exists
    at this OID'
  - bug#0001404: timeout in "function ping_icmp" (lib/ping.php)
  - bug#0001405: Spaces in DS when .rrd file is created, so it fails
  - bug#0001407: Place graph thumbnail into div to lower page length
    changes on load graphs
  - bug#0001410: Thumbnail Columns is not honored for host display
    with snmp index group style
  - bug#0001411: Graph searching issue
  - bug#0001413: strip_quotes fails
  - bug#0001426: multiple form opening due to bug in draw_edit_form()
  - bug#0001436: CSV Export Start Date and End Date are always
    1970-01-01 01:00:00
  - bug#0001443: format_snmp_string can return a number with a leading space
  - bug#0001446: Wrong dates override in CSV export
  - bug#0001456: oid_uptime is not parsed correctly
  - bug#0001460: Skiping input parameters in data_query_field_list()
    may lead to SQL errors
  - bug#0001464: Typo in install/index.php
  - bug#0001467: Customisable oid index parse regexp for weird MIBs
  - bug#0001468: Tree is not expanded correctly
  - bug#0001469: Tree is not being expanded if user followed link
    outside of cacti
  - bug#0001476: Mark stacked columns in rrdtool_function_xport() output
  - bug#0001477: Spelling error in a variable in html_tree.php
  - bug#0001478: Combo boxes on Graph Management page produce URLs
    with leading spaces
  - bug: Top Graph Header Breaks When Plugins Used
  - bug: SNMP v3 Password issue caused by Firefox's Password AutoFill
  - bug: Strip Quotes does not properly handle the value 'U'
  - bug: Changes to the graph tree would not show up immediately for
    current user
- bzip sources</changelog>
<changelog author="joop.boonen@opensuse.org" date="1251720000">- Minor change in the name of the patch file</changelog>
<changelog author="joop.boonen@opensuse.org" date="1257940800">- Added the missing cli directory</changelog>
<changelog author="joop.boonen@opensuse.org" date="1274529600">- update to cacti-0.8.7f</changelog>
<changelog author="joop.boonen@opensuse.org" date="1278763200">- update to cacti-0.8.7g</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- added 'Provides' to make cactid installable</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317729600">- Upgrade to version 0.8.7h</changelog>
<changelog author="joop.boonen@opensuse.org" date="1323777600">- Build version 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1325246400">- Added official settings_checkbox patch</changelog>
<changelog author="joop.boonen@boonen.org" date="1326024000">- Reformated the spec file to the openSUSE standard</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1334059200">- Minor changes in the spec file, updated version to 0.8.8</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334059201">- Install cacti in /srv/www/cacti/  from openSUSE 12.2 onwards
- Passed the spec file through spec-cleaner
- Cacti-PA can be removed as cacti includes the Plugin Architure</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334577600">- Corrected the crontab file for openSUSE &gt;= 12.2
- Some cross distro fixes so plugins will also build for other distros</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New version 0.8.8a
- Fixed an rpmlint warning</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1338811200">- Added official cacti 0.8.8a patch</changelog>
<changelog author="joop.boonen@opensuse.org" date="1375963200">- Update to version 0.8.8b
  - bug: Fixed issue with custom data source information being lost when saved from edit
  - bug: Repopulate the poller cache on new installations
  - bug: Fix issue with poller not escaping the script query path correctly
  - bug: Allow snmpv3 priv proto none
  - bug: Fix issue where host activate may flush the entire poller item cache
  - security: SQL injection and shell escaping issues</changelog>
<changelog author="aj@ajaissle.de" date="1397390400">- Add cacti-0.8.8b_security.patch:
  - Fixes [bnc#870821]:
  - CVE-2014-2326: Unspecified HTML Injection Vulnerability
  - Fixes CVE-2014-2328:
  - Unspecified Remote Command Execution Vulnerability
  - Fixes [bnc#872008]:
  - CVE-2014-2708: Unspecified SQL Injection Vulnerability
  - CVE-2014-2709: Unspecified Remote Command Execution Vulnerability
- Add cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch:
  - Fixes [bnc#837440]:
  - CVE-2013-5588: HTML Injection Vulnerability
  - CVE-2013-5589: SQL Injection Vulnerability</changelog>
<changelog author="astieger@suse.com" date="1425470400">- Update to version 0.8.8c [boo#920399]
  This update fixes four vulnerabilities and adds some compatible
  features.
  - Security fixes not previously patched:
  - CVE-2014-2326 - XSS issue via CDEF editing
  - CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability
  - CVE-2014-2328 - Remote Command Execution Vulnerability in graph export
  - CVE-2014-4002 - XSS issues in multiple files
  - CVE-2014-5025 - XSS issue via data source editing
  - CVE-2014-5026 - XSS issues in multiple files
  - Security fixes now upstream:
  - CVE-2013-5588 - XSS issue via installer or device editing
  - CVE-2013-5589 - SQL injection vulnerability in device editing
  - Removed cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch as this code is incorprated to cacti 0.8.8c
  - Removed cacti-0.8.8b_security.patch as this code is incorprated to cacti 0.8.8c
  - New features:
  - New graph tree view
  - Updated graph list and graph preview
  - Refactor graph tree view to remove GPL incompatible code
  - Updated command line database upgrade utility
  - Graph zooming now from everywhere
  - Removed cacti-0.8.8b-cacti-log-path.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b-cacti-script.patch as it is incompatible with 0.8.8c.
  - Created cacti-0.8.8c-cacti-log-path.patch so that cacti only logs to /var/log/cacti
  - Created cacti-0.8.8c-cacti-script.patch so that cacti uses /usr/share/cacti/scripts</changelog>

</package>
<package pkgid="874817d848374299835ace1a0082928b3acc76bef3559f8989432a961a8e3d6d" name="cacti" arch="noarch">
    <version epoch="0" ver="0.8.8d" rel="11.1"/>

<changelog author="puzel@novell.com" date="1251460800">- update to cacti-0.8.7e.tar.bz2
  - bug#0001044: Creating a DS, Output field can't be selected for
    DT with a DIM when "Use Per-Data Source Value" is on
  - bug#0001341: SNMP query: add oid_suffix for weird SNMP queries
  - bug#0001345: Overwriting $snmp_index in query_snmp_host() breaks
    SNMP Data query if using get method
  - bug#0001346: Strip out noisy 'No Such Instance currently exists
    at this OID'
  - bug#0001404: timeout in "function ping_icmp" (lib/ping.php)
  - bug#0001405: Spaces in DS when .rrd file is created, so it fails
  - bug#0001407: Place graph thumbnail into div to lower page length
    changes on load graphs
  - bug#0001410: Thumbnail Columns is not honored for host display
    with snmp index group style
  - bug#0001411: Graph searching issue
  - bug#0001413: strip_quotes fails
  - bug#0001426: multiple form opening due to bug in draw_edit_form()
  - bug#0001436: CSV Export Start Date and End Date are always
    1970-01-01 01:00:00
  - bug#0001443: format_snmp_string can return a number with a leading space
  - bug#0001446: Wrong dates override in CSV export
  - bug#0001456: oid_uptime is not parsed correctly
  - bug#0001460: Skiping input parameters in data_query_field_list()
    may lead to SQL errors
  - bug#0001464: Typo in install/index.php
  - bug#0001467: Customisable oid index parse regexp for weird MIBs
  - bug#0001468: Tree is not expanded correctly
  - bug#0001469: Tree is not being expanded if user followed link
    outside of cacti
  - bug#0001476: Mark stacked columns in rrdtool_function_xport() output
  - bug#0001477: Spelling error in a variable in html_tree.php
  - bug#0001478: Combo boxes on Graph Management page produce URLs
    with leading spaces
  - bug: Top Graph Header Breaks When Plugins Used
  - bug: SNMP v3 Password issue caused by Firefox's Password AutoFill
  - bug: Strip Quotes does not properly handle the value 'U'
  - bug: Changes to the graph tree would not show up immediately for
    current user
- bzip sources</changelog>
<changelog author="joop.boonen@opensuse.org" date="1251720000">- Minor change in the name of the patch file</changelog>
<changelog author="joop.boonen@opensuse.org" date="1257940800">- Added the missing cli directory</changelog>
<changelog author="joop.boonen@opensuse.org" date="1274529600">- update to cacti-0.8.7f</changelog>
<changelog author="joop.boonen@opensuse.org" date="1278763200">- update to cacti-0.8.7g</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- added 'Provides' to make cactid installable</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317729600">- Upgrade to version 0.8.7h</changelog>
<changelog author="joop.boonen@opensuse.org" date="1323777600">- Build version 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1325246400">- Added official settings_checkbox patch</changelog>
<changelog author="joop.boonen@boonen.org" date="1326024000">- Reformated the spec file to the openSUSE standard</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1334059200">- Minor changes in the spec file, updated version to 0.8.8</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334059201">- Install cacti in /srv/www/cacti/  from openSUSE 12.2 onwards
- Passed the spec file through spec-cleaner
- Cacti-PA can be removed as cacti includes the Plugin Architure</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334577600">- Corrected the crontab file for openSUSE &gt;= 12.2
- Some cross distro fixes so plugins will also build for other distros</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New version 0.8.8a
- Fixed an rpmlint warning</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1338811200">- Added official cacti 0.8.8a patch</changelog>
<changelog author="joop.boonen@opensuse.org" date="1375963200">- Update to version 0.8.8b
  - bug: Fixed issue with custom data source information being lost when saved from edit
  - bug: Repopulate the poller cache on new installations
  - bug: Fix issue with poller not escaping the script query path correctly
  - bug: Allow snmpv3 priv proto none
  - bug: Fix issue where host activate may flush the entire poller item cache
  - security: SQL injection and shell escaping issues</changelog>
<changelog author="aj@ajaissle.de" date="1397304000">- Change php requirements to be more general on SUSE systems
  [bnc#862993]</changelog>
<changelog author="aj@ajaissle.de" date="1397390400">- Add cacti-0.8.8b_security.patch:
  - Fixes [bnc#870821]:
  - CVE-2014-2326: Unspecified HTML Injection Vulnerability
  - Fixes CVE-2014-2328:
  - Unspecified Remote Command Execution Vulnerability
  - Fixes [bnc#872008]:
  - CVE-2014-2708: Unspecified SQL Injection Vulnerability
  - CVE-2014-2709: Unspecified Remote Command Execution Vulnerability
- Add cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch:
  - Fixes [bnc#837440]:
  - CVE-2013-5588: HTML Injection Vulnerability
  - CVE-2013-5589: SQL Injection Vulnerability</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1418040000">- Update to version 0.8.8c
  - New features
  - New graph tree view
  - Updated graph list and graph preview
  - Refactor graph tree view to remove GPL incompatible code
  - Updated command line database upgrade utility
  - Graph zooming now from everywhere
  - Security fixes
  - CVE-2013-5588 - XSS issue via installer or device editing
  - CVE-2013-5589 - SQL injection vulnerability in device editing
  - CVE-2014-2326 - XSS issue via CDEF editing
  - CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability
  - CVE-2014-2328 - Remote Command Execution Vulnerability in graph export
  - CVE-2014-4002 - XSS issues in multiple files
  - CVE-2014-5025 - XSS issue via data source editing
  - CVE-2014-5026 - XSS issues in multiple files
  - Removed cacti-0.8.8b-cacti-log-path.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b-cacti-script.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch as this code is incorprated to cacti 0.8.8c
  - Removed cacti-0.8.8b_security.patch as this code is incorprated to cacti 0.8.8c
  - Created cacti-0.8.8c-cacti-log-path.patch so that cacti only logs to /var/log/cacti
  - Created cacti-0.8.8c-cacti-script.patch so that cacti uses /usr/share/cacti/scripts</changelog>
<changelog author="joop.boonen@opensuse.org" date="1434456000">- Update to version 0.8.8d
  - Fixes [bnc#934187]
  - CVE-2015-4342: cacti: Multiple XSS and SQL injection vulnerabilities
  - feature: Remove un-needed fonts and javascript files
  - bug: Fixed SQL injection VN: JVN#78187936 / TN:JPCERT#98968540
  - bug#0002261: PHP 5.4.0 added new error_reporting variable, causing cacti to show errors
  - bug#0002391: Odd Behaviour on ReIndex of Data Query Data
  - bug#0002393: Broken thumbnail images for graph templates
  - bug#0002402: Subtree must not have the same header as the parent header
  - bug#0002474: CLI add_device.php dows not set availability_method correctly
  - bug#0002449: The Save button does not work: Invalid html on page Console -&gt; Cacti Settings: empty form tag
  - bug#0002428: Fail to delete all data input items when removing more than 1000 data sources
  - bug#0002439: Password with special character don't work with LDAP authentication
  - bug#0002461: invalid bn with ldap and anonymous bind
  - bug#0002465: Graph Export return empty CSV file
  - bug#0002484: Incorrect SQL request in cli script repair_database.php
  - bug#0002485: Broken pagenation on graph viewing
  - bug#0002489: SNMP - Get Mounted Partitions using Re-index method of Index Count Changed causes recache event every time
  - bug#0002490: Can not select page for multiple datasources per device
  - bug#0002494: CSV export always shows last day
  - bug#0002504: Data template search not functional
  - bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification
  - bug#0002543: Unable to switch pages within graphs_new.php due to invalid URL generation
  - bug#0002544: Duplicate entry in $nav_url during list view
  - bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342
  - bug#0002572: SQL injection in graph templates
- Renamed two patch files, to a more generic name:
  - cacti-0.8.8c-cacti-log-path.patch to cacti-log-path.patch
  - cacti-0.8.8c-cacti-script.patch to cacti-script.patch</changelog>

</package>
<package pkgid="a9e4f1ded01a2eeca986debaa4e933eb2ca955b7ac8ef1f04a6a9d4731de948e" name="cacti" arch="noarch">
    <version epoch="0" ver="0.8.8e" rel="14.1"/>

<changelog author="joop.boonen@opensuse.org" date="1251720000">- Minor change in the name of the patch file</changelog>
<changelog author="joop.boonen@opensuse.org" date="1257940800">- Added the missing cli directory</changelog>
<changelog author="joop.boonen@opensuse.org" date="1274529600">- update to cacti-0.8.7f</changelog>
<changelog author="joop.boonen@opensuse.org" date="1278763200">- update to cacti-0.8.7g</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- added 'Provides' to make cactid installable</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317729600">- Upgrade to version 0.8.7h</changelog>
<changelog author="joop.boonen@opensuse.org" date="1323777600">- Build version 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1325246400">- Added official settings_checkbox patch</changelog>
<changelog author="joop.boonen@boonen.org" date="1326024000">- Reformated the spec file to the openSUSE standard</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1334059200">- Minor changes in the spec file, updated version to 0.8.8</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334059201">- Install cacti in /srv/www/cacti/  from openSUSE 12.2 onwards
- Passed the spec file through spec-cleaner
- Cacti-PA can be removed as cacti includes the Plugin Architure</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334577600">- Corrected the crontab file for openSUSE &gt;= 12.2
- Some cross distro fixes so plugins will also build for other distros</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New version 0.8.8a
- Fixed an rpmlint warning</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1338811200">- Added official cacti 0.8.8a patch</changelog>
<changelog author="joop.boonen@opensuse.org" date="1375963200">- Update to version 0.8.8b
  - bug: Fixed issue with custom data source information being lost when saved from edit
  - bug: Repopulate the poller cache on new installations
  - bug: Fix issue with poller not escaping the script query path correctly
  - bug: Allow snmpv3 priv proto none
  - bug: Fix issue where host activate may flush the entire poller item cache
  - security: SQL injection and shell escaping issues</changelog>
<changelog author="aj@ajaissle.de" date="1397304000">- Change php requirements to be more general on SUSE systems
  [bnc#862993]</changelog>
<changelog author="aj@ajaissle.de" date="1397390400">- Add cacti-0.8.8b_security.patch:
  - Fixes [bnc#870821]:
  - CVE-2014-2326: Unspecified HTML Injection Vulnerability
  - Fixes CVE-2014-2328:
  - Unspecified Remote Command Execution Vulnerability
  - Fixes [bnc#872008]:
  - CVE-2014-2708: Unspecified SQL Injection Vulnerability
  - CVE-2014-2709: Unspecified Remote Command Execution Vulnerability
- Add cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch:
  - Fixes [bnc#837440]:
  - CVE-2013-5588: HTML Injection Vulnerability
  - CVE-2013-5589: SQL Injection Vulnerability</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1418040000">- Update to version 0.8.8c
  - New features
  - New graph tree view
  - Updated graph list and graph preview
  - Refactor graph tree view to remove GPL incompatible code
  - Updated command line database upgrade utility
  - Graph zooming now from everywhere
  - Security fixes
  - CVE-2013-5588 - XSS issue via installer or device editing
  - CVE-2013-5589 - SQL injection vulnerability in device editing
  - CVE-2014-2326 - XSS issue via CDEF editing
  - CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability
  - CVE-2014-2328 - Remote Command Execution Vulnerability in graph export
  - CVE-2014-4002 - XSS issues in multiple files
  - CVE-2014-5025 - XSS issue via data source editing
  - CVE-2014-5026 - XSS issues in multiple files
  - Removed cacti-0.8.8b-cacti-log-path.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b-cacti-script.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch as this code is incorprated to cacti 0.8.8c
  - Removed cacti-0.8.8b_security.patch as this code is incorprated to cacti 0.8.8c
  - Created cacti-0.8.8c-cacti-log-path.patch so that cacti only logs to /var/log/cacti
  - Created cacti-0.8.8c-cacti-script.patch so that cacti uses /usr/share/cacti/scripts</changelog>
<changelog author="joop.boonen@opensuse.org" date="1434456000">- Update to version 0.8.8d
  - Fixes [bnc#934187]
  - CVE-2015-4342: cacti: Multiple XSS and SQL injection vulnerabilities
  - feature: Remove un-needed fonts and javascript files
  - bug: Fixed SQL injection VN: JVN#78187936 / TN:JPCERT#98968540
  - bug#0002261: PHP 5.4.0 added new error_reporting variable, causing cacti to show errors
  - bug#0002391: Odd Behaviour on ReIndex of Data Query Data
  - bug#0002393: Broken thumbnail images for graph templates
  - bug#0002402: Subtree must not have the same header as the parent header
  - bug#0002474: CLI add_device.php dows not set availability_method correctly
  - bug#0002449: The Save button does not work: Invalid html on page Console -&gt; Cacti Settings: empty form tag
  - bug#0002428: Fail to delete all data input items when removing more than 1000 data sources
  - bug#0002439: Password with special character don't work with LDAP authentication
  - bug#0002461: invalid bn with ldap and anonymous bind
  - bug#0002465: Graph Export return empty CSV file
  - bug#0002484: Incorrect SQL request in cli script repair_database.php
  - bug#0002485: Broken pagenation on graph viewing
  - bug#0002489: SNMP - Get Mounted Partitions using Re-index method of Index Count Changed causes recache event every time
  - bug#0002490: Can not select page for multiple datasources per device
  - bug#0002494: CSV export always shows last day
  - bug#0002504: Data template search not functional
  - bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification
  - bug#0002543: Unable to switch pages within graphs_new.php due to invalid URL generation
  - bug#0002544: Duplicate entry in $nav_url during list view
  - bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342
  - bug#0002572: SQL injection in graph templates
- Renamed two patch files, to a more generic name:
  - cacti-0.8.8c-cacti-log-path.patch to cacti-log-path.patch
  - cacti-0.8.8c-cacti-script.patch to cacti-script.patch</changelog>
<changelog author="astieger@suse.com" date="1437220800">- Update to 0.8.8e:
  This update contains importand security fixes: [boo#937997]
  - Multiple XSS and SQL injection vulnerabilities
  - CVE-2015-4634 - SQL injection in graphs.php
  Further fixes:
  - Fixed issue with graph zooming failing to work
  - Impossible to have a URL pointing directly to a graph
  - Cannot delete data sources from the GUI
  - viewing host in new tab - Undefined index: nodeid
  - status_fail_date and status_rec_date are set incorrectly after
    host is marked down
  - Incorrect value in Hosts column on Host Templates page
  - Incorrect row number in Devices -&gt; (Edit) page</changelog>

</package>
<package pkgid="09d6d3a800fcc6541d657ba566439eac72175d8145d8f5ec2db434c9f3d92977" name="cacti" arch="noarch">
    <version epoch="0" ver="0.8.8f" rel="17.1"/>

<changelog author="joop.boonen@opensuse.org" date="1274529600">- update to cacti-0.8.7f</changelog>
<changelog author="joop.boonen@opensuse.org" date="1278763200">- update to cacti-0.8.7g</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- added 'Provides' to make cactid installable</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317729600">- Upgrade to version 0.8.7h</changelog>
<changelog author="joop.boonen@opensuse.org" date="1323777600">- Build version 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1325246400">- Added official settings_checkbox patch</changelog>
<changelog author="joop.boonen@boonen.org" date="1326024000">- Reformated the spec file to the openSUSE standard</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1334059200">- Minor changes in the spec file, updated version to 0.8.8</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334059201">- Install cacti in /srv/www/cacti/  from openSUSE 12.2 onwards
- Passed the spec file through spec-cleaner
- Cacti-PA can be removed as cacti includes the Plugin Architure</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334577600">- Corrected the crontab file for openSUSE &gt;= 12.2
- Some cross distro fixes so plugins will also build for other distros</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New version 0.8.8a
- Fixed an rpmlint warning</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1338811200">- Added official cacti 0.8.8a patch</changelog>
<changelog author="joop.boonen@opensuse.org" date="1375963200">- Update to version 0.8.8b
  - bug: Fixed issue with custom data source information being lost when saved from edit
  - bug: Repopulate the poller cache on new installations
  - bug: Fix issue with poller not escaping the script query path correctly
  - bug: Allow snmpv3 priv proto none
  - bug: Fix issue where host activate may flush the entire poller item cache
  - security: SQL injection and shell escaping issues</changelog>
<changelog author="aj@ajaissle.de" date="1397304000">- Change php requirements to be more general on SUSE systems
  [bnc#862993]</changelog>
<changelog author="aj@ajaissle.de" date="1397390400">- Add cacti-0.8.8b_security.patch:
  - Fixes [bnc#870821]:
  - CVE-2014-2326: Unspecified HTML Injection Vulnerability
  - Fixes CVE-2014-2328:
  - Unspecified Remote Command Execution Vulnerability
  - Fixes [bnc#872008]:
  - CVE-2014-2708: Unspecified SQL Injection Vulnerability
  - CVE-2014-2709: Unspecified Remote Command Execution Vulnerability
- Add cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch:
  - Fixes [bnc#837440]:
  - CVE-2013-5588: HTML Injection Vulnerability
  - CVE-2013-5589: SQL Injection Vulnerability</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1418040000">- Update to version 0.8.8c
  - New features
  - New graph tree view
  - Updated graph list and graph preview
  - Refactor graph tree view to remove GPL incompatible code
  - Updated command line database upgrade utility
  - Graph zooming now from everywhere
  - Security fixes
  - CVE-2013-5588 - XSS issue via installer or device editing
  - CVE-2013-5589 - SQL injection vulnerability in device editing
  - CVE-2014-2326 - XSS issue via CDEF editing
  - CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability
  - CVE-2014-2328 - Remote Command Execution Vulnerability in graph export
  - CVE-2014-4002 - XSS issues in multiple files
  - CVE-2014-5025 - XSS issue via data source editing
  - CVE-2014-5026 - XSS issues in multiple files
  - Removed cacti-0.8.8b-cacti-log-path.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b-cacti-script.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch as this code is incorprated to cacti 0.8.8c
  - Removed cacti-0.8.8b_security.patch as this code is incorprated to cacti 0.8.8c
  - Created cacti-0.8.8c-cacti-log-path.patch so that cacti only logs to /var/log/cacti
  - Created cacti-0.8.8c-cacti-script.patch so that cacti uses /usr/share/cacti/scripts</changelog>
<changelog author="joop.boonen@opensuse.org" date="1434456000">- Update to version 0.8.8d
  - Fixes [bnc#934187]
  - CVE-2015-4342: cacti: Multiple XSS and SQL injection vulnerabilities
  - feature: Remove un-needed fonts and javascript files
  - bug: Fixed SQL injection VN: JVN#78187936 / TN:JPCERT#98968540
  - bug#0002261: PHP 5.4.0 added new error_reporting variable, causing cacti to show errors
  - bug#0002391: Odd Behaviour on ReIndex of Data Query Data
  - bug#0002393: Broken thumbnail images for graph templates
  - bug#0002402: Subtree must not have the same header as the parent header
  - bug#0002474: CLI add_device.php dows not set availability_method correctly
  - bug#0002449: The Save button does not work: Invalid html on page Console -&gt; Cacti Settings: empty form tag
  - bug#0002428: Fail to delete all data input items when removing more than 1000 data sources
  - bug#0002439: Password with special character don't work with LDAP authentication
  - bug#0002461: invalid bn with ldap and anonymous bind
  - bug#0002465: Graph Export return empty CSV file
  - bug#0002484: Incorrect SQL request in cli script repair_database.php
  - bug#0002485: Broken pagenation on graph viewing
  - bug#0002489: SNMP - Get Mounted Partitions using Re-index method of Index Count Changed causes recache event every time
  - bug#0002490: Can not select page for multiple datasources per device
  - bug#0002494: CSV export always shows last day
  - bug#0002504: Data template search not functional
  - bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification
  - bug#0002543: Unable to switch pages within graphs_new.php due to invalid URL generation
  - bug#0002544: Duplicate entry in $nav_url during list view
  - bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342
  - bug#0002572: SQL injection in graph templates
- Renamed two patch files, to a more generic name:
  - cacti-0.8.8c-cacti-log-path.patch to cacti-log-path.patch
  - cacti-0.8.8c-cacti-script.patch to cacti-script.patch</changelog>
<changelog author="astieger@suse.com" date="1437220800">- Update to 0.8.8e:
  This update contains importand security fixes: [boo#937997]
  - Multiple XSS and SQL injection vulnerabilities
  - CVE-2015-4634 - SQL injection in graphs.php
  Further fixes:
  - Fixed issue with graph zooming failing to work
  - Impossible to have a URL pointing directly to a graph
  - Cannot delete data sources from the GUI
  - viewing host in new tab - Undefined index: nodeid
  - status_fail_date and status_rec_date are set incorrectly after
    host is marked down
  - Incorrect value in Hosts column on Host Templates page
  - Incorrect row number in Devices -&gt; (Edit) page</changelog>
<changelog author="astieger@suse.com" date="1437912000">- cacti 0.8.8f:
  * 0.8.8e Poller Script Parser is Broken (boo#965864)
  * cli/upgrade_database.php is missing releases
  * Graph managment graphs.php save button does not work
  * Poller Script Parser is Broken</changelog>
<changelog author="astieger@suse.com" date="1455019200">- Fix the following vulnerabilities:
  * CVE-2015-8369: SQL injection in graph.php (boo#958863)
  * CVE-2015-8604: SQL injection in graphs_new.php (boo#960678)
  * CVE-2015-8377: SQL injection vulnerability in the
    host_new_graphs_save function in graphs_new.php
    (boo#958977)
  * CVE-2016-2313: Authentication using web authentication as a user
    not in the cacti database allows complete access
    (boo#965930)
- adding CVE-2015-8369.patch, CVE-2015-8604-CVE-2015-8377.patch,
  CVE-2016-2313.patch</changelog>

</package>
<package pkgid="979d6f176e6620e28da079bd380c565ef8452d0d793760ea83c42d663a475c6e" name="cacti" arch="noarch">
    <version epoch="0" ver="0.8.8f" rel="20.1"/>

<changelog author="joop.boonen@opensuse.org" date="1278763200">- update to cacti-0.8.7g</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- added 'Provides' to make cactid installable</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317729600">- Upgrade to version 0.8.7h</changelog>
<changelog author="joop.boonen@opensuse.org" date="1323777600">- Build version 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1325246400">- Added official settings_checkbox patch</changelog>
<changelog author="joop.boonen@boonen.org" date="1326024000">- Reformated the spec file to the openSUSE standard</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1334059200">- Minor changes in the spec file, updated version to 0.8.8</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334059201">- Install cacti in /srv/www/cacti/  from openSUSE 12.2 onwards
- Passed the spec file through spec-cleaner
- Cacti-PA can be removed as cacti includes the Plugin Architure</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334577600">- Corrected the crontab file for openSUSE &gt;= 12.2
- Some cross distro fixes so plugins will also build for other distros</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New version 0.8.8a
- Fixed an rpmlint warning</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1338811200">- Added official cacti 0.8.8a patch</changelog>
<changelog author="joop.boonen@opensuse.org" date="1375963200">- Update to version 0.8.8b
  - bug: Fixed issue with custom data source information being lost when saved from edit
  - bug: Repopulate the poller cache on new installations
  - bug: Fix issue with poller not escaping the script query path correctly
  - bug: Allow snmpv3 priv proto none
  - bug: Fix issue where host activate may flush the entire poller item cache
  - security: SQL injection and shell escaping issues</changelog>
<changelog author="aj@ajaissle.de" date="1397304000">- Change php requirements to be more general on SUSE systems
  [bnc#862993]</changelog>
<changelog author="aj@ajaissle.de" date="1397390400">- Add cacti-0.8.8b_security.patch:
  - Fixes [bnc#870821]:
  - CVE-2014-2326: Unspecified HTML Injection Vulnerability
  - Fixes CVE-2014-2328:
  - Unspecified Remote Command Execution Vulnerability
  - Fixes [bnc#872008]:
  - CVE-2014-2708: Unspecified SQL Injection Vulnerability
  - CVE-2014-2709: Unspecified Remote Command Execution Vulnerability
- Add cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch:
  - Fixes [bnc#837440]:
  - CVE-2013-5588: HTML Injection Vulnerability
  - CVE-2013-5589: SQL Injection Vulnerability</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1418040000">- Update to version 0.8.8c
  - New features
  - New graph tree view
  - Updated graph list and graph preview
  - Refactor graph tree view to remove GPL incompatible code
  - Updated command line database upgrade utility
  - Graph zooming now from everywhere
  - Security fixes
  - CVE-2013-5588 - XSS issue via installer or device editing
  - CVE-2013-5589 - SQL injection vulnerability in device editing
  - CVE-2014-2326 - XSS issue via CDEF editing
  - CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability
  - CVE-2014-2328 - Remote Command Execution Vulnerability in graph export
  - CVE-2014-4002 - XSS issues in multiple files
  - CVE-2014-5025 - XSS issue via data source editing
  - CVE-2014-5026 - XSS issues in multiple files
  - Removed cacti-0.8.8b-cacti-log-path.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b-cacti-script.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch as this code is incorprated to cacti 0.8.8c
  - Removed cacti-0.8.8b_security.patch as this code is incorprated to cacti 0.8.8c
  - Created cacti-0.8.8c-cacti-log-path.patch so that cacti only logs to /var/log/cacti
  - Created cacti-0.8.8c-cacti-script.patch so that cacti uses /usr/share/cacti/scripts</changelog>
<changelog author="joop.boonen@opensuse.org" date="1434456000">- Update to version 0.8.8d
  - Fixes [bnc#934187]
  - CVE-2015-4342: cacti: Multiple XSS and SQL injection vulnerabilities
  - feature: Remove un-needed fonts and javascript files
  - bug: Fixed SQL injection VN: JVN#78187936 / TN:JPCERT#98968540
  - bug#0002261: PHP 5.4.0 added new error_reporting variable, causing cacti to show errors
  - bug#0002391: Odd Behaviour on ReIndex of Data Query Data
  - bug#0002393: Broken thumbnail images for graph templates
  - bug#0002402: Subtree must not have the same header as the parent header
  - bug#0002474: CLI add_device.php dows not set availability_method correctly
  - bug#0002449: The Save button does not work: Invalid html on page Console -&gt; Cacti Settings: empty form tag
  - bug#0002428: Fail to delete all data input items when removing more than 1000 data sources
  - bug#0002439: Password with special character don't work with LDAP authentication
  - bug#0002461: invalid bn with ldap and anonymous bind
  - bug#0002465: Graph Export return empty CSV file
  - bug#0002484: Incorrect SQL request in cli script repair_database.php
  - bug#0002485: Broken pagenation on graph viewing
  - bug#0002489: SNMP - Get Mounted Partitions using Re-index method of Index Count Changed causes recache event every time
  - bug#0002490: Can not select page for multiple datasources per device
  - bug#0002494: CSV export always shows last day
  - bug#0002504: Data template search not functional
  - bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification
  - bug#0002543: Unable to switch pages within graphs_new.php due to invalid URL generation
  - bug#0002544: Duplicate entry in $nav_url during list view
  - bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342
  - bug#0002572: SQL injection in graph templates
- Renamed two patch files, to a more generic name:
  - cacti-0.8.8c-cacti-log-path.patch to cacti-log-path.patch
  - cacti-0.8.8c-cacti-script.patch to cacti-script.patch</changelog>
<changelog author="astieger@suse.com" date="1437220800">- Update to 0.8.8e:
  This update contains importand security fixes: [boo#937997]
  - Multiple XSS and SQL injection vulnerabilities
  - CVE-2015-4634 - SQL injection in graphs.php
  Further fixes:
  - Fixed issue with graph zooming failing to work
  - Impossible to have a URL pointing directly to a graph
  - Cannot delete data sources from the GUI
  - viewing host in new tab - Undefined index: nodeid
  - status_fail_date and status_rec_date are set incorrectly after
    host is marked down
  - Incorrect value in Hosts column on Host Templates page
  - Incorrect row number in Devices -&gt; (Edit) page</changelog>
<changelog author="astieger@suse.com" date="1437912000">- cacti 0.8.8f:
  * 0.8.8e Poller Script Parser is Broken (boo#965864)
  * cli/upgrade_database.php is missing releases
  * Graph managment graphs.php save button does not work
  * Poller Script Parser is Broken</changelog>
<changelog author="astieger@suse.com" date="1455019200">- Fix the following vulnerabilities:
  * CVE-2015-8369: SQL injection in graph.php (boo#958863)
  * CVE-2015-8604: SQL injection in graphs_new.php (boo#960678)
  * CVE-2015-8377: SQL injection vulnerability in the
    host_new_graphs_save function in graphs_new.php
    (boo#958977)
  * CVE-2016-2313: Authentication using web authentication as a user
    not in the cacti database allows complete access
    (boo#965930)
- adding CVE-2015-8369.patch, CVE-2015-8604-CVE-2015-8377.patch,
  CVE-2016-2313.patch</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="deaa1dce26b73b4d5e164adc6de73d1353ad79ff3f736cf9f281bfaf06112060" name="cacti" arch="src">
    <version epoch="0" ver="0.8.8b" rel="4.1"/>

<changelog author="joop_boonen@web.de" date="1240660800">- Updated BuildRequires to libdb-4_5-devel</changelog>
<changelog author="joop.boonen@opensuse.org" date="1242993600">- Working with prefix</changelog>
<changelog author="prusnak@suse.cz" date="1245067200">- reverted BuildRequires from libdb-4_5-devel to db-devel</changelog>
<changelog author="puzel@novell.com" date="1251460800">- update to cacti-0.8.7e.tar.bz2
  - bug#0001044: Creating a DS, Output field can't be selected for
    DT with a DIM when "Use Per-Data Source Value" is on
  - bug#0001341: SNMP query: add oid_suffix for weird SNMP queries
  - bug#0001345: Overwriting $snmp_index in query_snmp_host() breaks
    SNMP Data query if using get method
  - bug#0001346: Strip out noisy 'No Such Instance currently exists
    at this OID'
  - bug#0001404: timeout in "function ping_icmp" (lib/ping.php)
  - bug#0001405: Spaces in DS when .rrd file is created, so it fails
  - bug#0001407: Place graph thumbnail into div to lower page length
    changes on load graphs
  - bug#0001410: Thumbnail Columns is not honored for host display
    with snmp index group style
  - bug#0001411: Graph searching issue
  - bug#0001413: strip_quotes fails
  - bug#0001426: multiple form opening due to bug in draw_edit_form()
  - bug#0001436: CSV Export Start Date and End Date are always
    1970-01-01 01:00:00
  - bug#0001443: format_snmp_string can return a number with a leading space
  - bug#0001446: Wrong dates override in CSV export
  - bug#0001456: oid_uptime is not parsed correctly
  - bug#0001460: Skiping input parameters in data_query_field_list()
    may lead to SQL errors
  - bug#0001464: Typo in install/index.php
  - bug#0001467: Customisable oid index parse regexp for weird MIBs
  - bug#0001468: Tree is not expanded correctly
  - bug#0001469: Tree is not being expanded if user followed link
    outside of cacti
  - bug#0001476: Mark stacked columns in rrdtool_function_xport() output
  - bug#0001477: Spelling error in a variable in html_tree.php
  - bug#0001478: Combo boxes on Graph Management page produce URLs
    with leading spaces
  - bug: Top Graph Header Breaks When Plugins Used
  - bug: SNMP v3 Password issue caused by Firefox's Password AutoFill
  - bug: Strip Quotes does not properly handle the value 'U'
  - bug: Changes to the graph tree would not show up immediately for
    current user
- bzip sources</changelog>
<changelog author="joop.boonen@opensuse.org" date="1251720000">- Minor change in the name of the patch file</changelog>
<changelog author="joop.boonen@opensuse.org" date="1257940800">- Added the missing cli directory</changelog>
<changelog author="joop.boonen@opensuse.org" date="1274529600">- update to cacti-0.8.7f</changelog>
<changelog author="joop.boonen@opensuse.org" date="1278763200">- update to cacti-0.8.7g</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- added 'Provides' to make cactid installable</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317729600">- Upgrade to version 0.8.7h</changelog>
<changelog author="joop.boonen@opensuse.org" date="1323777600">- Build version 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1325246400">- Added official settings_checkbox patch</changelog>
<changelog author="joop.boonen@boonen.org" date="1326024000">- Reformated the spec file to the openSUSE standard</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1334059200">- Minor changes in the spec file, updated version to 0.8.8</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334059201">- Install cacti in /srv/www/cacti/  from openSUSE 12.2 onwards
- Passed the spec file through spec-cleaner
- Cacti-PA can be removed as cacti includes the Plugin Architure</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334577600">- Corrected the crontab file for openSUSE &gt;= 12.2
- Some cross distro fixes so plugins will also build for other distros</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New version 0.8.8a
- Fixed an rpmlint warning</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1338811200">- Added official cacti 0.8.8a patch</changelog>
<changelog author="joop.boonen@opensuse.org" date="1375963200">- Update to version 0.8.8b
  - bug: Fixed issue with custom data source information being lost when saved from edit
  - bug: Repopulate the poller cache on new installations
  - bug: Fix issue with poller not escaping the script query path correctly
  - bug: Allow snmpv3 priv proto none
  - bug: Fix issue where host activate may flush the entire poller item cache
  - security: SQL injection and shell escaping issues</changelog>
<changelog author="aj@ajaissle.de" date="1397390400">- Add cacti-0.8.8b_security.patch:
  - Fixes [bnc#870821]:
  - CVE-2014-2326: Unspecified HTML Injection Vulnerability
  - Fixes CVE-2014-2328:
  - Unspecified Remote Command Execution Vulnerability
  - Fixes [bnc#872008]:
  - CVE-2014-2708: Unspecified SQL Injection Vulnerability
  - CVE-2014-2709: Unspecified Remote Command Execution Vulnerability
- Add cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch:
  - Fixes [bnc#837440]:
  - CVE-2013-5588: HTML Injection Vulnerability
  - CVE-2013-5589: SQL Injection Vulnerability</changelog>

</package>
<package pkgid="5beea372d94c6b9dd21d3f1394e17312b37d3cd66a295fcb056c8f1626a1ccf7" name="cacti" arch="src">
    <version epoch="0" ver="0.8.8c" rel="8.1"/>

<changelog author="joop.boonen@opensuse.org" date="1242993600">- Working with prefix</changelog>
<changelog author="prusnak@suse.cz" date="1245067200">- reverted BuildRequires from libdb-4_5-devel to db-devel</changelog>
<changelog author="puzel@novell.com" date="1251460800">- update to cacti-0.8.7e.tar.bz2
  - bug#0001044: Creating a DS, Output field can't be selected for
    DT with a DIM when "Use Per-Data Source Value" is on
  - bug#0001341: SNMP query: add oid_suffix for weird SNMP queries
  - bug#0001345: Overwriting $snmp_index in query_snmp_host() breaks
    SNMP Data query if using get method
  - bug#0001346: Strip out noisy 'No Such Instance currently exists
    at this OID'
  - bug#0001404: timeout in "function ping_icmp" (lib/ping.php)
  - bug#0001405: Spaces in DS when .rrd file is created, so it fails
  - bug#0001407: Place graph thumbnail into div to lower page length
    changes on load graphs
  - bug#0001410: Thumbnail Columns is not honored for host display
    with snmp index group style
  - bug#0001411: Graph searching issue
  - bug#0001413: strip_quotes fails
  - bug#0001426: multiple form opening due to bug in draw_edit_form()
  - bug#0001436: CSV Export Start Date and End Date are always
    1970-01-01 01:00:00
  - bug#0001443: format_snmp_string can return a number with a leading space
  - bug#0001446: Wrong dates override in CSV export
  - bug#0001456: oid_uptime is not parsed correctly
  - bug#0001460: Skiping input parameters in data_query_field_list()
    may lead to SQL errors
  - bug#0001464: Typo in install/index.php
  - bug#0001467: Customisable oid index parse regexp for weird MIBs
  - bug#0001468: Tree is not expanded correctly
  - bug#0001469: Tree is not being expanded if user followed link
    outside of cacti
  - bug#0001476: Mark stacked columns in rrdtool_function_xport() output
  - bug#0001477: Spelling error in a variable in html_tree.php
  - bug#0001478: Combo boxes on Graph Management page produce URLs
    with leading spaces
  - bug: Top Graph Header Breaks When Plugins Used
  - bug: SNMP v3 Password issue caused by Firefox's Password AutoFill
  - bug: Strip Quotes does not properly handle the value 'U'
  - bug: Changes to the graph tree would not show up immediately for
    current user
- bzip sources</changelog>
<changelog author="joop.boonen@opensuse.org" date="1251720000">- Minor change in the name of the patch file</changelog>
<changelog author="joop.boonen@opensuse.org" date="1257940800">- Added the missing cli directory</changelog>
<changelog author="joop.boonen@opensuse.org" date="1274529600">- update to cacti-0.8.7f</changelog>
<changelog author="joop.boonen@opensuse.org" date="1278763200">- update to cacti-0.8.7g</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- added 'Provides' to make cactid installable</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317729600">- Upgrade to version 0.8.7h</changelog>
<changelog author="joop.boonen@opensuse.org" date="1323777600">- Build version 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1325246400">- Added official settings_checkbox patch</changelog>
<changelog author="joop.boonen@boonen.org" date="1326024000">- Reformated the spec file to the openSUSE standard</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1334059200">- Minor changes in the spec file, updated version to 0.8.8</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334059201">- Install cacti in /srv/www/cacti/  from openSUSE 12.2 onwards
- Passed the spec file through spec-cleaner
- Cacti-PA can be removed as cacti includes the Plugin Architure</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334577600">- Corrected the crontab file for openSUSE &gt;= 12.2
- Some cross distro fixes so plugins will also build for other distros</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New version 0.8.8a
- Fixed an rpmlint warning</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1338811200">- Added official cacti 0.8.8a patch</changelog>
<changelog author="joop.boonen@opensuse.org" date="1375963200">- Update to version 0.8.8b
  - bug: Fixed issue with custom data source information being lost when saved from edit
  - bug: Repopulate the poller cache on new installations
  - bug: Fix issue with poller not escaping the script query path correctly
  - bug: Allow snmpv3 priv proto none
  - bug: Fix issue where host activate may flush the entire poller item cache
  - security: SQL injection and shell escaping issues</changelog>
<changelog author="aj@ajaissle.de" date="1397390400">- Add cacti-0.8.8b_security.patch:
  - Fixes [bnc#870821]:
  - CVE-2014-2326: Unspecified HTML Injection Vulnerability
  - Fixes CVE-2014-2328:
  - Unspecified Remote Command Execution Vulnerability
  - Fixes [bnc#872008]:
  - CVE-2014-2708: Unspecified SQL Injection Vulnerability
  - CVE-2014-2709: Unspecified Remote Command Execution Vulnerability
- Add cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch:
  - Fixes [bnc#837440]:
  - CVE-2013-5588: HTML Injection Vulnerability
  - CVE-2013-5589: SQL Injection Vulnerability</changelog>
<changelog author="astieger@suse.com" date="1425470400">- Update to version 0.8.8c [boo#920399]
  This update fixes four vulnerabilities and adds some compatible
  features.
  - Security fixes not previously patched:
  - CVE-2014-2326 - XSS issue via CDEF editing
  - CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability
  - CVE-2014-2328 - Remote Command Execution Vulnerability in graph export
  - CVE-2014-4002 - XSS issues in multiple files
  - CVE-2014-5025 - XSS issue via data source editing
  - CVE-2014-5026 - XSS issues in multiple files
  - Security fixes now upstream:
  - CVE-2013-5588 - XSS issue via installer or device editing
  - CVE-2013-5589 - SQL injection vulnerability in device editing
  - Removed cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch as this code is incorprated to cacti 0.8.8c
  - Removed cacti-0.8.8b_security.patch as this code is incorprated to cacti 0.8.8c
  - New features:
  - New graph tree view
  - Updated graph list and graph preview
  - Refactor graph tree view to remove GPL incompatible code
  - Updated command line database upgrade utility
  - Graph zooming now from everywhere
  - Removed cacti-0.8.8b-cacti-log-path.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b-cacti-script.patch as it is incompatible with 0.8.8c.
  - Created cacti-0.8.8c-cacti-log-path.patch so that cacti only logs to /var/log/cacti
  - Created cacti-0.8.8c-cacti-script.patch so that cacti uses /usr/share/cacti/scripts</changelog>

</package>
<package pkgid="02484b8fe420a6ceab4f7fb06918ebb2c49e5721f20cbe0d7176f2a1670514a1" name="cacti" arch="src">
    <version epoch="0" ver="0.8.8d" rel="11.1"/>

<changelog author="puzel@novell.com" date="1251460800">- update to cacti-0.8.7e.tar.bz2
  - bug#0001044: Creating a DS, Output field can't be selected for
    DT with a DIM when "Use Per-Data Source Value" is on
  - bug#0001341: SNMP query: add oid_suffix for weird SNMP queries
  - bug#0001345: Overwriting $snmp_index in query_snmp_host() breaks
    SNMP Data query if using get method
  - bug#0001346: Strip out noisy 'No Such Instance currently exists
    at this OID'
  - bug#0001404: timeout in "function ping_icmp" (lib/ping.php)
  - bug#0001405: Spaces in DS when .rrd file is created, so it fails
  - bug#0001407: Place graph thumbnail into div to lower page length
    changes on load graphs
  - bug#0001410: Thumbnail Columns is not honored for host display
    with snmp index group style
  - bug#0001411: Graph searching issue
  - bug#0001413: strip_quotes fails
  - bug#0001426: multiple form opening due to bug in draw_edit_form()
  - bug#0001436: CSV Export Start Date and End Date are always
    1970-01-01 01:00:00
  - bug#0001443: format_snmp_string can return a number with a leading space
  - bug#0001446: Wrong dates override in CSV export
  - bug#0001456: oid_uptime is not parsed correctly
  - bug#0001460: Skiping input parameters in data_query_field_list()
    may lead to SQL errors
  - bug#0001464: Typo in install/index.php
  - bug#0001467: Customisable oid index parse regexp for weird MIBs
  - bug#0001468: Tree is not expanded correctly
  - bug#0001469: Tree is not being expanded if user followed link
    outside of cacti
  - bug#0001476: Mark stacked columns in rrdtool_function_xport() output
  - bug#0001477: Spelling error in a variable in html_tree.php
  - bug#0001478: Combo boxes on Graph Management page produce URLs
    with leading spaces
  - bug: Top Graph Header Breaks When Plugins Used
  - bug: SNMP v3 Password issue caused by Firefox's Password AutoFill
  - bug: Strip Quotes does not properly handle the value 'U'
  - bug: Changes to the graph tree would not show up immediately for
    current user
- bzip sources</changelog>
<changelog author="joop.boonen@opensuse.org" date="1251720000">- Minor change in the name of the patch file</changelog>
<changelog author="joop.boonen@opensuse.org" date="1257940800">- Added the missing cli directory</changelog>
<changelog author="joop.boonen@opensuse.org" date="1274529600">- update to cacti-0.8.7f</changelog>
<changelog author="joop.boonen@opensuse.org" date="1278763200">- update to cacti-0.8.7g</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- added 'Provides' to make cactid installable</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317729600">- Upgrade to version 0.8.7h</changelog>
<changelog author="joop.boonen@opensuse.org" date="1323777600">- Build version 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1325246400">- Added official settings_checkbox patch</changelog>
<changelog author="joop.boonen@boonen.org" date="1326024000">- Reformated the spec file to the openSUSE standard</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1334059200">- Minor changes in the spec file, updated version to 0.8.8</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334059201">- Install cacti in /srv/www/cacti/  from openSUSE 12.2 onwards
- Passed the spec file through spec-cleaner
- Cacti-PA can be removed as cacti includes the Plugin Architure</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334577600">- Corrected the crontab file for openSUSE &gt;= 12.2
- Some cross distro fixes so plugins will also build for other distros</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New version 0.8.8a
- Fixed an rpmlint warning</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1338811200">- Added official cacti 0.8.8a patch</changelog>
<changelog author="joop.boonen@opensuse.org" date="1375963200">- Update to version 0.8.8b
  - bug: Fixed issue with custom data source information being lost when saved from edit
  - bug: Repopulate the poller cache on new installations
  - bug: Fix issue with poller not escaping the script query path correctly
  - bug: Allow snmpv3 priv proto none
  - bug: Fix issue where host activate may flush the entire poller item cache
  - security: SQL injection and shell escaping issues</changelog>
<changelog author="aj@ajaissle.de" date="1397304000">- Change php requirements to be more general on SUSE systems
  [bnc#862993]</changelog>
<changelog author="aj@ajaissle.de" date="1397390400">- Add cacti-0.8.8b_security.patch:
  - Fixes [bnc#870821]:
  - CVE-2014-2326: Unspecified HTML Injection Vulnerability
  - Fixes CVE-2014-2328:
  - Unspecified Remote Command Execution Vulnerability
  - Fixes [bnc#872008]:
  - CVE-2014-2708: Unspecified SQL Injection Vulnerability
  - CVE-2014-2709: Unspecified Remote Command Execution Vulnerability
- Add cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch:
  - Fixes [bnc#837440]:
  - CVE-2013-5588: HTML Injection Vulnerability
  - CVE-2013-5589: SQL Injection Vulnerability</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1418040000">- Update to version 0.8.8c
  - New features
  - New graph tree view
  - Updated graph list and graph preview
  - Refactor graph tree view to remove GPL incompatible code
  - Updated command line database upgrade utility
  - Graph zooming now from everywhere
  - Security fixes
  - CVE-2013-5588 - XSS issue via installer or device editing
  - CVE-2013-5589 - SQL injection vulnerability in device editing
  - CVE-2014-2326 - XSS issue via CDEF editing
  - CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability
  - CVE-2014-2328 - Remote Command Execution Vulnerability in graph export
  - CVE-2014-4002 - XSS issues in multiple files
  - CVE-2014-5025 - XSS issue via data source editing
  - CVE-2014-5026 - XSS issues in multiple files
  - Removed cacti-0.8.8b-cacti-log-path.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b-cacti-script.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch as this code is incorprated to cacti 0.8.8c
  - Removed cacti-0.8.8b_security.patch as this code is incorprated to cacti 0.8.8c
  - Created cacti-0.8.8c-cacti-log-path.patch so that cacti only logs to /var/log/cacti
  - Created cacti-0.8.8c-cacti-script.patch so that cacti uses /usr/share/cacti/scripts</changelog>
<changelog author="joop.boonen@opensuse.org" date="1434456000">- Update to version 0.8.8d
  - Fixes [bnc#934187]
  - CVE-2015-4342: cacti: Multiple XSS and SQL injection vulnerabilities
  - feature: Remove un-needed fonts and javascript files
  - bug: Fixed SQL injection VN: JVN#78187936 / TN:JPCERT#98968540
  - bug#0002261: PHP 5.4.0 added new error_reporting variable, causing cacti to show errors
  - bug#0002391: Odd Behaviour on ReIndex of Data Query Data
  - bug#0002393: Broken thumbnail images for graph templates
  - bug#0002402: Subtree must not have the same header as the parent header
  - bug#0002474: CLI add_device.php dows not set availability_method correctly
  - bug#0002449: The Save button does not work: Invalid html on page Console -&gt; Cacti Settings: empty form tag
  - bug#0002428: Fail to delete all data input items when removing more than 1000 data sources
  - bug#0002439: Password with special character don't work with LDAP authentication
  - bug#0002461: invalid bn with ldap and anonymous bind
  - bug#0002465: Graph Export return empty CSV file
  - bug#0002484: Incorrect SQL request in cli script repair_database.php
  - bug#0002485: Broken pagenation on graph viewing
  - bug#0002489: SNMP - Get Mounted Partitions using Re-index method of Index Count Changed causes recache event every time
  - bug#0002490: Can not select page for multiple datasources per device
  - bug#0002494: CSV export always shows last day
  - bug#0002504: Data template search not functional
  - bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification
  - bug#0002543: Unable to switch pages within graphs_new.php due to invalid URL generation
  - bug#0002544: Duplicate entry in $nav_url during list view
  - bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342
  - bug#0002572: SQL injection in graph templates
- Renamed two patch files, to a more generic name:
  - cacti-0.8.8c-cacti-log-path.patch to cacti-log-path.patch
  - cacti-0.8.8c-cacti-script.patch to cacti-script.patch</changelog>

</package>
<package pkgid="208730d31d1251d15375a59769bdd5ef5569de61b9a7ee39e0c6f45e38f88508" name="cacti" arch="src">
    <version epoch="0" ver="0.8.8e" rel="14.1"/>

<changelog author="joop.boonen@opensuse.org" date="1251720000">- Minor change in the name of the patch file</changelog>
<changelog author="joop.boonen@opensuse.org" date="1257940800">- Added the missing cli directory</changelog>
<changelog author="joop.boonen@opensuse.org" date="1274529600">- update to cacti-0.8.7f</changelog>
<changelog author="joop.boonen@opensuse.org" date="1278763200">- update to cacti-0.8.7g</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- added 'Provides' to make cactid installable</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317729600">- Upgrade to version 0.8.7h</changelog>
<changelog author="joop.boonen@opensuse.org" date="1323777600">- Build version 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1325246400">- Added official settings_checkbox patch</changelog>
<changelog author="joop.boonen@boonen.org" date="1326024000">- Reformated the spec file to the openSUSE standard</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1334059200">- Minor changes in the spec file, updated version to 0.8.8</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334059201">- Install cacti in /srv/www/cacti/  from openSUSE 12.2 onwards
- Passed the spec file through spec-cleaner
- Cacti-PA can be removed as cacti includes the Plugin Architure</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334577600">- Corrected the crontab file for openSUSE &gt;= 12.2
- Some cross distro fixes so plugins will also build for other distros</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New version 0.8.8a
- Fixed an rpmlint warning</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1338811200">- Added official cacti 0.8.8a patch</changelog>
<changelog author="joop.boonen@opensuse.org" date="1375963200">- Update to version 0.8.8b
  - bug: Fixed issue with custom data source information being lost when saved from edit
  - bug: Repopulate the poller cache on new installations
  - bug: Fix issue with poller not escaping the script query path correctly
  - bug: Allow snmpv3 priv proto none
  - bug: Fix issue where host activate may flush the entire poller item cache
  - security: SQL injection and shell escaping issues</changelog>
<changelog author="aj@ajaissle.de" date="1397304000">- Change php requirements to be more general on SUSE systems
  [bnc#862993]</changelog>
<changelog author="aj@ajaissle.de" date="1397390400">- Add cacti-0.8.8b_security.patch:
  - Fixes [bnc#870821]:
  - CVE-2014-2326: Unspecified HTML Injection Vulnerability
  - Fixes CVE-2014-2328:
  - Unspecified Remote Command Execution Vulnerability
  - Fixes [bnc#872008]:
  - CVE-2014-2708: Unspecified SQL Injection Vulnerability
  - CVE-2014-2709: Unspecified Remote Command Execution Vulnerability
- Add cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch:
  - Fixes [bnc#837440]:
  - CVE-2013-5588: HTML Injection Vulnerability
  - CVE-2013-5589: SQL Injection Vulnerability</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1418040000">- Update to version 0.8.8c
  - New features
  - New graph tree view
  - Updated graph list and graph preview
  - Refactor graph tree view to remove GPL incompatible code
  - Updated command line database upgrade utility
  - Graph zooming now from everywhere
  - Security fixes
  - CVE-2013-5588 - XSS issue via installer or device editing
  - CVE-2013-5589 - SQL injection vulnerability in device editing
  - CVE-2014-2326 - XSS issue via CDEF editing
  - CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability
  - CVE-2014-2328 - Remote Command Execution Vulnerability in graph export
  - CVE-2014-4002 - XSS issues in multiple files
  - CVE-2014-5025 - XSS issue via data source editing
  - CVE-2014-5026 - XSS issues in multiple files
  - Removed cacti-0.8.8b-cacti-log-path.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b-cacti-script.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch as this code is incorprated to cacti 0.8.8c
  - Removed cacti-0.8.8b_security.patch as this code is incorprated to cacti 0.8.8c
  - Created cacti-0.8.8c-cacti-log-path.patch so that cacti only logs to /var/log/cacti
  - Created cacti-0.8.8c-cacti-script.patch so that cacti uses /usr/share/cacti/scripts</changelog>
<changelog author="joop.boonen@opensuse.org" date="1434456000">- Update to version 0.8.8d
  - Fixes [bnc#934187]
  - CVE-2015-4342: cacti: Multiple XSS and SQL injection vulnerabilities
  - feature: Remove un-needed fonts and javascript files
  - bug: Fixed SQL injection VN: JVN#78187936 / TN:JPCERT#98968540
  - bug#0002261: PHP 5.4.0 added new error_reporting variable, causing cacti to show errors
  - bug#0002391: Odd Behaviour on ReIndex of Data Query Data
  - bug#0002393: Broken thumbnail images for graph templates
  - bug#0002402: Subtree must not have the same header as the parent header
  - bug#0002474: CLI add_device.php dows not set availability_method correctly
  - bug#0002449: The Save button does not work: Invalid html on page Console -&gt; Cacti Settings: empty form tag
  - bug#0002428: Fail to delete all data input items when removing more than 1000 data sources
  - bug#0002439: Password with special character don't work with LDAP authentication
  - bug#0002461: invalid bn with ldap and anonymous bind
  - bug#0002465: Graph Export return empty CSV file
  - bug#0002484: Incorrect SQL request in cli script repair_database.php
  - bug#0002485: Broken pagenation on graph viewing
  - bug#0002489: SNMP - Get Mounted Partitions using Re-index method of Index Count Changed causes recache event every time
  - bug#0002490: Can not select page for multiple datasources per device
  - bug#0002494: CSV export always shows last day
  - bug#0002504: Data template search not functional
  - bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification
  - bug#0002543: Unable to switch pages within graphs_new.php due to invalid URL generation
  - bug#0002544: Duplicate entry in $nav_url during list view
  - bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342
  - bug#0002572: SQL injection in graph templates
- Renamed two patch files, to a more generic name:
  - cacti-0.8.8c-cacti-log-path.patch to cacti-log-path.patch
  - cacti-0.8.8c-cacti-script.patch to cacti-script.patch</changelog>
<changelog author="astieger@suse.com" date="1437220800">- Update to 0.8.8e:
  This update contains importand security fixes: [boo#937997]
  - Multiple XSS and SQL injection vulnerabilities
  - CVE-2015-4634 - SQL injection in graphs.php
  Further fixes:
  - Fixed issue with graph zooming failing to work
  - Impossible to have a URL pointing directly to a graph
  - Cannot delete data sources from the GUI
  - viewing host in new tab - Undefined index: nodeid
  - status_fail_date and status_rec_date are set incorrectly after
    host is marked down
  - Incorrect value in Hosts column on Host Templates page
  - Incorrect row number in Devices -&gt; (Edit) page</changelog>

</package>
<package pkgid="04f88bbf6c215c5fe3009a2d6fdbbac89f854df74bc11b55b6b172c46dc07789" name="cacti" arch="src">
    <version epoch="0" ver="0.8.8f" rel="17.1"/>

<changelog author="joop.boonen@opensuse.org" date="1274529600">- update to cacti-0.8.7f</changelog>
<changelog author="joop.boonen@opensuse.org" date="1278763200">- update to cacti-0.8.7g</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- added 'Provides' to make cactid installable</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317729600">- Upgrade to version 0.8.7h</changelog>
<changelog author="joop.boonen@opensuse.org" date="1323777600">- Build version 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1325246400">- Added official settings_checkbox patch</changelog>
<changelog author="joop.boonen@boonen.org" date="1326024000">- Reformated the spec file to the openSUSE standard</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1334059200">- Minor changes in the spec file, updated version to 0.8.8</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334059201">- Install cacti in /srv/www/cacti/  from openSUSE 12.2 onwards
- Passed the spec file through spec-cleaner
- Cacti-PA can be removed as cacti includes the Plugin Architure</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334577600">- Corrected the crontab file for openSUSE &gt;= 12.2
- Some cross distro fixes so plugins will also build for other distros</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New version 0.8.8a
- Fixed an rpmlint warning</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1338811200">- Added official cacti 0.8.8a patch</changelog>
<changelog author="joop.boonen@opensuse.org" date="1375963200">- Update to version 0.8.8b
  - bug: Fixed issue with custom data source information being lost when saved from edit
  - bug: Repopulate the poller cache on new installations
  - bug: Fix issue with poller not escaping the script query path correctly
  - bug: Allow snmpv3 priv proto none
  - bug: Fix issue where host activate may flush the entire poller item cache
  - security: SQL injection and shell escaping issues</changelog>
<changelog author="aj@ajaissle.de" date="1397304000">- Change php requirements to be more general on SUSE systems
  [bnc#862993]</changelog>
<changelog author="aj@ajaissle.de" date="1397390400">- Add cacti-0.8.8b_security.patch:
  - Fixes [bnc#870821]:
  - CVE-2014-2326: Unspecified HTML Injection Vulnerability
  - Fixes CVE-2014-2328:
  - Unspecified Remote Command Execution Vulnerability
  - Fixes [bnc#872008]:
  - CVE-2014-2708: Unspecified SQL Injection Vulnerability
  - CVE-2014-2709: Unspecified Remote Command Execution Vulnerability
- Add cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch:
  - Fixes [bnc#837440]:
  - CVE-2013-5588: HTML Injection Vulnerability
  - CVE-2013-5589: SQL Injection Vulnerability</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1418040000">- Update to version 0.8.8c
  - New features
  - New graph tree view
  - Updated graph list and graph preview
  - Refactor graph tree view to remove GPL incompatible code
  - Updated command line database upgrade utility
  - Graph zooming now from everywhere
  - Security fixes
  - CVE-2013-5588 - XSS issue via installer or device editing
  - CVE-2013-5589 - SQL injection vulnerability in device editing
  - CVE-2014-2326 - XSS issue via CDEF editing
  - CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability
  - CVE-2014-2328 - Remote Command Execution Vulnerability in graph export
  - CVE-2014-4002 - XSS issues in multiple files
  - CVE-2014-5025 - XSS issue via data source editing
  - CVE-2014-5026 - XSS issues in multiple files
  - Removed cacti-0.8.8b-cacti-log-path.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b-cacti-script.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch as this code is incorprated to cacti 0.8.8c
  - Removed cacti-0.8.8b_security.patch as this code is incorprated to cacti 0.8.8c
  - Created cacti-0.8.8c-cacti-log-path.patch so that cacti only logs to /var/log/cacti
  - Created cacti-0.8.8c-cacti-script.patch so that cacti uses /usr/share/cacti/scripts</changelog>
<changelog author="joop.boonen@opensuse.org" date="1434456000">- Update to version 0.8.8d
  - Fixes [bnc#934187]
  - CVE-2015-4342: cacti: Multiple XSS and SQL injection vulnerabilities
  - feature: Remove un-needed fonts and javascript files
  - bug: Fixed SQL injection VN: JVN#78187936 / TN:JPCERT#98968540
  - bug#0002261: PHP 5.4.0 added new error_reporting variable, causing cacti to show errors
  - bug#0002391: Odd Behaviour on ReIndex of Data Query Data
  - bug#0002393: Broken thumbnail images for graph templates
  - bug#0002402: Subtree must not have the same header as the parent header
  - bug#0002474: CLI add_device.php dows not set availability_method correctly
  - bug#0002449: The Save button does not work: Invalid html on page Console -&gt; Cacti Settings: empty form tag
  - bug#0002428: Fail to delete all data input items when removing more than 1000 data sources
  - bug#0002439: Password with special character don't work with LDAP authentication
  - bug#0002461: invalid bn with ldap and anonymous bind
  - bug#0002465: Graph Export return empty CSV file
  - bug#0002484: Incorrect SQL request in cli script repair_database.php
  - bug#0002485: Broken pagenation on graph viewing
  - bug#0002489: SNMP - Get Mounted Partitions using Re-index method of Index Count Changed causes recache event every time
  - bug#0002490: Can not select page for multiple datasources per device
  - bug#0002494: CSV export always shows last day
  - bug#0002504: Data template search not functional
  - bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification
  - bug#0002543: Unable to switch pages within graphs_new.php due to invalid URL generation
  - bug#0002544: Duplicate entry in $nav_url during list view
  - bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342
  - bug#0002572: SQL injection in graph templates
- Renamed two patch files, to a more generic name:
  - cacti-0.8.8c-cacti-log-path.patch to cacti-log-path.patch
  - cacti-0.8.8c-cacti-script.patch to cacti-script.patch</changelog>
<changelog author="astieger@suse.com" date="1437220800">- Update to 0.8.8e:
  This update contains importand security fixes: [boo#937997]
  - Multiple XSS and SQL injection vulnerabilities
  - CVE-2015-4634 - SQL injection in graphs.php
  Further fixes:
  - Fixed issue with graph zooming failing to work
  - Impossible to have a URL pointing directly to a graph
  - Cannot delete data sources from the GUI
  - viewing host in new tab - Undefined index: nodeid
  - status_fail_date and status_rec_date are set incorrectly after
    host is marked down
  - Incorrect value in Hosts column on Host Templates page
  - Incorrect row number in Devices -&gt; (Edit) page</changelog>
<changelog author="astieger@suse.com" date="1437912000">- cacti 0.8.8f:
  * 0.8.8e Poller Script Parser is Broken (boo#965864)
  * cli/upgrade_database.php is missing releases
  * Graph managment graphs.php save button does not work
  * Poller Script Parser is Broken</changelog>
<changelog author="astieger@suse.com" date="1455019200">- Fix the following vulnerabilities:
  * CVE-2015-8369: SQL injection in graph.php (boo#958863)
  * CVE-2015-8604: SQL injection in graphs_new.php (boo#960678)
  * CVE-2015-8377: SQL injection vulnerability in the
    host_new_graphs_save function in graphs_new.php
    (boo#958977)
  * CVE-2016-2313: Authentication using web authentication as a user
    not in the cacti database allows complete access
    (boo#965930)
- adding CVE-2015-8369.patch, CVE-2015-8604-CVE-2015-8377.patch,
  CVE-2016-2313.patch</changelog>

</package>
<package pkgid="b0b64de7ca51e1b4db79fe47709e9f1a830d3ad4d1d522d06dca70522d49fe04" name="cacti" arch="src">
    <version epoch="0" ver="0.8.8f" rel="20.1"/>

<changelog author="joop.boonen@opensuse.org" date="1278763200">- update to cacti-0.8.7g</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- added 'Provides' to make cactid installable</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317729600">- Upgrade to version 0.8.7h</changelog>
<changelog author="joop.boonen@opensuse.org" date="1323777600">- Build version 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1325246400">- Added official settings_checkbox patch</changelog>
<changelog author="joop.boonen@boonen.org" date="1326024000">- Reformated the spec file to the openSUSE standard</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1334059200">- Minor changes in the spec file, updated version to 0.8.8</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334059201">- Install cacti in /srv/www/cacti/  from openSUSE 12.2 onwards
- Passed the spec file through spec-cleaner
- Cacti-PA can be removed as cacti includes the Plugin Architure</changelog>
<changelog author="joop.boonen@opensuse.org" date="1334577600">- Corrected the crontab file for openSUSE &gt;= 12.2
- Some cross distro fixes so plugins will also build for other distros</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New version 0.8.8a
- Fixed an rpmlint warning</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1338811200">- Added official cacti 0.8.8a patch</changelog>
<changelog author="joop.boonen@opensuse.org" date="1375963200">- Update to version 0.8.8b
  - bug: Fixed issue with custom data source information being lost when saved from edit
  - bug: Repopulate the poller cache on new installations
  - bug: Fix issue with poller not escaping the script query path correctly
  - bug: Allow snmpv3 priv proto none
  - bug: Fix issue where host activate may flush the entire poller item cache
  - security: SQL injection and shell escaping issues</changelog>
<changelog author="aj@ajaissle.de" date="1397304000">- Change php requirements to be more general on SUSE systems
  [bnc#862993]</changelog>
<changelog author="aj@ajaissle.de" date="1397390400">- Add cacti-0.8.8b_security.patch:
  - Fixes [bnc#870821]:
  - CVE-2014-2326: Unspecified HTML Injection Vulnerability
  - Fixes CVE-2014-2328:
  - Unspecified Remote Command Execution Vulnerability
  - Fixes [bnc#872008]:
  - CVE-2014-2708: Unspecified SQL Injection Vulnerability
  - CVE-2014-2709: Unspecified Remote Command Execution Vulnerability
- Add cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch:
  - Fixes [bnc#837440]:
  - CVE-2013-5588: HTML Injection Vulnerability
  - CVE-2013-5589: SQL Injection Vulnerability</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1418040000">- Update to version 0.8.8c
  - New features
  - New graph tree view
  - Updated graph list and graph preview
  - Refactor graph tree view to remove GPL incompatible code
  - Updated command line database upgrade utility
  - Graph zooming now from everywhere
  - Security fixes
  - CVE-2013-5588 - XSS issue via installer or device editing
  - CVE-2013-5589 - SQL injection vulnerability in device editing
  - CVE-2014-2326 - XSS issue via CDEF editing
  - CVE-2014-2327 - Cross-site request forgery (CSRF) vulnerability
  - CVE-2014-2328 - Remote Command Execution Vulnerability in graph export
  - CVE-2014-4002 - XSS issues in multiple files
  - CVE-2014-5025 - XSS issue via data source editing
  - CVE-2014-5026 - XSS issues in multiple files
  - Removed cacti-0.8.8b-cacti-log-path.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b-cacti-script.patch as it is incompatible with 0.8.8c.
  - Removed cacti-0.8.8b_CVE-2013-5588_CVE-2013-5589.patch as this code is incorprated to cacti 0.8.8c
  - Removed cacti-0.8.8b_security.patch as this code is incorprated to cacti 0.8.8c
  - Created cacti-0.8.8c-cacti-log-path.patch so that cacti only logs to /var/log/cacti
  - Created cacti-0.8.8c-cacti-script.patch so that cacti uses /usr/share/cacti/scripts</changelog>
<changelog author="joop.boonen@opensuse.org" date="1434456000">- Update to version 0.8.8d
  - Fixes [bnc#934187]
  - CVE-2015-4342: cacti: Multiple XSS and SQL injection vulnerabilities
  - feature: Remove un-needed fonts and javascript files
  - bug: Fixed SQL injection VN: JVN#78187936 / TN:JPCERT#98968540
  - bug#0002261: PHP 5.4.0 added new error_reporting variable, causing cacti to show errors
  - bug#0002391: Odd Behaviour on ReIndex of Data Query Data
  - bug#0002393: Broken thumbnail images for graph templates
  - bug#0002402: Subtree must not have the same header as the parent header
  - bug#0002474: CLI add_device.php dows not set availability_method correctly
  - bug#0002449: The Save button does not work: Invalid html on page Console -&gt; Cacti Settings: empty form tag
  - bug#0002428: Fail to delete all data input items when removing more than 1000 data sources
  - bug#0002439: Password with special character don't work with LDAP authentication
  - bug#0002461: invalid bn with ldap and anonymous bind
  - bug#0002465: Graph Export return empty CSV file
  - bug#0002484: Incorrect SQL request in cli script repair_database.php
  - bug#0002485: Broken pagenation on graph viewing
  - bug#0002489: SNMP - Get Mounted Partitions using Re-index method of Index Count Changed causes recache event every time
  - bug#0002490: Can not select page for multiple datasources per device
  - bug#0002494: CSV export always shows last day
  - bug#0002504: Data template search not functional
  - bug#0002542: [FG-VD-15-017] Cacti Cross-Site Scripting Vulnerability Notification
  - bug#0002543: Unable to switch pages within graphs_new.php due to invalid URL generation
  - bug#0002544: Duplicate entry in $nav_url during list view
  - bug#0002571: SQL Injection and Location header injection from cdef id CVE-2015-4342
  - bug#0002572: SQL injection in graph templates
- Renamed two patch files, to a more generic name:
  - cacti-0.8.8c-cacti-log-path.patch to cacti-log-path.patch
  - cacti-0.8.8c-cacti-script.patch to cacti-script.patch</changelog>
<changelog author="astieger@suse.com" date="1437220800">- Update to 0.8.8e:
  This update contains importand security fixes: [boo#937997]
  - Multiple XSS and SQL injection vulnerabilities
  - CVE-2015-4634 - SQL injection in graphs.php
  Further fixes:
  - Fixed issue with graph zooming failing to work
  - Impossible to have a URL pointing directly to a graph
  - Cannot delete data sources from the GUI
  - viewing host in new tab - Undefined index: nodeid
  - status_fail_date and status_rec_date are set incorrectly after
    host is marked down
  - Incorrect value in Hosts column on Host Templates page
  - Incorrect row number in Devices -&gt; (Edit) page</changelog>
<changelog author="astieger@suse.com" date="1437912000">- cacti 0.8.8f:
  * 0.8.8e Poller Script Parser is Broken (boo#965864)
  * cli/upgrade_database.php is missing releases
  * Graph managment graphs.php save button does not work
  * Poller Script Parser is Broken</changelog>
<changelog author="astieger@suse.com" date="1455019200">- Fix the following vulnerabilities:
  * CVE-2015-8369: SQL injection in graph.php (boo#958863)
  * CVE-2015-8604: SQL injection in graphs_new.php (boo#960678)
  * CVE-2015-8377: SQL injection vulnerability in the
    host_new_graphs_save function in graphs_new.php
    (boo#958977)
  * CVE-2016-2313: Authentication using web authentication as a user
    not in the cacti database allows complete access
    (boo#965930)
- adding CVE-2015-8369.patch, CVE-2015-8604-CVE-2015-8377.patch,
  CVE-2016-2313.patch</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="45d168cc5c6ee4041c56406e5979b246afd5463b359c16ea4467650f80734227" name="cacti-spine" arch="i586">
    <version epoch="0" ver="0.8.8f" rel="2.3.1"/>

<changelog author="boris@steki.net" date="1277812800">- Updated to new version
- Many bugs fixed
  Changes can be found in /usr/share/doc/packages/cacti-cactid/Changelog</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- Changed cactid name to spine and made it installable with cacti-PA</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307966400">- Changed Requires line to comply with the changes on cacti-PA</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317816000">- Upgrade to new version.</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1323864000">- Upgrade to 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1333972800">- Version 0.8.8</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New Version: 0.8.8a
- Add source as bz2</changelog>
<changelog author="cfarrell@suse.com" date="1335787201">- license update: LGPL-2.1+
  Use SPDX format for license strings (http://www.spdx.org/licenses)</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1376308800">- New Version: 0.8.8b</changelog>
<changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 0.8.8c
  + No changelog entry for version 0.8.8c
- Use download Url as source</changelog>
<changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 0.8.8f
  * bug:0002604: cacti-spine, configure script ignores LDFLAGS in
    certain situations
- Changes from version 0.8.8e
  * bug#0002185: Multiple memory leaks found in spine
  * bug#0002398: Buffer overflow
  * bug#0002447: Building spine on Debian Jessie (testing) fails
  * bug#0002536: Spine segfaults when 18k+ hosts are to be pulled
  * bug#0002576: Call to a non-existent column of the database in poller.c
  * bug#0002578: spine doesn't compile on ubuntu 12.04
  * bug#0002585: Spine: buffer overflow in logging when
    RESULTS_BUFFER&gt;LOGSIZE can SEGV
  * bug#0002588: Spine "is_numeric" incorrectly returns TRUE for some
    hexadecimal values
- Remove systemd buildrequires; unneeded</changelog>

</package>
<package pkgid="4709b1c488a9fa01a1156774f71123c07110c8a8bc5048837dd17d4d66aa3c06" name="cacti-spine" arch="i586">
    <version epoch="0" ver="0.8.8f" rel="2.6.2"/>

<changelog author="boris@steki.net" date="1277812800">- Updated to new version
- Many bugs fixed
  Changes can be found in /usr/share/doc/packages/cacti-cactid/Changelog</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- Changed cactid name to spine and made it installable with cacti-PA</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307966400">- Changed Requires line to comply with the changes on cacti-PA</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317816000">- Upgrade to new version.</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1323864000">- Upgrade to 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1333972800">- Version 0.8.8</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New Version: 0.8.8a
- Add source as bz2</changelog>
<changelog author="cfarrell@suse.com" date="1335787201">- license update: LGPL-2.1+
  Use SPDX format for license strings (http://www.spdx.org/licenses)</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1376308800">- New Version: 0.8.8b</changelog>
<changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 0.8.8c
  + No changelog entry for version 0.8.8c
- Use download Url as source</changelog>
<changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 0.8.8f
  * bug:0002604: cacti-spine, configure script ignores LDFLAGS in
    certain situations
- Changes from version 0.8.8e
  * bug#0002185: Multiple memory leaks found in spine
  * bug#0002398: Buffer overflow
  * bug#0002447: Building spine on Debian Jessie (testing) fails
  * bug#0002536: Spine segfaults when 18k+ hosts are to be pulled
  * bug#0002576: Call to a non-existent column of the database in poller.c
  * bug#0002578: spine doesn't compile on ubuntu 12.04
  * bug#0002585: Spine: buffer overflow in logging when
    RESULTS_BUFFER&gt;LOGSIZE can SEGV
  * bug#0002588: Spine "is_numeric" incorrectly returns TRUE for some
    hexadecimal values
- Remove systemd buildrequires; unneeded</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="574cefc0adf695cc0f6f7734d3351a5b3638747ec4ce1f425a3833cf5d7a08b5" name="cacti-spine" arch="src">
    <version epoch="0" ver="0.8.8f" rel="2.3.1"/>

<changelog author="boris@steki.net" date="1277812800">- Updated to new version
- Many bugs fixed
  Changes can be found in /usr/share/doc/packages/cacti-cactid/Changelog</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- Changed cactid name to spine and made it installable with cacti-PA</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307966400">- Changed Requires line to comply with the changes on cacti-PA</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317816000">- Upgrade to new version.</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1323864000">- Upgrade to 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1333972800">- Version 0.8.8</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New Version: 0.8.8a
- Add source as bz2</changelog>
<changelog author="cfarrell@suse.com" date="1335787201">- license update: LGPL-2.1+
  Use SPDX format for license strings (http://www.spdx.org/licenses)</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1376308800">- New Version: 0.8.8b</changelog>
<changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 0.8.8c
  + No changelog entry for version 0.8.8c
- Use download Url as source</changelog>
<changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 0.8.8f
  * bug:0002604: cacti-spine, configure script ignores LDFLAGS in
    certain situations
- Changes from version 0.8.8e
  * bug#0002185: Multiple memory leaks found in spine
  * bug#0002398: Buffer overflow
  * bug#0002447: Building spine on Debian Jessie (testing) fails
  * bug#0002536: Spine segfaults when 18k+ hosts are to be pulled
  * bug#0002576: Call to a non-existent column of the database in poller.c
  * bug#0002578: spine doesn't compile on ubuntu 12.04
  * bug#0002585: Spine: buffer overflow in logging when
    RESULTS_BUFFER&gt;LOGSIZE can SEGV
  * bug#0002588: Spine "is_numeric" incorrectly returns TRUE for some
    hexadecimal values
- Remove systemd buildrequires; unneeded</changelog>

</package>
<package pkgid="7d28d26a79b45d2a9b9040efe4f089633e7b6d081c166df1a02e2e588f9c815f" name="cacti-spine" arch="src">
    <version epoch="0" ver="0.8.8f" rel="2.6.2"/>

<changelog author="boris@steki.net" date="1277812800">- Updated to new version
- Many bugs fixed
  Changes can be found in /usr/share/doc/packages/cacti-cactid/Changelog</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- Changed cactid name to spine and made it installable with cacti-PA</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307966400">- Changed Requires line to comply with the changes on cacti-PA</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317816000">- Upgrade to new version.</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1323864000">- Upgrade to 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1333972800">- Version 0.8.8</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New Version: 0.8.8a
- Add source as bz2</changelog>
<changelog author="cfarrell@suse.com" date="1335787201">- license update: LGPL-2.1+
  Use SPDX format for license strings (http://www.spdx.org/licenses)</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1376308800">- New Version: 0.8.8b</changelog>
<changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 0.8.8c
  + No changelog entry for version 0.8.8c
- Use download Url as source</changelog>
<changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 0.8.8f
  * bug:0002604: cacti-spine, configure script ignores LDFLAGS in
    certain situations
- Changes from version 0.8.8e
  * bug#0002185: Multiple memory leaks found in spine
  * bug#0002398: Buffer overflow
  * bug#0002447: Building spine on Debian Jessie (testing) fails
  * bug#0002536: Spine segfaults when 18k+ hosts are to be pulled
  * bug#0002576: Call to a non-existent column of the database in poller.c
  * bug#0002578: spine doesn't compile on ubuntu 12.04
  * bug#0002585: Spine: buffer overflow in logging when
    RESULTS_BUFFER&gt;LOGSIZE can SEGV
  * bug#0002588: Spine "is_numeric" incorrectly returns TRUE for some
    hexadecimal values
- Remove systemd buildrequires; unneeded</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="66bafce1751c301153d7d9ceac37aa8edbe440ba101a563e727172aabeca1c23" name="cacti-spine" arch="x86_64">
    <version epoch="0" ver="0.8.8f" rel="2.3.1"/>

<changelog author="boris@steki.net" date="1277812800">- Updated to new version
- Many bugs fixed
  Changes can be found in /usr/share/doc/packages/cacti-cactid/Changelog</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- Changed cactid name to spine and made it installable with cacti-PA</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307966400">- Changed Requires line to comply with the changes on cacti-PA</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317816000">- Upgrade to new version.</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1323864000">- Upgrade to 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1333972800">- Version 0.8.8</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New Version: 0.8.8a
- Add source as bz2</changelog>
<changelog author="cfarrell@suse.com" date="1335787201">- license update: LGPL-2.1+
  Use SPDX format for license strings (http://www.spdx.org/licenses)</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1376308800">- New Version: 0.8.8b</changelog>
<changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 0.8.8c
  + No changelog entry for version 0.8.8c
- Use download Url as source</changelog>
<changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 0.8.8f
  * bug:0002604: cacti-spine, configure script ignores LDFLAGS in
    certain situations
- Changes from version 0.8.8e
  * bug#0002185: Multiple memory leaks found in spine
  * bug#0002398: Buffer overflow
  * bug#0002447: Building spine on Debian Jessie (testing) fails
  * bug#0002536: Spine segfaults when 18k+ hosts are to be pulled
  * bug#0002576: Call to a non-existent column of the database in poller.c
  * bug#0002578: spine doesn't compile on ubuntu 12.04
  * bug#0002585: Spine: buffer overflow in logging when
    RESULTS_BUFFER&gt;LOGSIZE can SEGV
  * bug#0002588: Spine "is_numeric" incorrectly returns TRUE for some
    hexadecimal values
- Remove systemd buildrequires; unneeded</changelog>

</package>
<package pkgid="27158e191a16a9776ca1ff9a7ac797b8d0d7febdb28a7e2773fa9434a9e9a6a6" name="cacti-spine" arch="x86_64">
    <version epoch="0" ver="0.8.8f" rel="2.6.2"/>

<changelog author="boris@steki.net" date="1277812800">- Updated to new version
- Many bugs fixed
  Changes can be found in /usr/share/doc/packages/cacti-cactid/Changelog</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307707200">- Changed cactid name to spine and made it installable with cacti-PA</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1307966400">- Changed Requires line to comply with the changes on cacti-PA</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1317816000">- Upgrade to new version.</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1323864000">- Upgrade to 0.8.7i</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1333972800">- Version 0.8.8</changelog>
<changelog author="aldemir.akpinar@airties.com" date="1335787200">- New Version: 0.8.8a
- Add source as bz2</changelog>
<changelog author="cfarrell@suse.com" date="1335787201">- license update: LGPL-2.1+
  Use SPDX format for license strings (http://www.spdx.org/licenses)</changelog>
<changelog author="aldemir.akpinar@gmail.com" date="1376308800">- New Version: 0.8.8b</changelog>
<changelog author="p.drouand@gmail.com" date="1419508800">- Update to version 0.8.8c
  + No changelog entry for version 0.8.8c
- Use download Url as source</changelog>
<changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 0.8.8f
  * bug:0002604: cacti-spine, configure script ignores LDFLAGS in
    certain situations
- Changes from version 0.8.8e
  * bug#0002185: Multiple memory leaks found in spine
  * bug#0002398: Buffer overflow
  * bug#0002447: Building spine on Debian Jessie (testing) fails
  * bug#0002536: Spine segfaults when 18k+ hosts are to be pulled
  * bug#0002576: Call to a non-existent column of the database in poller.c
  * bug#0002578: spine doesn't compile on ubuntu 12.04
  * bug#0002585: Spine: buffer overflow in logging when
    RESULTS_BUFFER&gt;LOGSIZE can SEGV
  * bug#0002588: Spine "is_numeric" incorrectly returns TRUE for some
    hexadecimal values
- Remove systemd buildrequires; unneeded</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="745ac8b3327ae89ab4ff0d5cb6a52f86d50340d32f68544a5587ad104da0889a" name="cairo" arch="src">
    <version epoch="0" ver="1.12.16" rel="3.4.1"/>

<changelog author="vuntz@opensuse.org" date="1283860800">- Do not build the xcb backend: upstream recommends to not use it
  for now.
- Add a build_gl_backend define to easily enable the build of the
  gl backend, which will add a Mesa-devel BuildRequires. It's
  disabled by default.
- Add a build_xcb_backend define to easily enable the build of the
  xcb backend, which will add a pkgconfig(xcb) BuildRequires. It's
  disabled by default.</changelog>
<changelog author="dimstar@opensuse.org" date="1293451200">- Update to version 1.10.2:
  + fdo#31632: Fix embedding of grayscale jpegs in PS.
  + Fix the reported path of extents containing a curve.
  + Fix the compositing of unaligned boxes.
  + Reset the clipper in PDF upon finish.
  + Fix degenerates arcs to become a degenerate line.
  + Build support for autoconf 2.67
  + Fix painting of transformed patterns in PS
  + fdo#24688: Fix the EPS bounding box for PS and Fix the missing
    content for EPS
  + fdo#24691: Fix regression upon changing page size in PS/PDF
  + Only use ActualText with PDF-1.5 documents
  + Fix the bbox for type1 fallbacks.
  + fdo#31140: Reset the color after ending the context in PDF
  + fdo#31062: Fix the advance of subsetted type1 fonts
  + Fix handling of EXTEND_NONE gradients for PDF
  + Restrict in-place optimisation for a8 image masks with SOURCE</changelog>
<changelog author="vuntz@opensuse.org" date="1298376000">- Add missing libcairo-gobject2 to baselibs.conf.</changelog>
<changelog author="coolo@novell.com" date="1314619200">- Add cairo-fix-libs.patch: disable lto for cairo-sphinx as it
  breaks with -Wl,--as-needed.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix baselibs requires for cairo-devel and make it available</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
<changelog author="vuntz@opensuse.org" date="1329220800">- Ship additional COPYING files that come with some utilities.
- Fix license of the tool subpackage: it is GPL-3.0+ (bnc#739748).
- Change the group of library subpackages from
  Development/Libraries/X11 to System/Libraries.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 1.12.0:
  + Introduction of a new procedural pattern: the mesh gradient.
  + New API to create a callback pattern:
    cairo_pattern_create_raster_source.
  + XCB is now a supported backend.
  + New common API to address any surface as an image and so allow
    direct modification of the raster data:
    cairo_surface_create_similar_image, cairo_surface_map_to_image,
    and cairo_surface_unmap_image.
  + Many performance improvements.
  + Introduction of new antialias hints (NONE, FAST, GOOD, BEST).
  + Introduction of a new observation architecture:
    cairo_surface_observer_t.
  + OpenGL backend has seen significant work including the port to
    GLESv2 and the exploitation of advanced hardware features.
- Enable build of XCB backend as it's now officially supported: set
  %build_xcb_backend macro to 1.
- Note that we don't build Xlib/XCB support as it's disabled by
  default upstream.
- Also add pkgconfig(xcb-shm) BuildRequires for XCB/SHM support.
- Drop cairo-fix-libs.patch: fixed upstream.</changelog>
<changelog author="jeffm@suse.com" date="1335009600">- Add cairo-fix-wrong-allocation: fix wrong allocation in
  _cairo_pdf_surface_add_source_surface (bnc#758422).</changelog>
<changelog author="dimstar@opensuse.org" date="1335700800">- Update to version 1.12.2:
  + Allow applications to create 0x0 xlib surfaces, such as used by
    LibreOffice (fdo#49118)
  + Trim composite extents for SOURCE/CLEAR operators to the mask.
  + Use fallback fonts in PDF for unhandled computed glyph widths
    (fdo#48349)
  + Handle snapshots of recording surfaces for analysing pattern
    extents. Fixes a regression of reporting the PDF bounding box
    as being the page size.
  + Fix allocation size for PDF pattern ids. (fdo#49089)
  + Fix emission of rectilinear dashed segments, with and without
    scaling, and application of degenerate line joins.
  + Clamp unbounded fixup polygons to the clip extents.
  + Prevent infinite loop due to rounding errors whilst
    incrementing along dashes.
  + Prevent overflow for inline a8 span filling.
  + Miscellaneous build fixes for Cygwin on Windows and Solaris.
- Drop cairo-fix-wrong-allocation.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Update to version 1.12.4:
  + Interior boxes were being dropped when amalgamating regions
    during tesselation (fdo#49446)
  + Allow building without gtk-doc installed
  + Invalid edge generation whilst reducing complex polygons
    (fdo#50852)
  + Stroking around tight cusps
  + Use locale correct formats for reading font subsetting and
    valid buffers (fdo#51443)
  + Ensure that the type1 subset includes all the glyph encodings
    (fdo#53040)
  + Upload the whole source for a repeating pattern (fdo#51910)
  + Fix damage tracking to handle continuation chunks corectly and
    so prevent crashes on win32 (fdo#53384)
  + Avoid emitting miter joins for degenerate line segments
    (fdo#407107)
  + Convert the relative path semgents into the backend coordinates
    and then back again to user coordinates (fdo#54732)
  + Fix extents computations for a degenerate path consisting only
    of a move-to (fdo#54549)
  + Prevent crashing on a degenerate project edge after polygon
    intersection (fdo#54822).
- Add pkgconfig(xext) BuildRequires: new verified dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1352203200">- Update to version 1.12.8:
  + Expand the sanity checking for broken combinations of
    XSendEvent and ShmCompletionEvent.
  + Notice that "The X.Org Foundation" sometimes also identifies
    itself as "The Xorg Foundation".
  + Handle various ages of libXext and its Shm headers.
  + Fix the invalid clipping of the source drawable when using SHM
    transport to upload images (fdo#56547).
  + Handle all Type1 postscript operators for better font
    compatibility (fdo#56265).
  + Fix a couple of memory leaks in Type1 font subsetting
    (fdo#56566)
  + Tighten the evaluation of the start/stop pen vertices, and catch
    a few instances where we would use a fan instead of a bevel.
    (fdo#56432)
  + Fix assumption that geometric clipping always succeeds with the
    span-compositor (fdo#56574)
  + Fix call to spline intersection when evaluating whether a stoke
    is visible.
  + Remember to copy inferior sources when using SHM to readback the
    surface for use as a source.
- Changes from version 1.12.6:
  + Fix the recording surface to actually snapshot the source and
    so fix PDF drawing.
  + Calling XSendEvent with an XShmCompletionEvent is incompatabile
    with older Xorg servers.
  + Reorder CloseDisplay chain so that XShm is not reinstantiated
    after shutdown, causing a potential crash if the Display was
    immediately recreated using the same memory address.
  + Make sure that the Xserver has attached to the SHM segment
    before deleting it from the global namespace on systems that do
    not support deferred deletion.
  + Type1 subsetting support for PDF (and PS) was once again
    improved to work with a larger number of PDF readers.
  + GLESv2 build fixes and improved support for embedded GPUs.
  + Tweak the invisible pen detection for applications that are
    currently using too large values for geometric tolerance.
  + A build fix for older freetype libraries.
- Rebase cairo-modules-no-version.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1360843200">- Update to version 1.12.14:
  + Prevent user callbacks accessing user-data during destroy to
    prevent use-after-free bugs (mozilla#722975).
  + Use standard names for glyphs in subset fonts (PDF) (fdo#60248)
  + Fix detection of Win98. The logic for detecting Win98
    AlphaBlend() was inverted, disabling AlphaBlend() for everyone.
  + Prevent numeric overflow from extrapolating polygon edges to
    the clip boundary and causing severe render artifacts.
    (fdo#60489).
  + Fix computation of glyph string coordinates when breaking up
    runs for xlib.
  + Fix an assertion in the win32 backend for failing to clear its
    similar-images (fdo#60519).
- Changes from version 1.12.12:
  + Avoid replacing the entire image when uploading subimages
    (fdo#59635).
  + Force synchronisation for scratch SHM image buffers, so that we
    do not overwrite data as it is being read by X (fdo#59635).
  + Fix typos in detecting multisampling for the GL (MSAA) backend.
  + Fix a memory leak in the GL (MSAA) backend.
  + Fix a reference counting bug when mapping a GL surface to an
    image.
- Changes from version 1.12.10:
  + Append coincident elements to the recording's surface bbtree so
    that the list is not corrupted and the overlapping elements
    lost.
  + Fix cairo-trace to correctly record map-to-image/unmap-image
    and then replay them.
  + Ignore MappingNotifies when running the XCB testsuite as they
    are sent to all clients when the keyboard changes. The
    testsuite would detect the unexpected event and complain.
  + Handle very large images in the XCB backend.
  + Fix a memory leak in the xlib/shm layer, and prevent use of
    the SHM surfaces after the display is closed (fdo#58253).
  + Handle resizing of bitmap fonts, in preparation for a fix to
    fontconfig to correctly pass on the user request for scaling.
  + Always include subroutine 4 (hint replacement idion) when
    subsetting type 1 fonts in order to prevent a crash in
    cgpdftops on Mac OS/X.
  + Fix a couple of typos in the cairo-gobject.h header files for
    introspection.
  + Prevent a mutex deadlock when freeing a scaled-glyph containing
    a recording-surface that itself references another scaled-glyph
    (fdo#54950).
  + Make scaled-font cache actually thread-safe and prevent
    use-after-frees.
  + Restore support for older versions of XRender. A couple of
    typos and a few forgotten chunks prevented the xlib
    compositor from running correctly with XRender &lt; 0.10.
- Enable building of the GL Backend.</changelog>
<changelog author="pgajdos@suse.com" date="1364904000">- Add cairo-libpng16-v2.patch: Fix png usage with libpng 1.6:
  call png_set_read_user_transform_fn() before
  png_read_update_info() (bnc#810701).</changelog>
<changelog author="dimstar@opensuse.org" date="1369483200">- Drop cairo-libpng16-v2.patch: in its current form, this patch
  causes issues as that cairo.ImageSurface.create_from_png errors
  out with 'MemoryError' in all cases (bnc#821766).</changelog>
<changelog author="sbrabec@suse.cz" date="1373284800">- Add cairo-reduce-buddy-assertion.patch: Fix eog crash on
  assertion, after pressing Next (bnc#828074).</changelog>
<changelog author="dimstar@opensuse.org" date="1377604800">- Update to version 1.12.16:
  + Set the correct orientation for simple boxes with a negative
    scale factor.
  + Fix the creation of the shading dictionary in PDF.
  + Avoid upscaling bitmap fonts if possible.
  + Fix an assertion failure within the mempool allocator for
    shared memory.
  + Fix allocation size for CFF subsets.
  + Export cairo_matrix_t for GObject bindings.
  + Stop leaking the image data when loading PNGs.
  + Prevent an assertion failure when creating similar GL surfaces
    larger than supported by hardware.
  + Bugs fixed: fdo#61451, fdo#62885, fdo#61876, fdo#63196,
    fdo#697357, fdo#61592, fdo#68014, fdo#63787.
- Drop cairo-reduce-buddy-assertion.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1377691200">- Add cairo-disable-lto.patch to disable LTO on s390{x} to fix the
  build.</changelog>
<changelog author="jw@suse.com" date="1397217600">- Added fix_for_fdo77298.patch
  So that inkscape can export 0.01mm lines again to PDF. Was broken in 1.12.3</changelog>

</package>
<package pkgid="975d0b1280772de4927a4a4f38fe0c551deca4382cb59b8c6fe2067247a13286" name="cairo-devel" arch="i586">
    <version epoch="0" ver="1.12.16" rel="3.4.1"/>

<changelog author="vuntz@opensuse.org" date="1283860800">- Do not build the xcb backend: upstream recommends to not use it
  for now.
- Add a build_gl_backend define to easily enable the build of the
  gl backend, which will add a Mesa-devel BuildRequires. It's
  disabled by default.
- Add a build_xcb_backend define to easily enable the build of the
  xcb backend, which will add a pkgconfig(xcb) BuildRequires. It's
  disabled by default.</changelog>
<changelog author="dimstar@opensuse.org" date="1293451200">- Update to version 1.10.2:
  + fdo#31632: Fix embedding of grayscale jpegs in PS.
  + Fix the reported path of extents containing a curve.
  + Fix the compositing of unaligned boxes.
  + Reset the clipper in PDF upon finish.
  + Fix degenerates arcs to become a degenerate line.
  + Build support for autoconf 2.67
  + Fix painting of transformed patterns in PS
  + fdo#24688: Fix the EPS bounding box for PS and Fix the missing
    content for EPS
  + fdo#24691: Fix regression upon changing page size in PS/PDF
  + Only use ActualText with PDF-1.5 documents
  + Fix the bbox for type1 fallbacks.
  + fdo#31140: Reset the color after ending the context in PDF
  + fdo#31062: Fix the advance of subsetted type1 fonts
  + Fix handling of EXTEND_NONE gradients for PDF
  + Restrict in-place optimisation for a8 image masks with SOURCE</changelog>
<changelog author="vuntz@opensuse.org" date="1298376000">- Add missing libcairo-gobject2 to baselibs.conf.</changelog>
<changelog author="coolo@novell.com" date="1314619200">- Add cairo-fix-libs.patch: disable lto for cairo-sphinx as it
  breaks with -Wl,--as-needed.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix baselibs requires for cairo-devel and make it available</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
<changelog author="vuntz@opensuse.org" date="1329220800">- Ship additional COPYING files that come with some utilities.
- Fix license of the tool subpackage: it is GPL-3.0+ (bnc#739748).
- Change the group of library subpackages from
  Development/Libraries/X11 to System/Libraries.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 1.12.0:
  + Introduction of a new procedural pattern: the mesh gradient.
  + New API to create a callback pattern:
    cairo_pattern_create_raster_source.
  + XCB is now a supported backend.
  + New common API to address any surface as an image and so allow
    direct modification of the raster data:
    cairo_surface_create_similar_image, cairo_surface_map_to_image,
    and cairo_surface_unmap_image.
  + Many performance improvements.
  + Introduction of new antialias hints (NONE, FAST, GOOD, BEST).
  + Introduction of a new observation architecture:
    cairo_surface_observer_t.
  + OpenGL backend has seen significant work including the port to
    GLESv2 and the exploitation of advanced hardware features.
- Enable build of XCB backend as it's now officially supported: set
  %build_xcb_backend macro to 1.
- Note that we don't build Xlib/XCB support as it's disabled by
  default upstream.
- Also add pkgconfig(xcb-shm) BuildRequires for XCB/SHM support.
- Drop cairo-fix-libs.patch: fixed upstream.</changelog>
<changelog author="jeffm@suse.com" date="1335009600">- Add cairo-fix-wrong-allocation: fix wrong allocation in
  _cairo_pdf_surface_add_source_surface (bnc#758422).</changelog>
<changelog author="dimstar@opensuse.org" date="1335700800">- Update to version 1.12.2:
  + Allow applications to create 0x0 xlib surfaces, such as used by
    LibreOffice (fdo#49118)
  + Trim composite extents for SOURCE/CLEAR operators to the mask.
  + Use fallback fonts in PDF for unhandled computed glyph widths
    (fdo#48349)
  + Handle snapshots of recording surfaces for analysing pattern
    extents. Fixes a regression of reporting the PDF bounding box
    as being the page size.
  + Fix allocation size for PDF pattern ids. (fdo#49089)
  + Fix emission of rectilinear dashed segments, with and without
    scaling, and application of degenerate line joins.
  + Clamp unbounded fixup polygons to the clip extents.
  + Prevent infinite loop due to rounding errors whilst
    incrementing along dashes.
  + Prevent overflow for inline a8 span filling.
  + Miscellaneous build fixes for Cygwin on Windows and Solaris.
- Drop cairo-fix-wrong-allocation.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Update to version 1.12.4:
  + Interior boxes were being dropped when amalgamating regions
    during tesselation (fdo#49446)
  + Allow building without gtk-doc installed
  + Invalid edge generation whilst reducing complex polygons
    (fdo#50852)
  + Stroking around tight cusps
  + Use locale correct formats for reading font subsetting and
    valid buffers (fdo#51443)
  + Ensure that the type1 subset includes all the glyph encodings
    (fdo#53040)
  + Upload the whole source for a repeating pattern (fdo#51910)
  + Fix damage tracking to handle continuation chunks corectly and
    so prevent crashes on win32 (fdo#53384)
  + Avoid emitting miter joins for degenerate line segments
    (fdo#407107)
  + Convert the relative path semgents into the backend coordinates
    and then back again to user coordinates (fdo#54732)
  + Fix extents computations for a degenerate path consisting only
    of a move-to (fdo#54549)
  + Prevent crashing on a degenerate project edge after polygon
    intersection (fdo#54822).
- Add pkgconfig(xext) BuildRequires: new verified dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1352203200">- Update to version 1.12.8:
  + Expand the sanity checking for broken combinations of
    XSendEvent and ShmCompletionEvent.
  + Notice that "The X.Org Foundation" sometimes also identifies
    itself as "The Xorg Foundation".
  + Handle various ages of libXext and its Shm headers.
  + Fix the invalid clipping of the source drawable when using SHM
    transport to upload images (fdo#56547).
  + Handle all Type1 postscript operators for better font
    compatibility (fdo#56265).
  + Fix a couple of memory leaks in Type1 font subsetting
    (fdo#56566)
  + Tighten the evaluation of the start/stop pen vertices, and catch
    a few instances where we would use a fan instead of a bevel.
    (fdo#56432)
  + Fix assumption that geometric clipping always succeeds with the
    span-compositor (fdo#56574)
  + Fix call to spline intersection when evaluating whether a stoke
    is visible.
  + Remember to copy inferior sources when using SHM to readback the
    surface for use as a source.
- Changes from version 1.12.6:
  + Fix the recording surface to actually snapshot the source and
    so fix PDF drawing.
  + Calling XSendEvent with an XShmCompletionEvent is incompatabile
    with older Xorg servers.
  + Reorder CloseDisplay chain so that XShm is not reinstantiated
    after shutdown, causing a potential crash if the Display was
    immediately recreated using the same memory address.
  + Make sure that the Xserver has attached to the SHM segment
    before deleting it from the global namespace on systems that do
    not support deferred deletion.
  + Type1 subsetting support for PDF (and PS) was once again
    improved to work with a larger number of PDF readers.
  + GLESv2 build fixes and improved support for embedded GPUs.
  + Tweak the invisible pen detection for applications that are
    currently using too large values for geometric tolerance.
  + A build fix for older freetype libraries.
- Rebase cairo-modules-no-version.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1360843200">- Update to version 1.12.14:
  + Prevent user callbacks accessing user-data during destroy to
    prevent use-after-free bugs (mozilla#722975).
  + Use standard names for glyphs in subset fonts (PDF) (fdo#60248)
  + Fix detection of Win98. The logic for detecting Win98
    AlphaBlend() was inverted, disabling AlphaBlend() for everyone.
  + Prevent numeric overflow from extrapolating polygon edges to
    the clip boundary and causing severe render artifacts.
    (fdo#60489).
  + Fix computation of glyph string coordinates when breaking up
    runs for xlib.
  + Fix an assertion in the win32 backend for failing to clear its
    similar-images (fdo#60519).
- Changes from version 1.12.12:
  + Avoid replacing the entire image when uploading subimages
    (fdo#59635).
  + Force synchronisation for scratch SHM image buffers, so that we
    do not overwrite data as it is being read by X (fdo#59635).
  + Fix typos in detecting multisampling for the GL (MSAA) backend.
  + Fix a memory leak in the GL (MSAA) backend.
  + Fix a reference counting bug when mapping a GL surface to an
    image.
- Changes from version 1.12.10:
  + Append coincident elements to the recording's surface bbtree so
    that the list is not corrupted and the overlapping elements
    lost.
  + Fix cairo-trace to correctly record map-to-image/unmap-image
    and then replay them.
  + Ignore MappingNotifies when running the XCB testsuite as they
    are sent to all clients when the keyboard changes. The
    testsuite would detect the unexpected event and complain.
  + Handle very large images in the XCB backend.
  + Fix a memory leak in the xlib/shm layer, and prevent use of
    the SHM surfaces after the display is closed (fdo#58253).
  + Handle resizing of bitmap fonts, in preparation for a fix to
    fontconfig to correctly pass on the user request for scaling.
  + Always include subroutine 4 (hint replacement idion) when
    subsetting type 1 fonts in order to prevent a crash in
    cgpdftops on Mac OS/X.
  + Fix a couple of typos in the cairo-gobject.h header files for
    introspection.
  + Prevent a mutex deadlock when freeing a scaled-glyph containing
    a recording-surface that itself references another scaled-glyph
    (fdo#54950).
  + Make scaled-font cache actually thread-safe and prevent
    use-after-frees.
  + Restore support for older versions of XRender. A couple of
    typos and a few forgotten chunks prevented the xlib
    compositor from running correctly with XRender &lt; 0.10.
- Enable building of the GL Backend.</changelog>
<changelog author="pgajdos@suse.com" date="1364904000">- Add cairo-libpng16-v2.patch: Fix png usage with libpng 1.6:
  call png_set_read_user_transform_fn() before
  png_read_update_info() (bnc#810701).</changelog>
<changelog author="dimstar@opensuse.org" date="1369483200">- Drop cairo-libpng16-v2.patch: in its current form, this patch
  causes issues as that cairo.ImageSurface.create_from_png errors
  out with 'MemoryError' in all cases (bnc#821766).</changelog>
<changelog author="sbrabec@suse.cz" date="1373284800">- Add cairo-reduce-buddy-assertion.patch: Fix eog crash on
  assertion, after pressing Next (bnc#828074).</changelog>
<changelog author="dimstar@opensuse.org" date="1377604800">- Update to version 1.12.16:
  + Set the correct orientation for simple boxes with a negative
    scale factor.
  + Fix the creation of the shading dictionary in PDF.
  + Avoid upscaling bitmap fonts if possible.
  + Fix an assertion failure within the mempool allocator for
    shared memory.
  + Fix allocation size for CFF subsets.
  + Export cairo_matrix_t for GObject bindings.
  + Stop leaking the image data when loading PNGs.
  + Prevent an assertion failure when creating similar GL surfaces
    larger than supported by hardware.
  + Bugs fixed: fdo#61451, fdo#62885, fdo#61876, fdo#63196,
    fdo#697357, fdo#61592, fdo#68014, fdo#63787.
- Drop cairo-reduce-buddy-assertion.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1377691200">- Add cairo-disable-lto.patch to disable LTO on s390{x} to fix the
  build.</changelog>
<changelog author="jw@suse.com" date="1397217600">- Added fix_for_fdo77298.patch
  So that inkscape can export 0.01mm lines again to PDF. Was broken in 1.12.3</changelog>

</package>
<package pkgid="c6d2290f6f57d6c0606200ed6ca2bdd4ca63955402a41d8ae38254d8abba9642" name="cairo-devel" arch="x86_64">
    <version epoch="0" ver="1.12.16" rel="3.4.1"/>

<changelog author="vuntz@opensuse.org" date="1283860800">- Do not build the xcb backend: upstream recommends to not use it
  for now.
- Add a build_gl_backend define to easily enable the build of the
  gl backend, which will add a Mesa-devel BuildRequires. It's
  disabled by default.
- Add a build_xcb_backend define to easily enable the build of the
  xcb backend, which will add a pkgconfig(xcb) BuildRequires. It's
  disabled by default.</changelog>
<changelog author="dimstar@opensuse.org" date="1293451200">- Update to version 1.10.2:
  + fdo#31632: Fix embedding of grayscale jpegs in PS.
  + Fix the reported path of extents containing a curve.
  + Fix the compositing of unaligned boxes.
  + Reset the clipper in PDF upon finish.
  + Fix degenerates arcs to become a degenerate line.
  + Build support for autoconf 2.67
  + Fix painting of transformed patterns in PS
  + fdo#24688: Fix the EPS bounding box for PS and Fix the missing
    content for EPS
  + fdo#24691: Fix regression upon changing page size in PS/PDF
  + Only use ActualText with PDF-1.5 documents
  + Fix the bbox for type1 fallbacks.
  + fdo#31140: Reset the color after ending the context in PDF
  + fdo#31062: Fix the advance of subsetted type1 fonts
  + Fix handling of EXTEND_NONE gradients for PDF
  + Restrict in-place optimisation for a8 image masks with SOURCE</changelog>
<changelog author="vuntz@opensuse.org" date="1298376000">- Add missing libcairo-gobject2 to baselibs.conf.</changelog>
<changelog author="coolo@novell.com" date="1314619200">- Add cairo-fix-libs.patch: disable lto for cairo-sphinx as it
  breaks with -Wl,--as-needed.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix baselibs requires for cairo-devel and make it available</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
<changelog author="vuntz@opensuse.org" date="1329220800">- Ship additional COPYING files that come with some utilities.
- Fix license of the tool subpackage: it is GPL-3.0+ (bnc#739748).
- Change the group of library subpackages from
  Development/Libraries/X11 to System/Libraries.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 1.12.0:
  + Introduction of a new procedural pattern: the mesh gradient.
  + New API to create a callback pattern:
    cairo_pattern_create_raster_source.
  + XCB is now a supported backend.
  + New common API to address any surface as an image and so allow
    direct modification of the raster data:
    cairo_surface_create_similar_image, cairo_surface_map_to_image,
    and cairo_surface_unmap_image.
  + Many performance improvements.
  + Introduction of new antialias hints (NONE, FAST, GOOD, BEST).
  + Introduction of a new observation architecture:
    cairo_surface_observer_t.
  + OpenGL backend has seen significant work including the port to
    GLESv2 and the exploitation of advanced hardware features.
- Enable build of XCB backend as it's now officially supported: set
  %build_xcb_backend macro to 1.
- Note that we don't build Xlib/XCB support as it's disabled by
  default upstream.
- Also add pkgconfig(xcb-shm) BuildRequires for XCB/SHM support.
- Drop cairo-fix-libs.patch: fixed upstream.</changelog>
<changelog author="jeffm@suse.com" date="1335009600">- Add cairo-fix-wrong-allocation: fix wrong allocation in
  _cairo_pdf_surface_add_source_surface (bnc#758422).</changelog>
<changelog author="dimstar@opensuse.org" date="1335700800">- Update to version 1.12.2:
  + Allow applications to create 0x0 xlib surfaces, such as used by
    LibreOffice (fdo#49118)
  + Trim composite extents for SOURCE/CLEAR operators to the mask.
  + Use fallback fonts in PDF for unhandled computed glyph widths
    (fdo#48349)
  + Handle snapshots of recording surfaces for analysing pattern
    extents. Fixes a regression of reporting the PDF bounding box
    as being the page size.
  + Fix allocation size for PDF pattern ids. (fdo#49089)
  + Fix emission of rectilinear dashed segments, with and without
    scaling, and application of degenerate line joins.
  + Clamp unbounded fixup polygons to the clip extents.
  + Prevent infinite loop due to rounding errors whilst
    incrementing along dashes.
  + Prevent overflow for inline a8 span filling.
  + Miscellaneous build fixes for Cygwin on Windows and Solaris.
- Drop cairo-fix-wrong-allocation.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Update to version 1.12.4:
  + Interior boxes were being dropped when amalgamating regions
    during tesselation (fdo#49446)
  + Allow building without gtk-doc installed
  + Invalid edge generation whilst reducing complex polygons
    (fdo#50852)
  + Stroking around tight cusps
  + Use locale correct formats for reading font subsetting and
    valid buffers (fdo#51443)
  + Ensure that the type1 subset includes all the glyph encodings
    (fdo#53040)
  + Upload the whole source for a repeating pattern (fdo#51910)
  + Fix damage tracking to handle continuation chunks corectly and
    so prevent crashes on win32 (fdo#53384)
  + Avoid emitting miter joins for degenerate line segments
    (fdo#407107)
  + Convert the relative path semgents into the backend coordinates
    and then back again to user coordinates (fdo#54732)
  + Fix extents computations for a degenerate path consisting only
    of a move-to (fdo#54549)
  + Prevent crashing on a degenerate project edge after polygon
    intersection (fdo#54822).
- Add pkgconfig(xext) BuildRequires: new verified dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1352203200">- Update to version 1.12.8:
  + Expand the sanity checking for broken combinations of
    XSendEvent and ShmCompletionEvent.
  + Notice that "The X.Org Foundation" sometimes also identifies
    itself as "The Xorg Foundation".
  + Handle various ages of libXext and its Shm headers.
  + Fix the invalid clipping of the source drawable when using SHM
    transport to upload images (fdo#56547).
  + Handle all Type1 postscript operators for better font
    compatibility (fdo#56265).
  + Fix a couple of memory leaks in Type1 font subsetting
    (fdo#56566)
  + Tighten the evaluation of the start/stop pen vertices, and catch
    a few instances where we would use a fan instead of a bevel.
    (fdo#56432)
  + Fix assumption that geometric clipping always succeeds with the
    span-compositor (fdo#56574)
  + Fix call to spline intersection when evaluating whether a stoke
    is visible.
  + Remember to copy inferior sources when using SHM to readback the
    surface for use as a source.
- Changes from version 1.12.6:
  + Fix the recording surface to actually snapshot the source and
    so fix PDF drawing.
  + Calling XSendEvent with an XShmCompletionEvent is incompatabile
    with older Xorg servers.
  + Reorder CloseDisplay chain so that XShm is not reinstantiated
    after shutdown, causing a potential crash if the Display was
    immediately recreated using the same memory address.
  + Make sure that the Xserver has attached to the SHM segment
    before deleting it from the global namespace on systems that do
    not support deferred deletion.
  + Type1 subsetting support for PDF (and PS) was once again
    improved to work with a larger number of PDF readers.
  + GLESv2 build fixes and improved support for embedded GPUs.
  + Tweak the invisible pen detection for applications that are
    currently using too large values for geometric tolerance.
  + A build fix for older freetype libraries.
- Rebase cairo-modules-no-version.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1360843200">- Update to version 1.12.14:
  + Prevent user callbacks accessing user-data during destroy to
    prevent use-after-free bugs (mozilla#722975).
  + Use standard names for glyphs in subset fonts (PDF) (fdo#60248)
  + Fix detection of Win98. The logic for detecting Win98
    AlphaBlend() was inverted, disabling AlphaBlend() for everyone.
  + Prevent numeric overflow from extrapolating polygon edges to
    the clip boundary and causing severe render artifacts.
    (fdo#60489).
  + Fix computation of glyph string coordinates when breaking up
    runs for xlib.
  + Fix an assertion in the win32 backend for failing to clear its
    similar-images (fdo#60519).
- Changes from version 1.12.12:
  + Avoid replacing the entire image when uploading subimages
    (fdo#59635).
  + Force synchronisation for scratch SHM image buffers, so that we
    do not overwrite data as it is being read by X (fdo#59635).
  + Fix typos in detecting multisampling for the GL (MSAA) backend.
  + Fix a memory leak in the GL (MSAA) backend.
  + Fix a reference counting bug when mapping a GL surface to an
    image.
- Changes from version 1.12.10:
  + Append coincident elements to the recording's surface bbtree so
    that the list is not corrupted and the overlapping elements
    lost.
  + Fix cairo-trace to correctly record map-to-image/unmap-image
    and then replay them.
  + Ignore MappingNotifies when running the XCB testsuite as they
    are sent to all clients when the keyboard changes. The
    testsuite would detect the unexpected event and complain.
  + Handle very large images in the XCB backend.
  + Fix a memory leak in the xlib/shm layer, and prevent use of
    the SHM surfaces after the display is closed (fdo#58253).
  + Handle resizing of bitmap fonts, in preparation for a fix to
    fontconfig to correctly pass on the user request for scaling.
  + Always include subroutine 4 (hint replacement idion) when
    subsetting type 1 fonts in order to prevent a crash in
    cgpdftops on Mac OS/X.
  + Fix a couple of typos in the cairo-gobject.h header files for
    introspection.
  + Prevent a mutex deadlock when freeing a scaled-glyph containing
    a recording-surface that itself references another scaled-glyph
    (fdo#54950).
  + Make scaled-font cache actually thread-safe and prevent
    use-after-frees.
  + Restore support for older versions of XRender. A couple of
    typos and a few forgotten chunks prevented the xlib
    compositor from running correctly with XRender &lt; 0.10.
- Enable building of the GL Backend.</changelog>
<changelog author="pgajdos@suse.com" date="1364904000">- Add cairo-libpng16-v2.patch: Fix png usage with libpng 1.6:
  call png_set_read_user_transform_fn() before
  png_read_update_info() (bnc#810701).</changelog>
<changelog author="dimstar@opensuse.org" date="1369483200">- Drop cairo-libpng16-v2.patch: in its current form, this patch
  causes issues as that cairo.ImageSurface.create_from_png errors
  out with 'MemoryError' in all cases (bnc#821766).</changelog>
<changelog author="sbrabec@suse.cz" date="1373284800">- Add cairo-reduce-buddy-assertion.patch: Fix eog crash on
  assertion, after pressing Next (bnc#828074).</changelog>
<changelog author="dimstar@opensuse.org" date="1377604800">- Update to version 1.12.16:
  + Set the correct orientation for simple boxes with a negative
    scale factor.
  + Fix the creation of the shading dictionary in PDF.
  + Avoid upscaling bitmap fonts if possible.
  + Fix an assertion failure within the mempool allocator for
    shared memory.
  + Fix allocation size for CFF subsets.
  + Export cairo_matrix_t for GObject bindings.
  + Stop leaking the image data when loading PNGs.
  + Prevent an assertion failure when creating similar GL surfaces
    larger than supported by hardware.
  + Bugs fixed: fdo#61451, fdo#62885, fdo#61876, fdo#63196,
    fdo#697357, fdo#61592, fdo#68014, fdo#63787.
- Drop cairo-reduce-buddy-assertion.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1377691200">- Add cairo-disable-lto.patch to disable LTO on s390{x} to fix the
  build.</changelog>
<changelog author="jw@suse.com" date="1397217600">- Added fix_for_fdo77298.patch
  So that inkscape can export 0.01mm lines again to PDF. Was broken in 1.12.3</changelog>

</package>
<package pkgid="821af128a68e5cb90b92076b704776e1c7da93d64ed090d1c44fcd4dd086eff3" name="cairo-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.12.16" rel="3.4.1"/>

<changelog author="vuntz@opensuse.org" date="1283860800">- Do not build the xcb backend: upstream recommends to not use it
  for now.
- Add a build_gl_backend define to easily enable the build of the
  gl backend, which will add a Mesa-devel BuildRequires. It's
  disabled by default.
- Add a build_xcb_backend define to easily enable the build of the
  xcb backend, which will add a pkgconfig(xcb) BuildRequires. It's
  disabled by default.</changelog>
<changelog author="dimstar@opensuse.org" date="1293451200">- Update to version 1.10.2:
  + fdo#31632: Fix embedding of grayscale jpegs in PS.
  + Fix the reported path of extents containing a curve.
  + Fix the compositing of unaligned boxes.
  + Reset the clipper in PDF upon finish.
  + Fix degenerates arcs to become a degenerate line.
  + Build support for autoconf 2.67
  + Fix painting of transformed patterns in PS
  + fdo#24688: Fix the EPS bounding box for PS and Fix the missing
    content for EPS
  + fdo#24691: Fix regression upon changing page size in PS/PDF
  + Only use ActualText with PDF-1.5 documents
  + Fix the bbox for type1 fallbacks.
  + fdo#31140: Reset the color after ending the context in PDF
  + fdo#31062: Fix the advance of subsetted type1 fonts
  + Fix handling of EXTEND_NONE gradients for PDF
  + Restrict in-place optimisation for a8 image masks with SOURCE</changelog>
<changelog author="vuntz@opensuse.org" date="1298376000">- Add missing libcairo-gobject2 to baselibs.conf.</changelog>
<changelog author="coolo@novell.com" date="1314619200">- Add cairo-fix-libs.patch: disable lto for cairo-sphinx as it
  breaks with -Wl,--as-needed.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix baselibs requires for cairo-devel and make it available</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
<changelog author="vuntz@opensuse.org" date="1329220800">- Ship additional COPYING files that come with some utilities.
- Fix license of the tool subpackage: it is GPL-3.0+ (bnc#739748).
- Change the group of library subpackages from
  Development/Libraries/X11 to System/Libraries.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 1.12.0:
  + Introduction of a new procedural pattern: the mesh gradient.
  + New API to create a callback pattern:
    cairo_pattern_create_raster_source.
  + XCB is now a supported backend.
  + New common API to address any surface as an image and so allow
    direct modification of the raster data:
    cairo_surface_create_similar_image, cairo_surface_map_to_image,
    and cairo_surface_unmap_image.
  + Many performance improvements.
  + Introduction of new antialias hints (NONE, FAST, GOOD, BEST).
  + Introduction of a new observation architecture:
    cairo_surface_observer_t.
  + OpenGL backend has seen significant work including the port to
    GLESv2 and the exploitation of advanced hardware features.
- Enable build of XCB backend as it's now officially supported: set
  %build_xcb_backend macro to 1.
- Note that we don't build Xlib/XCB support as it's disabled by
  default upstream.
- Also add pkgconfig(xcb-shm) BuildRequires for XCB/SHM support.
- Drop cairo-fix-libs.patch: fixed upstream.</changelog>
<changelog author="jeffm@suse.com" date="1335009600">- Add cairo-fix-wrong-allocation: fix wrong allocation in
  _cairo_pdf_surface_add_source_surface (bnc#758422).</changelog>
<changelog author="dimstar@opensuse.org" date="1335700800">- Update to version 1.12.2:
  + Allow applications to create 0x0 xlib surfaces, such as used by
    LibreOffice (fdo#49118)
  + Trim composite extents for SOURCE/CLEAR operators to the mask.
  + Use fallback fonts in PDF for unhandled computed glyph widths
    (fdo#48349)
  + Handle snapshots of recording surfaces for analysing pattern
    extents. Fixes a regression of reporting the PDF bounding box
    as being the page size.
  + Fix allocation size for PDF pattern ids. (fdo#49089)
  + Fix emission of rectilinear dashed segments, with and without
    scaling, and application of degenerate line joins.
  + Clamp unbounded fixup polygons to the clip extents.
  + Prevent infinite loop due to rounding errors whilst
    incrementing along dashes.
  + Prevent overflow for inline a8 span filling.
  + Miscellaneous build fixes for Cygwin on Windows and Solaris.
- Drop cairo-fix-wrong-allocation.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Update to version 1.12.4:
  + Interior boxes were being dropped when amalgamating regions
    during tesselation (fdo#49446)
  + Allow building without gtk-doc installed
  + Invalid edge generation whilst reducing complex polygons
    (fdo#50852)
  + Stroking around tight cusps
  + Use locale correct formats for reading font subsetting and
    valid buffers (fdo#51443)
  + Ensure that the type1 subset includes all the glyph encodings
    (fdo#53040)
  + Upload the whole source for a repeating pattern (fdo#51910)
  + Fix damage tracking to handle continuation chunks corectly and
    so prevent crashes on win32 (fdo#53384)
  + Avoid emitting miter joins for degenerate line segments
    (fdo#407107)
  + Convert the relative path semgents into the backend coordinates
    and then back again to user coordinates (fdo#54732)
  + Fix extents computations for a degenerate path consisting only
    of a move-to (fdo#54549)
  + Prevent crashing on a degenerate project edge after polygon
    intersection (fdo#54822).
- Add pkgconfig(xext) BuildRequires: new verified dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1352203200">- Update to version 1.12.8:
  + Expand the sanity checking for broken combinations of
    XSendEvent and ShmCompletionEvent.
  + Notice that "The X.Org Foundation" sometimes also identifies
    itself as "The Xorg Foundation".
  + Handle various ages of libXext and its Shm headers.
  + Fix the invalid clipping of the source drawable when using SHM
    transport to upload images (fdo#56547).
  + Handle all Type1 postscript operators for better font
    compatibility (fdo#56265).
  + Fix a couple of memory leaks in Type1 font subsetting
    (fdo#56566)
  + Tighten the evaluation of the start/stop pen vertices, and catch
    a few instances where we would use a fan instead of a bevel.
    (fdo#56432)
  + Fix assumption that geometric clipping always succeeds with the
    span-compositor (fdo#56574)
  + Fix call to spline intersection when evaluating whether a stoke
    is visible.
  + Remember to copy inferior sources when using SHM to readback the
    surface for use as a source.
- Changes from version 1.12.6:
  + Fix the recording surface to actually snapshot the source and
    so fix PDF drawing.
  + Calling XSendEvent with an XShmCompletionEvent is incompatabile
    with older Xorg servers.
  + Reorder CloseDisplay chain so that XShm is not reinstantiated
    after shutdown, causing a potential crash if the Display was
    immediately recreated using the same memory address.
  + Make sure that the Xserver has attached to the SHM segment
    before deleting it from the global namespace on systems that do
    not support deferred deletion.
  + Type1 subsetting support for PDF (and PS) was once again
    improved to work with a larger number of PDF readers.
  + GLESv2 build fixes and improved support for embedded GPUs.
  + Tweak the invisible pen detection for applications that are
    currently using too large values for geometric tolerance.
  + A build fix for older freetype libraries.
- Rebase cairo-modules-no-version.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1360843200">- Update to version 1.12.14:
  + Prevent user callbacks accessing user-data during destroy to
    prevent use-after-free bugs (mozilla#722975).
  + Use standard names for glyphs in subset fonts (PDF) (fdo#60248)
  + Fix detection of Win98. The logic for detecting Win98
    AlphaBlend() was inverted, disabling AlphaBlend() for everyone.
  + Prevent numeric overflow from extrapolating polygon edges to
    the clip boundary and causing severe render artifacts.
    (fdo#60489).
  + Fix computation of glyph string coordinates when breaking up
    runs for xlib.
  + Fix an assertion in the win32 backend for failing to clear its
    similar-images (fdo#60519).
- Changes from version 1.12.12:
  + Avoid replacing the entire image when uploading subimages
    (fdo#59635).
  + Force synchronisation for scratch SHM image buffers, so that we
    do not overwrite data as it is being read by X (fdo#59635).
  + Fix typos in detecting multisampling for the GL (MSAA) backend.
  + Fix a memory leak in the GL (MSAA) backend.
  + Fix a reference counting bug when mapping a GL surface to an
    image.
- Changes from version 1.12.10:
  + Append coincident elements to the recording's surface bbtree so
    that the list is not corrupted and the overlapping elements
    lost.
  + Fix cairo-trace to correctly record map-to-image/unmap-image
    and then replay them.
  + Ignore MappingNotifies when running the XCB testsuite as they
    are sent to all clients when the keyboard changes. The
    testsuite would detect the unexpected event and complain.
  + Handle very large images in the XCB backend.
  + Fix a memory leak in the xlib/shm layer, and prevent use of
    the SHM surfaces after the display is closed (fdo#58253).
  + Handle resizing of bitmap fonts, in preparation for a fix to
    fontconfig to correctly pass on the user request for scaling.
  + Always include subroutine 4 (hint replacement idion) when
    subsetting type 1 fonts in order to prevent a crash in
    cgpdftops on Mac OS/X.
  + Fix a couple of typos in the cairo-gobject.h header files for
    introspection.
  + Prevent a mutex deadlock when freeing a scaled-glyph containing
    a recording-surface that itself references another scaled-glyph
    (fdo#54950).
  + Make scaled-font cache actually thread-safe and prevent
    use-after-frees.
  + Restore support for older versions of XRender. A couple of
    typos and a few forgotten chunks prevented the xlib
    compositor from running correctly with XRender &lt; 0.10.
- Enable building of the GL Backend.</changelog>
<changelog author="pgajdos@suse.com" date="1364904000">- Add cairo-libpng16-v2.patch: Fix png usage with libpng 1.6:
  call png_set_read_user_transform_fn() before
  png_read_update_info() (bnc#810701).</changelog>
<changelog author="dimstar@opensuse.org" date="1369483200">- Drop cairo-libpng16-v2.patch: in its current form, this patch
  causes issues as that cairo.ImageSurface.create_from_png errors
  out with 'MemoryError' in all cases (bnc#821766).</changelog>
<changelog author="sbrabec@suse.cz" date="1373284800">- Add cairo-reduce-buddy-assertion.patch: Fix eog crash on
  assertion, after pressing Next (bnc#828074).</changelog>
<changelog author="dimstar@opensuse.org" date="1377604800">- Update to version 1.12.16:
  + Set the correct orientation for simple boxes with a negative
    scale factor.
  + Fix the creation of the shading dictionary in PDF.
  + Avoid upscaling bitmap fonts if possible.
  + Fix an assertion failure within the mempool allocator for
    shared memory.
  + Fix allocation size for CFF subsets.
  + Export cairo_matrix_t for GObject bindings.
  + Stop leaking the image data when loading PNGs.
  + Prevent an assertion failure when creating similar GL surfaces
    larger than supported by hardware.
  + Bugs fixed: fdo#61451, fdo#62885, fdo#61876, fdo#63196,
    fdo#697357, fdo#61592, fdo#68014, fdo#63787.
- Drop cairo-reduce-buddy-assertion.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1377691200">- Add cairo-disable-lto.patch to disable LTO on s390{x} to fix the
  build.</changelog>
<changelog author="jw@suse.com" date="1397217600">- Added fix_for_fdo77298.patch
  So that inkscape can export 0.01mm lines again to PDF. Was broken in 1.12.3</changelog>

</package>
<package pkgid="3dca2ab02c5767676c850fb442a3e9612983bb912d01746e8dd3442ca71a4664" name="cairo-tools" arch="i586">
    <version epoch="0" ver="1.12.16" rel="3.4.1"/>

<changelog author="vuntz@opensuse.org" date="1283860800">- Do not build the xcb backend: upstream recommends to not use it
  for now.
- Add a build_gl_backend define to easily enable the build of the
  gl backend, which will add a Mesa-devel BuildRequires. It's
  disabled by default.
- Add a build_xcb_backend define to easily enable the build of the
  xcb backend, which will add a pkgconfig(xcb) BuildRequires. It's
  disabled by default.</changelog>
<changelog author="dimstar@opensuse.org" date="1293451200">- Update to version 1.10.2:
  + fdo#31632: Fix embedding of grayscale jpegs in PS.
  + Fix the reported path of extents containing a curve.
  + Fix the compositing of unaligned boxes.
  + Reset the clipper in PDF upon finish.
  + Fix degenerates arcs to become a degenerate line.
  + Build support for autoconf 2.67
  + Fix painting of transformed patterns in PS
  + fdo#24688: Fix the EPS bounding box for PS and Fix the missing
    content for EPS
  + fdo#24691: Fix regression upon changing page size in PS/PDF
  + Only use ActualText with PDF-1.5 documents
  + Fix the bbox for type1 fallbacks.
  + fdo#31140: Reset the color after ending the context in PDF
  + fdo#31062: Fix the advance of subsetted type1 fonts
  + Fix handling of EXTEND_NONE gradients for PDF
  + Restrict in-place optimisation for a8 image masks with SOURCE</changelog>
<changelog author="vuntz@opensuse.org" date="1298376000">- Add missing libcairo-gobject2 to baselibs.conf.</changelog>
<changelog author="coolo@novell.com" date="1314619200">- Add cairo-fix-libs.patch: disable lto for cairo-sphinx as it
  breaks with -Wl,--as-needed.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix baselibs requires for cairo-devel and make it available</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
<changelog author="vuntz@opensuse.org" date="1329220800">- Ship additional COPYING files that come with some utilities.
- Fix license of the tool subpackage: it is GPL-3.0+ (bnc#739748).
- Change the group of library subpackages from
  Development/Libraries/X11 to System/Libraries.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 1.12.0:
  + Introduction of a new procedural pattern: the mesh gradient.
  + New API to create a callback pattern:
    cairo_pattern_create_raster_source.
  + XCB is now a supported backend.
  + New common API to address any surface as an image and so allow
    direct modification of the raster data:
    cairo_surface_create_similar_image, cairo_surface_map_to_image,
    and cairo_surface_unmap_image.
  + Many performance improvements.
  + Introduction of new antialias hints (NONE, FAST, GOOD, BEST).
  + Introduction of a new observation architecture:
    cairo_surface_observer_t.
  + OpenGL backend has seen significant work including the port to
    GLESv2 and the exploitation of advanced hardware features.
- Enable build of XCB backend as it's now officially supported: set
  %build_xcb_backend macro to 1.
- Note that we don't build Xlib/XCB support as it's disabled by
  default upstream.
- Also add pkgconfig(xcb-shm) BuildRequires for XCB/SHM support.
- Drop cairo-fix-libs.patch: fixed upstream.</changelog>
<changelog author="jeffm@suse.com" date="1335009600">- Add cairo-fix-wrong-allocation: fix wrong allocation in
  _cairo_pdf_surface_add_source_surface (bnc#758422).</changelog>
<changelog author="dimstar@opensuse.org" date="1335700800">- Update to version 1.12.2:
  + Allow applications to create 0x0 xlib surfaces, such as used by
    LibreOffice (fdo#49118)
  + Trim composite extents for SOURCE/CLEAR operators to the mask.
  + Use fallback fonts in PDF for unhandled computed glyph widths
    (fdo#48349)
  + Handle snapshots of recording surfaces for analysing pattern
    extents. Fixes a regression of reporting the PDF bounding box
    as being the page size.
  + Fix allocation size for PDF pattern ids. (fdo#49089)
  + Fix emission of rectilinear dashed segments, with and without
    scaling, and application of degenerate line joins.
  + Clamp unbounded fixup polygons to the clip extents.
  + Prevent infinite loop due to rounding errors whilst
    incrementing along dashes.
  + Prevent overflow for inline a8 span filling.
  + Miscellaneous build fixes for Cygwin on Windows and Solaris.
- Drop cairo-fix-wrong-allocation.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Update to version 1.12.4:
  + Interior boxes were being dropped when amalgamating regions
    during tesselation (fdo#49446)
  + Allow building without gtk-doc installed
  + Invalid edge generation whilst reducing complex polygons
    (fdo#50852)
  + Stroking around tight cusps
  + Use locale correct formats for reading font subsetting and
    valid buffers (fdo#51443)
  + Ensure that the type1 subset includes all the glyph encodings
    (fdo#53040)
  + Upload the whole source for a repeating pattern (fdo#51910)
  + Fix damage tracking to handle continuation chunks corectly and
    so prevent crashes on win32 (fdo#53384)
  + Avoid emitting miter joins for degenerate line segments
    (fdo#407107)
  + Convert the relative path semgents into the backend coordinates
    and then back again to user coordinates (fdo#54732)
  + Fix extents computations for a degenerate path consisting only
    of a move-to (fdo#54549)
  + Prevent crashing on a degenerate project edge after polygon
    intersection (fdo#54822).
- Add pkgconfig(xext) BuildRequires: new verified dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1352203200">- Update to version 1.12.8:
  + Expand the sanity checking for broken combinations of
    XSendEvent and ShmCompletionEvent.
  + Notice that "The X.Org Foundation" sometimes also identifies
    itself as "The Xorg Foundation".
  + Handle various ages of libXext and its Shm headers.
  + Fix the invalid clipping of the source drawable when using SHM
    transport to upload images (fdo#56547).
  + Handle all Type1 postscript operators for better font
    compatibility (fdo#56265).
  + Fix a couple of memory leaks in Type1 font subsetting
    (fdo#56566)
  + Tighten the evaluation of the start/stop pen vertices, and catch
    a few instances where we would use a fan instead of a bevel.
    (fdo#56432)
  + Fix assumption that geometric clipping always succeeds with the
    span-compositor (fdo#56574)
  + Fix call to spline intersection when evaluating whether a stoke
    is visible.
  + Remember to copy inferior sources when using SHM to readback the
    surface for use as a source.
- Changes from version 1.12.6:
  + Fix the recording surface to actually snapshot the source and
    so fix PDF drawing.
  + Calling XSendEvent with an XShmCompletionEvent is incompatabile
    with older Xorg servers.
  + Reorder CloseDisplay chain so that XShm is not reinstantiated
    after shutdown, causing a potential crash if the Display was
    immediately recreated using the same memory address.
  + Make sure that the Xserver has attached to the SHM segment
    before deleting it from the global namespace on systems that do
    not support deferred deletion.
  + Type1 subsetting support for PDF (and PS) was once again
    improved to work with a larger number of PDF readers.
  + GLESv2 build fixes and improved support for embedded GPUs.
  + Tweak the invisible pen detection for applications that are
    currently using too large values for geometric tolerance.
  + A build fix for older freetype libraries.
- Rebase cairo-modules-no-version.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1360843200">- Update to version 1.12.14:
  + Prevent user callbacks accessing user-data during destroy to
    prevent use-after-free bugs (mozilla#722975).
  + Use standard names for glyphs in subset fonts (PDF) (fdo#60248)
  + Fix detection of Win98. The logic for detecting Win98
    AlphaBlend() was inverted, disabling AlphaBlend() for everyone.
  + Prevent numeric overflow from extrapolating polygon edges to
    the clip boundary and causing severe render artifacts.
    (fdo#60489).
  + Fix computation of glyph string coordinates when breaking up
    runs for xlib.
  + Fix an assertion in the win32 backend for failing to clear its
    similar-images (fdo#60519).
- Changes from version 1.12.12:
  + Avoid replacing the entire image when uploading subimages
    (fdo#59635).
  + Force synchronisation for scratch SHM image buffers, so that we
    do not overwrite data as it is being read by X (fdo#59635).
  + Fix typos in detecting multisampling for the GL (MSAA) backend.
  + Fix a memory leak in the GL (MSAA) backend.
  + Fix a reference counting bug when mapping a GL surface to an
    image.
- Changes from version 1.12.10:
  + Append coincident elements to the recording's surface bbtree so
    that the list is not corrupted and the overlapping elements
    lost.
  + Fix cairo-trace to correctly record map-to-image/unmap-image
    and then replay them.
  + Ignore MappingNotifies when running the XCB testsuite as they
    are sent to all clients when the keyboard changes. The
    testsuite would detect the unexpected event and complain.
  + Handle very large images in the XCB backend.
  + Fix a memory leak in the xlib/shm layer, and prevent use of
    the SHM surfaces after the display is closed (fdo#58253).
  + Handle resizing of bitmap fonts, in preparation for a fix to
    fontconfig to correctly pass on the user request for scaling.
  + Always include subroutine 4 (hint replacement idion) when
    subsetting type 1 fonts in order to prevent a crash in
    cgpdftops on Mac OS/X.
  + Fix a couple of typos in the cairo-gobject.h header files for
    introspection.
  + Prevent a mutex deadlock when freeing a scaled-glyph containing
    a recording-surface that itself references another scaled-glyph
    (fdo#54950).
  + Make scaled-font cache actually thread-safe and prevent
    use-after-frees.
  + Restore support for older versions of XRender. A couple of
    typos and a few forgotten chunks prevented the xlib
    compositor from running correctly with XRender &lt; 0.10.
- Enable building of the GL Backend.</changelog>
<changelog author="pgajdos@suse.com" date="1364904000">- Add cairo-libpng16-v2.patch: Fix png usage with libpng 1.6:
  call png_set_read_user_transform_fn() before
  png_read_update_info() (bnc#810701).</changelog>
<changelog author="dimstar@opensuse.org" date="1369483200">- Drop cairo-libpng16-v2.patch: in its current form, this patch
  causes issues as that cairo.ImageSurface.create_from_png errors
  out with 'MemoryError' in all cases (bnc#821766).</changelog>
<changelog author="sbrabec@suse.cz" date="1373284800">- Add cairo-reduce-buddy-assertion.patch: Fix eog crash on
  assertion, after pressing Next (bnc#828074).</changelog>
<changelog author="dimstar@opensuse.org" date="1377604800">- Update to version 1.12.16:
  + Set the correct orientation for simple boxes with a negative
    scale factor.
  + Fix the creation of the shading dictionary in PDF.
  + Avoid upscaling bitmap fonts if possible.
  + Fix an assertion failure within the mempool allocator for
    shared memory.
  + Fix allocation size for CFF subsets.
  + Export cairo_matrix_t for GObject bindings.
  + Stop leaking the image data when loading PNGs.
  + Prevent an assertion failure when creating similar GL surfaces
    larger than supported by hardware.
  + Bugs fixed: fdo#61451, fdo#62885, fdo#61876, fdo#63196,
    fdo#697357, fdo#61592, fdo#68014, fdo#63787.
- Drop cairo-reduce-buddy-assertion.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1377691200">- Add cairo-disable-lto.patch to disable LTO on s390{x} to fix the
  build.</changelog>
<changelog author="jw@suse.com" date="1397217600">- Added fix_for_fdo77298.patch
  So that inkscape can export 0.01mm lines again to PDF. Was broken in 1.12.3</changelog>

</package>
<package pkgid="3d7e65d219fe734a31d6082783269ad3e57cba26945f57d9dc132680e449f96e" name="cairo-tools" arch="x86_64">
    <version epoch="0" ver="1.12.16" rel="3.4.1"/>

<changelog author="vuntz@opensuse.org" date="1283860800">- Do not build the xcb backend: upstream recommends to not use it
  for now.
- Add a build_gl_backend define to easily enable the build of the
  gl backend, which will add a Mesa-devel BuildRequires. It's
  disabled by default.
- Add a build_xcb_backend define to easily enable the build of the
  xcb backend, which will add a pkgconfig(xcb) BuildRequires. It's
  disabled by default.</changelog>
<changelog author="dimstar@opensuse.org" date="1293451200">- Update to version 1.10.2:
  + fdo#31632: Fix embedding of grayscale jpegs in PS.
  + Fix the reported path of extents containing a curve.
  + Fix the compositing of unaligned boxes.
  + Reset the clipper in PDF upon finish.
  + Fix degenerates arcs to become a degenerate line.
  + Build support for autoconf 2.67
  + Fix painting of transformed patterns in PS
  + fdo#24688: Fix the EPS bounding box for PS and Fix the missing
    content for EPS
  + fdo#24691: Fix regression upon changing page size in PS/PDF
  + Only use ActualText with PDF-1.5 documents
  + Fix the bbox for type1 fallbacks.
  + fdo#31140: Reset the color after ending the context in PDF
  + fdo#31062: Fix the advance of subsetted type1 fonts
  + Fix handling of EXTEND_NONE gradients for PDF
  + Restrict in-place optimisation for a8 image masks with SOURCE</changelog>
<changelog author="vuntz@opensuse.org" date="1298376000">- Add missing libcairo-gobject2 to baselibs.conf.</changelog>
<changelog author="coolo@novell.com" date="1314619200">- Add cairo-fix-libs.patch: disable lto for cairo-sphinx as it
  breaks with -Wl,--as-needed.</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Fix baselibs requires for cairo-devel and make it available</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
<changelog author="vuntz@opensuse.org" date="1329220800">- Ship additional COPYING files that come with some utilities.
- Fix license of the tool subpackage: it is GPL-3.0+ (bnc#739748).
- Change the group of library subpackages from
  Development/Libraries/X11 to System/Libraries.</changelog>
<changelog author="zaitor@opensuse.org" date="1332763200">- Update to version 1.12.0:
  + Introduction of a new procedural pattern: the mesh gradient.
  + New API to create a callback pattern:
    cairo_pattern_create_raster_source.
  + XCB is now a supported backend.
  + New common API to address any surface as an image and so allow
    direct modification of the raster data:
    cairo_surface_create_similar_image, cairo_surface_map_to_image,
    and cairo_surface_unmap_image.
  + Many performance improvements.
  + Introduction of new antialias hints (NONE, FAST, GOOD, BEST).
  + Introduction of a new observation architecture:
    cairo_surface_observer_t.
  + OpenGL backend has seen significant work including the port to
    GLESv2 and the exploitation of advanced hardware features.
- Enable build of XCB backend as it's now officially supported: set
  %build_xcb_backend macro to 1.
- Note that we don't build Xlib/XCB support as it's disabled by
  default upstream.
- Also add pkgconfig(xcb-shm) BuildRequires for XCB/SHM support.
- Drop cairo-fix-libs.patch: fixed upstream.</changelog>
<changelog author="jeffm@suse.com" date="1335009600">- Add cairo-fix-wrong-allocation: fix wrong allocation in
  _cairo_pdf_surface_add_source_surface (bnc#758422).</changelog>
<changelog author="dimstar@opensuse.org" date="1335700800">- Update to version 1.12.2:
  + Allow applications to create 0x0 xlib surfaces, such as used by
    LibreOffice (fdo#49118)
  + Trim composite extents for SOURCE/CLEAR operators to the mask.
  + Use fallback fonts in PDF for unhandled computed glyph widths
    (fdo#48349)
  + Handle snapshots of recording surfaces for analysing pattern
    extents. Fixes a regression of reporting the PDF bounding box
    as being the page size.
  + Fix allocation size for PDF pattern ids. (fdo#49089)
  + Fix emission of rectilinear dashed segments, with and without
    scaling, and application of degenerate line joins.
  + Clamp unbounded fixup polygons to the clip extents.
  + Prevent infinite loop due to rounding errors whilst
    incrementing along dashes.
  + Prevent overflow for inline a8 span filling.
  + Miscellaneous build fixes for Cygwin on Windows and Solaris.
- Drop cairo-fix-wrong-allocation.patch: fixed upstream.</changelog>
<changelog author="dimstar@opensuse.org" date="1350043200">- Update to version 1.12.4:
  + Interior boxes were being dropped when amalgamating regions
    during tesselation (fdo#49446)
  + Allow building without gtk-doc installed
  + Invalid edge generation whilst reducing complex polygons
    (fdo#50852)
  + Stroking around tight cusps
  + Use locale correct formats for reading font subsetting and
    valid buffers (fdo#51443)
  + Ensure that the type1 subset includes all the glyph encodings
    (fdo#53040)
  + Upload the whole source for a repeating pattern (fdo#51910)
  + Fix damage tracking to handle continuation chunks corectly and
    so prevent crashes on win32 (fdo#53384)
  + Avoid emitting miter joins for degenerate line segments
    (fdo#407107)
  + Convert the relative path semgents into the backend coordinates
    and then back again to user coordinates (fdo#54732)
  + Fix extents computations for a degenerate path consisting only
    of a move-to (fdo#54549)
  + Prevent crashing on a degenerate project edge after polygon
    intersection (fdo#54822).
- Add pkgconfig(xext) BuildRequires: new verified dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1352203200">- Update to version 1.12.8:
  + Expand the sanity checking for broken combinations of
    XSendEvent and ShmCompletionEvent.
  + Notice that "The X.Org Foundation" sometimes also identifies
    itself as "The Xorg Foundation".
  + Handle various ages of libXext and its Shm headers.
  + Fix the invalid clipping of the source drawable when using SHM
    transport to upload images (fdo#56547).
  + Handle all Type1 postscript operators for better font
    compatibility (fdo#56265).
  + Fix a couple of memory leaks in Type1 font subsetting
    (fdo#56566)
  + Tighten the evaluation of the start/stop pen vertices, and catch
    a few instances where we would use a fan instead of a bevel.
    (fdo#56432)
  + Fix assumption that geometric clipping always succeeds with the
    span-compositor (fdo#56574)
  + Fix call to spline intersection when evaluating whether a stoke
    is visible.
  + Remember to copy inferior sources when using SHM to readback the
    surface for use as a source.
- Changes from version 1.12.6:
  + Fix the recording surface to actually snapshot the source and
    so fix PDF drawing.
  + Calling XSendEvent with an XShmCompletionEvent is incompatabile
    with older Xorg servers.
  + Reorder CloseDisplay chain so that XShm is not reinstantiated
    after shutdown, causing a potential crash if the Display was
    immediately recreated using the same memory address.
  + Make sure that the Xserver has attached to the SHM segment
    before deleting it from the global namespace on systems that do
    not support deferred deletion.
  + Type1 subsetting support for PDF (and PS) was once again
    improved to work with a larger number of PDF readers.
  + GLESv2 build fixes and improved support for embedded GPUs.
  + Tweak the invisible pen detection for applications that are
    currently using too large values for geometric tolerance.
  + A build fix for older freetype libraries.
- Rebase cairo-modules-no-version.patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1360843200">- Update to version 1.12.14:
  + Prevent user callbacks accessing user-data during destroy to
    prevent use-after-free bugs (mozilla#722975).
  + Use standard names for glyphs in subset fonts (PDF) (fdo#60248)
  + Fix detection of Win98. The logic for detecting Win98
    AlphaBlend() was inverted, disabling AlphaBlend() for everyone.
  + Prevent numeric overflow from extrapolating polygon edges to
    the clip boundary and causing severe render artifacts.
    (fdo#60489).
  + Fix computation of glyph string coordinates when breaking up
    runs for xlib.
  + Fix an assertion in the win32 backend for failing to clear its
    similar-images (fdo#60519).
- Changes from version 1.12.12:
  + Avoid replacing the entire image when uploading subimages
    (fdo#59635).
  + Force synchronisation for scratch SHM image buffers, so that we
    do not overwrite data as it is being read by X (fdo#59635).
  + Fix typos in detecting multisampling for the GL (MSAA) backend.
  + Fix a memory leak in the GL (MSAA) backend.
  + Fix a reference counting bug when mapping a GL surface to an
    image.
- Changes from version 1.12.10:
  + Append coincident elements to the recording's surface bbtree so
    that the list is not corrupted and the overlapping elements
    lost.
  + Fix cairo-trace to correctly record map-to-image/unmap-image
    and then replay them.
  + Ignore MappingNotifies when running the XCB testsuite as they
    are sent to all clients when the keyboard changes. The
    testsuite would detect the unexpected event and complain.
  + Handle very large images in the XCB backend.
  + Fix a memory leak in the xlib/shm layer, and prevent use of
    the SHM surfaces after the display is closed (fdo#58253).
  + Handle resizing of bitmap fonts, in preparation for a fix to
    fontconfig to correctly pass on the user request for scaling.
  + Always include subroutine 4 (hint replacement idion) when
    subsetting type 1 fonts in order to prevent a crash in
    cgpdftops on Mac OS/X.
  + Fix a couple of typos in the cairo-gobject.h header files for
    introspection.
  + Prevent a mutex deadlock when freeing a scaled-glyph containing
    a recording-surface that itself references another scaled-glyph
    (fdo#54950).
  + Make scaled-font cache actually thread-safe and prevent
    use-after-frees.
  + Restore support for older versions of XRender. A couple of
    typos and a few forgotten chunks prevented the xlib
    compositor from running correctly with XRender &lt; 0.10.
- Enable building of the GL Backend.</changelog>
<changelog author="pgajdos@suse.com" date="1364904000">- Add cairo-libpng16-v2.patch: Fix png usage with libpng 1.6:
  call png_set_read_user_transform_fn() before
  png_read_update_info() (bnc#810701).</changelog>
<changelog author="dimstar@opensuse.org" date="1369483200">- Drop cairo-libpng16-v2.patch: in its current form, this patch
  causes issues as that cairo.ImageSurface.create_from_png errors
  out with 'MemoryError' in all cases (bnc#821766).</changelog>
<changelog author="sbrabec@suse.cz" date="1373284800">- Add cairo-reduce-buddy-assertion.patch: Fix eog crash on
  assertion, after pressing Next (bnc#828074).</changelog>
<changelog author="dimstar@opensuse.org" date="1377604800">- Update to version 1.12.16:
  + Set the correct orientation for simple boxes with a negative
    scale factor.
  + Fix the creation of the shading dictionary in PDF.
  + Avoid upscaling bitmap fonts if possible.
  + Fix an assertion failure within the mempool allocator for
    shared memory.
  + Fix allocation size for CFF subsets.
  + Export cairo_matrix_t for GObject bindings.
  + Stop leaking the image data when loading PNGs.
  + Prevent an assertion failure when creating similar GL surfaces
    larger than supported by hardware.
  + Bugs fixed: fdo#61451, fdo#62885, fdo#61876, fdo#63196,
    fdo#697357, fdo#61592, fdo#68014, fdo#63787.
- Drop cairo-reduce-buddy-assertion.patch: fixed upstream.</changelog>
<changelog author="idonmez@suse.com" date="1377691200">- Add cairo-disable-lto.patch to disable LTO on s390{x} to fix the
  build.</changelog>
<changelog author="jw@suse.com" date="1397217600">- Added fix_for_fdo77298.patch
  So that inkscape can export 0.01mm lines again to PDF. Was broken in 1.12.3</changelog>

</package>
<package pkgid="3e2e8a4eaeb1e2be8787d6f5cc60784f67257b917f864e6c21fa01f5b2a5e65a" name="calibre" arch="i586">
    <version epoch="0" ver="1.5" rel="5.1"/>

<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1366977600">- updated to 0.9.28
- New features
  o Virtual Libraries: Easily partition your large calibre library into
    smaller 'virtual' libraries
  o Book details panel: Allow copying of links in the book details panel
    by right clicking on them.
  o Kobo driver: Add support for the new Kobo Aura HD and firmware version
    2.5.0
  o Metadata download: When showing downloaded covers, allow right
    clicking on a cover to view a full size version.
  o Driver for Easy player cyber book e touch and Droid 4
  o Edit ToC: Allow the size of the panels in the location view to be
    adjusted
  o When copying to a library by path, make it more efficient to choose
    between moving and copying
  o When checking if a zip/rar file is a comic or contains a single ebook
    to be auto-extracted, ignore thumbs.db files inside the archive
- Bug fixes
  o EPUB Input: Fix handling of EPUB files that contain images with
    non-ascii filenames.
  o Device driver: Detect Laser EB720 with newer firmware.
  o Fix bug in Danish translation causing books with language Ingush being
    incorrectly translated as Engelsk
  o PDF Output: Fix hyperlinks not working when converting an EPUB whose
    individual files have names with URL unsafe characters.
  o Book polishing: Fix inserting cover into an epub with no cover could
    lead to incorrect guide entry if the opf is not at the root of the
    epub.
  o ZIP Output: Fix links containing backslashes on windows
  o Fix polishing of AZW3 files not working on OS X.
  o Polishing books: Fix polishing erroring out if the book being polished
    has no cover
  o RTF Input: Add partial support for hyperlinks to web resources.
  o Fix book details panel showing incorrect info after deleting books
    from a connected device</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1368187200">- New Features
  o Kobo driver: Add support for showing 'Archived' books on the device.
  o Also up the supported firmware version to 2.5.3.
  o Driver for Blackberry 9790
  o Add a tweak to turn off the highlighting of the book count when using
    a virtual library (Preferences-&gt;Tweaks)
  o Add a button to clear the viewer search history in the viewer
  o Preferences, under Miscellaneous
  o Add keyboard shortcuts to clear the virtual Library and the additional
    restriction (Ctrl+Esc and Alt+Esc). Also use Shift+Esc to bring
    keyboard focus back tot he book list. Can be changed under
    Preferences-&gt;Keyboard
  o Docx metadata: Read the language of the file, if present
- New bugfixes
  o Kobo driver: Fix unable to read SD card on OS X/Linux
  o Content server: Fix unable to download ORIGINAL_* formats
  o Fix regression that broke searching for terms containing a quote mark
  o Fix regression that broke conversion of txt files when no input
    encoding is specified
  o When changing to a virtual library, refresh the Book Details panel.
  o Fix regression that caused searching for user categories to break.
  o Fix error when downloading only covers and reviewing downloaded
    metadata.
  o MOBI metadata: Strip XML unsafe unicode codepoints when reading
    metadata from MOBI files.
  o Txt Input: Use the gbk encoding for txt files with detected encoding
    of gb2312.
  o When pressing Ctrl+Home/End preserve the horizontal scroll position in
    the book list</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1372248000">- New Features
  o DOCX Input: Support for Table of Contents created using the Word Table
    of Contents tool. calibre now first looks for such a Table of Contents
    and only if one is not found does it generate a ToC from headings.
  o DOCX Input: Add support for images used as bullets in lists
  o DOCX Input: If a large image that looks like a cover is present at the
    start of the document, remove it and use it as the cover of the output
    ebook. This can be turned off under the DOCX Input section of the
    conversion dialog.
  o When dropping files onto the Book Details panel, ask for confirmation
    before adding the files to the book. The confirmation can be disabled.
  o News download: Add the 'downloaded from' link at the bottom of every
    article when using a touchscreen output profile (like the Tablet
    profile).
  o E-book viewer: Change the bookmark button to always popup a menu when
    clicked, makes accessing existing bookmarks easier.
  o After a bulk metadata download, focus the review button on the popup
    notification, instead of the OK button.-
- Bug Fixes
  o DOCX Input: Hide text that has been marked as not being visible in the
    web view in Word.
  o DOCX Input: When converting docx files with large numbers of unnamed
    images, do not crash on windows.
  o DOCX Input: Add support for the Word setting 'No space between
    paragraphs with the same style'.
  o MOBI Output: Fix rendering of SVG images that embed large raster
    images in 64bit calibre installs.
  o HTMLZ Output: Fix handling of images with URL unsafe filenames.
  o Fix unable to change the case of a previously used search because of
    the search history.
  o When searching allow use of uppercase location names, such as AUTHOR
    instead of author, automatically lowercasing them.
  o DOCX metadata: When reading covers from DOCX files use the first image
    as specified in the actual markup instead of just the first image in
    the container.
  o Kobo driver: Fix a regression when deleting empty shelves on Kobo
    devices with older firmware.
  o Do not show builtin plugins in the get new plugins dialog If a builtin
    plugin with the same name as a third party plugin exists, then the
  o builtin plagin was displayed in the get new plugins dialog as
    installed (happened with the new DOCX Input plugin).
  o Apple driver: When in synchronous mode (direct to iBooks), disable PDF
    transfers, as we can't update metadata in iTunes. Not sure when this
    started, but as of iTunes 11.0.4 it's broken.
  o Get Books: Fix error when using internal browser on some systems</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1373112000">- New Features
  o Book polishing: Add option to embed all referenced fonts when
    polishing books using the 'Polish Books' tool.
  o DOCX Input: Add support for clickable (hyperlinked) images
  o DOCX Input: Insert page breaks at the start of every new section
  o Drivers for Trekstor Pyrus Maxi and PocketBook Surfpad 2
  o DOCX Input: Add support for horizontal rules created by typing three
    hyphens and pressing enter.
- Bug fixes
  o Fix detection of SD Card in some PRS-T2N devices
  o MOBI Input: Fix a regression that broke parsing of MOBI files with
    malformed markup that also used entities for apostrophes.
  o Get Books: Update Woblink store plugin
  o Metadata download dialog: Prevent the buttons from being re-ordered
  when the Next button is clicked.
  o PDF Output: Fix links that point to URLs with query parameters being
    mangled by the conversion process.
  o DOCX Input: Fix links pointing to locations in the same document that
    contain multiple, redundant bookmarks not working.
  o EPUB/AZW3 Output: Fix splitting on page-break-after with plain text
    immediately following the split point causing the text to be added
    before rather than after the split point.
  o DOCX Input: handle bookmarks defined at the paragraph level
  o DOCX Input: Handle hyperlinks created as fields</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1374235200">- New Features
  o EPUB Output: Add an option to insert an inline Table of Contents into
    the main text.
  o Driver for LG Android phone
  o When matching books in the library against the device manually,
    pre-fill the search field with the book title
- Bug Fixes
  o PDF Input: Fix a regression that caused some images to be flipped when
    converting PDF files that use image rotation operators.
  o Fix regression that caused incorrect font size in dropcaps generated
    by the DOCX input plugin
  o Get Books: Fix searching for title and author returning some extra
    matches, if the title starts with an article like the, a or an.
  o PDF Output: Fix extra blank page being inserted at the start of the
    chapter when converting some epub files from feedbooks
  o PDF Output: Workaround bug in WebKit's getBoundingClientRect() method
    that could cause links to occasionally point to incorrect locations.
  o E-book viewer: Fix a bug that could cause the reported position to be
    incorrect immediately after opening a previously opened book. This
    also fixes the Back button not working if a link is clicked on the
    page immediately after opening the book.
  o Fix memory card not being detected for Elonex 621 on Windows
  o Fix regression in last release that broke auto-conversion of ebooks
    when sending to device/sending by email.
  o Get Books: Update amazon plugins for website changes
  o Allow using non-ascii chars in email passwords.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1375444800">- Updated to 0.9.42
- New Features
  o When downloading metadata from Amazon, convert the amazon categories
    into tags. You can turn this off by going to Preferences-&gt;Metadata
    download and configuring the Amazon source.
  o Kobo driver: Add an option to modify the styling in books being sent
    to the device, based on a template on the device.
  o Get Books: Add support for two more Polish ebook stores: cdp.pl and
    ebooki.allegro.pl
  o calibredb: Add a new clone command to create clones of libraries with
    the same custom columns, virtual libraries, etc. as the current
    library.
- Bug Fixes
  o MOBI metadata: Do not fail to set metadata in MOBI files if they have
    EXTH fields with NULL pointers to a cover or thumbnail.
  o Fix editing of book metadata failing when its timestamp is out of
    range for the system.
  o Fix renaming a user category to the same name it already has erases
    the user category.
  o Fix drag 'n drop of cover onto conversion dialog not working
  o Device drivers: Explicitly fsync() all files when writing to devices,
    to reduce chances of file corruption if the device is disconnected
    while jobs are running
  o Fix calibre not appearing in Ubuntu's 'Open with..' menu</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1376049600">- Updated to 0.9.43
- New Features
  o TXT Input: Allow using various markdown extensions for more features
    when converting markdown formatted txt files. See
    http://pythonhosted.org/Markdown/extensions/index.html for details.
  o Sending by email: Allow sending by email to an arbitrary combination
    of email address. Access it via the 'Select recipients' menu entry in
    the Email To menu.
  o A new 'Sort By' action for the right click menu. This allows sorting
    on all columns in the library, not just the visible columns. To use it
    go to Preferences-&gt;Toolbars and add it to 'The context menu for books
    in the calibre library'
  o Allow adding images into the comments field, by clicking on the insert
    link button in the comments editor in the edit metadata dialog.
  o Allow skipping the confirm bulk reconvert dialog
  o EPUB Input: If the EPUB file identifies an actual cover image in
    addition to the titlepage html file, use the cover image instead of
    rendering the titlepage. This is faster and has the advantage that an
  o EPUB to EPUB conversion preserves internal cover structure.
  o Get Books: Improve searching by removing punctuation from
    title/authors before matching.
- Bug Fixes
  o Conversion: Fix empty inline tags that are the second child of a
    paragraph causing text change location.
  o Fix book count in tooltip of choose library button not updating
  o Kobo driver: When deleting shelves that have been synced, the Activity
    entry for the shelf was not being deleted. This left a tile for the
    shelf on the home screen of the Glo and AuraHD.
  o Comments editor: The Insert Link button has no effect until the user
    clicks inside the comments box, therefore disable it until it is
    ready, to prevent confusion.
  o Get Books: Update various Polish store plugins</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1376740800">- Updated to 0.9.44
- New Features
  o Add an option to display all virtual libraries as tabs above the book
    list.
  o An improved cover trimming algorithm to automatically detect and
    remove borders and extra space from the edge of cover images. To try
    it use the 'Trim' button in the edit metadata dialog. This can
    sometimes remove too much so if you dont like the result, just click
    cancel. You can make the algorithm more or less aggressive via
    Preferences-&gt;Tweaks
  o Allow customizing the comic metadata reader plugin via
    Preferences-&gt;Plugins to read the series index from either the volume
    or the issue number of the comic.
  o Linux MTP driver: Add ids for some newer devices.
  o Add a trim cover option to the bulk metadata edit dialog
  o Make the book information dialog user resizable, with a splitter
    between the cover and the info panel. Also change the background of
    the cover panel for books that have been marked using the Temp marker
    plugin.
  o Driver for Samsung Galaxy Young Android phone
-Bug Fixes
  o PDF Output: Do not abort conversion if the document being converted
  has an HTML cover (found in some broken EPUB files).
  o RTF Input: When converting RTF files with no codepage, use the input
  encoding setting as the codepage.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1377345600">- updated to 1.0
- New Features
  o A new 'cover grid' view of the books in your calibre library
  o A new, faster database backend
  o For a summary of the major changes in calibre between 0.9 and 1.0, see
    http://calibre-ebook.com/new-in/ten
  o RTF Input: Add option to ignore WMF images iinstead of replacing them
    with a placeholder.
  o Content server: Make virtual libraries available as searches from the
    start page. They work just like saved searches, clicking on a virtual
    library will show you all the books in that virtual library.
- Bug Fixes
  o Remove extra, useless 'language' entry in metadata download
    configuration dialog
  o Kobo driver: Display device collections even if the driver is
    configured to not manage shelves on the device.
  o Fix typo in calibre.desktop file on linux
  o Edit metadata dialog: Disable OK button while results are being
    downloaded.
  o In OS X 10.8 Apple stopped redirecting stdout/stderr to Console.app
    for applications launched by launch services. Re-enable the
    redirection, useful for debugging.
  o Fix virtual library tabs not being updated when using VL button</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1377950400">- updated to 1.1
- New Features
  o Rewrite the HTML metadata parser to make it faster and more robust.
  o Book list: When sorting on a currently unsorted column, use the last
    applied sort for that column, instead of always sorting in ascending
    order.
  o PocketBook driver: Scan for books files in the entire device not just
    in the 'books' folder
-Bug Fixes
  o Fix a regression in 1.0 that could cause the dates in custom date-type
    columns to change in some timezones when using the edit metadata
    dialog to make unrelated changes.
  o When replacing formats in a book with a very long title+authors on
    windows, calibre could leave behind the old format file, because the
    filename shortening algorithm has changed. Handle that case.
  o Fix content server giving an error if you return to the top level page
    after using the virtual libraries.
  o Fix calibredb not updating the running calibre instance properly in
    1.0
  o Fix a regression in 1.0 that broke splitting of multiple valued field
    like tags into many items during a rename.
  o Fix a regression in 1.0 that caused an error when trying to set values
    for tags with the same item repeated, with different case.
  o Fix a regression that broke downloading news when output format is set
    to PDF
  o Creating a catalog with an already existing catalog in the library
    would cause a temporary duplicate entry in the book list. Also fix the
    author sort for catalogs generated in the AZW3 format not being
    correct.
  o EPUB metadata: When changing the title in an EPUB 2.0 file that has
    multiple titles, remove the extra titles.
  o Fix a regression in 1.0 that caused Search and Replace in the bulk
    metadata edit dialog to be much slower than before
  o Fix a regression in 1.0 that caused incorrect sorting and searching on
    some composite columns (columns built from other columns).
  o Fix a regression in 1.0 that prevented the moving of libraries inside
    calibre
  o Virtual Library tabs: If the user activates a hidden tab via the
  o Virtual Library button, change the name of the All Books tab to
    reflect the hidden virtual library.
  o Ignore text records in the database that are damaged, instead of
    erroring out. Lets the rest of the data be used.
  o Fix regression that broke calibredb catalog when sorting on the id
    field.
  o HTML Input: Handle malformed OPF files when converting.
  o Ensure that the Formats custom column (if present) is updated when a
    new format is created as a result of a conversion.
  o Fix a bug in 1.0 that broke the Check Library function on computers
    with non-English locales.
  o Content server: Fix blank username causing error on startup.
  o Fix sorting of book list by multi-valued fields like tags not correct
    in the new backend.</changelog>
<changelog author="jw@suse.com" date="1378123200">- added Requires: python-apsw (and as BuildRequires too, to catch the errors early)</changelog>
<changelog author="jw@suse.com" date="1378209600">- suggestion from bnc#831983#c12 added:
  Requires: python-sip(api) = 9.2</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1378468800">- update to 1.2
- New Features
  o Conversion: Add support for the CSS3 rem font size unit
  o MTP devices, such as Android tablets/phones: Allow ignoring any folder
    on the device, not just top level folders. For newly connected
    devices, also scan /Android/data/com.amazon.kindle for books by
    default (newer versions of the Kindle app place downloaded files
    there).
  o Speed up sorting when the book list is showing a restricted set of
    books, such as when the results of a search are displayed or a virtual
    library is used.
  o Edit metadata dialog: Add an undo option for the Trim cover button.
- Bug fixes
  o Amazon metadata download: Update to handle website changes at
    amazon.com
  o PDF Output: Workaround a bug in the library calibre uses to render
  o HTML to PDF that caused text in some documents that used small-caps
    fonts to not render correctly.
  o Kobo driver: When a sideloaded kepub is added from a Kobo device to
    the calibre library, it is added as an epub, but the file copied is
    corrupt.
  o Fix changing the user interface language in the welcome wizard causing
    some parts of the interface to remain in the old language until
    calibre is restarted.
  o Fix regression in 1.0 that broke setting author names with the |
    character in them.
  o Content server: When running from inside the main calibre program, do
    not restrict the books shown based on the current virtual library in
    the main program. If you wish to restrict the books shown in the
    content server, use Preferences-&gt;Sharing over the net.
  o Output dates in the local timezone instead of UTC when generating CSV
    catalogs
  o Library maintenance: When doing a check library instead of dumping the
    database to SQL and restoring it, run a VACUUM. This works around
    various bugs in the dump and restore capabilities of apsw.
  o Edit metadata dialog: Fix adding an image to an empty comments block
    not working
  o Conversion: Fix font declarations with invalid font-family values
    causing conversion to abort when subsetting is enabled.
  o MOBI Output: Fix conversion of some super/sub scripts failling if they
    are the first or last element in a paragraph.
  o New database backend: Various improvements to make the backend more
    robust against databases with invalid/corrupt data in them.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1378555200">- reintegrated upstream icons into the main package. Because the other
  iconset doesn't work correctly.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1379160000">- updated to 1.3
- New Features
  o When doing searches or switching between virtual libraries in the main
    book list, preserve the current book. The currently selected book will
    remain visible if it is present in the results of the search or the
    selected virtual library.
  o Drivers for Oppo Find 5 and PocketBook Mini 515
- Bug Fixes
  o DOCX Input: Handle numbered paragraphs where the numbering is
    specified in the paragraph style, instead of on the paragraph
    directly. Also support the use of arbitrary, styled text for bullets.
  o DOCX Input: Fix a single line break at the end of a paragraph not
    being rendered as a blank line.
  o DOCX Input: Fix extra top/bottom margins around headings when the
    heading style in word does not specify any top/bottom margins.
  o DOCX Input: Handle images in footnotes and endnotes.
  o ODT Input: Only treat the first image as a cover if it is of suitable
    size, instead of any image in the document.
  o Book polishing: Do not leave behind the old comments when updating
    metadata if the comments have been deleted in calibre.
  o PDF Output: Fix non-breaking space characters incorrectly rendered in
    PDF outline.
  o Content server: Fix error in opds feed after using virtual libraries
    in the main server.
  o Do not scroll the book list horizontally after editing metadata.
  o New database backend: Handle databases that contain multiple
    tags/series/publishers/etc. that differ only in case.</changelog>
<changelog author="toddrme2178@gmail.com" date="1379592000">- Clean up spec file formatting
- Make sure BuildRequires and Requires are consistent
- Remove python-sip(api) = 9.2 dependency, it cannot be satisfied
  anymore and is apparently no longer necessary anyway
- Remove redundant imagesdir
- Add version for icon provides/obsoletes to avoid self-conflict</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1379678400">- updated to 1.4
- New Features
  o Column icons: Allow the use of multiple icons with column icon rules.
  o Kobo driver: Add support for new cover handling in Kobo Aura with
    updated firmware
  o Driver for Icarus Essence
  o Show a warning when attempting to copy books between libraries that do
    not have the same set of custom columns.
  o EPUB/AZW3 Output: Use shorthand forms for margin, padding and border
    CSS properties, where possible
  o Allow colons in identifier values, needed for using URIs as
    identifiers
  o Comments editor: Allow treating arbitrary URLs as images
  o Show full path of library under mouse in status bar when
    switching/renaming/deleting libraries via the calibre library button.
  o DOCX Input: Add support for embedded EMF images that are just wrappers
    around an actual raster image.
- Bug Fixes
  o Conversion: Fix font subsetting not working for large fonts with more
    than 4000 glyphs, such as CJK fonts
  o HTML Input: Fix a regression that broke processing of HTML files that
    contain meta tags with dc: namespaced attribute values.
  o Fix switching to an empty virtual library not blanking the book
    details panel
  o Keep position when deleting tags in the tag editor
  o Book details panel: Render custom comments fields the same as the
    builtin comments field. In particular this fixes problems caused by
    wide text and images in custom comments fields.
  o Metadata jackets: Do not error out when using a custom template with
    some custom fields that are not present.
  o AZW3 Output: Dont choke on invalid (undecodable) links in the input
    document
  o Cover grid: Respect the double click on library view tweak
  o Fix covers set by drag and drop or pasting in the edit metadata dialog
    showing compression artifacts due to aggressive jpeg compression
  o Conversion: Fix a bug that could cause incorrect border values to be
    used when cascading, shorthand border CSS is present.
  o Fix regression in 1.3 that caused the book list to not track the
    current book when using Next/Previous in the edit metadata dialog.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt; - 1.4.0" date="1379764800">- removed make linux_mount_helper from spec because it is removed from
  upstream with patch 7d54d25844efebfb3d6de2bb2b9af77dbf72d8b8</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt; - 1.5.0" date="1380196800">- updated to 1.5
- New Features
  o Driver for Woxter Scriba
  o Bulk metadata edit: Allow setting the comments for all selected books
    and also allow cloning the covers. Cloning covers means that the cover
    of the first selected book will be set for all other selected books.
- Bug Fixes
  o Windows: Improved device ejection code. Eject individual drives before
    trying to eject the device. This fixes incomplete ejection with the
    Nook devices.
  o Catalogs: fix exclude tags rules not working in non-English locales
    when creating catalogs in EPUB/MOBI formats.
  o Kobo driver: Fix reading status being cleared when connecting to a
  o Kobo with older firmware and metadata management set to automatic.
  o Content server: Sort virtual libraries by name
  o DOCX Input: Convert tabs in the docx file into non-breaking spaces in
    the output document. Note that custom tab stops are not supported.
  o Conversion: Handle the style attribute on the  tag
  o Handle databases with invalid ratings link tables
  o DOCX Input: Handle DOCX files with missing referenced styles
  o Update amazon metadata download plugin for changes to the Amazon
    website</changelog>
<changelog author="Catalin Iacob &lt;iacobcatalin@gmail.com&gt;" date="1388750400">- Add calibre-support-newer-kobo-firmware.diff: support newer Kobo firmware
  versions (up to 3.1.5). Fixes bnc#857708</changelog>

</package>
<package pkgid="e23ab46ab10ced6dc15094cba02266551380a627ec4f3c6e658b5c73d93b7ede" name="calibre" arch="src">
    <version epoch="0" ver="1.5" rel="5.1"/>

<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1366977600">- updated to 0.9.28
- New features
  o Virtual Libraries: Easily partition your large calibre library into
    smaller 'virtual' libraries
  o Book details panel: Allow copying of links in the book details panel
    by right clicking on them.
  o Kobo driver: Add support for the new Kobo Aura HD and firmware version
    2.5.0
  o Metadata download: When showing downloaded covers, allow right
    clicking on a cover to view a full size version.
  o Driver for Easy player cyber book e touch and Droid 4
  o Edit ToC: Allow the size of the panels in the location view to be
    adjusted
  o When copying to a library by path, make it more efficient to choose
    between moving and copying
  o When checking if a zip/rar file is a comic or contains a single ebook
    to be auto-extracted, ignore thumbs.db files inside the archive
- Bug fixes
  o EPUB Input: Fix handling of EPUB files that contain images with
    non-ascii filenames.
  o Device driver: Detect Laser EB720 with newer firmware.
  o Fix bug in Danish translation causing books with language Ingush being
    incorrectly translated as Engelsk
  o PDF Output: Fix hyperlinks not working when converting an EPUB whose
    individual files have names with URL unsafe characters.
  o Book polishing: Fix inserting cover into an epub with no cover could
    lead to incorrect guide entry if the opf is not at the root of the
    epub.
  o ZIP Output: Fix links containing backslashes on windows
  o Fix polishing of AZW3 files not working on OS X.
  o Polishing books: Fix polishing erroring out if the book being polished
    has no cover
  o RTF Input: Add partial support for hyperlinks to web resources.
  o Fix book details panel showing incorrect info after deleting books
    from a connected device</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1368187200">- New Features
  o Kobo driver: Add support for showing 'Archived' books on the device.
  o Also up the supported firmware version to 2.5.3.
  o Driver for Blackberry 9790
  o Add a tweak to turn off the highlighting of the book count when using
    a virtual library (Preferences-&gt;Tweaks)
  o Add a button to clear the viewer search history in the viewer
  o Preferences, under Miscellaneous
  o Add keyboard shortcuts to clear the virtual Library and the additional
    restriction (Ctrl+Esc and Alt+Esc). Also use Shift+Esc to bring
    keyboard focus back tot he book list. Can be changed under
    Preferences-&gt;Keyboard
  o Docx metadata: Read the language of the file, if present
- New bugfixes
  o Kobo driver: Fix unable to read SD card on OS X/Linux
  o Content server: Fix unable to download ORIGINAL_* formats
  o Fix regression that broke searching for terms containing a quote mark
  o Fix regression that broke conversion of txt files when no input
    encoding is specified
  o When changing to a virtual library, refresh the Book Details panel.
  o Fix regression that caused searching for user categories to break.
  o Fix error when downloading only covers and reviewing downloaded
    metadata.
  o MOBI metadata: Strip XML unsafe unicode codepoints when reading
    metadata from MOBI files.
  o Txt Input: Use the gbk encoding for txt files with detected encoding
    of gb2312.
  o When pressing Ctrl+Home/End preserve the horizontal scroll position in
    the book list</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1372248000">- New Features
  o DOCX Input: Support for Table of Contents created using the Word Table
    of Contents tool. calibre now first looks for such a Table of Contents
    and only if one is not found does it generate a ToC from headings.
  o DOCX Input: Add support for images used as bullets in lists
  o DOCX Input: If a large image that looks like a cover is present at the
    start of the document, remove it and use it as the cover of the output
    ebook. This can be turned off under the DOCX Input section of the
    conversion dialog.
  o When dropping files onto the Book Details panel, ask for confirmation
    before adding the files to the book. The confirmation can be disabled.
  o News download: Add the 'downloaded from' link at the bottom of every
    article when using a touchscreen output profile (like the Tablet
    profile).
  o E-book viewer: Change the bookmark button to always popup a menu when
    clicked, makes accessing existing bookmarks easier.
  o After a bulk metadata download, focus the review button on the popup
    notification, instead of the OK button.-
- Bug Fixes
  o DOCX Input: Hide text that has been marked as not being visible in the
    web view in Word.
  o DOCX Input: When converting docx files with large numbers of unnamed
    images, do not crash on windows.
  o DOCX Input: Add support for the Word setting 'No space between
    paragraphs with the same style'.
  o MOBI Output: Fix rendering of SVG images that embed large raster
    images in 64bit calibre installs.
  o HTMLZ Output: Fix handling of images with URL unsafe filenames.
  o Fix unable to change the case of a previously used search because of
    the search history.
  o When searching allow use of uppercase location names, such as AUTHOR
    instead of author, automatically lowercasing them.
  o DOCX metadata: When reading covers from DOCX files use the first image
    as specified in the actual markup instead of just the first image in
    the container.
  o Kobo driver: Fix a regression when deleting empty shelves on Kobo
    devices with older firmware.
  o Do not show builtin plugins in the get new plugins dialog If a builtin
    plugin with the same name as a third party plugin exists, then the
  o builtin plagin was displayed in the get new plugins dialog as
    installed (happened with the new DOCX Input plugin).
  o Apple driver: When in synchronous mode (direct to iBooks), disable PDF
    transfers, as we can't update metadata in iTunes. Not sure when this
    started, but as of iTunes 11.0.4 it's broken.
  o Get Books: Fix error when using internal browser on some systems</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1373112000">- New Features
  o Book polishing: Add option to embed all referenced fonts when
    polishing books using the 'Polish Books' tool.
  o DOCX Input: Add support for clickable (hyperlinked) images
  o DOCX Input: Insert page breaks at the start of every new section
  o Drivers for Trekstor Pyrus Maxi and PocketBook Surfpad 2
  o DOCX Input: Add support for horizontal rules created by typing three
    hyphens and pressing enter.
- Bug fixes
  o Fix detection of SD Card in some PRS-T2N devices
  o MOBI Input: Fix a regression that broke parsing of MOBI files with
    malformed markup that also used entities for apostrophes.
  o Get Books: Update Woblink store plugin
  o Metadata download dialog: Prevent the buttons from being re-ordered
  when the Next button is clicked.
  o PDF Output: Fix links that point to URLs with query parameters being
    mangled by the conversion process.
  o DOCX Input: Fix links pointing to locations in the same document that
    contain multiple, redundant bookmarks not working.
  o EPUB/AZW3 Output: Fix splitting on page-break-after with plain text
    immediately following the split point causing the text to be added
    before rather than after the split point.
  o DOCX Input: handle bookmarks defined at the paragraph level
  o DOCX Input: Handle hyperlinks created as fields</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1374235200">- New Features
  o EPUB Output: Add an option to insert an inline Table of Contents into
    the main text.
  o Driver for LG Android phone
  o When matching books in the library against the device manually,
    pre-fill the search field with the book title
- Bug Fixes
  o PDF Input: Fix a regression that caused some images to be flipped when
    converting PDF files that use image rotation operators.
  o Fix regression that caused incorrect font size in dropcaps generated
    by the DOCX input plugin
  o Get Books: Fix searching for title and author returning some extra
    matches, if the title starts with an article like the, a or an.
  o PDF Output: Fix extra blank page being inserted at the start of the
    chapter when converting some epub files from feedbooks
  o PDF Output: Workaround bug in WebKit's getBoundingClientRect() method
    that could cause links to occasionally point to incorrect locations.
  o E-book viewer: Fix a bug that could cause the reported position to be
    incorrect immediately after opening a previously opened book. This
    also fixes the Back button not working if a link is clicked on the
    page immediately after opening the book.
  o Fix memory card not being detected for Elonex 621 on Windows
  o Fix regression in last release that broke auto-conversion of ebooks
    when sending to device/sending by email.
  o Get Books: Update amazon plugins for website changes
  o Allow using non-ascii chars in email passwords.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1375444800">- Updated to 0.9.42
- New Features
  o When downloading metadata from Amazon, convert the amazon categories
    into tags. You can turn this off by going to Preferences-&gt;Metadata
    download and configuring the Amazon source.
  o Kobo driver: Add an option to modify the styling in books being sent
    to the device, based on a template on the device.
  o Get Books: Add support for two more Polish ebook stores: cdp.pl and
    ebooki.allegro.pl
  o calibredb: Add a new clone command to create clones of libraries with
    the same custom columns, virtual libraries, etc. as the current
    library.
- Bug Fixes
  o MOBI metadata: Do not fail to set metadata in MOBI files if they have
    EXTH fields with NULL pointers to a cover or thumbnail.
  o Fix editing of book metadata failing when its timestamp is out of
    range for the system.
  o Fix renaming a user category to the same name it already has erases
    the user category.
  o Fix drag 'n drop of cover onto conversion dialog not working
  o Device drivers: Explicitly fsync() all files when writing to devices,
    to reduce chances of file corruption if the device is disconnected
    while jobs are running
  o Fix calibre not appearing in Ubuntu's 'Open with..' menu</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1376049600">- Updated to 0.9.43
- New Features
  o TXT Input: Allow using various markdown extensions for more features
    when converting markdown formatted txt files. See
    http://pythonhosted.org/Markdown/extensions/index.html for details.
  o Sending by email: Allow sending by email to an arbitrary combination
    of email address. Access it via the 'Select recipients' menu entry in
    the Email To menu.
  o A new 'Sort By' action for the right click menu. This allows sorting
    on all columns in the library, not just the visible columns. To use it
    go to Preferences-&gt;Toolbars and add it to 'The context menu for books
    in the calibre library'
  o Allow adding images into the comments field, by clicking on the insert
    link button in the comments editor in the edit metadata dialog.
  o Allow skipping the confirm bulk reconvert dialog
  o EPUB Input: If the EPUB file identifies an actual cover image in
    addition to the titlepage html file, use the cover image instead of
    rendering the titlepage. This is faster and has the advantage that an
  o EPUB to EPUB conversion preserves internal cover structure.
  o Get Books: Improve searching by removing punctuation from
    title/authors before matching.
- Bug Fixes
  o Conversion: Fix empty inline tags that are the second child of a
    paragraph causing text change location.
  o Fix book count in tooltip of choose library button not updating
  o Kobo driver: When deleting shelves that have been synced, the Activity
    entry for the shelf was not being deleted. This left a tile for the
    shelf on the home screen of the Glo and AuraHD.
  o Comments editor: The Insert Link button has no effect until the user
    clicks inside the comments box, therefore disable it until it is
    ready, to prevent confusion.
  o Get Books: Update various Polish store plugins</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1376740800">- Updated to 0.9.44
- New Features
  o Add an option to display all virtual libraries as tabs above the book
    list.
  o An improved cover trimming algorithm to automatically detect and
    remove borders and extra space from the edge of cover images. To try
    it use the 'Trim' button in the edit metadata dialog. This can
    sometimes remove too much so if you dont like the result, just click
    cancel. You can make the algorithm more or less aggressive via
    Preferences-&gt;Tweaks
  o Allow customizing the comic metadata reader plugin via
    Preferences-&gt;Plugins to read the series index from either the volume
    or the issue number of the comic.
  o Linux MTP driver: Add ids for some newer devices.
  o Add a trim cover option to the bulk metadata edit dialog
  o Make the book information dialog user resizable, with a splitter
    between the cover and the info panel. Also change the background of
    the cover panel for books that have been marked using the Temp marker
    plugin.
  o Driver for Samsung Galaxy Young Android phone
-Bug Fixes
  o PDF Output: Do not abort conversion if the document being converted
  has an HTML cover (found in some broken EPUB files).
  o RTF Input: When converting RTF files with no codepage, use the input
  encoding setting as the codepage.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1377345600">- updated to 1.0
- New Features
  o A new 'cover grid' view of the books in your calibre library
  o A new, faster database backend
  o For a summary of the major changes in calibre between 0.9 and 1.0, see
    http://calibre-ebook.com/new-in/ten
  o RTF Input: Add option to ignore WMF images iinstead of replacing them
    with a placeholder.
  o Content server: Make virtual libraries available as searches from the
    start page. They work just like saved searches, clicking on a virtual
    library will show you all the books in that virtual library.
- Bug Fixes
  o Remove extra, useless 'language' entry in metadata download
    configuration dialog
  o Kobo driver: Display device collections even if the driver is
    configured to not manage shelves on the device.
  o Fix typo in calibre.desktop file on linux
  o Edit metadata dialog: Disable OK button while results are being
    downloaded.
  o In OS X 10.8 Apple stopped redirecting stdout/stderr to Console.app
    for applications launched by launch services. Re-enable the
    redirection, useful for debugging.
  o Fix virtual library tabs not being updated when using VL button</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1377950400">- updated to 1.1
- New Features
  o Rewrite the HTML metadata parser to make it faster and more robust.
  o Book list: When sorting on a currently unsorted column, use the last
    applied sort for that column, instead of always sorting in ascending
    order.
  o PocketBook driver: Scan for books files in the entire device not just
    in the 'books' folder
-Bug Fixes
  o Fix a regression in 1.0 that could cause the dates in custom date-type
    columns to change in some timezones when using the edit metadata
    dialog to make unrelated changes.
  o When replacing formats in a book with a very long title+authors on
    windows, calibre could leave behind the old format file, because the
    filename shortening algorithm has changed. Handle that case.
  o Fix content server giving an error if you return to the top level page
    after using the virtual libraries.
  o Fix calibredb not updating the running calibre instance properly in
    1.0
  o Fix a regression in 1.0 that broke splitting of multiple valued field
    like tags into many items during a rename.
  o Fix a regression in 1.0 that caused an error when trying to set values
    for tags with the same item repeated, with different case.
  o Fix a regression that broke downloading news when output format is set
    to PDF
  o Creating a catalog with an already existing catalog in the library
    would cause a temporary duplicate entry in the book list. Also fix the
    author sort for catalogs generated in the AZW3 format not being
    correct.
  o EPUB metadata: When changing the title in an EPUB 2.0 file that has
    multiple titles, remove the extra titles.
  o Fix a regression in 1.0 that caused Search and Replace in the bulk
    metadata edit dialog to be much slower than before
  o Fix a regression in 1.0 that caused incorrect sorting and searching on
    some composite columns (columns built from other columns).
  o Fix a regression in 1.0 that prevented the moving of libraries inside
    calibre
  o Virtual Library tabs: If the user activates a hidden tab via the
  o Virtual Library button, change the name of the All Books tab to
    reflect the hidden virtual library.
  o Ignore text records in the database that are damaged, instead of
    erroring out. Lets the rest of the data be used.
  o Fix regression that broke calibredb catalog when sorting on the id
    field.
  o HTML Input: Handle malformed OPF files when converting.
  o Ensure that the Formats custom column (if present) is updated when a
    new format is created as a result of a conversion.
  o Fix a bug in 1.0 that broke the Check Library function on computers
    with non-English locales.
  o Content server: Fix blank username causing error on startup.
  o Fix sorting of book list by multi-valued fields like tags not correct
    in the new backend.</changelog>
<changelog author="jw@suse.com" date="1378123200">- added Requires: python-apsw (and as BuildRequires too, to catch the errors early)</changelog>
<changelog author="jw@suse.com" date="1378209600">- suggestion from bnc#831983#c12 added:
  Requires: python-sip(api) = 9.2</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1378468800">- update to 1.2
- New Features
  o Conversion: Add support for the CSS3 rem font size unit
  o MTP devices, such as Android tablets/phones: Allow ignoring any folder
    on the device, not just top level folders. For newly connected
    devices, also scan /Android/data/com.amazon.kindle for books by
    default (newer versions of the Kindle app place downloaded files
    there).
  o Speed up sorting when the book list is showing a restricted set of
    books, such as when the results of a search are displayed or a virtual
    library is used.
  o Edit metadata dialog: Add an undo option for the Trim cover button.
- Bug fixes
  o Amazon metadata download: Update to handle website changes at
    amazon.com
  o PDF Output: Workaround a bug in the library calibre uses to render
  o HTML to PDF that caused text in some documents that used small-caps
    fonts to not render correctly.
  o Kobo driver: When a sideloaded kepub is added from a Kobo device to
    the calibre library, it is added as an epub, but the file copied is
    corrupt.
  o Fix changing the user interface language in the welcome wizard causing
    some parts of the interface to remain in the old language until
    calibre is restarted.
  o Fix regression in 1.0 that broke setting author names with the |
    character in them.
  o Content server: When running from inside the main calibre program, do
    not restrict the books shown based on the current virtual library in
    the main program. If you wish to restrict the books shown in the
    content server, use Preferences-&gt;Sharing over the net.
  o Output dates in the local timezone instead of UTC when generating CSV
    catalogs
  o Library maintenance: When doing a check library instead of dumping the
    database to SQL and restoring it, run a VACUUM. This works around
    various bugs in the dump and restore capabilities of apsw.
  o Edit metadata dialog: Fix adding an image to an empty comments block
    not working
  o Conversion: Fix font declarations with invalid font-family values
    causing conversion to abort when subsetting is enabled.
  o MOBI Output: Fix conversion of some super/sub scripts failling if they
    are the first or last element in a paragraph.
  o New database backend: Various improvements to make the backend more
    robust against databases with invalid/corrupt data in them.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1378555200">- reintegrated upstream icons into the main package. Because the other
  iconset doesn't work correctly.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1379160000">- updated to 1.3
- New Features
  o When doing searches or switching between virtual libraries in the main
    book list, preserve the current book. The currently selected book will
    remain visible if it is present in the results of the search or the
    selected virtual library.
  o Drivers for Oppo Find 5 and PocketBook Mini 515
- Bug Fixes
  o DOCX Input: Handle numbered paragraphs where the numbering is
    specified in the paragraph style, instead of on the paragraph
    directly. Also support the use of arbitrary, styled text for bullets.
  o DOCX Input: Fix a single line break at the end of a paragraph not
    being rendered as a blank line.
  o DOCX Input: Fix extra top/bottom margins around headings when the
    heading style in word does not specify any top/bottom margins.
  o DOCX Input: Handle images in footnotes and endnotes.
  o ODT Input: Only treat the first image as a cover if it is of suitable
    size, instead of any image in the document.
  o Book polishing: Do not leave behind the old comments when updating
    metadata if the comments have been deleted in calibre.
  o PDF Output: Fix non-breaking space characters incorrectly rendered in
    PDF outline.
  o Content server: Fix error in opds feed after using virtual libraries
    in the main server.
  o Do not scroll the book list horizontally after editing metadata.
  o New database backend: Handle databases that contain multiple
    tags/series/publishers/etc. that differ only in case.</changelog>
<changelog author="toddrme2178@gmail.com" date="1379592000">- Clean up spec file formatting
- Make sure BuildRequires and Requires are consistent
- Remove python-sip(api) = 9.2 dependency, it cannot be satisfied
  anymore and is apparently no longer necessary anyway
- Remove redundant imagesdir
- Add version for icon provides/obsoletes to avoid self-conflict</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1379678400">- updated to 1.4
- New Features
  o Column icons: Allow the use of multiple icons with column icon rules.
  o Kobo driver: Add support for new cover handling in Kobo Aura with
    updated firmware
  o Driver for Icarus Essence
  o Show a warning when attempting to copy books between libraries that do
    not have the same set of custom columns.
  o EPUB/AZW3 Output: Use shorthand forms for margin, padding and border
    CSS properties, where possible
  o Allow colons in identifier values, needed for using URIs as
    identifiers
  o Comments editor: Allow treating arbitrary URLs as images
  o Show full path of library under mouse in status bar when
    switching/renaming/deleting libraries via the calibre library button.
  o DOCX Input: Add support for embedded EMF images that are just wrappers
    around an actual raster image.
- Bug Fixes
  o Conversion: Fix font subsetting not working for large fonts with more
    than 4000 glyphs, such as CJK fonts
  o HTML Input: Fix a regression that broke processing of HTML files that
    contain meta tags with dc: namespaced attribute values.
  o Fix switching to an empty virtual library not blanking the book
    details panel
  o Keep position when deleting tags in the tag editor
  o Book details panel: Render custom comments fields the same as the
    builtin comments field. In particular this fixes problems caused by
    wide text and images in custom comments fields.
  o Metadata jackets: Do not error out when using a custom template with
    some custom fields that are not present.
  o AZW3 Output: Dont choke on invalid (undecodable) links in the input
    document
  o Cover grid: Respect the double click on library view tweak
  o Fix covers set by drag and drop or pasting in the edit metadata dialog
    showing compression artifacts due to aggressive jpeg compression
  o Conversion: Fix a bug that could cause incorrect border values to be
    used when cascading, shorthand border CSS is present.
  o Fix regression in 1.3 that caused the book list to not track the
    current book when using Next/Previous in the edit metadata dialog.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt; - 1.4.0" date="1379764800">- removed make linux_mount_helper from spec because it is removed from
  upstream with patch 7d54d25844efebfb3d6de2bb2b9af77dbf72d8b8</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt; - 1.5.0" date="1380196800">- updated to 1.5
- New Features
  o Driver for Woxter Scriba
  o Bulk metadata edit: Allow setting the comments for all selected books
    and also allow cloning the covers. Cloning covers means that the cover
    of the first selected book will be set for all other selected books.
- Bug Fixes
  o Windows: Improved device ejection code. Eject individual drives before
    trying to eject the device. This fixes incomplete ejection with the
    Nook devices.
  o Catalogs: fix exclude tags rules not working in non-English locales
    when creating catalogs in EPUB/MOBI formats.
  o Kobo driver: Fix reading status being cleared when connecting to a
  o Kobo with older firmware and metadata management set to automatic.
  o Content server: Sort virtual libraries by name
  o DOCX Input: Convert tabs in the docx file into non-breaking spaces in
    the output document. Note that custom tab stops are not supported.
  o Conversion: Handle the style attribute on the  tag
  o Handle databases with invalid ratings link tables
  o DOCX Input: Handle DOCX files with missing referenced styles
  o Update amazon metadata download plugin for changes to the Amazon
    website</changelog>
<changelog author="Catalin Iacob &lt;iacobcatalin@gmail.com&gt;" date="1388750400">- Add calibre-support-newer-kobo-firmware.diff: support newer Kobo firmware
  versions (up to 3.1.5). Fixes bnc#857708</changelog>

</package>
<package pkgid="0a067067b065919b46c793ec73a0a16eb29f0739222bdf5899653852e2cfc6aa" name="calibre" arch="x86_64">
    <version epoch="0" ver="1.5" rel="5.1"/>

<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1366977600">- updated to 0.9.28
- New features
  o Virtual Libraries: Easily partition your large calibre library into
    smaller 'virtual' libraries
  o Book details panel: Allow copying of links in the book details panel
    by right clicking on them.
  o Kobo driver: Add support for the new Kobo Aura HD and firmware version
    2.5.0
  o Metadata download: When showing downloaded covers, allow right
    clicking on a cover to view a full size version.
  o Driver for Easy player cyber book e touch and Droid 4
  o Edit ToC: Allow the size of the panels in the location view to be
    adjusted
  o When copying to a library by path, make it more efficient to choose
    between moving and copying
  o When checking if a zip/rar file is a comic or contains a single ebook
    to be auto-extracted, ignore thumbs.db files inside the archive
- Bug fixes
  o EPUB Input: Fix handling of EPUB files that contain images with
    non-ascii filenames.
  o Device driver: Detect Laser EB720 with newer firmware.
  o Fix bug in Danish translation causing books with language Ingush being
    incorrectly translated as Engelsk
  o PDF Output: Fix hyperlinks not working when converting an EPUB whose
    individual files have names with URL unsafe characters.
  o Book polishing: Fix inserting cover into an epub with no cover could
    lead to incorrect guide entry if the opf is not at the root of the
    epub.
  o ZIP Output: Fix links containing backslashes on windows
  o Fix polishing of AZW3 files not working on OS X.
  o Polishing books: Fix polishing erroring out if the book being polished
    has no cover
  o RTF Input: Add partial support for hyperlinks to web resources.
  o Fix book details panel showing incorrect info after deleting books
    from a connected device</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1368187200">- New Features
  o Kobo driver: Add support for showing 'Archived' books on the device.
  o Also up the supported firmware version to 2.5.3.
  o Driver for Blackberry 9790
  o Add a tweak to turn off the highlighting of the book count when using
    a virtual library (Preferences-&gt;Tweaks)
  o Add a button to clear the viewer search history in the viewer
  o Preferences, under Miscellaneous
  o Add keyboard shortcuts to clear the virtual Library and the additional
    restriction (Ctrl+Esc and Alt+Esc). Also use Shift+Esc to bring
    keyboard focus back tot he book list. Can be changed under
    Preferences-&gt;Keyboard
  o Docx metadata: Read the language of the file, if present
- New bugfixes
  o Kobo driver: Fix unable to read SD card on OS X/Linux
  o Content server: Fix unable to download ORIGINAL_* formats
  o Fix regression that broke searching for terms containing a quote mark
  o Fix regression that broke conversion of txt files when no input
    encoding is specified
  o When changing to a virtual library, refresh the Book Details panel.
  o Fix regression that caused searching for user categories to break.
  o Fix error when downloading only covers and reviewing downloaded
    metadata.
  o MOBI metadata: Strip XML unsafe unicode codepoints when reading
    metadata from MOBI files.
  o Txt Input: Use the gbk encoding for txt files with detected encoding
    of gb2312.
  o When pressing Ctrl+Home/End preserve the horizontal scroll position in
    the book list</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1372248000">- New Features
  o DOCX Input: Support for Table of Contents created using the Word Table
    of Contents tool. calibre now first looks for such a Table of Contents
    and only if one is not found does it generate a ToC from headings.
  o DOCX Input: Add support for images used as bullets in lists
  o DOCX Input: If a large image that looks like a cover is present at the
    start of the document, remove it and use it as the cover of the output
    ebook. This can be turned off under the DOCX Input section of the
    conversion dialog.
  o When dropping files onto the Book Details panel, ask for confirmation
    before adding the files to the book. The confirmation can be disabled.
  o News download: Add the 'downloaded from' link at the bottom of every
    article when using a touchscreen output profile (like the Tablet
    profile).
  o E-book viewer: Change the bookmark button to always popup a menu when
    clicked, makes accessing existing bookmarks easier.
  o After a bulk metadata download, focus the review button on the popup
    notification, instead of the OK button.-
- Bug Fixes
  o DOCX Input: Hide text that has been marked as not being visible in the
    web view in Word.
  o DOCX Input: When converting docx files with large numbers of unnamed
    images, do not crash on windows.
  o DOCX Input: Add support for the Word setting 'No space between
    paragraphs with the same style'.
  o MOBI Output: Fix rendering of SVG images that embed large raster
    images in 64bit calibre installs.
  o HTMLZ Output: Fix handling of images with URL unsafe filenames.
  o Fix unable to change the case of a previously used search because of
    the search history.
  o When searching allow use of uppercase location names, such as AUTHOR
    instead of author, automatically lowercasing them.
  o DOCX metadata: When reading covers from DOCX files use the first image
    as specified in the actual markup instead of just the first image in
    the container.
  o Kobo driver: Fix a regression when deleting empty shelves on Kobo
    devices with older firmware.
  o Do not show builtin plugins in the get new plugins dialog If a builtin
    plugin with the same name as a third party plugin exists, then the
  o builtin plagin was displayed in the get new plugins dialog as
    installed (happened with the new DOCX Input plugin).
  o Apple driver: When in synchronous mode (direct to iBooks), disable PDF
    transfers, as we can't update metadata in iTunes. Not sure when this
    started, but as of iTunes 11.0.4 it's broken.
  o Get Books: Fix error when using internal browser on some systems</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1373112000">- New Features
  o Book polishing: Add option to embed all referenced fonts when
    polishing books using the 'Polish Books' tool.
  o DOCX Input: Add support for clickable (hyperlinked) images
  o DOCX Input: Insert page breaks at the start of every new section
  o Drivers for Trekstor Pyrus Maxi and PocketBook Surfpad 2
  o DOCX Input: Add support for horizontal rules created by typing three
    hyphens and pressing enter.
- Bug fixes
  o Fix detection of SD Card in some PRS-T2N devices
  o MOBI Input: Fix a regression that broke parsing of MOBI files with
    malformed markup that also used entities for apostrophes.
  o Get Books: Update Woblink store plugin
  o Metadata download dialog: Prevent the buttons from being re-ordered
  when the Next button is clicked.
  o PDF Output: Fix links that point to URLs with query parameters being
    mangled by the conversion process.
  o DOCX Input: Fix links pointing to locations in the same document that
    contain multiple, redundant bookmarks not working.
  o EPUB/AZW3 Output: Fix splitting on page-break-after with plain text
    immediately following the split point causing the text to be added
    before rather than after the split point.
  o DOCX Input: handle bookmarks defined at the paragraph level
  o DOCX Input: Handle hyperlinks created as fields</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1374235200">- New Features
  o EPUB Output: Add an option to insert an inline Table of Contents into
    the main text.
  o Driver for LG Android phone
  o When matching books in the library against the device manually,
    pre-fill the search field with the book title
- Bug Fixes
  o PDF Input: Fix a regression that caused some images to be flipped when
    converting PDF files that use image rotation operators.
  o Fix regression that caused incorrect font size in dropcaps generated
    by the DOCX input plugin
  o Get Books: Fix searching for title and author returning some extra
    matches, if the title starts with an article like the, a or an.
  o PDF Output: Fix extra blank page being inserted at the start of the
    chapter when converting some epub files from feedbooks
  o PDF Output: Workaround bug in WebKit's getBoundingClientRect() method
    that could cause links to occasionally point to incorrect locations.
  o E-book viewer: Fix a bug that could cause the reported position to be
    incorrect immediately after opening a previously opened book. This
    also fixes the Back button not working if a link is clicked on the
    page immediately after opening the book.
  o Fix memory card not being detected for Elonex 621 on Windows
  o Fix regression in last release that broke auto-conversion of ebooks
    when sending to device/sending by email.
  o Get Books: Update amazon plugins for website changes
  o Allow using non-ascii chars in email passwords.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1375444800">- Updated to 0.9.42
- New Features
  o When downloading metadata from Amazon, convert the amazon categories
    into tags. You can turn this off by going to Preferences-&gt;Metadata
    download and configuring the Amazon source.
  o Kobo driver: Add an option to modify the styling in books being sent
    to the device, based on a template on the device.
  o Get Books: Add support for two more Polish ebook stores: cdp.pl and
    ebooki.allegro.pl
  o calibredb: Add a new clone command to create clones of libraries with
    the same custom columns, virtual libraries, etc. as the current
    library.
- Bug Fixes
  o MOBI metadata: Do not fail to set metadata in MOBI files if they have
    EXTH fields with NULL pointers to a cover or thumbnail.
  o Fix editing of book metadata failing when its timestamp is out of
    range for the system.
  o Fix renaming a user category to the same name it already has erases
    the user category.
  o Fix drag 'n drop of cover onto conversion dialog not working
  o Device drivers: Explicitly fsync() all files when writing to devices,
    to reduce chances of file corruption if the device is disconnected
    while jobs are running
  o Fix calibre not appearing in Ubuntu's 'Open with..' menu</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1376049600">- Updated to 0.9.43
- New Features
  o TXT Input: Allow using various markdown extensions for more features
    when converting markdown formatted txt files. See
    http://pythonhosted.org/Markdown/extensions/index.html for details.
  o Sending by email: Allow sending by email to an arbitrary combination
    of email address. Access it via the 'Select recipients' menu entry in
    the Email To menu.
  o A new 'Sort By' action for the right click menu. This allows sorting
    on all columns in the library, not just the visible columns. To use it
    go to Preferences-&gt;Toolbars and add it to 'The context menu for books
    in the calibre library'
  o Allow adding images into the comments field, by clicking on the insert
    link button in the comments editor in the edit metadata dialog.
  o Allow skipping the confirm bulk reconvert dialog
  o EPUB Input: If the EPUB file identifies an actual cover image in
    addition to the titlepage html file, use the cover image instead of
    rendering the titlepage. This is faster and has the advantage that an
  o EPUB to EPUB conversion preserves internal cover structure.
  o Get Books: Improve searching by removing punctuation from
    title/authors before matching.
- Bug Fixes
  o Conversion: Fix empty inline tags that are the second child of a
    paragraph causing text change location.
  o Fix book count in tooltip of choose library button not updating
  o Kobo driver: When deleting shelves that have been synced, the Activity
    entry for the shelf was not being deleted. This left a tile for the
    shelf on the home screen of the Glo and AuraHD.
  o Comments editor: The Insert Link button has no effect until the user
    clicks inside the comments box, therefore disable it until it is
    ready, to prevent confusion.
  o Get Books: Update various Polish store plugins</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1376740800">- Updated to 0.9.44
- New Features
  o Add an option to display all virtual libraries as tabs above the book
    list.
  o An improved cover trimming algorithm to automatically detect and
    remove borders and extra space from the edge of cover images. To try
    it use the 'Trim' button in the edit metadata dialog. This can
    sometimes remove too much so if you dont like the result, just click
    cancel. You can make the algorithm more or less aggressive via
    Preferences-&gt;Tweaks
  o Allow customizing the comic metadata reader plugin via
    Preferences-&gt;Plugins to read the series index from either the volume
    or the issue number of the comic.
  o Linux MTP driver: Add ids for some newer devices.
  o Add a trim cover option to the bulk metadata edit dialog
  o Make the book information dialog user resizable, with a splitter
    between the cover and the info panel. Also change the background of
    the cover panel for books that have been marked using the Temp marker
    plugin.
  o Driver for Samsung Galaxy Young Android phone
-Bug Fixes
  o PDF Output: Do not abort conversion if the document being converted
  has an HTML cover (found in some broken EPUB files).
  o RTF Input: When converting RTF files with no codepage, use the input
  encoding setting as the codepage.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1377345600">- updated to 1.0
- New Features
  o A new 'cover grid' view of the books in your calibre library
  o A new, faster database backend
  o For a summary of the major changes in calibre between 0.9 and 1.0, see
    http://calibre-ebook.com/new-in/ten
  o RTF Input: Add option to ignore WMF images iinstead of replacing them
    with a placeholder.
  o Content server: Make virtual libraries available as searches from the
    start page. They work just like saved searches, clicking on a virtual
    library will show you all the books in that virtual library.
- Bug Fixes
  o Remove extra, useless 'language' entry in metadata download
    configuration dialog
  o Kobo driver: Display device collections even if the driver is
    configured to not manage shelves on the device.
  o Fix typo in calibre.desktop file on linux
  o Edit metadata dialog: Disable OK button while results are being
    downloaded.
  o In OS X 10.8 Apple stopped redirecting stdout/stderr to Console.app
    for applications launched by launch services. Re-enable the
    redirection, useful for debugging.
  o Fix virtual library tabs not being updated when using VL button</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1377950400">- updated to 1.1
- New Features
  o Rewrite the HTML metadata parser to make it faster and more robust.
  o Book list: When sorting on a currently unsorted column, use the last
    applied sort for that column, instead of always sorting in ascending
    order.
  o PocketBook driver: Scan for books files in the entire device not just
    in the 'books' folder
-Bug Fixes
  o Fix a regression in 1.0 that could cause the dates in custom date-type
    columns to change in some timezones when using the edit metadata
    dialog to make unrelated changes.
  o When replacing formats in a book with a very long title+authors on
    windows, calibre could leave behind the old format file, because the
    filename shortening algorithm has changed. Handle that case.
  o Fix content server giving an error if you return to the top level page
    after using the virtual libraries.
  o Fix calibredb not updating the running calibre instance properly in
    1.0
  o Fix a regression in 1.0 that broke splitting of multiple valued field
    like tags into many items during a rename.
  o Fix a regression in 1.0 that caused an error when trying to set values
    for tags with the same item repeated, with different case.
  o Fix a regression that broke downloading news when output format is set
    to PDF
  o Creating a catalog with an already existing catalog in the library
    would cause a temporary duplicate entry in the book list. Also fix the
    author sort for catalogs generated in the AZW3 format not being
    correct.
  o EPUB metadata: When changing the title in an EPUB 2.0 file that has
    multiple titles, remove the extra titles.
  o Fix a regression in 1.0 that caused Search and Replace in the bulk
    metadata edit dialog to be much slower than before
  o Fix a regression in 1.0 that caused incorrect sorting and searching on
    some composite columns (columns built from other columns).
  o Fix a regression in 1.0 that prevented the moving of libraries inside
    calibre
  o Virtual Library tabs: If the user activates a hidden tab via the
  o Virtual Library button, change the name of the All Books tab to
    reflect the hidden virtual library.
  o Ignore text records in the database that are damaged, instead of
    erroring out. Lets the rest of the data be used.
  o Fix regression that broke calibredb catalog when sorting on the id
    field.
  o HTML Input: Handle malformed OPF files when converting.
  o Ensure that the Formats custom column (if present) is updated when a
    new format is created as a result of a conversion.
  o Fix a bug in 1.0 that broke the Check Library function on computers
    with non-English locales.
  o Content server: Fix blank username causing error on startup.
  o Fix sorting of book list by multi-valued fields like tags not correct
    in the new backend.</changelog>
<changelog author="jw@suse.com" date="1378123200">- added Requires: python-apsw (and as BuildRequires too, to catch the errors early)</changelog>
<changelog author="jw@suse.com" date="1378209600">- suggestion from bnc#831983#c12 added:
  Requires: python-sip(api) = 9.2</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1378468800">- update to 1.2
- New Features
  o Conversion: Add support for the CSS3 rem font size unit
  o MTP devices, such as Android tablets/phones: Allow ignoring any folder
    on the device, not just top level folders. For newly connected
    devices, also scan /Android/data/com.amazon.kindle for books by
    default (newer versions of the Kindle app place downloaded files
    there).
  o Speed up sorting when the book list is showing a restricted set of
    books, such as when the results of a search are displayed or a virtual
    library is used.
  o Edit metadata dialog: Add an undo option for the Trim cover button.
- Bug fixes
  o Amazon metadata download: Update to handle website changes at
    amazon.com
  o PDF Output: Workaround a bug in the library calibre uses to render
  o HTML to PDF that caused text in some documents that used small-caps
    fonts to not render correctly.
  o Kobo driver: When a sideloaded kepub is added from a Kobo device to
    the calibre library, it is added as an epub, but the file copied is
    corrupt.
  o Fix changing the user interface language in the welcome wizard causing
    some parts of the interface to remain in the old language until
    calibre is restarted.
  o Fix regression in 1.0 that broke setting author names with the |
    character in them.
  o Content server: When running from inside the main calibre program, do
    not restrict the books shown based on the current virtual library in
    the main program. If you wish to restrict the books shown in the
    content server, use Preferences-&gt;Sharing over the net.
  o Output dates in the local timezone instead of UTC when generating CSV
    catalogs
  o Library maintenance: When doing a check library instead of dumping the
    database to SQL and restoring it, run a VACUUM. This works around
    various bugs in the dump and restore capabilities of apsw.
  o Edit metadata dialog: Fix adding an image to an empty comments block
    not working
  o Conversion: Fix font declarations with invalid font-family values
    causing conversion to abort when subsetting is enabled.
  o MOBI Output: Fix conversion of some super/sub scripts failling if they
    are the first or last element in a paragraph.
  o New database backend: Various improvements to make the backend more
    robust against databases with invalid/corrupt data in them.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1378555200">- reintegrated upstream icons into the main package. Because the other
  iconset doesn't work correctly.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1379160000">- updated to 1.3
- New Features
  o When doing searches or switching between virtual libraries in the main
    book list, preserve the current book. The currently selected book will
    remain visible if it is present in the results of the search or the
    selected virtual library.
  o Drivers for Oppo Find 5 and PocketBook Mini 515
- Bug Fixes
  o DOCX Input: Handle numbered paragraphs where the numbering is
    specified in the paragraph style, instead of on the paragraph
    directly. Also support the use of arbitrary, styled text for bullets.
  o DOCX Input: Fix a single line break at the end of a paragraph not
    being rendered as a blank line.
  o DOCX Input: Fix extra top/bottom margins around headings when the
    heading style in word does not specify any top/bottom margins.
  o DOCX Input: Handle images in footnotes and endnotes.
  o ODT Input: Only treat the first image as a cover if it is of suitable
    size, instead of any image in the document.
  o Book polishing: Do not leave behind the old comments when updating
    metadata if the comments have been deleted in calibre.
  o PDF Output: Fix non-breaking space characters incorrectly rendered in
    PDF outline.
  o Content server: Fix error in opds feed after using virtual libraries
    in the main server.
  o Do not scroll the book list horizontally after editing metadata.
  o New database backend: Handle databases that contain multiple
    tags/series/publishers/etc. that differ only in case.</changelog>
<changelog author="toddrme2178@gmail.com" date="1379592000">- Clean up spec file formatting
- Make sure BuildRequires and Requires are consistent
- Remove python-sip(api) = 9.2 dependency, it cannot be satisfied
  anymore and is apparently no longer necessary anyway
- Remove redundant imagesdir
- Add version for icon provides/obsoletes to avoid self-conflict</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt;" date="1379678400">- updated to 1.4
- New Features
  o Column icons: Allow the use of multiple icons with column icon rules.
  o Kobo driver: Add support for new cover handling in Kobo Aura with
    updated firmware
  o Driver for Icarus Essence
  o Show a warning when attempting to copy books between libraries that do
    not have the same set of custom columns.
  o EPUB/AZW3 Output: Use shorthand forms for margin, padding and border
    CSS properties, where possible
  o Allow colons in identifier values, needed for using URIs as
    identifiers
  o Comments editor: Allow treating arbitrary URLs as images
  o Show full path of library under mouse in status bar when
    switching/renaming/deleting libraries via the calibre library button.
  o DOCX Input: Add support for embedded EMF images that are just wrappers
    around an actual raster image.
- Bug Fixes
  o Conversion: Fix font subsetting not working for large fonts with more
    than 4000 glyphs, such as CJK fonts
  o HTML Input: Fix a regression that broke processing of HTML files that
    contain meta tags with dc: namespaced attribute values.
  o Fix switching to an empty virtual library not blanking the book
    details panel
  o Keep position when deleting tags in the tag editor
  o Book details panel: Render custom comments fields the same as the
    builtin comments field. In particular this fixes problems caused by
    wide text and images in custom comments fields.
  o Metadata jackets: Do not error out when using a custom template with
    some custom fields that are not present.
  o AZW3 Output: Dont choke on invalid (undecodable) links in the input
    document
  o Cover grid: Respect the double click on library view tweak
  o Fix covers set by drag and drop or pasting in the edit metadata dialog
    showing compression artifacts due to aggressive jpeg compression
  o Conversion: Fix a bug that could cause incorrect border values to be
    used when cascading, shorthand border CSS is present.
  o Fix regression in 1.3 that caused the book list to not track the
    current book when using Next/Previous in the edit metadata dialog.</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt; - 1.4.0" date="1379764800">- removed make linux_mount_helper from spec because it is removed from
  upstream with patch 7d54d25844efebfb3d6de2bb2b9af77dbf72d8b8</changelog>
<changelog author="Sascha Manns &lt;saigkill@opensuse.org&gt; - 1.5.0" date="1380196800">- updated to 1.5
- New Features
  o Driver for Woxter Scriba
  o Bulk metadata edit: Allow setting the comments for all selected books
    and also allow cloning the covers. Cloning covers means that the cover
    of the first selected book will be set for all other selected books.
- Bug Fixes
  o Windows: Improved device ejection code. Eject individual drives before
    trying to eject the device. This fixes incomplete ejection with the
    Nook devices.
  o Catalogs: fix exclude tags rules not working in non-English locales
    when creating catalogs in EPUB/MOBI formats.
  o Kobo driver: Fix reading status being cleared when connecting to a
  o Kobo with older firmware and metadata management set to automatic.
  o Content server: Sort virtual libraries by name
  o DOCX Input: Convert tabs in the docx file into non-breaking spaces in
    the output document. Note that custom tab stops are not supported.
  o Conversion: Handle the style attribute on the  tag
  o Handle databases with invalid ratings link tables
  o DOCX Input: Handle DOCX files with missing referenced styles
  o Update amazon metadata download plugin for changes to the Amazon
    website</changelog>
<changelog author="Catalin Iacob &lt;iacobcatalin@gmail.com&gt;" date="1388750400">- Add calibre-support-newer-kobo-firmware.diff: support newer Kobo firmware
  versions (up to 3.1.5). Fixes bnc#857708</changelog>

</package>
<package pkgid="1dc9c1097a25fd9d272e8075b343cc991eb7f77349427445ac3b5f10313fbce8" name="calligra" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="35828dae5b5a061149e9c6f9bcdba6642ef22d8969aa0bf9d5bdb5ba399e877e" name="calligra" arch="src">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="e627dc5d95644286785e549b12d8e153728dc9a470706bb4c4301ddd85aa0873" name="calligra" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="97df0d3dfa45cc4caa500f5a415ae4d00d85a0c2853843d39cba85dff7924f8d" name="calligra-author" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="098df09c3962e49967001a0550ed82d0c7e92e5585d9991f036094b2243efcb1" name="calligra-author" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="4cbf0feb749f61e3e7e6b8e0652b5818341d3f36de37e507d493c51246b8e5eb" name="calligra-braindump" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="9360b687e7f87ecaaab609dfc54b2a3dcefe6c0e2a283a852b9e20de744e7fa7" name="calligra-braindump" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="714e7577047a20a6e1494059fbab5066aa16bf7bfc599d238243b5a6f258cbb5" name="calligra-devel" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="b731ccee63e3322b11ef073472c96e074c794e7783ab2746112110db7533dda9" name="calligra-devel" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="71ec874dcfbdcae7788a33f63414b4ead865296b731cd17a709a8e4c82229989" name="calligra-doc" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="649ab53c6445a2853dc6c5f20f2ca2f80866b25468aa8eecc0cd66a7afdeb359" name="calligra-flow" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="dd427a84796aa8476179b87c331676360d6527dd83f585178bb5192a4df618d2" name="calligra-flow" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="0b565ffb3f8828b88d40d4b8a8d704f35182f5e5a3c2c6f5c4dc80f66fa05793" name="calligra-karbon" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="e38df866656092ba99a8efb48c3d5341ac86b099bb863e1509e5b74a696d3191" name="calligra-karbon" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="604e2426be6142bed5646c0d09b54b68ca5c9c885b37aa7b243077b4c17e8174" name="calligra-kexi" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="32aff3c67106eef015874d42c823b14312ef3d03350b527c2e6c2c478dee1066" name="calligra-kexi" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="9bb691fc5ff1989749189b1e25a814d7af3b14bddb277bea87654985f3d88128" name="calligra-kexi-mssql-driver" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="22a716eac8734adf01fbc7caac6253a277733136512654a7f4d46bb4523981ac" name="calligra-kexi-mssql-driver" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="f7d900a4e49ce735cf3dab6792d0f933e90d5fbc41ab2b9807ba7af0325f55dd" name="calligra-kexi-mysql-driver" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="89c87dfbc626561bd9cb24b71d1aa58606e2f4701b3bd9ad821c77909a42afc6" name="calligra-kexi-mysql-driver" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="b85cccbd5365ad783295ad7321692c296c1ae14497633cc4a811ead3856033b9" name="calligra-kexi-spreadsheet-import" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="253b38107c89b6daac0b3e59580335458f782e9583c650020274206a675f5443" name="calligra-kexi-spreadsheet-import" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="5f19a570c0b09efe7bbf1011921a38c5eed15eb791be56060885af322bb10c4c" name="calligra-kexi-sqlite3-driver" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="7c23686e2b5291651e0b6ce07ef6923080cecaddd8794ad70fd2bc76070913d9" name="calligra-kexi-sqlite3-driver" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="eaf8f7942c37a575145f2fc919021549a97afd7e9a500eaacd634595cf3ce80c" name="calligra-kexi-xbase-driver" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="cb233e91ac50e8589d1cb8c8e6dedc72481f9262a1917a595c55668db04d95bb" name="calligra-kexi-xbase-driver" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="dac3b13d98f221f18d6863cd4e422f7f885016bbfee29bce18aba107056264de" name="calligra-krita" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="732258841300fbf06d17194de2f14181aeb55a299f9d7f56dcaeddc24e016b2f" name="calligra-krita" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="8eafb898417a922e358ea83bd7e9722dcc58e0398c9a664fa6e5fffdf1327b15" name="calligra-l10n" arch="src">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="8dd59179ecbc3c3a2d6df4a85678d5a8314da33bde00209399d4da401edafca9" name="calligra-l10n-bs" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="a2ab1a2293d96883648ab957f627fd930b49a4df3157dee8e0737e33f480fe87" name="calligra-l10n-ca" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="bef6923e705d787190b7f2c4a066a9432c3296524e71f02ba1dfd8a43883f123" name="calligra-l10n-ca-doc" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="470bc6a2699dc99c70d69631b0575e8a1ab955fc0f18cedcbb21251849cfbce8" name="calligra-l10n-ca@valencia" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="c7d3a8492baf033de2a37e99a1f3fedfc280b6da6ec4f7d77f9138ccee37ef6a" name="calligra-l10n-cs" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="5746230818676fa58cf4b5e8186658e1f46d0062d4a5a3f8b277cc269b859b46" name="calligra-l10n-da" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="8405e92496367a00a191e655505f5b80d018766e2b160396a4faa2e85d0565b1" name="calligra-l10n-de" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="ed960e60648cdb721525902744e9837ba4aab7691a6883f92de925227f6587fb" name="calligra-l10n-de-doc" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="7a737e46ba18abcbcad6a02bf850a954dca58dc78b230672e5a727dffc4a6159" name="calligra-l10n-el" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="a965c84352d464471e4032410e78b18286306c3a385e26fde05a7e3cf101c9f0" name="calligra-l10n-es" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="d193cf0f89582d0df19a5895787e2df035a90c7fa4b4b0b60ecf59325de6353f" name="calligra-l10n-es-doc" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="c73068d3d237cf91b20ddd4428d663f135b40b6ba2dcbaf74ae3b15568cf5e55" name="calligra-l10n-et" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="38906818b1e6c6824faec0181ae2e79e0d16cbcb853435ecffeadd63af854ca0" name="calligra-l10n-et-doc" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="4890014fd845ced3c8c49d27a2ff912e0c8d5d5969c7cafbbb243eeb9a52be57" name="calligra-l10n-fi" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="786f5032ea107fb94d8225d421c2da052f11d44e080514abb1111e4628befad0" name="calligra-l10n-fr" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="b12c6363163a009234a2c181e748ba12c41d52b133bb5dfce1f3114494e360bd" name="calligra-l10n-fr-doc" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="06ff336527f2d9ecbfe29c67ad74d23b769351972452888216b94d55b99d4024" name="calligra-l10n-gl" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="f94912639d2167ec1842a9cbf89e330881d25538f48edf22f809480bb68a8a15" name="calligra-l10n-hu" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="bcdc7dd8c16212de038c1139a4b40d9e36622a81c5a083400573857f2b7a70e2" name="calligra-l10n-ia" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="a5e0eb44c8d45eb914a1242b471b87c68eb923c3d43799a260f7b3f5e96e0e92" name="calligra-l10n-it" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="591c6585498266f64425cb4cf6a3d80476063483064ab8299cbe0d0721527885" name="calligra-l10n-it-doc" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="e979167ea9bd2adb41cded1cdb9b86ebea13fe8ffb3123348cf4a43111e3f552" name="calligra-l10n-kk" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="7e493c8c9e57ad8cbffa3bd603400a08907574287b3c422fed4592dc8f1ee0f1" name="calligra-l10n-nb" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="e3b094b0915ea88d0605bd191eface41bf8ef207deb494f9eaa971d26f3001eb" name="calligra-l10n-nds" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="0d6c1e2af3930fad73fc71c52a66195c78c8e519461b014b7ea2c6edb5d9f7ca" name="calligra-l10n-nl" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="60ab36f3c3372a18800cedd9d9a30f9156f5e2117a1122fba49ff1352a2942ff" name="calligra-l10n-nl-doc" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="246ee272ec0ba9923da98b19195607a962b5cbfd34e803ecc87a9b0b08040c55" name="calligra-l10n-pl" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="2a7b8777dc38c6d07b989b1207c68aece740cb5bab396a39da6cbed29b0e7b5e" name="calligra-l10n-pt" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="9130b76dc7b8237e389ee0d36cd9bf98e20051e7e185f462021d230fff7222ea" name="calligra-l10n-pt-doc" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="e467af926278a201d6e6d6b128c4f799eff2fc8465925a9f0974af89c1d289af" name="calligra-l10n-pt_BR" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="8e2ba7871283e40f08a4f9b85b6231af21b7e5ede7a00e4399c67cde7f3ce829" name="calligra-l10n-pt_BR-doc" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="570f337883710350bacfe8de3969c13af3389ad87642bf73506458d70e6404e2" name="calligra-l10n-ru" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="8802fadf9c6c0f6d3e6ac32e060c81537eb7bd3e1adf1c674e877e88a2bab86e" name="calligra-l10n-ru-doc" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="374b466d461030ba2c559f3dec7f01a1b2eafe44a3df8b9bbdc583765b8f596f" name="calligra-l10n-sk" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="fdf861c24c0fe68ef03561e9b7e1fda8701b712a1879994a4ff0ebfc3d44ef1e" name="calligra-l10n-sl" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="834e17e904174af049a84da805ad990580e2360030c58b366837e0c0577a6cc8" name="calligra-l10n-sv" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="c75887c03056c3a1fe752b260a89a5798df9bb4e8d4f95c93a2cacb538b69cbe" name="calligra-l10n-sv-doc" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="83192d6ca2a46f8f5f66d161b3f1082c3772c8916c4c62178e0751e15188b5ff" name="calligra-l10n-tr" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="9754b80eae661faa1d26e5ff462b6ee2e82abb66ce2fe458471ed5460b603079" name="calligra-l10n-uk" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="1dae32ef394cb80fd2f071b2007ace7c9dcf9aa3bc7442a87cedbb8c82e34a6f" name="calligra-l10n-uk-doc" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="311b723780f15125cd5b43540fd012097776339b9236fc1bbae5aa01670269a8" name="calligra-l10n-zh_CN" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="d7ef50cfb8ac1d619ce2c0fda454b83876e52b527be1b9dc48fba3fd52b7a1b6" name="calligra-l10n-zh_TW" arch="noarch">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="wstephenson@suse.com" date="1334059200">- Update to 2.4.0</changelog>
<changelog author="wstephenson@suse.com" date="1335268800">- Update to 2.4.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1338984000">- Update to 2.4.2.</changelog>
<changelog author="wstephenson@suse.com" date="1340971200">- Update to 2.4.3</changelog>
<changelog author="nico.kruber@gmail.com" date="1344945600">- Update to 2.5.0</changelog>
<changelog author="nico.kruber@gmail.com" date="1348228800">- Update to 2.5.2</changelog>
<changelog author="asterios.dramis@gmail.com" date="1351684800">- Update to 2.5.3.
- Removed work-around for bnc#457908 (not needed anymore).</changelog>
<changelog author="asterios.dramis@gmail.com" date="1353844800">- Update to 2.5.4.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1359201600">- Update to 2.5.5.
- Make the calligra-l10n-* packages require the respective calligra version.</changelog>
<changelog author="elchevive@opensuse.org" date="1359979200">- update pt_BR description</changelog>
<changelog author="mailaender@opensuse.org" date="1361016000">- update to 2.6.0</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361620800">- Update to 2.6.1.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1377259200">- Update to 2.7.2.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Update to 2.7.4</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5</changelog>

</package>
<package pkgid="60e8bb7f73b0ec847051a1b290a2bc6065f81b19420ef9b4e4e28e3791cce901" name="calligra-plan" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="a75bfb2e5a6aa34eb995e4bf69a6174cca73378d813db584751617c347d58b55" name="calligra-plan" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="363a25fc40d9b8dd90117113f75c1ab6633bc4816151b4c8c754a485e7fd427e" name="calligra-sheets" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="19bc71755f967b57207b1c38f43343542722480d36056fea0992e2261e24c2f8" name="calligra-sheets" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="ff29aa9cf12a9eb181c650174aa4fe70476420c6f98bdd55dee2fde24fe560ab" name="calligra-stage" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="414dd75006af29518d9f8f7bbff6f2e7224be8ddc59361462262ab0ec6a49f47" name="calligra-stage" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="3644222bb335e40eeb8328519d5fdf8a7204b4b7ff4a79c5d1f0c2b8db7e0690" name="calligra-tools" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="50bf8e22132171dfce252cec33ea9148ff699617c378d6e7c6e838660b32c57d" name="calligra-tools" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="43df5aa7f4b88ee5c731f90088a06866c6fb746a22edda96de8640a8bd6736b3" name="calligra-words" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="61cb9e1e3e847e440332385eadc20ee3ee6b9e5b829c54b1259e551e38e433aa" name="calligra-words" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="34da557ad5b1165d962d7a545ffbb1cea10357c2eb6ba912f936cb22d204612b" name="calligra-words-common" arch="i586">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="b6ff5979bb1a3cc92702ceddfbb8f74afeae117df0b4c54169ebe340affa017d" name="calligra-words-common" arch="x86_64">
    <version epoch="0" ver="2.7.5" rel="8.5"/>

<changelog author="asterios.dramis@gmail.com" date="1352721600">- Added libvisio-devel as build requirement (support for visio files).
- Added kexi-spreadsheet-import in Suggests: entries for kexi.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353585600">- Update to 2.5.4
  * Bugfix release, fixed kde#309574 and kde#295774 amongst others</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355140800">- Obsolete the respective koffice2 packages.</changelog>
<changelog author="asterios.dramis@gmail.com" date="1355572800">- Added &lt; %{version} for the obsoleted koffice2 packages.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1356004800">- Added BuildRequires:  nepomuk-core-devel. This due to a recent
  upstream change in kdepimlibs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359028800">- Update to 2.5.5. (Bugfix release)
  * Sheets
  - bug which made recalculations of spreadsheet contents go
    wrong under some circumstances (bko#312981,bko#313010)
  * Kexi Forms
  - Description was ignored in Command Link button
  * Kexi
  - Fix MySql login failure when not saving password (bko#313025)
  - Fix possible crash when pressing tab in the global search box
  - Property editor: make items are always sorted by key</changelog>
<changelog author="mailaender@opensuse.org" date="1360152000">- Update to 2.6.0
  - 3D shapes and annotations
  - MS Office format improvements especially MS Open XML (MS Office &gt;= 2007)
  - improved rendering of mathematical formulas
  - New Application: Calligra Author
  * Words/Author
  - bug fixes to various dialogs/tools e.g. spell checking
  - improved text statistics and export to eBook formats EPUB2/MOBI
  * Sheets
  - new function optimizer named Solver
  - all standard scripts are available for translation
  * Stage
  - new animation framework to create and manipulate animations
  * Flow
  - improved connections for diagrams
  * Plan
  - updated scheduling information
  - improved scheduling granularity
  - improved performance charts
  - improved project creation
  - improved usability in the report generator
  - many bug fixes
  * Kexi
  - new support for user data storage
  - improved CSV import and export
  - improved table views
  - overwriting objects with the same name is now possible
  * Krita
  - new support for OpenColorIO (suitable for use in the movie industry)
  - big speedups for vc library and precision slider
  - improvements in painting HDR images
  - integration into a GFX workflow
  - support for the latest OpenRaster standard
  - many bug fixes
  * Charts
  - improvements for fine tuning the formatting
- packaging: merged calligra-doc.spec and calligra.spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1360411200">- Add libwacom2 and kcm_tablet to the runtime requires for Krita.
  This should enable tablets to work with Krita (bnc#802706)</changelog>
<changelog author="asterios.dramis@gmail.com" date="1361534400">- Update to 2.6.1:
  * General:
  - Fixes for several different crashes. See for instance bugs kde#314676,
    kde#314747
  - Several new or improved icons for different applications.
  - General look and feel on Windows improved by hardcoding the theme.
  * Filters:
  - A new filter for the MOBI ebook format was released with 2.6.1. This
    filter was scheduled for 2.6.0 but was withheld because of some bugs that
    were discovered late in the release cycle.
  - Much improvement in exporting tables in the HTML export filter.
  - Fix options in the CSV export dialog (bug kde#314766)
- Removed oxygen-icon-theme build requirement (not needed anymore).
- Recommend kexi-sqlite3-driver for kexi (as the preferred driver).
- Require calligra-words-common for the calligra-words package.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1363262400">- Update to 2.6.2:
  * General:
  - Mime types were synced between the Words, Sheets and Stage
    applications and the Calligra Active application.
  * Filters:
  - A bugfix in the import filter for the old KSpread file format
    that led to styles being treated wrong.
  * Sheets:
  - Fix for a bug that sometimes made the error #CIRCLE appear on
    a cell even when there was no circular dependency (kde#316244)
  * Krita:
  - Fix for a bug with the OpenGL drivers that led to the user
    sometimes have to remove their kritarc file manually (kde#308713)
  - Krita now correctly remembers the layer box status.
  - A crash fix for empty layers
  - A fix in the autosave code
  - Fix for a bug when a layer was rotated counter clockwise.
  * Kexi:
  - Don’t require write access in file connection for read-only mode</changelog>
<changelog author="asterios.dramis@gmail.com" date="1363262401">- Build the doc subpackage as noarch.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1365422400">- Update to 2.6.3:
  * Bugfix release</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1367668800">- Drop and obsolete kexi-postgresql-driver package for 13.1, as kexi
  doesn't support libpqxx &gt;= 4</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370692800">- Update to 2.6.4:
  * Words:
  - Fix the mimetype for the word perfect import filter. This makes the word
    perfect import work again.
  - Fix a problem with repeated header rows in tables.
  - Fix a crash in the document structure docker (kde#317975).
  * Author:
  - Author got a new application icon.
  * Kexi:
  - A fix in the database engine.
  - Fix in the query save dialog.
  - Fix saving new query designs in the SQL view.
  - Fix the look of the modern menu and tabbed toolbar for the bespin widget
    style.
- Added OpenColorIO-devel as build requirement.</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373976000">- Update to 2.7.1
  * Words:
  - new look for the toolbox. In the same toolbox there are also
    new controls to manipulate shapes with much enhanced usability.
  - Styles are now sorted with the used ones first in the style
    selector which should make using styles much more convenient.
  - enhancements to the reference controls, especially regarding
    hyperlinks and bookmarks.
  * Author:
  - new support for EPUB3:
    mathematical formulas and multimedia contents are now exported
    to ebooks using the EPUB format.
  - There is also new support for book covers using images.
  * Sheets:
  - the spreadsheet application now uses the same new toolbox as
    Calligra Words.
  * Plan:
  - improvement in the scheduling of tasks and new export filters
    to OpenDocument Spreadsheet (ODS) and CSV.
  * Kexi:
  - new feature to import CSV data into an existing table.
  * Shapes:
  - There are some improvements in the general shapes available
    from most Calligra applications: The formula shape now has
    new ways to enter formula: a matlab/octave mode and
    a LaTEX mode.
  - The tool for the text shape is improved to better handle
    text styles.
  * Krita:
  - new grayscale masks, a better freehand path tool with line
    smoothing, a way to paint shapes with Krita brushes, improved
    color to alpha filter, an improved crop tool and an improved
    transform tool that helps the user create textures.
  - Support for new file formats include export to QML and a much
    improved import/export filter for photoshop PSD files.
- Added _constraints for exlcuding slow hosts</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1375444800">- Drop not needed java-devel and nepomuk-core-devel BuildRequires
- Pass IHAVEPATCHEDQT=true, for older openSUSE versions</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Update to 2.7.2
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#283164, kde#322940, kde#314214, kde#323804,
    kde#323827</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1379332800">- Update to 2.7.3
  * Bugfix release, no upstream changelog provided
  * Fixed bugs: kde#314214, kde#323804, kde#323827, kde#318129,
    kde#319155 and kde#324224</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382011200">- Update to 2.7.4
  * Krita
  - Fixed kde#293708: Cannot paint on duplicated layer
  - Fixed kde#288714: Fix layer lock after exposure change
  - Fixed kde#325193: Fix crash if there are multiple local
    selection masks
  * Kexi
  - Fixed kde#325070: Saving new table design for the first time
    does not clear history of edits</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1385640000">- Update to 2.7.5
  * Common
  - Fixed kde#326158: the text color in the modebox tab icons were
    not drawn accoring to style.
  - Make spellchinking work with more dictionaries.
  - Fixed kde#290999: make sure we erase an old selection in another
    textshape whenever we make a new selection.
  - Fixed crashes: kde#326243 and kde#325547.
  - Fixed a crash while saving embedded documents like charts.
  * Kexi
  - Fixed kde#327995: Make changes to query design reflected in
    reports after saving
  - Fixed kde#327993: Make records in reports sorted according to
    the sorting of the query
  - If –driver is missing but connection options specified,
    display a note and exit
  - Fixed kde#319432: Fixed crash when using command line
    “kexi –dbdriver postgresql”
  - Fixed regression in password dialog.
  * Krita
  - Fixed untranslatable strings.
  - Fixed crash on malformed pdf.
  - Fixed fullscreen in canvas-only mode in Krita.
  - Fixed kde#321100: do not write the implicitely written
    “mimetype” entry a 2nd time on saving kra files (and thus
    avoid assumed bug in KZip)
  * Plan
  - Set First Day of Week to Monday if using ISO Week
    for week numbering
  - Fixed crash in Plan on loading work packages into gantt view.
  * Sheets
  - Update mimetypes for the CSV export to make it work.
  - Fixed kde#298155: Fix a crash when using array values and
    make array values render correctly when used
  - Fixed kde#178172 and kde#181576: fix text to columns.
  - Don’t fail loading a file when the comments fail to load.</changelog>

</package>
<package pkgid="4405dce20f2c512ad3894457cef81defc3cc8d4636def11518fc9c5c0c73ea3f" name="cantor" arch="i586">
    <version epoch="0" ver="4.11.3" rel="28.3"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="fbb26ec36c4efb50e452b031ef0ef0bae55487e2b224448a533d83048f68b4e2" name="cantor" arch="i586">
    <version epoch="0" ver="4.11.4" rel="286.15"/>

<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="47726ba3256205e0b9e7215647283809efb16177620d5593872738740d5f172b" name="cantor" arch="i586">
    <version epoch="0" ver="4.11.5" rel="296.5"/>

<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="aca4d10dcfefca00fd203b05cfd26d482457ce9a4e818f67c25b98f4c455079c" name="cantor" arch="src">
    <version epoch="0" ver="4.11.3" rel="28.3"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="175cc3083bcc3c75bf90d8d133f532efccc86f86ebcdae52236805775356d313" name="cantor" arch="src">
    <version epoch="0" ver="4.11.4" rel="286.15"/>

<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="db02a00bb4d59cb66ae59630c92f4c9ae89a560881c762fce68272c15b63f328" name="cantor" arch="src">
    <version epoch="0" ver="4.11.5" rel="296.5"/>

<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="4b843f853ffbf996e18f09a2d207966a8768d331a4ae447705c4006f5b702566" name="cantor" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="28.3"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="61a2363a724d58253d10a96b324d594d2bbf1deed696b5f76a4bad38637a2ab4" name="cantor" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="286.15"/>

<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="b7820d84edb70db90db477ec6fd456ec361eb7abe0ab73fd4f258e9325519563" name="cantor" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="296.5"/>

<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="5f1ca4ea6a91a4eebe51c9441709ba4e332c26f3caad3b3296f4bf45cc6b289a" name="cantor-devel" arch="i586">
    <version epoch="0" ver="4.11.3" rel="28.3"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="e287045860a2057032a968c50bc989a2cb97e90f718f8607612bf31e6ac34068" name="cantor-devel" arch="i586">
    <version epoch="0" ver="4.11.4" rel="286.15"/>

<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="21934301174e2a53b69056af695ea82d956a9a10bced07b7bc75c29b90a81647" name="cantor-devel" arch="i586">
    <version epoch="0" ver="4.11.5" rel="296.5"/>

<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="159e3d16f8b21f504759a19af26c02a6e3e120375cbd2eb0c8479aa45b969599" name="cantor-devel" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="28.3"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="6819b20d804fb001050e67bcf9e6bec62d8da6987e7f3a110a4d9a4d72ed4d91" name="cantor-devel" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="286.15"/>

<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="3843c21f098bfa1b7a6639695ceba6b7cbb11e6ffc0ac35b7404e47da5362116" name="cantor-devel" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="296.5"/>

<changelog author="wstephenson@suse.com" date="1358769600">- Remove calls to suse_update_desktop_files macro where upstream now has the correct desktop file categories</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359720000">- Added patch detect_gfortran_library_correctly.diff. Due to the
  location of the libgfortran.so file, cmake does not find it.
  This patch searches differently for the library by querying the
  gfortran binary.</changelog>
<changelog author="alinm.elena@gmail.com" date="1359720001">- add recommends for maxima and octave</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362398400">- Remove patch detect_gfortran_library_correctly.diff. Now included
  upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2
  * Bugfixes</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366459200">- Added R-base BuildRequires for &gt;= 13.1</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="cbb43138c39c5c84cbcc53bb8e3766c152e2ce1dbcf95358e9cd323efbf53012" name="capi4linux" arch="i586">
    <version epoch="0" ver="2011.8.29" rel="17.3.1"/>

<changelog author="jengelh@medozas.de" date="1264939200">- package baselibs.conf</changelog>
<changelog author="ro@suse.de" date="1280232000">- drop glitz-devel from buildrequires (glitz backend was dropped
  from cairo two years ago)</changelog>
<changelog author="coolo@novell.com" date="1289217600">- remove support for pre-9.1</changelog>
<changelog author="andrea.turrini@gmail.com" date="1314619200">- fixed typos in i4l-base.spec</changelog>
<changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dmueller@suse.de" date="1324555200">- fix build on arm (fix va_list usage)</changelog>
<changelog author="jengelh@medozas.de" date="1325592000">- Use desired interpreter properly in %post
- Remove redundant sections</changelog>
<changelog author="dlovasko@suse.com" date="1328702400">- fixed bnc#743146 - added -fPIE/-pie/-fPIC flags to compilation and linking of isdnctrl and vboxbeep</changelog>
<changelog author="jengelh@medozas.de" date="1331380800">- Employ shlib policy for libcapi20.so
- Remove .la files in standard directories</changelog>
<changelog author="aj@suse.de" date="1340107200">- Use set_permissions instead of run_permissions.
- Add proper verify_permission usage.
- Compile with -fno-strict-aliasing due to aliasing issues.
- Use versioned provides/obsoletes.
- Use Group Hardware/ISDN everywhere.</changelog>
<changelog author="coolo@suse.com" date="1347710400">- replace ; with 'and' in license string</changelog>
<changelog author="cfarrell@suse.com" date="1347883200">- license update: GPL-2.0+ and SUSE-Firmware
  SPDX format for firmware package</changelog>
<changelog author="aj@suse.de" date="1349697600">- Use tmpfiles.d instead of obsolete /lib/udev/devices for static
  device nodes</changelog>
<changelog author="max@suse.com" date="1350561600">- Make SuSEconfig.isdn a standalone script and rename/move it to
  /etc/sysconfig/isdn/scripts/postprocess.isdn .
- Move the MODIFY_SECRETS variable from /etc/sysconfig/suseconfig
  to the new /etc/sysconfig/isdn file.
- Add divactrl_2.1-dialog.patch to keep the precompiled dialog
  binary from getting installed under /usr/share.
- Add i4l-base-rpmlintrc to silence false positive
  devel-file-in-non-devel-package errors.</changelog>
<changelog author="max@suse.com" date="1353499200">- Remove "set -x" from %post (bnc#790326).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362225600">- add isdn4k-utils-automake-1_13.diff, fix build with new automake</changelog>
<changelog author="fcrozat@suse.com" date="1366372800">- Do not own udev directories</changelog>
<changelog author="fcrozat@suse.com" date="1366632000">- Move udev rules to /usr/lib/udev/rules.d, they shouldn't live in
  /etc/udev/rules.d
- Move isdn.sh script to /usr/lib/udev and fix udev rules
  accordingly.</changelog>
<changelog author="max@suse.com" date="1375963200">- Fix build with Tcl 8.6.
- Remove unneeded requirement on tk-devel.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- rebuild with ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="c9d46a90888012e71f2b3277ce8ed59b4615eb4094f41a0e7490cd95c9c1719b" name="capi4linux" arch="x86_64">
    <version epoch="0" ver="2011.8.29" rel="17.3.1"/>

<changelog author="jengelh@medozas.de" date="1264939200">- package baselibs.conf</changelog>
<changelog author="ro@suse.de" date="1280232000">- drop glitz-devel from buildrequires (glitz backend was dropped
  from cairo two years ago)</changelog>
<changelog author="coolo@novell.com" date="1289217600">- remove support for pre-9.1</changelog>
<changelog author="andrea.turrini@gmail.com" date="1314619200">- fixed typos in i4l-base.spec</changelog>
<changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dmueller@suse.de" date="1324555200">- fix build on arm (fix va_list usage)</changelog>
<changelog author="jengelh@medozas.de" date="1325592000">- Use desired interpreter properly in %post
- Remove redundant sections</changelog>
<changelog author="dlovasko@suse.com" date="1328702400">- fixed bnc#743146 - added -fPIE/-pie/-fPIC flags to compilation and linking of isdnctrl and vboxbeep</changelog>
<changelog author="jengelh@medozas.de" date="1331380800">- Employ shlib policy for libcapi20.so
- Remove .la files in standard directories</changelog>
<changelog author="aj@suse.de" date="1340107200">- Use set_permissions instead of run_permissions.
- Add proper verify_permission usage.
- Compile with -fno-strict-aliasing due to aliasing issues.
- Use versioned provides/obsoletes.
- Use Group Hardware/ISDN everywhere.</changelog>
<changelog author="coolo@suse.com" date="1347710400">- replace ; with 'and' in license string</changelog>
<changelog author="cfarrell@suse.com" date="1347883200">- license update: GPL-2.0+ and SUSE-Firmware
  SPDX format for firmware package</changelog>
<changelog author="aj@suse.de" date="1349697600">- Use tmpfiles.d instead of obsolete /lib/udev/devices for static
  device nodes</changelog>
<changelog author="max@suse.com" date="1350561600">- Make SuSEconfig.isdn a standalone script and rename/move it to
  /etc/sysconfig/isdn/scripts/postprocess.isdn .
- Move the MODIFY_SECRETS variable from /etc/sysconfig/suseconfig
  to the new /etc/sysconfig/isdn file.
- Add divactrl_2.1-dialog.patch to keep the precompiled dialog
  binary from getting installed under /usr/share.
- Add i4l-base-rpmlintrc to silence false positive
  devel-file-in-non-devel-package errors.</changelog>
<changelog author="max@suse.com" date="1353499200">- Remove "set -x" from %post (bnc#790326).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362225600">- add isdn4k-utils-automake-1_13.diff, fix build with new automake</changelog>
<changelog author="fcrozat@suse.com" date="1366372800">- Do not own udev directories</changelog>
<changelog author="fcrozat@suse.com" date="1366632000">- Move udev rules to /usr/lib/udev/rules.d, they shouldn't live in
  /etc/udev/rules.d
- Move isdn.sh script to /usr/lib/udev and fix udev rules
  accordingly.</changelog>
<changelog author="max@suse.com" date="1375963200">- Fix build with Tcl 8.6.
- Remove unneeded requirement on tk-devel.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- rebuild with ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="b9132f575206d2577dffe91747ded8fb08fc6f9120c042f98099f91b1879097e" name="capi4linux-32bit" arch="x86_64">
    <version epoch="0" ver="2011.8.29" rel="17.3.1"/>

<changelog author="jengelh@medozas.de" date="1264939200">- package baselibs.conf</changelog>
<changelog author="ro@suse.de" date="1280232000">- drop glitz-devel from buildrequires (glitz backend was dropped
  from cairo two years ago)</changelog>
<changelog author="coolo@novell.com" date="1289217600">- remove support for pre-9.1</changelog>
<changelog author="andrea.turrini@gmail.com" date="1314619200">- fixed typos in i4l-base.spec</changelog>
<changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dmueller@suse.de" date="1324555200">- fix build on arm (fix va_list usage)</changelog>
<changelog author="jengelh@medozas.de" date="1325592000">- Use desired interpreter properly in %post
- Remove redundant sections</changelog>
<changelog author="dlovasko@suse.com" date="1328702400">- fixed bnc#743146 - added -fPIE/-pie/-fPIC flags to compilation and linking of isdnctrl and vboxbeep</changelog>
<changelog author="jengelh@medozas.de" date="1331380800">- Employ shlib policy for libcapi20.so
- Remove .la files in standard directories</changelog>
<changelog author="aj@suse.de" date="1340107200">- Use set_permissions instead of run_permissions.
- Add proper verify_permission usage.
- Compile with -fno-strict-aliasing due to aliasing issues.
- Use versioned provides/obsoletes.
- Use Group Hardware/ISDN everywhere.</changelog>
<changelog author="coolo@suse.com" date="1347710400">- replace ; with 'and' in license string</changelog>
<changelog author="cfarrell@suse.com" date="1347883200">- license update: GPL-2.0+ and SUSE-Firmware
  SPDX format for firmware package</changelog>
<changelog author="aj@suse.de" date="1349697600">- Use tmpfiles.d instead of obsolete /lib/udev/devices for static
  device nodes</changelog>
<changelog author="max@suse.com" date="1350561600">- Make SuSEconfig.isdn a standalone script and rename/move it to
  /etc/sysconfig/isdn/scripts/postprocess.isdn .
- Move the MODIFY_SECRETS variable from /etc/sysconfig/suseconfig
  to the new /etc/sysconfig/isdn file.
- Add divactrl_2.1-dialog.patch to keep the precompiled dialog
  binary from getting installed under /usr/share.
- Add i4l-base-rpmlintrc to silence false positive
  devel-file-in-non-devel-package errors.</changelog>
<changelog author="max@suse.com" date="1353499200">- Remove "set -x" from %post (bnc#790326).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362225600">- add isdn4k-utils-automake-1_13.diff, fix build with new automake</changelog>
<changelog author="fcrozat@suse.com" date="1366372800">- Do not own udev directories</changelog>
<changelog author="fcrozat@suse.com" date="1366632000">- Move udev rules to /usr/lib/udev/rules.d, they shouldn't live in
  /etc/udev/rules.d
- Move isdn.sh script to /usr/lib/udev and fix udev rules
  accordingly.</changelog>
<changelog author="max@suse.com" date="1375963200">- Fix build with Tcl 8.6.
- Remove unneeded requirement on tk-devel.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- rebuild with ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="5d32f78857926f244ab152f874bab59fc2880b716c5b0459411d36e2b3f8328e" name="capi4linux-devel" arch="i586">
    <version epoch="0" ver="2011.8.29" rel="17.3.1"/>

<changelog author="jengelh@medozas.de" date="1264939200">- package baselibs.conf</changelog>
<changelog author="ro@suse.de" date="1280232000">- drop glitz-devel from buildrequires (glitz backend was dropped
  from cairo two years ago)</changelog>
<changelog author="coolo@novell.com" date="1289217600">- remove support for pre-9.1</changelog>
<changelog author="andrea.turrini@gmail.com" date="1314619200">- fixed typos in i4l-base.spec</changelog>
<changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dmueller@suse.de" date="1324555200">- fix build on arm (fix va_list usage)</changelog>
<changelog author="jengelh@medozas.de" date="1325592000">- Use desired interpreter properly in %post
- Remove redundant sections</changelog>
<changelog author="dlovasko@suse.com" date="1328702400">- fixed bnc#743146 - added -fPIE/-pie/-fPIC flags to compilation and linking of isdnctrl and vboxbeep</changelog>
<changelog author="jengelh@medozas.de" date="1331380800">- Employ shlib policy for libcapi20.so
- Remove .la files in standard directories</changelog>
<changelog author="aj@suse.de" date="1340107200">- Use set_permissions instead of run_permissions.
- Add proper verify_permission usage.
- Compile with -fno-strict-aliasing due to aliasing issues.
- Use versioned provides/obsoletes.
- Use Group Hardware/ISDN everywhere.</changelog>
<changelog author="coolo@suse.com" date="1347710400">- replace ; with 'and' in license string</changelog>
<changelog author="cfarrell@suse.com" date="1347883200">- license update: GPL-2.0+ and SUSE-Firmware
  SPDX format for firmware package</changelog>
<changelog author="aj@suse.de" date="1349697600">- Use tmpfiles.d instead of obsolete /lib/udev/devices for static
  device nodes</changelog>
<changelog author="max@suse.com" date="1350561600">- Make SuSEconfig.isdn a standalone script and rename/move it to
  /etc/sysconfig/isdn/scripts/postprocess.isdn .
- Move the MODIFY_SECRETS variable from /etc/sysconfig/suseconfig
  to the new /etc/sysconfig/isdn file.
- Add divactrl_2.1-dialog.patch to keep the precompiled dialog
  binary from getting installed under /usr/share.
- Add i4l-base-rpmlintrc to silence false positive
  devel-file-in-non-devel-package errors.</changelog>
<changelog author="max@suse.com" date="1353499200">- Remove "set -x" from %post (bnc#790326).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362225600">- add isdn4k-utils-automake-1_13.diff, fix build with new automake</changelog>
<changelog author="fcrozat@suse.com" date="1366372800">- Do not own udev directories</changelog>
<changelog author="fcrozat@suse.com" date="1366632000">- Move udev rules to /usr/lib/udev/rules.d, they shouldn't live in
  /etc/udev/rules.d
- Move isdn.sh script to /usr/lib/udev and fix udev rules
  accordingly.</changelog>
<changelog author="max@suse.com" date="1375963200">- Fix build with Tcl 8.6.
- Remove unneeded requirement on tk-devel.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- rebuild with ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="fa6e5610ac1ad0a7530ffceb9a70e5dcc4e71e1572a4ea9fc71b643b303c3f5a" name="capi4linux-devel" arch="x86_64">
    <version epoch="0" ver="2011.8.29" rel="17.3.1"/>

<changelog author="jengelh@medozas.de" date="1264939200">- package baselibs.conf</changelog>
<changelog author="ro@suse.de" date="1280232000">- drop glitz-devel from buildrequires (glitz backend was dropped
  from cairo two years ago)</changelog>
<changelog author="coolo@novell.com" date="1289217600">- remove support for pre-9.1</changelog>
<changelog author="andrea.turrini@gmail.com" date="1314619200">- fixed typos in i4l-base.spec</changelog>
<changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dmueller@suse.de" date="1324555200">- fix build on arm (fix va_list usage)</changelog>
<changelog author="jengelh@medozas.de" date="1325592000">- Use desired interpreter properly in %post
- Remove redundant sections</changelog>
<changelog author="dlovasko@suse.com" date="1328702400">- fixed bnc#743146 - added -fPIE/-pie/-fPIC flags to compilation and linking of isdnctrl and vboxbeep</changelog>
<changelog author="jengelh@medozas.de" date="1331380800">- Employ shlib policy for libcapi20.so
- Remove .la files in standard directories</changelog>
<changelog author="aj@suse.de" date="1340107200">- Use set_permissions instead of run_permissions.
- Add proper verify_permission usage.
- Compile with -fno-strict-aliasing due to aliasing issues.
- Use versioned provides/obsoletes.
- Use Group Hardware/ISDN everywhere.</changelog>
<changelog author="coolo@suse.com" date="1347710400">- replace ; with 'and' in license string</changelog>
<changelog author="cfarrell@suse.com" date="1347883200">- license update: GPL-2.0+ and SUSE-Firmware
  SPDX format for firmware package</changelog>
<changelog author="aj@suse.de" date="1349697600">- Use tmpfiles.d instead of obsolete /lib/udev/devices for static
  device nodes</changelog>
<changelog author="max@suse.com" date="1350561600">- Make SuSEconfig.isdn a standalone script and rename/move it to
  /etc/sysconfig/isdn/scripts/postprocess.isdn .
- Move the MODIFY_SECRETS variable from /etc/sysconfig/suseconfig
  to the new /etc/sysconfig/isdn file.
- Add divactrl_2.1-dialog.patch to keep the precompiled dialog
  binary from getting installed under /usr/share.
- Add i4l-base-rpmlintrc to silence false positive
  devel-file-in-non-devel-package errors.</changelog>
<changelog author="max@suse.com" date="1353499200">- Remove "set -x" from %post (bnc#790326).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362225600">- add isdn4k-utils-automake-1_13.diff, fix build with new automake</changelog>
<changelog author="fcrozat@suse.com" date="1366372800">- Do not own udev directories</changelog>
<changelog author="fcrozat@suse.com" date="1366632000">- Move udev rules to /usr/lib/udev/rules.d, they shouldn't live in
  /etc/udev/rules.d
- Move isdn.sh script to /usr/lib/udev and fix udev rules
  accordingly.</changelog>
<changelog author="max@suse.com" date="1375963200">- Fix build with Tcl 8.6.
- Remove unneeded requirement on tk-devel.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- rebuild with ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="8105e3c4e731121debfffba289977d062365c612649bb32051b7a53fcbf3ac6b" name="capi4linux-devel-32bit" arch="x86_64">
    <version epoch="0" ver="2011.8.29" rel="17.3.1"/>

<changelog author="jengelh@medozas.de" date="1264939200">- package baselibs.conf</changelog>
<changelog author="ro@suse.de" date="1280232000">- drop glitz-devel from buildrequires (glitz backend was dropped
  from cairo two years ago)</changelog>
<changelog author="coolo@novell.com" date="1289217600">- remove support for pre-9.1</changelog>
<changelog author="andrea.turrini@gmail.com" date="1314619200">- fixed typos in i4l-base.spec</changelog>
<changelog author="coolo@suse.com" date="1318680000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="dmueller@suse.de" date="1324555200">- fix build on arm (fix va_list usage)</changelog>
<changelog author="jengelh@medozas.de" date="1325592000">- Use desired interpreter properly in %post
- Remove redundant sections</changelog>
<changelog author="dlovasko@suse.com" date="1328702400">- fixed bnc#743146 - added -fPIE/-pie/-fPIC flags to compilation and linking of isdnctrl and vboxbeep</changelog>
<changelog author="jengelh@medozas.de" date="1331380800">- Employ shlib policy for libcapi20.so
- Remove .la files in standard directories</changelog>
<changelog author="aj@suse.de" date="1340107200">- Use set_permissions instead of run_permissions.
- Add proper verify_permission usage.
- Compile with -fno-strict-aliasing due to aliasing issues.
- Use versioned provides/obsoletes.
- Use Group Hardware/ISDN everywhere.</changelog>
<changelog author="coolo@suse.com" date="1347710400">- replace ; with 'and' in license string</changelog>
<changelog author="cfarrell@suse.com" date="1347883200">- license update: GPL-2.0+ and SUSE-Firmware
  SPDX format for firmware package</changelog>
<changelog author="aj@suse.de" date="1349697600">- Use tmpfiles.d instead of obsolete /lib/udev/devices for static
  device nodes</changelog>
<changelog author="max@suse.com" date="1350561600">- Make SuSEconfig.isdn a standalone script and rename/move it to
  /etc/sysconfig/isdn/scripts/postprocess.isdn .
- Move the MODIFY_SECRETS variable from /etc/sysconfig/suseconfig
  to the new /etc/sysconfig/isdn file.
- Add divactrl_2.1-dialog.patch to keep the precompiled dialog
  binary from getting installed under /usr/share.
- Add i4l-base-rpmlintrc to silence false positive
  devel-file-in-non-devel-package errors.</changelog>
<changelog author="max@suse.com" date="1353499200">- Remove "set -x" from %post (bnc#790326).</changelog>
<changelog author="seife+obs@b1-systems.com" date="1362225600">- add isdn4k-utils-automake-1_13.diff, fix build with new automake</changelog>
<changelog author="fcrozat@suse.com" date="1366372800">- Do not own udev directories</changelog>
<changelog author="fcrozat@suse.com" date="1366632000">- Move udev rules to /usr/lib/udev/rules.d, they shouldn't live in
  /etc/udev/rules.d
- Move isdn.sh script to /usr/lib/udev and fix udev rules
  accordingly.</changelog>
<changelog author="max@suse.com" date="1375963200">- Fix build with Tcl 8.6.
- Remove unneeded requirement on tk-devel.</changelog>
<changelog author="meissner@suse.com" date="1449489600">- rebuild with ppp 2.4.7 (bsc#957961)</changelog>

</package>
<package pkgid="d71ed6b841fc5853aad2552f678cd484f5741221ea25839277ae6d953b44adbe" name="castor" arch="noarch">
    <version epoch="0" ver="0.9.5" rel="320.4.1"/>

<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="ro@suse.de" date="1158321600">- set source=1.4 for java</changelog>
<changelog author="mvyskocil@suse.cz" date="1201089600">- fixed build in beta</changelog>
<changelog author="mvyskocil@suse.cz" date="1209556800">- add log4j to CLASSPATH during %install
- use GC_MAXIMUM_HEAP_SIZE instead of ANT_OPTS</changelog>
<changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build under gcj44
- removed unecessary javadocs scripts
- used fdupes</changelog>
<changelog author="mvyskocil@suse.cz" date="1300104000">- ignore openjdk</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="mvyskocil@suse.cz" date="1337342400">- ignore java-1_7_0-openjdk as well</changelog>
<changelog author="mvyskocil@suse.com" date="1377172800">- disable javadoc build</changelog>
<changelog author="tchvatal@suse.com" date="1402574400">- Backport fix for CVE-2013-3004 from upstream repository.
  Fixes bnc#882408.
  * castor-0.9.5-CVE-2014-3004.patch</changelog>

</package>
<package pkgid="18e4f96a04501bec419429ed9ba714f83f8c8601aef6e023893f14a8568f1843" name="castor" arch="src">
    <version epoch="0" ver="0.9.5" rel="320.4.1"/>

<changelog author="skh@suse.de" date="1094385600">- Initial package created with version 0.9.5</changelog>
<changelog author="skh@suse.de" date="1095336000">- Fix prerequires in javadoc subpackage</changelog>
<changelog author="dmueller@suse.de" date="1127908800">- add norootforbuild</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="ro@suse.de" date="1158321600">- set source=1.4 for java</changelog>
<changelog author="mvyskocil@suse.cz" date="1201089600">- fixed build in beta</changelog>
<changelog author="mvyskocil@suse.cz" date="1209556800">- add log4j to CLASSPATH during %install
- use GC_MAXIMUM_HEAP_SIZE instead of ANT_OPTS</changelog>
<changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build under gcj44
- removed unecessary javadocs scripts
- used fdupes</changelog>
<changelog author="mvyskocil@suse.cz" date="1300104000">- ignore openjdk</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="mvyskocil@suse.cz" date="1337342400">- ignore java-1_7_0-openjdk as well</changelog>
<changelog author="mvyskocil@suse.com" date="1377172800">- disable javadoc build</changelog>
<changelog author="tchvatal@suse.com" date="1402574400">- Backport fix for CVE-2013-3004 from upstream repository.
  Fixes bnc#882408.
  * castor-0.9.5-CVE-2014-3004.patch</changelog>

</package>
<package pkgid="45097cbfc36b11b9c7baee7273c5f0bc90d7e4a5afe7ae5c5509442723b09819" name="castor-demo" arch="noarch">
    <version epoch="0" ver="0.9.5" rel="320.4.1"/>

<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="ro@suse.de" date="1158321600">- set source=1.4 for java</changelog>
<changelog author="mvyskocil@suse.cz" date="1201089600">- fixed build in beta</changelog>
<changelog author="mvyskocil@suse.cz" date="1209556800">- add log4j to CLASSPATH during %install
- use GC_MAXIMUM_HEAP_SIZE instead of ANT_OPTS</changelog>
<changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build under gcj44
- removed unecessary javadocs scripts
- used fdupes</changelog>
<changelog author="mvyskocil@suse.cz" date="1300104000">- ignore openjdk</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="mvyskocil@suse.cz" date="1337342400">- ignore java-1_7_0-openjdk as well</changelog>
<changelog author="mvyskocil@suse.com" date="1377172800">- disable javadoc build</changelog>
<changelog author="tchvatal@suse.com" date="1402574400">- Backport fix for CVE-2013-3004 from upstream repository.
  Fixes bnc#882408.
  * castor-0.9.5-CVE-2014-3004.patch</changelog>

</package>
<package pkgid="ad50f7a354ebea25472b627e039a4314b0f067b6b081759a9b49f9e7e7fcc4f5" name="castor-doc" arch="noarch">
    <version epoch="0" ver="0.9.5" rel="320.4.1"/>

<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="ro@suse.de" date="1158321600">- set source=1.4 for java</changelog>
<changelog author="mvyskocil@suse.cz" date="1201089600">- fixed build in beta</changelog>
<changelog author="mvyskocil@suse.cz" date="1209556800">- add log4j to CLASSPATH during %install
- use GC_MAXIMUM_HEAP_SIZE instead of ANT_OPTS</changelog>
<changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build under gcj44
- removed unecessary javadocs scripts
- used fdupes</changelog>
<changelog author="mvyskocil@suse.cz" date="1300104000">- ignore openjdk</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="mvyskocil@suse.cz" date="1337342400">- ignore java-1_7_0-openjdk as well</changelog>
<changelog author="mvyskocil@suse.com" date="1377172800">- disable javadoc build</changelog>
<changelog author="tchvatal@suse.com" date="1402574400">- Backport fix for CVE-2013-3004 from upstream repository.
  Fixes bnc#882408.
  * castor-0.9.5-CVE-2014-3004.patch</changelog>

</package>
<package pkgid="1f8252e57dd194c15fa7efdf574e7f197d09f8325298cdd02a31f6c170115d17" name="castor-test" arch="noarch">
    <version epoch="0" ver="0.9.5" rel="320.4.1"/>

<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="ro@suse.de" date="1158321600">- set source=1.4 for java</changelog>
<changelog author="mvyskocil@suse.cz" date="1201089600">- fixed build in beta</changelog>
<changelog author="mvyskocil@suse.cz" date="1209556800">- add log4j to CLASSPATH during %install
- use GC_MAXIMUM_HEAP_SIZE instead of ANT_OPTS</changelog>
<changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build under gcj44
- removed unecessary javadocs scripts
- used fdupes</changelog>
<changelog author="mvyskocil@suse.cz" date="1300104000">- ignore openjdk</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="mvyskocil@suse.cz" date="1337342400">- ignore java-1_7_0-openjdk as well</changelog>
<changelog author="mvyskocil@suse.com" date="1377172800">- disable javadoc build</changelog>
<changelog author="tchvatal@suse.com" date="1402574400">- Backport fix for CVE-2013-3004 from upstream repository.
  Fixes bnc#882408.
  * castor-0.9.5-CVE-2014-3004.patch</changelog>

</package>
<package pkgid="b967582533f260e855c76810cc831a1df99e4524878c332c6c7ec9d873cfe38d" name="castor-xml" arch="noarch">
    <version epoch="0" ver="0.9.5" rel="320.4.1"/>

<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="ro@suse.de" date="1158321600">- set source=1.4 for java</changelog>
<changelog author="mvyskocil@suse.cz" date="1201089600">- fixed build in beta</changelog>
<changelog author="mvyskocil@suse.cz" date="1209556800">- add log4j to CLASSPATH during %install
- use GC_MAXIMUM_HEAP_SIZE instead of ANT_OPTS</changelog>
<changelog author="mvyskocil@suse.cz" date="1242907200">- fixed build under gcj44
- removed unecessary javadocs scripts
- used fdupes</changelog>
<changelog author="mvyskocil@suse.cz" date="1300104000">- ignore openjdk</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="mvyskocil@suse.cz" date="1337342400">- ignore java-1_7_0-openjdk as well</changelog>
<changelog author="mvyskocil@suse.com" date="1377172800">- disable javadoc build</changelog>
<changelog author="tchvatal@suse.com" date="1402574400">- Backport fix for CVE-2013-3004 from upstream repository.
  Fixes bnc#882408.
  * castor-0.9.5-CVE-2014-3004.patch</changelog>

</package>
<package pkgid="3ba8fe96c6b18aa734fac1c7444f5768d43da9f058c9a707c59d96e478180363" name="cervisia" arch="i586">
    <version epoch="0" ver="4.11.3" rel="10.6"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="9b93fe9d2762257f1b9f5e5061ab8cf45a003d01f5fe0a4f816447cc762b6374" name="cervisia" arch="i586">
    <version epoch="0" ver="4.11.4" rel="104.19"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="d6308056a03dd8662fd3372fb55d807bbf98ac238f7a3d5ca011fb68836a140c" name="cervisia" arch="i586">
    <version epoch="0" ver="4.11.5" rel="112.9"/>

<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="c5bcaa47d8b07aa2a7e2682bf174763db5c7798309746a8f58257f61dfe588f8" name="cervisia" arch="src">
    <version epoch="0" ver="4.11.3" rel="10.6"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="dbdde5fb1f9f4967648d7a107d65a7d1dbfb9a01102847d85b62a4376682c782" name="cervisia" arch="src">
    <version epoch="0" ver="4.11.4" rel="104.19"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="866d4da128a7a5bfc84fc0671ff7b427e4c2bf6dbd50366373fb59e4552d0487" name="cervisia" arch="src">
    <version epoch="0" ver="4.11.5" rel="112.9"/>

<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="c98514425998a36f35829210dcc8997b1089bc6b6072e0525f3ca0a1a28222de" name="cervisia" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="10.6"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="44d22c95053b71876f5a625155ab9ea5545ce4fed11dd79bf9e3dd5489f7af54" name="cervisia" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="104.19"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="e6e758d178c24b50f5d8c9c6a89dfea7e9fac2598babf3f28232586fcdeb4771" name="cervisia" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="112.9"/>

<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="c3779e55b4b1345897a7aac592cea30dd4dbfd607300283deb760b9e584d154b" name="cgit" arch="i586">
    <version epoch="0" ver="0.11.2" rel="11.3.1"/>

<changelog author="tiwai@suse.de" date="1301313600">- updated to git 1.7.4.2:
  documentation updates, small bug fixes;
  see included Documentation/RelNotes/1.7.4.2.txt
- updated to cgit 0.9:
  major updates; using git-1.7.4.x</changelog>
<changelog author="tiwai@suse.de" date="1306497600">- updated git 1.7.5.3:
  See git changelog for more details</changelog>
<changelog author="mmarek@novell.com" date="1306929600">- Do not buildrequire git, the package builds it's own git and the
  buildrequires line only makes backporting harder.</changelog>
<changelog author="tiwai@suse.de" date="1307361600">- Fix incompatibilies with git 1.7.5.x to build cgit again</changelog>
<changelog author="tiwai@suse.de" date="1307361601">- updated to git 1.7.5.4: see git changelog for more details</changelog>
<changelog author="tiwai@suse.de" date="1309176000">- updated to git 1.7.6: see git changelog for more details</changelog>
<changelog author="asn@cryptomilk.org" date="1312372800">- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6</changelog>
<changelog author="tiwai@suse.de" date="1318593600">- split from OBS git repo to an individual repo (since cgit-0.9
  doesn't build with git-1.7.7)
- merged fixes in git repo back to cgit repo
- updated to git 1.7.6.4</changelog>
<changelog author="saschpe@suse.de" date="1321963200">- Add patch cgit-fix-print-tree.diff:
    The cgit build fix with respect to git-1.7.6 is incomplete: in
    the file ui-tree.c ls_tree() has been patched to use pathspec
    when invoking read_tree_recursive(), but cgit_print_tree() has
    no t been touched.
    The resulting problem can be seen when browsing the tree of a cgit
    repository: when you "drill down" into subfolders, parts of the
    parent folder's contents will appear in the listing.
    This patch adjusts cgit_print_tree() accordingly, which fixes the problem.</changelog>
<changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
<changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
<changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
<changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
<changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
<changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
<changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
<changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
<changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>

</package>
<package pkgid="fb21186ff33cc88bff64b2ce876d6eca81b0ac7d172bb3f8c83e1226dd89144c" name="cgit" arch="i586">
    <version epoch="0" ver="0.12" rel="11.12.1"/>

<changelog author="tiwai@suse.de" date="1309176000">- updated to git 1.7.6: see git changelog for more details</changelog>
<changelog author="asn@cryptomilk.org" date="1312372800">- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6</changelog>
<changelog author="tiwai@suse.de" date="1318593600">- split from OBS git repo to an individual repo (since cgit-0.9
  doesn't build with git-1.7.7)
- merged fixes in git repo back to cgit repo
- updated to git 1.7.6.4</changelog>
<changelog author="saschpe@suse.de" date="1321963200">- Add patch cgit-fix-print-tree.diff:
    The cgit build fix with respect to git-1.7.6 is incomplete: in
    the file ui-tree.c ls_tree() has been patched to use pathspec
    when invoking read_tree_recursive(), but cgit_print_tree() has
    no t been touched.
    The resulting problem can be seen when browsing the tree of a cgit
    repository: when you "drill down" into subfolders, parts of the
    parent folder's contents will appear in the listing.
    This patch adjusts cgit_print_tree() accordingly, which fixes the problem.</changelog>
<changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
<changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
<changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
<changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
<changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
<changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
<changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
<changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
<changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
<changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
<changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1458216000">- fix remote code execution via buffer overflow
  (CVE-2016-2315 CVE-2016-2324 bsc#971328):
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>

</package>
<package pkgid="638372ec12bbb1c6e0e306f57e4d7ff6acef125ee41633bac637aeefec6cacea" name="cgit" arch="i586">
    <version epoch="0" ver="0.12" rel="11.6.1"/>

<changelog author="tiwai@suse.de" date="1307361600">- Fix incompatibilies with git 1.7.5.x to build cgit again</changelog>
<changelog author="tiwai@suse.de" date="1307361601">- updated to git 1.7.5.4: see git changelog for more details</changelog>
<changelog author="tiwai@suse.de" date="1309176000">- updated to git 1.7.6: see git changelog for more details</changelog>
<changelog author="asn@cryptomilk.org" date="1312372800">- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6</changelog>
<changelog author="tiwai@suse.de" date="1318593600">- split from OBS git repo to an individual repo (since cgit-0.9
  doesn't build with git-1.7.7)
- merged fixes in git repo back to cgit repo
- updated to git 1.7.6.4</changelog>
<changelog author="saschpe@suse.de" date="1321963200">- Add patch cgit-fix-print-tree.diff:
    The cgit build fix with respect to git-1.7.6 is incomplete: in
    the file ui-tree.c ls_tree() has been patched to use pathspec
    when invoking read_tree_recursive(), but cgit_print_tree() has
    no t been touched.
    The resulting problem can be seen when browsing the tree of a cgit
    repository: when you "drill down" into subfolders, parts of the
    parent folder's contents will appear in the listing.
    This patch adjusts cgit_print_tree() accordingly, which fixes the problem.</changelog>
<changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
<changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
<changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
<changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
<changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
<changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
<changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
<changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
<changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
<changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
<changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>

</package>
<package pkgid="ca76df291c3a6dda6c59a21003c752e2771ca965e1077ed59bdd75b7a7e12b1f" name="cgit" arch="i586">
    <version epoch="0" ver="0.12" rel="11.9.2"/>

<changelog author="tiwai@suse.de" date="1307361600">- updated to git 1.7.5.4: see git changelog for more details</changelog>
<changelog author="tiwai@suse.de" date="1309176000">- updated to git 1.7.6: see git changelog for more details</changelog>
<changelog author="asn@cryptomilk.org" date="1312372800">- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6</changelog>
<changelog author="tiwai@suse.de" date="1318593600">- split from OBS git repo to an individual repo (since cgit-0.9
  doesn't build with git-1.7.7)
- merged fixes in git repo back to cgit repo
- updated to git 1.7.6.4</changelog>
<changelog author="saschpe@suse.de" date="1321963200">- Add patch cgit-fix-print-tree.diff:
    The cgit build fix with respect to git-1.7.6 is incomplete: in
    the file ui-tree.c ls_tree() has been patched to use pathspec
    when invoking read_tree_recursive(), but cgit_print_tree() has
    no t been touched.
    The resulting problem can be seen when browsing the tree of a cgit
    repository: when you "drill down" into subfolders, parts of the
    parent folder's contents will appear in the listing.
    This patch adjusts cgit_print_tree() accordingly, which fixes the problem.</changelog>
<changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
<changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
<changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
<changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
<changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
<changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
<changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
<changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
<changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
<changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
<changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="9c5822bfd67ceeb002632ffc9116ee5c3ad4032604ec811f4976765fbb391df3" name="cgit" arch="src">
    <version epoch="0" ver="0.11.2" rel="11.3.1"/>

<changelog author="tiwai@suse.de" date="1301313600">- updated to git 1.7.4.2:
  documentation updates, small bug fixes;
  see included Documentation/RelNotes/1.7.4.2.txt
- updated to cgit 0.9:
  major updates; using git-1.7.4.x</changelog>
<changelog author="tiwai@suse.de" date="1306497600">- updated git 1.7.5.3:
  See git changelog for more details</changelog>
<changelog author="mmarek@novell.com" date="1306929600">- Do not buildrequire git, the package builds it's own git and the
  buildrequires line only makes backporting harder.</changelog>
<changelog author="tiwai@suse.de" date="1307361600">- Fix incompatibilies with git 1.7.5.x to build cgit again</changelog>
<changelog author="tiwai@suse.de" date="1307361601">- updated to git 1.7.5.4: see git changelog for more details</changelog>
<changelog author="tiwai@suse.de" date="1309176000">- updated to git 1.7.6: see git changelog for more details</changelog>
<changelog author="asn@cryptomilk.org" date="1312372800">- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6</changelog>
<changelog author="tiwai@suse.de" date="1318593600">- split from OBS git repo to an individual repo (since cgit-0.9
  doesn't build with git-1.7.7)
- merged fixes in git repo back to cgit repo
- updated to git 1.7.6.4</changelog>
<changelog author="saschpe@suse.de" date="1321963200">- Add patch cgit-fix-print-tree.diff:
    The cgit build fix with respect to git-1.7.6 is incomplete: in
    the file ui-tree.c ls_tree() has been patched to use pathspec
    when invoking read_tree_recursive(), but cgit_print_tree() has
    no t been touched.
    The resulting problem can be seen when browsing the tree of a cgit
    repository: when you "drill down" into subfolders, parts of the
    parent folder's contents will appear in the listing.
    This patch adjusts cgit_print_tree() accordingly, which fixes the problem.</changelog>
<changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
<changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
<changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
<changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
<changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
<changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
<changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
<changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
<changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>

</package>
<package pkgid="6c49e03107a8ed9737beb5ebe158a7c1c3e9da150df41d6de1b9235d2c21ef84" name="cgit" arch="src">
    <version epoch="0" ver="0.12" rel="11.12.1"/>

<changelog author="tiwai@suse.de" date="1309176000">- updated to git 1.7.6: see git changelog for more details</changelog>
<changelog author="asn@cryptomilk.org" date="1312372800">- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6</changelog>
<changelog author="tiwai@suse.de" date="1318593600">- split from OBS git repo to an individual repo (since cgit-0.9
  doesn't build with git-1.7.7)
- merged fixes in git repo back to cgit repo
- updated to git 1.7.6.4</changelog>
<changelog author="saschpe@suse.de" date="1321963200">- Add patch cgit-fix-print-tree.diff:
    The cgit build fix with respect to git-1.7.6 is incomplete: in
    the file ui-tree.c ls_tree() has been patched to use pathspec
    when invoking read_tree_recursive(), but cgit_print_tree() has
    no t been touched.
    The resulting problem can be seen when browsing the tree of a cgit
    repository: when you "drill down" into subfolders, parts of the
    parent folder's contents will appear in the listing.
    This patch adjusts cgit_print_tree() accordingly, which fixes the problem.</changelog>
<changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
<changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
<changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
<changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
<changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
<changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
<changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
<changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
<changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
<changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
<changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1458216000">- fix remote code execution via buffer overflow
  (CVE-2016-2315 CVE-2016-2324 bsc#971328):
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>

</package>
<package pkgid="18f5f8cc43f023d07a87c5a4b531d8460aab5771857761b6d5a6a452a2377564" name="cgit" arch="src">
    <version epoch="0" ver="0.12" rel="11.6.1"/>

<changelog author="tiwai@suse.de" date="1307361600">- Fix incompatibilies with git 1.7.5.x to build cgit again</changelog>
<changelog author="tiwai@suse.de" date="1307361601">- updated to git 1.7.5.4: see git changelog for more details</changelog>
<changelog author="tiwai@suse.de" date="1309176000">- updated to git 1.7.6: see git changelog for more details</changelog>
<changelog author="asn@cryptomilk.org" date="1312372800">- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6</changelog>
<changelog author="tiwai@suse.de" date="1318593600">- split from OBS git repo to an individual repo (since cgit-0.9
  doesn't build with git-1.7.7)
- merged fixes in git repo back to cgit repo
- updated to git 1.7.6.4</changelog>
<changelog author="saschpe@suse.de" date="1321963200">- Add patch cgit-fix-print-tree.diff:
    The cgit build fix with respect to git-1.7.6 is incomplete: in
    the file ui-tree.c ls_tree() has been patched to use pathspec
    when invoking read_tree_recursive(), but cgit_print_tree() has
    no t been touched.
    The resulting problem can be seen when browsing the tree of a cgit
    repository: when you "drill down" into subfolders, parts of the
    parent folder's contents will appear in the listing.
    This patch adjusts cgit_print_tree() accordingly, which fixes the problem.</changelog>
<changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
<changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
<changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
<changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
<changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
<changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
<changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
<changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
<changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
<changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
<changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>

</package>
<package pkgid="ae3cf311c2ceca40480291c17a4135cafe1c1d8e2a6446fbf47689884ea6654b" name="cgit" arch="src">
    <version epoch="0" ver="0.12" rel="11.9.2"/>

<changelog author="tiwai@suse.de" date="1307361600">- updated to git 1.7.5.4: see git changelog for more details</changelog>
<changelog author="tiwai@suse.de" date="1309176000">- updated to git 1.7.6: see git changelog for more details</changelog>
<changelog author="asn@cryptomilk.org" date="1312372800">- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6</changelog>
<changelog author="tiwai@suse.de" date="1318593600">- split from OBS git repo to an individual repo (since cgit-0.9
  doesn't build with git-1.7.7)
- merged fixes in git repo back to cgit repo
- updated to git 1.7.6.4</changelog>
<changelog author="saschpe@suse.de" date="1321963200">- Add patch cgit-fix-print-tree.diff:
    The cgit build fix with respect to git-1.7.6 is incomplete: in
    the file ui-tree.c ls_tree() has been patched to use pathspec
    when invoking read_tree_recursive(), but cgit_print_tree() has
    no t been touched.
    The resulting problem can be seen when browsing the tree of a cgit
    repository: when you "drill down" into subfolders, parts of the
    parent folder's contents will appear in the listing.
    This patch adjusts cgit_print_tree() accordingly, which fixes the problem.</changelog>
<changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
<changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
<changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
<changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
<changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
<changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
<changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
<changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
<changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
<changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
<changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="7add9ba36ded1e2cbf981efb342c304891cb38155658a49e5dec8fb450c67a66" name="cgit" arch="x86_64">
    <version epoch="0" ver="0.11.2" rel="11.3.1"/>

<changelog author="tiwai@suse.de" date="1301313600">- updated to git 1.7.4.2:
  documentation updates, small bug fixes;
  see included Documentation/RelNotes/1.7.4.2.txt
- updated to cgit 0.9:
  major updates; using git-1.7.4.x</changelog>
<changelog author="tiwai@suse.de" date="1306497600">- updated git 1.7.5.3:
  See git changelog for more details</changelog>
<changelog author="mmarek@novell.com" date="1306929600">- Do not buildrequire git, the package builds it's own git and the
  buildrequires line only makes backporting harder.</changelog>
<changelog author="tiwai@suse.de" date="1307361600">- Fix incompatibilies with git 1.7.5.x to build cgit again</changelog>
<changelog author="tiwai@suse.de" date="1307361601">- updated to git 1.7.5.4: see git changelog for more details</changelog>
<changelog author="tiwai@suse.de" date="1309176000">- updated to git 1.7.6: see git changelog for more details</changelog>
<changelog author="asn@cryptomilk.org" date="1312372800">- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6</changelog>
<changelog author="tiwai@suse.de" date="1318593600">- split from OBS git repo to an individual repo (since cgit-0.9
  doesn't build with git-1.7.7)
- merged fixes in git repo back to cgit repo
- updated to git 1.7.6.4</changelog>
<changelog author="saschpe@suse.de" date="1321963200">- Add patch cgit-fix-print-tree.diff:
    The cgit build fix with respect to git-1.7.6 is incomplete: in
    the file ui-tree.c ls_tree() has been patched to use pathspec
    when invoking read_tree_recursive(), but cgit_print_tree() has
    no t been touched.
    The resulting problem can be seen when browsing the tree of a cgit
    repository: when you "drill down" into subfolders, parts of the
    parent folder's contents will appear in the listing.
    This patch adjusts cgit_print_tree() accordingly, which fixes the problem.</changelog>
<changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
<changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
<changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
<changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
<changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
<changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
<changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
<changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
<changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>

</package>
<package pkgid="696110f1ba5f43a1abaf9da32415d50b45c700ac30b929da90ca6022dd831a18" name="cgit" arch="x86_64">
    <version epoch="0" ver="0.12" rel="11.12.1"/>

<changelog author="tiwai@suse.de" date="1309176000">- updated to git 1.7.6: see git changelog for more details</changelog>
<changelog author="asn@cryptomilk.org" date="1312372800">- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6</changelog>
<changelog author="tiwai@suse.de" date="1318593600">- split from OBS git repo to an individual repo (since cgit-0.9
  doesn't build with git-1.7.7)
- merged fixes in git repo back to cgit repo
- updated to git 1.7.6.4</changelog>
<changelog author="saschpe@suse.de" date="1321963200">- Add patch cgit-fix-print-tree.diff:
    The cgit build fix with respect to git-1.7.6 is incomplete: in
    the file ui-tree.c ls_tree() has been patched to use pathspec
    when invoking read_tree_recursive(), but cgit_print_tree() has
    no t been touched.
    The resulting problem can be seen when browsing the tree of a cgit
    repository: when you "drill down" into subfolders, parts of the
    parent folder's contents will appear in the listing.
    This patch adjusts cgit_print_tree() accordingly, which fixes the problem.</changelog>
<changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
<changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
<changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
<changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
<changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
<changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
<changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
<changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
<changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
<changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
<changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="mkubecek@suse.cz" date="1458216000">- fix remote code execution via buffer overflow
  (CVE-2016-2315 CVE-2016-2324 bsc#971328):
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>

</package>
<package pkgid="8c84610e53d55404a5f78c7e9e8d81af20d2b3999c47295d14375a281e3bb83d" name="cgit" arch="x86_64">
    <version epoch="0" ver="0.12" rel="11.6.1"/>

<changelog author="tiwai@suse.de" date="1307361600">- Fix incompatibilies with git 1.7.5.x to build cgit again</changelog>
<changelog author="tiwai@suse.de" date="1307361601">- updated to git 1.7.5.4: see git changelog for more details</changelog>
<changelog author="tiwai@suse.de" date="1309176000">- updated to git 1.7.6: see git changelog for more details</changelog>
<changelog author="asn@cryptomilk.org" date="1312372800">- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6</changelog>
<changelog author="tiwai@suse.de" date="1318593600">- split from OBS git repo to an individual repo (since cgit-0.9
  doesn't build with git-1.7.7)
- merged fixes in git repo back to cgit repo
- updated to git 1.7.6.4</changelog>
<changelog author="saschpe@suse.de" date="1321963200">- Add patch cgit-fix-print-tree.diff:
    The cgit build fix with respect to git-1.7.6 is incomplete: in
    the file ui-tree.c ls_tree() has been patched to use pathspec
    when invoking read_tree_recursive(), but cgit_print_tree() has
    no t been touched.
    The resulting problem can be seen when browsing the tree of a cgit
    repository: when you "drill down" into subfolders, parts of the
    parent folder's contents will appear in the listing.
    This patch adjusts cgit_print_tree() accordingly, which fixes the problem.</changelog>
<changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
<changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
<changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
<changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
<changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
<changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
<changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
<changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
<changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
<changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
<changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>

</package>
<package pkgid="3484ab6f2283b4c4e6ee0be32e305f3c3d973629d9de16a1c724f7f510171009" name="cgit" arch="x86_64">
    <version epoch="0" ver="0.12" rel="11.9.2"/>

<changelog author="tiwai@suse.de" date="1307361600">- updated to git 1.7.5.4: see git changelog for more details</changelog>
<changelog author="tiwai@suse.de" date="1309176000">- updated to git 1.7.6: see git changelog for more details</changelog>
<changelog author="asn@cryptomilk.org" date="1312372800">- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6</changelog>
<changelog author="tiwai@suse.de" date="1318593600">- split from OBS git repo to an individual repo (since cgit-0.9
  doesn't build with git-1.7.7)
- merged fixes in git repo back to cgit repo
- updated to git 1.7.6.4</changelog>
<changelog author="saschpe@suse.de" date="1321963200">- Add patch cgit-fix-print-tree.diff:
    The cgit build fix with respect to git-1.7.6 is incomplete: in
    the file ui-tree.c ls_tree() has been patched to use pathspec
    when invoking read_tree_recursive(), but cgit_print_tree() has
    no t been touched.
    The resulting problem can be seen when browsing the tree of a cgit
    repository: when you "drill down" into subfolders, parts of the
    parent folder's contents will appear in the listing.
    This patch adjusts cgit_print_tree() accordingly, which fixes the problem.</changelog>
<changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
<changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
<changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
<changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
<changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
<changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
<changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
<changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
<changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
<changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
<changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
<changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
<changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
<changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="9426e8f07a27891f1139e0e85738b6ec107b2fe0417fb404032fd78bc077e42c" name="checkpolicy" arch="i586">
    <version epoch="0" ver="2.1.12" rel="2.4.1"/>

<changelog author="prusnak@suse.cz" date="1224504000">- use flex-old for building (using flex does not build refpolicy)</changelog>
<changelog author="prusnak@suse.cz" date="1243425600">- updated to 2.0.19
  * fix alias field in module format, caused by boundary format change
    from Caleb Case
  * properly escape regex symbols in the lexer from Stephen Smalley
  * add bounds support from KaiGai Kohei</changelog>
<changelog author="prusnak@suse.cz" date="1245758400">- require libsepol-devel-static</changelog>
<changelog author="prusnak@suse.cz" date="1267099200">- updated to 2.0.21
  * Add support for building Xen policies from Paul Nuzzi.
  * Add long options to checkpolicy and checkmodule by Guido
    Trentalancia &lt;guido@trentalancia.com&gt;</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="meissner@suse.com" date="1343217600">- updated to 2.1.8
  - various fixes</changelog>
<changelog author="vcizek@suse.com" date="1359547200">- update to 2.1.11
  * fd leak reading policy
  * check return code on ebitmap_set_bit
  * sepolgen: We need to support files that have a + in them
  * implement new default labeling behaviors for usr, role, range</changelog>
<changelog author="vcizek@suse.com" date="1364558400">- update to 2.1.12
  * Fix errors found by coverity
  * implement default type policy syntax
  * Free allocated memory when clean up / exit.
- changes in checkpolicy-rhat.patch:
  * original hunk was merged upstream
  * space should be allowed for file trans names</changelog>
<changelog author="vcizek@suse.com" date="1372334400">- change the source url to the official 2.1.12 release tarball</changelog>
<changelog author="vcizek@suse.com" date="1385035200">- allow semicolon in filenames (bnc#851596)
  * needed to build selinux-policy
  * added checkpolicy-allow_semicolon_in_filename.patch</changelog>

</package>
<package pkgid="ec591726f57d30f28d95133889f54f59384ac2bd757ca6a4da6588ee5459a0de" name="checkpolicy" arch="src">
    <version epoch="0" ver="2.1.12" rel="2.4.1"/>

<changelog author="prusnak@suse.cz" date="1216123200">- initial version 2.0.16
  * based on Fedora package by Dan Walsh &lt;dwalsh@redhat.com&gt;</changelog>
<changelog author="prusnak@suse.cz" date="1224504000">- use flex-old for building (using flex does not build refpolicy)</changelog>
<changelog author="prusnak@suse.cz" date="1243425600">- updated to 2.0.19
  * fix alias field in module format, caused by boundary format change
    from Caleb Case
  * properly escape regex symbols in the lexer from Stephen Smalley
  * add bounds support from KaiGai Kohei</changelog>
<changelog author="prusnak@suse.cz" date="1245758400">- require libsepol-devel-static</changelog>
<changelog author="prusnak@suse.cz" date="1267099200">- updated to 2.0.21
  * Add support for building Xen policies from Paul Nuzzi.
  * Add long options to checkpolicy and checkmodule by Guido
    Trentalancia &lt;guido@trentalancia.com&gt;</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="meissner@suse.com" date="1343217600">- updated to 2.1.8
  - various fixes</changelog>
<changelog author="vcizek@suse.com" date="1359547200">- update to 2.1.11
  * fd leak reading policy
  * check return code on ebitmap_set_bit
  * sepolgen: We need to support files that have a + in them
  * implement new default labeling behaviors for usr, role, range</changelog>
<changelog author="vcizek@suse.com" date="1364558400">- update to 2.1.12
  * Fix errors found by coverity
  * implement default type policy syntax
  * Free allocated memory when clean up / exit.
- changes in checkpolicy-rhat.patch:
  * original hunk was merged upstream
  * space should be allowed for file trans names</changelog>
<changelog author="vcizek@suse.com" date="1372334400">- change the source url to the official 2.1.12 release tarball</changelog>
<changelog author="vcizek@suse.com" date="1385035200">- allow semicolon in filenames (bnc#851596)
  * needed to build selinux-policy
  * added checkpolicy-allow_semicolon_in_filename.patch</changelog>

</package>
<package pkgid="09070c92540893c103d3198ab86748ad6a5da8daee204399df12aada3ba38bfd" name="checkpolicy" arch="x86_64">
    <version epoch="0" ver="2.1.12" rel="2.4.1"/>

<changelog author="prusnak@suse.cz" date="1224504000">- use flex-old for building (using flex does not build refpolicy)</changelog>
<changelog author="prusnak@suse.cz" date="1243425600">- updated to 2.0.19
  * fix alias field in module format, caused by boundary format change
    from Caleb Case
  * properly escape regex symbols in the lexer from Stephen Smalley
  * add bounds support from KaiGai Kohei</changelog>
<changelog author="prusnak@suse.cz" date="1245758400">- require libsepol-devel-static</changelog>
<changelog author="prusnak@suse.cz" date="1267099200">- updated to 2.0.21
  * Add support for building Xen policies from Paul Nuzzi.
  * Add long options to checkpolicy and checkmodule by Guido
    Trentalancia &lt;guido@trentalancia.com&gt;</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="meissner@suse.com" date="1343217600">- updated to 2.1.8
  - various fixes</changelog>
<changelog author="vcizek@suse.com" date="1359547200">- update to 2.1.11
  * fd leak reading policy
  * check return code on ebitmap_set_bit
  * sepolgen: We need to support files that have a + in them
  * implement new default labeling behaviors for usr, role, range</changelog>
<changelog author="vcizek@suse.com" date="1364558400">- update to 2.1.12
  * Fix errors found by coverity
  * implement default type policy syntax
  * Free allocated memory when clean up / exit.
- changes in checkpolicy-rhat.patch:
  * original hunk was merged upstream
  * space should be allowed for file trans names</changelog>
<changelog author="vcizek@suse.com" date="1372334400">- change the source url to the official 2.1.12 release tarball</changelog>
<changelog author="vcizek@suse.com" date="1385035200">- allow semicolon in filenames (bnc#851596)
  * needed to build selinux-policy
  * added checkpolicy-allow_semicolon_in_filename.patch</changelog>

</package>
<package pkgid="6e68258ee8779121f5b6274bd04899e2e58cb27eb9517b96837ef2efe4af8e7e" name="cheese" arch="i586">
    <version epoch="0" ver="3.10.2" rel="12.17"/>

<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 3.6.2:
  + Handle thumbnail directory creation (bgo#671614).
  + Return NULL rather than a const empty string (bgo#687042,
    bgo#687123).
  + Updated documentation.
  + Upadted translations.</changelog>
<changelog author="gber@opensuse.org" date="1358337600">- Change nautilus-sendto Requires to Recommends: it is not strictly
  needed to run cheese and non-GNOME users might not appreciate the
  dependency on the GNOME Desktop to run cheese.</changelog>
<changelog author="zaitor@opensuse.org" date="1358337601">- Update to version 3.7.3:
  + Return to the video view after selecting an effect
    (bgo#687879).
  + More g_thread_init() removal. Add --target-glib 2.32 to the
    VALAFLAGS so that we don't get g_thread_init() in the generated
    .c code.
  + Drop calls to g_thread_init() in tests.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1358337602">- Update to version 3.7.4:
  + Eliminate an instance-used-via-static warning.
  + Avoid deprecated GFile attribute syntax.
  + Shoot when the webcam capture button is pressed (bgo#690961).
  + Update photo-take help page.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361188800">- Update to version 3.7.90:
  + Change schema path to standard format (bgo#673965).
  + Avoid using libgee.
  + Updated documentations.
  + Updated translations.
- Drop pkgconfig(gee-1.0) BuildRequires.</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 3.7.91:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 3.7.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.8.1:
  + Update help for 3.8.
  + Replace GtkBox casts with GtkGrid casts (bgo#691454).
  + cheese-camera: Fix creation of effects previews.
  + libcheese: Fix deprecated clutter sink creation.
  + Depend on valac 0.18 for gstreamer-1.0.
  + libcheese doesn't need gnome-desktop (bgo#694288).
  + Fixed syntax in translation of Keywords string.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + Fix UI string in avatar chooser test.
  + Use AM_VALAFLAGS rather than VALAFLAGS.
  + Avoid Vala warning about copying delegates.
  + Use "autocluttersink" instead of "cluttersink".
  + Modernize clutter usage.
  + Fix cheese_thumb_view_new() prototype.
  + Remove some unnecessary "static" keywords.
  + Update the gschema to use "photo" and "image".
  + Improve "Fire Flash" string in the Preferences.
  + Fix typos in help.
  + Improve more translatable strings (bgo#695459).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + Make maintainer.sh compliant with POSIX sh.
  + Disable the shoot action if the effects are shown (bgo#700317).
  + Stop the running countdown on destruction (bgo#700315).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 3.9.3:
  + Add documentation for CheeseCamera signals.
  + Remove unused Cheese.MainWindow.get_data_file_dir.
  + Make the flash background white.
  + Fix assertion failures when taking a photo.
  + Fix updating sensitivity of device selection combo.
  + Downscale image for effects-preview pipeline.
  + Do not block the main valve while recording.
  + Only add videoconvert elements where necessary.
  + Drop unused preview_caps variable.
  + Simplify returned GstCaps.
  + Fix cheese_camera_device_get_best_format memleak.
  + Fix cheese_camera_device_filter_caps warning.
  + Remove unused GstCameraBinFlags enum.
  + Fix video-source memleak when switching cameras.
  + Improve error handling in CheeseCamera.
  + Fix no-video-after-switching-resolution problem.
  + Remove extranous csp_post_balance element.
  + Add a capsfilter to the video-source bin.
  + Remove nautilus-sendto sharing support.
  + Avoid assert when taking avatar photos too quickly.
  + Updated translations.
- Remove nautilus-sendto recommends: the functionality has been
  dropped.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 3.9.4:
  + Move gettext initialization to main().
  + Make actions insensitive when no webcam is present
    (bgo#693070).
  + Add touch event handler for selecting effects (bgo#692745).
  + Move action sensitivity handling to Application.
  + Remove unnecessary instance_pos attribute.
  + Do not show thumbnails in fullscreen.
  + Remove unused move_all_to_trash action.
  + Remove wide-mode and fullscreen GSettings keys.
  + Mark cheese_[gtk_]init() arguments as allow-none.
  + Refactor command-line argument handling.
  + Refactor Application startup.
  + Split main() and Application into separate files.
  + um-crop-area.c: Relicense to GPLv2+ (bgo#703239).
  + Remove stale help translations.
  + Handle NULL state errors in CheeseAvatarChooser (bgo#703123).
  + Show an error message if the camera state is NULL (bgo#703123).
  + Add CheeseWindow.show_error() method.
  + Fix being paused when effect valves are closed.
  + Use shoot action when handling the webcam button.
  + Set all valves open on play.
  + Avoid setting the same effect again.
  + Disable effects and mode actions while shooting.
  + Fix de-activation of effects button (bgo#698399).
  + Reorder Help and About in the app menu.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Remove cheese-actions.ui from po/POTFILES.in (bgo#704119).
  + Refactor thumbnail context menu event handling.
  + Use Gdk.Event.triggers_context_menu() rather than checking if
    the secondary button was pressed. Return true if the event was
    handled, to stop further event propagation.
  + Use GAction for thumbnail popup menu actions.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 3.9.90:
  + Fix tag in German translation.
  + Remove help translations with incompatible license.
  + Change license in header of Chinese simplified translation for
    help.
  + License help under CC-BY-SA 3.0 Unported (bgo#703238).
  + Updated translatoions.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 3.9.91:
  + Do not override errors in camera_state_change_null.
  + Fix memory leak when freeing video formats.
  + Improve cheese_camera_device_get_best_format().
  + Limit caps to the maximum framerate.
  + Keep track of highest available camera framerates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1379419200">- Update to version 3.9.92:
  + Close the preferences if the action is disabled.
  + Disable the preferences action while shooting (bgo#670782).
  + Fix video recording with GStreamer &gt;= 1.1.4. (bgo#707391).
  + Skip loading effects with missing plugins (bgo#702995).
  + Fix categories in .desktop file (bgo#707373).
  + Drop wrong license lines from Galician translations for docs.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Adapt to Automake test-driver changes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Fix a bunch of memory leaks.
  + Fixed unused-but-set warning in EogThumbNav (bgo#711841).
  + Make static string array const.
  + Simplify looping over GStrv.
  + Updated translations.</changelog>

</package>
<package pkgid="cb7cf9eee8c180a855243e3cc397e8712c02ec4a5bb6f1aab44ce26168c57fe5" name="cheese" arch="src">
    <version epoch="0" ver="3.10.2" rel="12.17"/>

<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 3.6.2:
  + Handle thumbnail directory creation (bgo#671614).
  + Return NULL rather than a const empty string (bgo#687042,
    bgo#687123).
  + Updated documentation.
  + Upadted translations.</changelog>
<changelog author="gber@opensuse.org" date="1358337600">- Change nautilus-sendto Requires to Recommends: it is not strictly
  needed to run cheese and non-GNOME users might not appreciate the
  dependency on the GNOME Desktop to run cheese.</changelog>
<changelog author="zaitor@opensuse.org" date="1358337601">- Update to version 3.7.3:
  + Return to the video view after selecting an effect
    (bgo#687879).
  + More g_thread_init() removal. Add --target-glib 2.32 to the
    VALAFLAGS so that we don't get g_thread_init() in the generated
    .c code.
  + Drop calls to g_thread_init() in tests.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1358337602">- Update to version 3.7.4:
  + Eliminate an instance-used-via-static warning.
  + Avoid deprecated GFile attribute syntax.
  + Shoot when the webcam capture button is pressed (bgo#690961).
  + Update photo-take help page.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361188800">- Update to version 3.7.90:
  + Change schema path to standard format (bgo#673965).
  + Avoid using libgee.
  + Updated documentations.
  + Updated translations.
- Drop pkgconfig(gee-1.0) BuildRequires.</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 3.7.91:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 3.7.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.8.1:
  + Update help for 3.8.
  + Replace GtkBox casts with GtkGrid casts (bgo#691454).
  + cheese-camera: Fix creation of effects previews.
  + libcheese: Fix deprecated clutter sink creation.
  + Depend on valac 0.18 for gstreamer-1.0.
  + libcheese doesn't need gnome-desktop (bgo#694288).
  + Fixed syntax in translation of Keywords string.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + Fix UI string in avatar chooser test.
  + Use AM_VALAFLAGS rather than VALAFLAGS.
  + Avoid Vala warning about copying delegates.
  + Use "autocluttersink" instead of "cluttersink".
  + Modernize clutter usage.
  + Fix cheese_thumb_view_new() prototype.
  + Remove some unnecessary "static" keywords.
  + Update the gschema to use "photo" and "image".
  + Improve "Fire Flash" string in the Preferences.
  + Fix typos in help.
  + Improve more translatable strings (bgo#695459).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + Make maintainer.sh compliant with POSIX sh.
  + Disable the shoot action if the effects are shown (bgo#700317).
  + Stop the running countdown on destruction (bgo#700315).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 3.9.3:
  + Add documentation for CheeseCamera signals.
  + Remove unused Cheese.MainWindow.get_data_file_dir.
  + Make the flash background white.
  + Fix assertion failures when taking a photo.
  + Fix updating sensitivity of device selection combo.
  + Downscale image for effects-preview pipeline.
  + Do not block the main valve while recording.
  + Only add videoconvert elements where necessary.
  + Drop unused preview_caps variable.
  + Simplify returned GstCaps.
  + Fix cheese_camera_device_get_best_format memleak.
  + Fix cheese_camera_device_filter_caps warning.
  + Remove unused GstCameraBinFlags enum.
  + Fix video-source memleak when switching cameras.
  + Improve error handling in CheeseCamera.
  + Fix no-video-after-switching-resolution problem.
  + Remove extranous csp_post_balance element.
  + Add a capsfilter to the video-source bin.
  + Remove nautilus-sendto sharing support.
  + Avoid assert when taking avatar photos too quickly.
  + Updated translations.
- Remove nautilus-sendto recommends: the functionality has been
  dropped.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 3.9.4:
  + Move gettext initialization to main().
  + Make actions insensitive when no webcam is present
    (bgo#693070).
  + Add touch event handler for selecting effects (bgo#692745).
  + Move action sensitivity handling to Application.
  + Remove unnecessary instance_pos attribute.
  + Do not show thumbnails in fullscreen.
  + Remove unused move_all_to_trash action.
  + Remove wide-mode and fullscreen GSettings keys.
  + Mark cheese_[gtk_]init() arguments as allow-none.
  + Refactor command-line argument handling.
  + Refactor Application startup.
  + Split main() and Application into separate files.
  + um-crop-area.c: Relicense to GPLv2+ (bgo#703239).
  + Remove stale help translations.
  + Handle NULL state errors in CheeseAvatarChooser (bgo#703123).
  + Show an error message if the camera state is NULL (bgo#703123).
  + Add CheeseWindow.show_error() method.
  + Fix being paused when effect valves are closed.
  + Use shoot action when handling the webcam button.
  + Set all valves open on play.
  + Avoid setting the same effect again.
  + Disable effects and mode actions while shooting.
  + Fix de-activation of effects button (bgo#698399).
  + Reorder Help and About in the app menu.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Remove cheese-actions.ui from po/POTFILES.in (bgo#704119).
  + Refactor thumbnail context menu event handling.
  + Use Gdk.Event.triggers_context_menu() rather than checking if
    the secondary button was pressed. Return true if the event was
    handled, to stop further event propagation.
  + Use GAction for thumbnail popup menu actions.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 3.9.90:
  + Fix tag in German translation.
  + Remove help translations with incompatible license.
  + Change license in header of Chinese simplified translation for
    help.
  + License help under CC-BY-SA 3.0 Unported (bgo#703238).
  + Updated translatoions.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 3.9.91:
  + Do not override errors in camera_state_change_null.
  + Fix memory leak when freeing video formats.
  + Improve cheese_camera_device_get_best_format().
  + Limit caps to the maximum framerate.
  + Keep track of highest available camera framerates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1379419200">- Update to version 3.9.92:
  + Close the preferences if the action is disabled.
  + Disable the preferences action while shooting (bgo#670782).
  + Fix video recording with GStreamer &gt;= 1.1.4. (bgo#707391).
  + Skip loading effects with missing plugins (bgo#702995).
  + Fix categories in .desktop file (bgo#707373).
  + Drop wrong license lines from Galician translations for docs.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Adapt to Automake test-driver changes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Fix a bunch of memory leaks.
  + Fixed unused-but-set warning in EogThumbNav (bgo#711841).
  + Make static string array const.
  + Simplify looping over GStrv.
  + Updated translations.</changelog>

</package>
<package pkgid="d8537d9e464526dacfede39d2a8eb9eea75bc35fd014c4d06f14c2873a7c1377" name="cheese" arch="x86_64">
    <version epoch="0" ver="3.10.2" rel="12.17"/>

<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 3.6.2:
  + Handle thumbnail directory creation (bgo#671614).
  + Return NULL rather than a const empty string (bgo#687042,
    bgo#687123).
  + Updated documentation.
  + Upadted translations.</changelog>
<changelog author="gber@opensuse.org" date="1358337600">- Change nautilus-sendto Requires to Recommends: it is not strictly
  needed to run cheese and non-GNOME users might not appreciate the
  dependency on the GNOME Desktop to run cheese.</changelog>
<changelog author="zaitor@opensuse.org" date="1358337601">- Update to version 3.7.3:
  + Return to the video view after selecting an effect
    (bgo#687879).
  + More g_thread_init() removal. Add --target-glib 2.32 to the
    VALAFLAGS so that we don't get g_thread_init() in the generated
    .c code.
  + Drop calls to g_thread_init() in tests.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1358337602">- Update to version 3.7.4:
  + Eliminate an instance-used-via-static warning.
  + Avoid deprecated GFile attribute syntax.
  + Shoot when the webcam capture button is pressed (bgo#690961).
  + Update photo-take help page.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361188800">- Update to version 3.7.90:
  + Change schema path to standard format (bgo#673965).
  + Avoid using libgee.
  + Updated documentations.
  + Updated translations.
- Drop pkgconfig(gee-1.0) BuildRequires.</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 3.7.91:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 3.7.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.8.1:
  + Update help for 3.8.
  + Replace GtkBox casts with GtkGrid casts (bgo#691454).
  + cheese-camera: Fix creation of effects previews.
  + libcheese: Fix deprecated clutter sink creation.
  + Depend on valac 0.18 for gstreamer-1.0.
  + libcheese doesn't need gnome-desktop (bgo#694288).
  + Fixed syntax in translation of Keywords string.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + Fix UI string in avatar chooser test.
  + Use AM_VALAFLAGS rather than VALAFLAGS.
  + Avoid Vala warning about copying delegates.
  + Use "autocluttersink" instead of "cluttersink".
  + Modernize clutter usage.
  + Fix cheese_thumb_view_new() prototype.
  + Remove some unnecessary "static" keywords.
  + Update the gschema to use "photo" and "image".
  + Improve "Fire Flash" string in the Preferences.
  + Fix typos in help.
  + Improve more translatable strings (bgo#695459).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + Make maintainer.sh compliant with POSIX sh.
  + Disable the shoot action if the effects are shown (bgo#700317).
  + Stop the running countdown on destruction (bgo#700315).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 3.9.3:
  + Add documentation for CheeseCamera signals.
  + Remove unused Cheese.MainWindow.get_data_file_dir.
  + Make the flash background white.
  + Fix assertion failures when taking a photo.
  + Fix updating sensitivity of device selection combo.
  + Downscale image for effects-preview pipeline.
  + Do not block the main valve while recording.
  + Only add videoconvert elements where necessary.
  + Drop unused preview_caps variable.
  + Simplify returned GstCaps.
  + Fix cheese_camera_device_get_best_format memleak.
  + Fix cheese_camera_device_filter_caps warning.
  + Remove unused GstCameraBinFlags enum.
  + Fix video-source memleak when switching cameras.
  + Improve error handling in CheeseCamera.
  + Fix no-video-after-switching-resolution problem.
  + Remove extranous csp_post_balance element.
  + Add a capsfilter to the video-source bin.
  + Remove nautilus-sendto sharing support.
  + Avoid assert when taking avatar photos too quickly.
  + Updated translations.
- Remove nautilus-sendto recommends: the functionality has been
  dropped.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 3.9.4:
  + Move gettext initialization to main().
  + Make actions insensitive when no webcam is present
    (bgo#693070).
  + Add touch event handler for selecting effects (bgo#692745).
  + Move action sensitivity handling to Application.
  + Remove unnecessary instance_pos attribute.
  + Do not show thumbnails in fullscreen.
  + Remove unused move_all_to_trash action.
  + Remove wide-mode and fullscreen GSettings keys.
  + Mark cheese_[gtk_]init() arguments as allow-none.
  + Refactor command-line argument handling.
  + Refactor Application startup.
  + Split main() and Application into separate files.
  + um-crop-area.c: Relicense to GPLv2+ (bgo#703239).
  + Remove stale help translations.
  + Handle NULL state errors in CheeseAvatarChooser (bgo#703123).
  + Show an error message if the camera state is NULL (bgo#703123).
  + Add CheeseWindow.show_error() method.
  + Fix being paused when effect valves are closed.
  + Use shoot action when handling the webcam button.
  + Set all valves open on play.
  + Avoid setting the same effect again.
  + Disable effects and mode actions while shooting.
  + Fix de-activation of effects button (bgo#698399).
  + Reorder Help and About in the app menu.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Remove cheese-actions.ui from po/POTFILES.in (bgo#704119).
  + Refactor thumbnail context menu event handling.
  + Use Gdk.Event.triggers_context_menu() rather than checking if
    the secondary button was pressed. Return true if the event was
    handled, to stop further event propagation.
  + Use GAction for thumbnail popup menu actions.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 3.9.90:
  + Fix tag in German translation.
  + Remove help translations with incompatible license.
  + Change license in header of Chinese simplified translation for
    help.
  + License help under CC-BY-SA 3.0 Unported (bgo#703238).
  + Updated translatoions.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 3.9.91:
  + Do not override errors in camera_state_change_null.
  + Fix memory leak when freeing video formats.
  + Improve cheese_camera_device_get_best_format().
  + Limit caps to the maximum framerate.
  + Keep track of highest available camera framerates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1379419200">- Update to version 3.9.92:
  + Close the preferences if the action is disabled.
  + Disable the preferences action while shooting (bgo#670782).
  + Fix video recording with GStreamer &gt;= 1.1.4. (bgo#707391).
  + Skip loading effects with missing plugins (bgo#702995).
  + Fix categories in .desktop file (bgo#707373).
  + Drop wrong license lines from Galician translations for docs.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Adapt to Automake test-driver changes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Fix a bunch of memory leaks.
  + Fixed unused-but-set warning in EogThumbNav (bgo#711841).
  + Make static string array const.
  + Simplify looping over GStrv.
  + Updated translations.</changelog>

</package>
<package pkgid="6c2d5050063d8288ad297023eafdfce2118743e63aeab030f13de1329fd39614" name="cheese-devel" arch="i586">
    <version epoch="0" ver="3.10.2" rel="12.17"/>

<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 3.6.2:
  + Handle thumbnail directory creation (bgo#671614).
  + Return NULL rather than a const empty string (bgo#687042,
    bgo#687123).
  + Updated documentation.
  + Upadted translations.</changelog>
<changelog author="gber@opensuse.org" date="1358337600">- Change nautilus-sendto Requires to Recommends: it is not strictly
  needed to run cheese and non-GNOME users might not appreciate the
  dependency on the GNOME Desktop to run cheese.</changelog>
<changelog author="zaitor@opensuse.org" date="1358337601">- Update to version 3.7.3:
  + Return to the video view after selecting an effect
    (bgo#687879).
  + More g_thread_init() removal. Add --target-glib 2.32 to the
    VALAFLAGS so that we don't get g_thread_init() in the generated
    .c code.
  + Drop calls to g_thread_init() in tests.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1358337602">- Update to version 3.7.4:
  + Eliminate an instance-used-via-static warning.
  + Avoid deprecated GFile attribute syntax.
  + Shoot when the webcam capture button is pressed (bgo#690961).
  + Update photo-take help page.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361188800">- Update to version 3.7.90:
  + Change schema path to standard format (bgo#673965).
  + Avoid using libgee.
  + Updated documentations.
  + Updated translations.
- Drop pkgconfig(gee-1.0) BuildRequires.</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 3.7.91:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 3.7.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.8.1:
  + Update help for 3.8.
  + Replace GtkBox casts with GtkGrid casts (bgo#691454).
  + cheese-camera: Fix creation of effects previews.
  + libcheese: Fix deprecated clutter sink creation.
  + Depend on valac 0.18 for gstreamer-1.0.
  + libcheese doesn't need gnome-desktop (bgo#694288).
  + Fixed syntax in translation of Keywords string.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + Fix UI string in avatar chooser test.
  + Use AM_VALAFLAGS rather than VALAFLAGS.
  + Avoid Vala warning about copying delegates.
  + Use "autocluttersink" instead of "cluttersink".
  + Modernize clutter usage.
  + Fix cheese_thumb_view_new() prototype.
  + Remove some unnecessary "static" keywords.
  + Update the gschema to use "photo" and "image".
  + Improve "Fire Flash" string in the Preferences.
  + Fix typos in help.
  + Improve more translatable strings (bgo#695459).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + Make maintainer.sh compliant with POSIX sh.
  + Disable the shoot action if the effects are shown (bgo#700317).
  + Stop the running countdown on destruction (bgo#700315).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 3.9.3:
  + Add documentation for CheeseCamera signals.
  + Remove unused Cheese.MainWindow.get_data_file_dir.
  + Make the flash background white.
  + Fix assertion failures when taking a photo.
  + Fix updating sensitivity of device selection combo.
  + Downscale image for effects-preview pipeline.
  + Do not block the main valve while recording.
  + Only add videoconvert elements where necessary.
  + Drop unused preview_caps variable.
  + Simplify returned GstCaps.
  + Fix cheese_camera_device_get_best_format memleak.
  + Fix cheese_camera_device_filter_caps warning.
  + Remove unused GstCameraBinFlags enum.
  + Fix video-source memleak when switching cameras.
  + Improve error handling in CheeseCamera.
  + Fix no-video-after-switching-resolution problem.
  + Remove extranous csp_post_balance element.
  + Add a capsfilter to the video-source bin.
  + Remove nautilus-sendto sharing support.
  + Avoid assert when taking avatar photos too quickly.
  + Updated translations.
- Remove nautilus-sendto recommends: the functionality has been
  dropped.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 3.9.4:
  + Move gettext initialization to main().
  + Make actions insensitive when no webcam is present
    (bgo#693070).
  + Add touch event handler for selecting effects (bgo#692745).
  + Move action sensitivity handling to Application.
  + Remove unnecessary instance_pos attribute.
  + Do not show thumbnails in fullscreen.
  + Remove unused move_all_to_trash action.
  + Remove wide-mode and fullscreen GSettings keys.
  + Mark cheese_[gtk_]init() arguments as allow-none.
  + Refactor command-line argument handling.
  + Refactor Application startup.
  + Split main() and Application into separate files.
  + um-crop-area.c: Relicense to GPLv2+ (bgo#703239).
  + Remove stale help translations.
  + Handle NULL state errors in CheeseAvatarChooser (bgo#703123).
  + Show an error message if the camera state is NULL (bgo#703123).
  + Add CheeseWindow.show_error() method.
  + Fix being paused when effect valves are closed.
  + Use shoot action when handling the webcam button.
  + Set all valves open on play.
  + Avoid setting the same effect again.
  + Disable effects and mode actions while shooting.
  + Fix de-activation of effects button (bgo#698399).
  + Reorder Help and About in the app menu.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Remove cheese-actions.ui from po/POTFILES.in (bgo#704119).
  + Refactor thumbnail context menu event handling.
  + Use Gdk.Event.triggers_context_menu() rather than checking if
    the secondary button was pressed. Return true if the event was
    handled, to stop further event propagation.
  + Use GAction for thumbnail popup menu actions.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 3.9.90:
  + Fix tag in German translation.
  + Remove help translations with incompatible license.
  + Change license in header of Chinese simplified translation for
    help.
  + License help under CC-BY-SA 3.0 Unported (bgo#703238).
  + Updated translatoions.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 3.9.91:
  + Do not override errors in camera_state_change_null.
  + Fix memory leak when freeing video formats.
  + Improve cheese_camera_device_get_best_format().
  + Limit caps to the maximum framerate.
  + Keep track of highest available camera framerates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1379419200">- Update to version 3.9.92:
  + Close the preferences if the action is disabled.
  + Disable the preferences action while shooting (bgo#670782).
  + Fix video recording with GStreamer &gt;= 1.1.4. (bgo#707391).
  + Skip loading effects with missing plugins (bgo#702995).
  + Fix categories in .desktop file (bgo#707373).
  + Drop wrong license lines from Galician translations for docs.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Adapt to Automake test-driver changes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Fix a bunch of memory leaks.
  + Fixed unused-but-set warning in EogThumbNav (bgo#711841).
  + Make static string array const.
  + Simplify looping over GStrv.
  + Updated translations.</changelog>

</package>
<package pkgid="0c82985a38d2d697c876deb8d8de1b2aae2b978ee017d65678fb47fb571137cc" name="cheese-devel" arch="x86_64">
    <version epoch="0" ver="3.10.2" rel="12.17"/>

<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 3.6.2:
  + Handle thumbnail directory creation (bgo#671614).
  + Return NULL rather than a const empty string (bgo#687042,
    bgo#687123).
  + Updated documentation.
  + Upadted translations.</changelog>
<changelog author="gber@opensuse.org" date="1358337600">- Change nautilus-sendto Requires to Recommends: it is not strictly
  needed to run cheese and non-GNOME users might not appreciate the
  dependency on the GNOME Desktop to run cheese.</changelog>
<changelog author="zaitor@opensuse.org" date="1358337601">- Update to version 3.7.3:
  + Return to the video view after selecting an effect
    (bgo#687879).
  + More g_thread_init() removal. Add --target-glib 2.32 to the
    VALAFLAGS so that we don't get g_thread_init() in the generated
    .c code.
  + Drop calls to g_thread_init() in tests.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1358337602">- Update to version 3.7.4:
  + Eliminate an instance-used-via-static warning.
  + Avoid deprecated GFile attribute syntax.
  + Shoot when the webcam capture button is pressed (bgo#690961).
  + Update photo-take help page.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361188800">- Update to version 3.7.90:
  + Change schema path to standard format (bgo#673965).
  + Avoid using libgee.
  + Updated documentations.
  + Updated translations.
- Drop pkgconfig(gee-1.0) BuildRequires.</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 3.7.91:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 3.7.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.8.1:
  + Update help for 3.8.
  + Replace GtkBox casts with GtkGrid casts (bgo#691454).
  + cheese-camera: Fix creation of effects previews.
  + libcheese: Fix deprecated clutter sink creation.
  + Depend on valac 0.18 for gstreamer-1.0.
  + libcheese doesn't need gnome-desktop (bgo#694288).
  + Fixed syntax in translation of Keywords string.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + Fix UI string in avatar chooser test.
  + Use AM_VALAFLAGS rather than VALAFLAGS.
  + Avoid Vala warning about copying delegates.
  + Use "autocluttersink" instead of "cluttersink".
  + Modernize clutter usage.
  + Fix cheese_thumb_view_new() prototype.
  + Remove some unnecessary "static" keywords.
  + Update the gschema to use "photo" and "image".
  + Improve "Fire Flash" string in the Preferences.
  + Fix typos in help.
  + Improve more translatable strings (bgo#695459).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + Make maintainer.sh compliant with POSIX sh.
  + Disable the shoot action if the effects are shown (bgo#700317).
  + Stop the running countdown on destruction (bgo#700315).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 3.9.3:
  + Add documentation for CheeseCamera signals.
  + Remove unused Cheese.MainWindow.get_data_file_dir.
  + Make the flash background white.
  + Fix assertion failures when taking a photo.
  + Fix updating sensitivity of device selection combo.
  + Downscale image for effects-preview pipeline.
  + Do not block the main valve while recording.
  + Only add videoconvert elements where necessary.
  + Drop unused preview_caps variable.
  + Simplify returned GstCaps.
  + Fix cheese_camera_device_get_best_format memleak.
  + Fix cheese_camera_device_filter_caps warning.
  + Remove unused GstCameraBinFlags enum.
  + Fix video-source memleak when switching cameras.
  + Improve error handling in CheeseCamera.
  + Fix no-video-after-switching-resolution problem.
  + Remove extranous csp_post_balance element.
  + Add a capsfilter to the video-source bin.
  + Remove nautilus-sendto sharing support.
  + Avoid assert when taking avatar photos too quickly.
  + Updated translations.
- Remove nautilus-sendto recommends: the functionality has been
  dropped.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 3.9.4:
  + Move gettext initialization to main().
  + Make actions insensitive when no webcam is present
    (bgo#693070).
  + Add touch event handler for selecting effects (bgo#692745).
  + Move action sensitivity handling to Application.
  + Remove unnecessary instance_pos attribute.
  + Do not show thumbnails in fullscreen.
  + Remove unused move_all_to_trash action.
  + Remove wide-mode and fullscreen GSettings keys.
  + Mark cheese_[gtk_]init() arguments as allow-none.
  + Refactor command-line argument handling.
  + Refactor Application startup.
  + Split main() and Application into separate files.
  + um-crop-area.c: Relicense to GPLv2+ (bgo#703239).
  + Remove stale help translations.
  + Handle NULL state errors in CheeseAvatarChooser (bgo#703123).
  + Show an error message if the camera state is NULL (bgo#703123).
  + Add CheeseWindow.show_error() method.
  + Fix being paused when effect valves are closed.
  + Use shoot action when handling the webcam button.
  + Set all valves open on play.
  + Avoid setting the same effect again.
  + Disable effects and mode actions while shooting.
  + Fix de-activation of effects button (bgo#698399).
  + Reorder Help and About in the app menu.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Remove cheese-actions.ui from po/POTFILES.in (bgo#704119).
  + Refactor thumbnail context menu event handling.
  + Use Gdk.Event.triggers_context_menu() rather than checking if
    the secondary button was pressed. Return true if the event was
    handled, to stop further event propagation.
  + Use GAction for thumbnail popup menu actions.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 3.9.90:
  + Fix tag in German translation.
  + Remove help translations with incompatible license.
  + Change license in header of Chinese simplified translation for
    help.
  + License help under CC-BY-SA 3.0 Unported (bgo#703238).
  + Updated translatoions.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 3.9.91:
  + Do not override errors in camera_state_change_null.
  + Fix memory leak when freeing video formats.
  + Improve cheese_camera_device_get_best_format().
  + Limit caps to the maximum framerate.
  + Keep track of highest available camera framerates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1379419200">- Update to version 3.9.92:
  + Close the preferences if the action is disabled.
  + Disable the preferences action while shooting (bgo#670782).
  + Fix video recording with GStreamer &gt;= 1.1.4. (bgo#707391).
  + Skip loading effects with missing plugins (bgo#702995).
  + Fix categories in .desktop file (bgo#707373).
  + Drop wrong license lines from Galician translations for docs.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Adapt to Automake test-driver changes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Fix a bunch of memory leaks.
  + Fixed unused-but-set warning in EogThumbNav (bgo#711841).
  + Make static string array const.
  + Simplify looping over GStrv.
  + Updated translations.</changelog>

</package>
<package pkgid="8be75eeb32cc0a80d3d1ec53f123b3505d6eddb2d1c28502a93adebd91f12047" name="cheese-lang" arch="noarch">
    <version epoch="0" ver="3.10.2" rel="12.17"/>

<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 3.6.2:
  + Handle thumbnail directory creation (bgo#671614).
  + Return NULL rather than a const empty string (bgo#687042,
    bgo#687123).
  + Updated documentation.
  + Upadted translations.</changelog>
<changelog author="gber@opensuse.org" date="1358337600">- Change nautilus-sendto Requires to Recommends: it is not strictly
  needed to run cheese and non-GNOME users might not appreciate the
  dependency on the GNOME Desktop to run cheese.</changelog>
<changelog author="zaitor@opensuse.org" date="1358337601">- Update to version 3.7.3:
  + Return to the video view after selecting an effect
    (bgo#687879).
  + More g_thread_init() removal. Add --target-glib 2.32 to the
    VALAFLAGS so that we don't get g_thread_init() in the generated
    .c code.
  + Drop calls to g_thread_init() in tests.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1358337602">- Update to version 3.7.4:
  + Eliminate an instance-used-via-static warning.
  + Avoid deprecated GFile attribute syntax.
  + Shoot when the webcam capture button is pressed (bgo#690961).
  + Update photo-take help page.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361188800">- Update to version 3.7.90:
  + Change schema path to standard format (bgo#673965).
  + Avoid using libgee.
  + Updated documentations.
  + Updated translations.
- Drop pkgconfig(gee-1.0) BuildRequires.</changelog>
<changelog author="zaitor@opensuse.org" date="1362398400">- Update to version 3.7.91:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 3.7.92:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 3.8.1:
  + Update help for 3.8.
  + Replace GtkBox casts with GtkGrid casts (bgo#691454).
  + cheese-camera: Fix creation of effects previews.
  + libcheese: Fix deprecated clutter sink creation.
  + Depend on valac 0.18 for gstreamer-1.0.
  + libcheese doesn't need gnome-desktop (bgo#694288).
  + Fixed syntax in translation of Keywords string.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 3.9.1:
  + Fix UI string in avatar chooser test.
  + Use AM_VALAFLAGS rather than VALAFLAGS.
  + Avoid Vala warning about copying delegates.
  + Use "autocluttersink" instead of "cluttersink".
  + Modernize clutter usage.
  + Fix cheese_thumb_view_new() prototype.
  + Remove some unnecessary "static" keywords.
  + Update the gschema to use "photo" and "image".
  + Improve "Fire Flash" string in the Preferences.
  + Fix typos in help.
  + Improve more translatable strings (bgo#695459).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1369742400">- Update to version 3.9.2:
  + Make maintainer.sh compliant with POSIX sh.
  + Disable the shoot action if the effects are shown (bgo#700317).
  + Stop the running countdown on destruction (bgo#700315).
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1371816000">- Update to version 3.9.3:
  + Add documentation for CheeseCamera signals.
  + Remove unused Cheese.MainWindow.get_data_file_dir.
  + Make the flash background white.
  + Fix assertion failures when taking a photo.
  + Fix updating sensitivity of device selection combo.
  + Downscale image for effects-preview pipeline.
  + Do not block the main valve while recording.
  + Only add videoconvert elements where necessary.
  + Drop unused preview_caps variable.
  + Simplify returned GstCaps.
  + Fix cheese_camera_device_get_best_format memleak.
  + Fix cheese_camera_device_filter_caps warning.
  + Remove unused GstCameraBinFlags enum.
  + Fix video-source memleak when switching cameras.
  + Improve error handling in CheeseCamera.
  + Fix no-video-after-switching-resolution problem.
  + Remove extranous csp_post_balance element.
  + Add a capsfilter to the video-source bin.
  + Remove nautilus-sendto sharing support.
  + Avoid assert when taking avatar photos too quickly.
  + Updated translations.
- Remove nautilus-sendto recommends: the functionality has been
  dropped.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 3.9.4:
  + Move gettext initialization to main().
  + Make actions insensitive when no webcam is present
    (bgo#693070).
  + Add touch event handler for selecting effects (bgo#692745).
  + Move action sensitivity handling to Application.
  + Remove unnecessary instance_pos attribute.
  + Do not show thumbnails in fullscreen.
  + Remove unused move_all_to_trash action.
  + Remove wide-mode and fullscreen GSettings keys.
  + Mark cheese_[gtk_]init() arguments as allow-none.
  + Refactor command-line argument handling.
  + Refactor Application startup.
  + Split main() and Application into separate files.
  + um-crop-area.c: Relicense to GPLv2+ (bgo#703239).
  + Remove stale help translations.
  + Handle NULL state errors in CheeseAvatarChooser (bgo#703123).
  + Show an error message if the camera state is NULL (bgo#703123).
  + Add CheeseWindow.show_error() method.
  + Fix being paused when effect valves are closed.
  + Use shoot action when handling the webcam button.
  + Set all valves open on play.
  + Avoid setting the same effect again.
  + Disable effects and mode actions while shooting.
  + Fix de-activation of effects button (bgo#698399).
  + Reorder Help and About in the app menu.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Remove cheese-actions.ui from po/POTFILES.in (bgo#704119).
  + Refactor thumbnail context menu event handling.
  + Use Gdk.Event.triggers_context_menu() rather than checking if
    the secondary button was pressed. Return true if the event was
    handled, to stop further event propagation.
  + Use GAction for thumbnail popup menu actions.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 3.9.90:
  + Fix tag in German translation.
  + Remove help translations with incompatible license.
  + Change license in header of Chinese simplified translation for
    help.
  + License help under CC-BY-SA 3.0 Unported (bgo#703238).
  + Updated translatoions.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 3.9.91:
  + Do not override errors in camera_state_change_null.
  + Fix memory leak when freeing video formats.
  + Improve cheese_camera_device_get_best_format().
  + Limit caps to the maximum framerate.
  + Keep track of highest available camera framerates.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1379419200">- Update to version 3.9.92:
  + Close the preferences if the action is disabled.
  + Disable the preferences action while shooting (bgo#670782).
  + Fix video recording with GStreamer &gt;= 1.1.4. (bgo#707391).
  + Skip loading effects with missing plugins (bgo#702995).
  + Fix categories in .desktop file (bgo#707373).
  + Drop wrong license lines from Galician translations for docs.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1381752000">- Update to version 3.10.1:
  + Adapt to Automake test-driver changes.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Fix a bunch of memory leaks.
  + Fixed unused-but-set warning in EogThumbNav (bgo#711841).
  + Make static string array const.
  + Simplify looping over GStrv.
  + Updated translations.</changelog>

</package>
<package pkgid="cbe9ebb4ab5d3f97f37bd725af84cb1f5770c07d624e646a2b87a876fa538201" name="choqok" arch="i586">
    <version epoch="0" ver="1.4" rel="2.4.1"/>

<changelog author="tittiatcoke@gmail.com" date="1243166400">- update to version 0.6
  + Add support for smilies in texts.
  + Add support for ReTweet function.
  + Twitpic.com integration added, Posting to it and showing a thumbnail of it's pictures.
  + Posting "Currently listening to ..." text for Amarok 2.X Player implemented!
  + Option to use a custom browser instead of kde default implemented! (For Gnome users)
  + Ability to abort posting new status.
  + A "Who is ..." item added to user menu, to see Bio/Url and name of a user.
  + Support for Digg.com shorturls service added.
  + Better support for right to left languages, And users who use multiple languages with different directions.
  + Image caching improved and some related bugs fixed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1244980800">-update to version 0.6.1
  + bugfix release due to new situation on twitter.com (more than 2,147,483,647 tweets)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1249646400">- Update to version 0.6.6
  * Icon improved and made greenish.
  * Ability to follow a thread (Or option to see all previous posts of a conversation)
  * Ability to resolve a TinyURL into a regular URL on url tooltip.
  * Replaced RT for ReTweet function by ♻-Symbol.
  * Identica hashtag search problem fixed and works again. (And it's a full text search like Twitter custom)
  * cycle through accounts using the scroll wheel on the system tray icon.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1282737600">- update to latest svn snapshot
  * Adding error notification.
  * Option to use UnTiny.com instead of generic redirect detection added
  * twitter edit account bug fixed!
  * Matched FriendsList request for Twitter to new API (bko#248206)
  * Underline can be part of nick too.
  * Doesn't show friends list when reply nick is on the end of message and post sending via pressing enter.
  * Fix: text on systray icon too big when using "--graphicssystem raster" (bko#248216)
  * Corrections related with special XML characteres (&amp;amp;, etc...)
  * fix: Choqok Segfaults while looking up a profile (bko#247096)
  * bugfixes (bko#227987, bko#243368)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1282996800">- Update to newer svn snapshot
  * Includes newest translations</changelog>
<changelog author="tittiatcoke@gmail.com" date="1283342400">- update to a newer svn snapshot (Beta3)
  * Better nick name detection.
  * Better URL detection.
  * Fetching Friends List problems fixed.
  * UnTiny plugin can use untiny.com service instead of its
    generic way (Configurable)
  * Using the Choqok way to show repeated dents/tweets made
    optional (Default is Twitter way)
  * Confirm dialog for Re tweet
  * When KWallet isn’t available, Choqok will store secrets in text
    files (Not plain text, Base64)
  * Choqok 1.0Beta2 was needs kdelibs 4.5 , We changed this to
    work with 4.4 too.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1285070400">- Corrected translatons to be corresponding with the Choqok version.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1296129600">- Update to version 1.0
  * Bug fixes and improvements around RC1 release
  * Twitter Lists support in Choqok [FEATURE:216249]
  * Option to show timelines in reverse order [FEATURE:241743]
  * Additional action in input boxes' context menu that will shorten
    all selected URLs or all URLs if there's no selection.
  * "Hide Post" option for post widgets.
  * BiDi support is back.
  * Support for Twitgoo service in imagepreview plugin. (Alex Infantes)
  * Digg shortener plugin removed.
  * Support for LibIndicate to use as an alternate notification
    system. (It's Optional)
  * Send reply to original author of repeated posts + cc to repeater.
  * "Reply to USER", "Write to USER", "Reply to all" actions added to
    reply button menu.
  * Filter plugin: Option to just show own replies or just show replies
    to my friends added
  New Plugins:
  - OCS Plugin to support "Open Collaboration Services API"
    provided by opendesktop.org and its partners
  - IMStatus plugin to set your post as current status in
    IM clients (Kopete, Pidgin, PSI, Skype)
  - Twitgoo image uploader
  - Mobypicture uploader
  - Posterous uploader
  - ImageShack uploader (Just image uploading)
  - Flickr uploader (Just image uploading)
  Plugins removed:
  - u.nu shortner, due its service discontinued
  - YFrog uploader (temporary)</changelog>
<changelog author="coolo@novell.com" date="1300795200">- licenses package is about to die</changelog>
<changelog author="wstephenson@novell.com" date="1301918400">- Update to version 1.1
  * Translator plugin
  * Quick Filter plugin
  * System tray icon problem in GNOME fixed
  * Hide Menu-bar option
  * Choqok caches posts automatically and not just at exit
  * Fixed video preview plugin problem that causes Choqok to crash
  * Bug fixes</changelog>
<changelog author="javier@opensuse.org" date="1311854400">- Add user friends list bugfix (bko#275185)</changelog>
<changelog author="toddrme2178@gmail.com" date="1318075200">- Removed commented files (fix for RPMLINT warning)
- Cleaned up spec file formatting</changelog>
<changelog author="mlin@suse.com" date="1331035200">- Update to version 1.3
  * Support for Twitter photo upload API method
  * Translator plugin shuts off due Google terminated its free API
  * Toolbar for Choqok
  * Filter plugin new feature: Add a filter to Highlight a post containing some text
  * Improvements in new tab bar UI
  * Show first 4 characters of search timeline name over the timeline icon</changelog>
<changelog author="coolo@suse.com" date="1366200000">- remove file conflicting with kdepimlibs4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371384000">- Added patch twitter-api.diff to make choqok work with the
  Twitter api v1.1 (bko#264091)</changelog>
<changelog author="fisiu@opensuse.org" date="1378296000">- Update to 1.4:
  * Support for Twitter API v1.1.
  * "Mark timeline as read" menu item added to tabs context menu.
  * Show "In reply to" in twitter search timelines.
  * Identi.ca support removed from StatusNet plugin.
  * And some other minor fixes
- Drop twitter-api.diff: fixed upstream.</changelog>
<changelog author="fisiu@opensuse.org" date="1391688000">- Add choqok-1.4-twitter-favorities-fix.patch: fix bnc#862467.
- Add choqok-1.4-plugin-yourls-fix.patch: fix yourls shortener plugin,
  kde#265219.</changelog>

</package>
<package pkgid="dfe07a88d31002f6ed7254a4576963bacdcaa9f6a203d177b986e0e0e238ad51" name="choqok" arch="src">
    <version epoch="0" ver="1.4" rel="2.4.1"/>

<changelog author="tittiatcoke@gmail.com" date="1243166400">- update to version 0.6
  + Add support for smilies in texts.
  + Add support for ReTweet function.
  + Twitpic.com integration added, Posting to it and showing a thumbnail of it's pictures.
  + Posting "Currently listening to ..." text for Amarok 2.X Player implemented!
  + Option to use a custom browser instead of kde default implemented! (For Gnome users)
  + Ability to abort posting new status.
  + A "Who is ..." item added to user menu, to see Bio/Url and name of a user.
  + Support for Digg.com shorturls service added.
  + Better support for right to left languages, And users who use multiple languages with different directions.
  + Image caching improved and some related bugs fixed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1244980800">-update to version 0.6.1
  + bugfix release due to new situation on twitter.com (more than 2,147,483,647 tweets)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1249646400">- Update to version 0.6.6
  * Icon improved and made greenish.
  * Ability to follow a thread (Or option to see all previous posts of a conversation)
  * Ability to resolve a TinyURL into a regular URL on url tooltip.
  * Replaced RT for ReTweet function by ♻-Symbol.
  * Identica hashtag search problem fixed and works again. (And it's a full text search like Twitter custom)
  * cycle through accounts using the scroll wheel on the system tray icon.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1282737600">- update to latest svn snapshot
  * Adding error notification.
  * Option to use UnTiny.com instead of generic redirect detection added
  * twitter edit account bug fixed!
  * Matched FriendsList request for Twitter to new API (bko#248206)
  * Underline can be part of nick too.
  * Doesn't show friends list when reply nick is on the end of message and post sending via pressing enter.
  * Fix: text on systray icon too big when using "--graphicssystem raster" (bko#248216)
  * Corrections related with special XML characteres (&amp;amp;, etc...)
  * fix: Choqok Segfaults while looking up a profile (bko#247096)
  * bugfixes (bko#227987, bko#243368)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1282996800">- Update to newer svn snapshot
  * Includes newest translations</changelog>
<changelog author="tittiatcoke@gmail.com" date="1283342400">- update to a newer svn snapshot (Beta3)
  * Better nick name detection.
  * Better URL detection.
  * Fetching Friends List problems fixed.
  * UnTiny plugin can use untiny.com service instead of its
    generic way (Configurable)
  * Using the Choqok way to show repeated dents/tweets made
    optional (Default is Twitter way)
  * Confirm dialog for Re tweet
  * When KWallet isn’t available, Choqok will store secrets in text
    files (Not plain text, Base64)
  * Choqok 1.0Beta2 was needs kdelibs 4.5 , We changed this to
    work with 4.4 too.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1285070400">- Corrected translatons to be corresponding with the Choqok version.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1296129600">- Update to version 1.0
  * Bug fixes and improvements around RC1 release
  * Twitter Lists support in Choqok [FEATURE:216249]
  * Option to show timelines in reverse order [FEATURE:241743]
  * Additional action in input boxes' context menu that will shorten
    all selected URLs or all URLs if there's no selection.
  * "Hide Post" option for post widgets.
  * BiDi support is back.
  * Support for Twitgoo service in imagepreview plugin. (Alex Infantes)
  * Digg shortener plugin removed.
  * Support for LibIndicate to use as an alternate notification
    system. (It's Optional)
  * Send reply to original author of repeated posts + cc to repeater.
  * "Reply to USER", "Write to USER", "Reply to all" actions added to
    reply button menu.
  * Filter plugin: Option to just show own replies or just show replies
    to my friends added
  New Plugins:
  - OCS Plugin to support "Open Collaboration Services API"
    provided by opendesktop.org and its partners
  - IMStatus plugin to set your post as current status in
    IM clients (Kopete, Pidgin, PSI, Skype)
  - Twitgoo image uploader
  - Mobypicture uploader
  - Posterous uploader
  - ImageShack uploader (Just image uploading)
  - Flickr uploader (Just image uploading)
  Plugins removed:
  - u.nu shortner, due its service discontinued
  - YFrog uploader (temporary)</changelog>
<changelog author="coolo@novell.com" date="1300795200">- licenses package is about to die</changelog>
<changelog author="wstephenson@novell.com" date="1301918400">- Update to version 1.1
  * Translator plugin
  * Quick Filter plugin
  * System tray icon problem in GNOME fixed
  * Hide Menu-bar option
  * Choqok caches posts automatically and not just at exit
  * Fixed video preview plugin problem that causes Choqok to crash
  * Bug fixes</changelog>
<changelog author="javier@opensuse.org" date="1311854400">- Add user friends list bugfix (bko#275185)</changelog>
<changelog author="toddrme2178@gmail.com" date="1318075200">- Removed commented files (fix for RPMLINT warning)
- Cleaned up spec file formatting</changelog>
<changelog author="mlin@suse.com" date="1331035200">- Update to version 1.3
  * Support for Twitter photo upload API method
  * Translator plugin shuts off due Google terminated its free API
  * Toolbar for Choqok
  * Filter plugin new feature: Add a filter to Highlight a post containing some text
  * Improvements in new tab bar UI
  * Show first 4 characters of search timeline name over the timeline icon</changelog>
<changelog author="coolo@suse.com" date="1366200000">- remove file conflicting with kdepimlibs4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371384000">- Added patch twitter-api.diff to make choqok work with the
  Twitter api v1.1 (bko#264091)</changelog>
<changelog author="fisiu@opensuse.org" date="1378296000">- Update to 1.4:
  * Support for Twitter API v1.1.
  * "Mark timeline as read" menu item added to tabs context menu.
  * Show "In reply to" in twitter search timelines.
  * Identi.ca support removed from StatusNet plugin.
  * And some other minor fixes
- Drop twitter-api.diff: fixed upstream.</changelog>
<changelog author="fisiu@opensuse.org" date="1391688000">- Add choqok-1.4-twitter-favorities-fix.patch: fix bnc#862467.
- Add choqok-1.4-plugin-yourls-fix.patch: fix yourls shortener plugin,
  kde#265219.</changelog>

</package>
<package pkgid="c6fefc2d9b8b461cb4568b489a311b339f13fb1e3892fdae488c3170a3ba19d9" name="choqok" arch="x86_64">
    <version epoch="0" ver="1.4" rel="2.4.1"/>

<changelog author="tittiatcoke@gmail.com" date="1243166400">- update to version 0.6
  + Add support for smilies in texts.
  + Add support for ReTweet function.
  + Twitpic.com integration added, Posting to it and showing a thumbnail of it's pictures.
  + Posting "Currently listening to ..." text for Amarok 2.X Player implemented!
  + Option to use a custom browser instead of kde default implemented! (For Gnome users)
  + Ability to abort posting new status.
  + A "Who is ..." item added to user menu, to see Bio/Url and name of a user.
  + Support for Digg.com shorturls service added.
  + Better support for right to left languages, And users who use multiple languages with different directions.
  + Image caching improved and some related bugs fixed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1244980800">-update to version 0.6.1
  + bugfix release due to new situation on twitter.com (more than 2,147,483,647 tweets)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1249646400">- Update to version 0.6.6
  * Icon improved and made greenish.
  * Ability to follow a thread (Or option to see all previous posts of a conversation)
  * Ability to resolve a TinyURL into a regular URL on url tooltip.
  * Replaced RT for ReTweet function by ♻-Symbol.
  * Identica hashtag search problem fixed and works again. (And it's a full text search like Twitter custom)
  * cycle through accounts using the scroll wheel on the system tray icon.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1282737600">- update to latest svn snapshot
  * Adding error notification.
  * Option to use UnTiny.com instead of generic redirect detection added
  * twitter edit account bug fixed!
  * Matched FriendsList request for Twitter to new API (bko#248206)
  * Underline can be part of nick too.
  * Doesn't show friends list when reply nick is on the end of message and post sending via pressing enter.
  * Fix: text on systray icon too big when using "--graphicssystem raster" (bko#248216)
  * Corrections related with special XML characteres (&amp;amp;, etc...)
  * fix: Choqok Segfaults while looking up a profile (bko#247096)
  * bugfixes (bko#227987, bko#243368)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1282996800">- Update to newer svn snapshot
  * Includes newest translations</changelog>
<changelog author="tittiatcoke@gmail.com" date="1283342400">- update to a newer svn snapshot (Beta3)
  * Better nick name detection.
  * Better URL detection.
  * Fetching Friends List problems fixed.
  * UnTiny plugin can use untiny.com service instead of its
    generic way (Configurable)
  * Using the Choqok way to show repeated dents/tweets made
    optional (Default is Twitter way)
  * Confirm dialog for Re tweet
  * When KWallet isn’t available, Choqok will store secrets in text
    files (Not plain text, Base64)
  * Choqok 1.0Beta2 was needs kdelibs 4.5 , We changed this to
    work with 4.4 too.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1285070400">- Corrected translatons to be corresponding with the Choqok version.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1296129600">- Update to version 1.0
  * Bug fixes and improvements around RC1 release
  * Twitter Lists support in Choqok [FEATURE:216249]
  * Option to show timelines in reverse order [FEATURE:241743]
  * Additional action in input boxes' context menu that will shorten
    all selected URLs or all URLs if there's no selection.
  * "Hide Post" option for post widgets.
  * BiDi support is back.
  * Support for Twitgoo service in imagepreview plugin. (Alex Infantes)
  * Digg shortener plugin removed.
  * Support for LibIndicate to use as an alternate notification
    system. (It's Optional)
  * Send reply to original author of repeated posts + cc to repeater.
  * "Reply to USER", "Write to USER", "Reply to all" actions added to
    reply button menu.
  * Filter plugin: Option to just show own replies or just show replies
    to my friends added
  New Plugins:
  - OCS Plugin to support "Open Collaboration Services API"
    provided by opendesktop.org and its partners
  - IMStatus plugin to set your post as current status in
    IM clients (Kopete, Pidgin, PSI, Skype)
  - Twitgoo image uploader
  - Mobypicture uploader
  - Posterous uploader
  - ImageShack uploader (Just image uploading)
  - Flickr uploader (Just image uploading)
  Plugins removed:
  - u.nu shortner, due its service discontinued
  - YFrog uploader (temporary)</changelog>
<changelog author="coolo@novell.com" date="1300795200">- licenses package is about to die</changelog>
<changelog author="wstephenson@novell.com" date="1301918400">- Update to version 1.1
  * Translator plugin
  * Quick Filter plugin
  * System tray icon problem in GNOME fixed
  * Hide Menu-bar option
  * Choqok caches posts automatically and not just at exit
  * Fixed video preview plugin problem that causes Choqok to crash
  * Bug fixes</changelog>
<changelog author="javier@opensuse.org" date="1311854400">- Add user friends list bugfix (bko#275185)</changelog>
<changelog author="toddrme2178@gmail.com" date="1318075200">- Removed commented files (fix for RPMLINT warning)
- Cleaned up spec file formatting</changelog>
<changelog author="mlin@suse.com" date="1331035200">- Update to version 1.3
  * Support for Twitter photo upload API method
  * Translator plugin shuts off due Google terminated its free API
  * Toolbar for Choqok
  * Filter plugin new feature: Add a filter to Highlight a post containing some text
  * Improvements in new tab bar UI
  * Show first 4 characters of search timeline name over the timeline icon</changelog>
<changelog author="coolo@suse.com" date="1366200000">- remove file conflicting with kdepimlibs4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371384000">- Added patch twitter-api.diff to make choqok work with the
  Twitter api v1.1 (bko#264091)</changelog>
<changelog author="fisiu@opensuse.org" date="1378296000">- Update to 1.4:
  * Support for Twitter API v1.1.
  * "Mark timeline as read" menu item added to tabs context menu.
  * Show "In reply to" in twitter search timelines.
  * Identi.ca support removed from StatusNet plugin.
  * And some other minor fixes
- Drop twitter-api.diff: fixed upstream.</changelog>
<changelog author="fisiu@opensuse.org" date="1391688000">- Add choqok-1.4-twitter-favorities-fix.patch: fix bnc#862467.
- Add choqok-1.4-plugin-yourls-fix.patch: fix yourls shortener plugin,
  kde#265219.</changelog>

</package>
<package pkgid="37c793a452e0abeaa64ab5ab78f9be96d754461af3241bf74800b5630198683e" name="choqok-devel" arch="i586">
    <version epoch="0" ver="1.4" rel="2.4.1"/>

<changelog author="tittiatcoke@gmail.com" date="1243166400">- update to version 0.6
  + Add support for smilies in texts.
  + Add support for ReTweet function.
  + Twitpic.com integration added, Posting to it and showing a thumbnail of it's pictures.
  + Posting "Currently listening to ..." text for Amarok 2.X Player implemented!
  + Option to use a custom browser instead of kde default implemented! (For Gnome users)
  + Ability to abort posting new status.
  + A "Who is ..." item added to user menu, to see Bio/Url and name of a user.
  + Support for Digg.com shorturls service added.
  + Better support for right to left languages, And users who use multiple languages with different directions.
  + Image caching improved and some related bugs fixed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1244980800">-update to version 0.6.1
  + bugfix release due to new situation on twitter.com (more than 2,147,483,647 tweets)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1249646400">- Update to version 0.6.6
  * Icon improved and made greenish.
  * Ability to follow a thread (Or option to see all previous posts of a conversation)
  * Ability to resolve a TinyURL into a regular URL on url tooltip.
  * Replaced RT for ReTweet function by ♻-Symbol.
  * Identica hashtag search problem fixed and works again. (And it's a full text search like Twitter custom)
  * cycle through accounts using the scroll wheel on the system tray icon.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1282737600">- update to latest svn snapshot
  * Adding error notification.
  * Option to use UnTiny.com instead of generic redirect detection added
  * twitter edit account bug fixed!
  * Matched FriendsList request for Twitter to new API (bko#248206)
  * Underline can be part of nick too.
  * Doesn't show friends list when reply nick is on the end of message and post sending via pressing enter.
  * Fix: text on systray icon too big when using "--graphicssystem raster" (bko#248216)
  * Corrections related with special XML characteres (&amp;amp;, etc...)
  * fix: Choqok Segfaults while looking up a profile (bko#247096)
  * bugfixes (bko#227987, bko#243368)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1282996800">- Update to newer svn snapshot
  * Includes newest translations</changelog>
<changelog author="tittiatcoke@gmail.com" date="1283342400">- update to a newer svn snapshot (Beta3)
  * Better nick name detection.
  * Better URL detection.
  * Fetching Friends List problems fixed.
  * UnTiny plugin can use untiny.com service instead of its
    generic way (Configurable)
  * Using the Choqok way to show repeated dents/tweets made
    optional (Default is Twitter way)
  * Confirm dialog for Re tweet
  * When KWallet isn’t available, Choqok will store secrets in text
    files (Not plain text, Base64)
  * Choqok 1.0Beta2 was needs kdelibs 4.5 , We changed this to
    work with 4.4 too.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1285070400">- Corrected translatons to be corresponding with the Choqok version.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1296129600">- Update to version 1.0
  * Bug fixes and improvements around RC1 release
  * Twitter Lists support in Choqok [FEATURE:216249]
  * Option to show timelines in reverse order [FEATURE:241743]
  * Additional action in input boxes' context menu that will shorten
    all selected URLs or all URLs if there's no selection.
  * "Hide Post" option for post widgets.
  * BiDi support is back.
  * Support for Twitgoo service in imagepreview plugin. (Alex Infantes)
  * Digg shortener plugin removed.
  * Support for LibIndicate to use as an alternate notification
    system. (It's Optional)
  * Send reply to original author of repeated posts + cc to repeater.
  * "Reply to USER", "Write to USER", "Reply to all" actions added to
    reply button menu.
  * Filter plugin: Option to just show own replies or just show replies
    to my friends added
  New Plugins:
  - OCS Plugin to support "Open Collaboration Services API"
    provided by opendesktop.org and its partners
  - IMStatus plugin to set your post as current status in
    IM clients (Kopete, Pidgin, PSI, Skype)
  - Twitgoo image uploader
  - Mobypicture uploader
  - Posterous uploader
  - ImageShack uploader (Just image uploading)
  - Flickr uploader (Just image uploading)
  Plugins removed:
  - u.nu shortner, due its service discontinued
  - YFrog uploader (temporary)</changelog>
<changelog author="coolo@novell.com" date="1300795200">- licenses package is about to die</changelog>
<changelog author="wstephenson@novell.com" date="1301918400">- Update to version 1.1
  * Translator plugin
  * Quick Filter plugin
  * System tray icon problem in GNOME fixed
  * Hide Menu-bar option
  * Choqok caches posts automatically and not just at exit
  * Fixed video preview plugin problem that causes Choqok to crash
  * Bug fixes</changelog>
<changelog author="javier@opensuse.org" date="1311854400">- Add user friends list bugfix (bko#275185)</changelog>
<changelog author="toddrme2178@gmail.com" date="1318075200">- Removed commented files (fix for RPMLINT warning)
- Cleaned up spec file formatting</changelog>
<changelog author="mlin@suse.com" date="1331035200">- Update to version 1.3
  * Support for Twitter photo upload API method
  * Translator plugin shuts off due Google terminated its free API
  * Toolbar for Choqok
  * Filter plugin new feature: Add a filter to Highlight a post containing some text
  * Improvements in new tab bar UI
  * Show first 4 characters of search timeline name over the timeline icon</changelog>
<changelog author="coolo@suse.com" date="1366200000">- remove file conflicting with kdepimlibs4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371384000">- Added patch twitter-api.diff to make choqok work with the
  Twitter api v1.1 (bko#264091)</changelog>
<changelog author="fisiu@opensuse.org" date="1378296000">- Update to 1.4:
  * Support for Twitter API v1.1.
  * "Mark timeline as read" menu item added to tabs context menu.
  * Show "In reply to" in twitter search timelines.
  * Identi.ca support removed from StatusNet plugin.
  * And some other minor fixes
- Drop twitter-api.diff: fixed upstream.</changelog>
<changelog author="fisiu@opensuse.org" date="1391688000">- Add choqok-1.4-twitter-favorities-fix.patch: fix bnc#862467.
- Add choqok-1.4-plugin-yourls-fix.patch: fix yourls shortener plugin,
  kde#265219.</changelog>

</package>
<package pkgid="ab35f566fced2b26b3441e41cd524fd9a9647c38672cedc1b4bf8470fd4e2795" name="choqok-devel" arch="x86_64">
    <version epoch="0" ver="1.4" rel="2.4.1"/>

<changelog author="tittiatcoke@gmail.com" date="1243166400">- update to version 0.6
  + Add support for smilies in texts.
  + Add support for ReTweet function.
  + Twitpic.com integration added, Posting to it and showing a thumbnail of it's pictures.
  + Posting "Currently listening to ..." text for Amarok 2.X Player implemented!
  + Option to use a custom browser instead of kde default implemented! (For Gnome users)
  + Ability to abort posting new status.
  + A "Who is ..." item added to user menu, to see Bio/Url and name of a user.
  + Support for Digg.com shorturls service added.
  + Better support for right to left languages, And users who use multiple languages with different directions.
  + Image caching improved and some related bugs fixed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1244980800">-update to version 0.6.1
  + bugfix release due to new situation on twitter.com (more than 2,147,483,647 tweets)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1249646400">- Update to version 0.6.6
  * Icon improved and made greenish.
  * Ability to follow a thread (Or option to see all previous posts of a conversation)
  * Ability to resolve a TinyURL into a regular URL on url tooltip.
  * Replaced RT for ReTweet function by ♻-Symbol.
  * Identica hashtag search problem fixed and works again. (And it's a full text search like Twitter custom)
  * cycle through accounts using the scroll wheel on the system tray icon.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1282737600">- update to latest svn snapshot
  * Adding error notification.
  * Option to use UnTiny.com instead of generic redirect detection added
  * twitter edit account bug fixed!
  * Matched FriendsList request for Twitter to new API (bko#248206)
  * Underline can be part of nick too.
  * Doesn't show friends list when reply nick is on the end of message and post sending via pressing enter.
  * Fix: text on systray icon too big when using "--graphicssystem raster" (bko#248216)
  * Corrections related with special XML characteres (&amp;amp;, etc...)
  * fix: Choqok Segfaults while looking up a profile (bko#247096)
  * bugfixes (bko#227987, bko#243368)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1282996800">- Update to newer svn snapshot
  * Includes newest translations</changelog>
<changelog author="tittiatcoke@gmail.com" date="1283342400">- update to a newer svn snapshot (Beta3)
  * Better nick name detection.
  * Better URL detection.
  * Fetching Friends List problems fixed.
  * UnTiny plugin can use untiny.com service instead of its
    generic way (Configurable)
  * Using the Choqok way to show repeated dents/tweets made
    optional (Default is Twitter way)
  * Confirm dialog for Re tweet
  * When KWallet isn’t available, Choqok will store secrets in text
    files (Not plain text, Base64)
  * Choqok 1.0Beta2 was needs kdelibs 4.5 , We changed this to
    work with 4.4 too.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1285070400">- Corrected translatons to be corresponding with the Choqok version.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1296129600">- Update to version 1.0
  * Bug fixes and improvements around RC1 release
  * Twitter Lists support in Choqok [FEATURE:216249]
  * Option to show timelines in reverse order [FEATURE:241743]
  * Additional action in input boxes' context menu that will shorten
    all selected URLs or all URLs if there's no selection.
  * "Hide Post" option for post widgets.
  * BiDi support is back.
  * Support for Twitgoo service in imagepreview plugin. (Alex Infantes)
  * Digg shortener plugin removed.
  * Support for LibIndicate to use as an alternate notification
    system. (It's Optional)
  * Send reply to original author of repeated posts + cc to repeater.
  * "Reply to USER", "Write to USER", "Reply to all" actions added to
    reply button menu.
  * Filter plugin: Option to just show own replies or just show replies
    to my friends added
  New Plugins:
  - OCS Plugin to support "Open Collaboration Services API"
    provided by opendesktop.org and its partners
  - IMStatus plugin to set your post as current status in
    IM clients (Kopete, Pidgin, PSI, Skype)
  - Twitgoo image uploader
  - Mobypicture uploader
  - Posterous uploader
  - ImageShack uploader (Just image uploading)
  - Flickr uploader (Just image uploading)
  Plugins removed:
  - u.nu shortner, due its service discontinued
  - YFrog uploader (temporary)</changelog>
<changelog author="coolo@novell.com" date="1300795200">- licenses package is about to die</changelog>
<changelog author="wstephenson@novell.com" date="1301918400">- Update to version 1.1
  * Translator plugin
  * Quick Filter plugin
  * System tray icon problem in GNOME fixed
  * Hide Menu-bar option
  * Choqok caches posts automatically and not just at exit
  * Fixed video preview plugin problem that causes Choqok to crash
  * Bug fixes</changelog>
<changelog author="javier@opensuse.org" date="1311854400">- Add user friends list bugfix (bko#275185)</changelog>
<changelog author="toddrme2178@gmail.com" date="1318075200">- Removed commented files (fix for RPMLINT warning)
- Cleaned up spec file formatting</changelog>
<changelog author="mlin@suse.com" date="1331035200">- Update to version 1.3
  * Support for Twitter photo upload API method
  * Translator plugin shuts off due Google terminated its free API
  * Toolbar for Choqok
  * Filter plugin new feature: Add a filter to Highlight a post containing some text
  * Improvements in new tab bar UI
  * Show first 4 characters of search timeline name over the timeline icon</changelog>
<changelog author="coolo@suse.com" date="1366200000">- remove file conflicting with kdepimlibs4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371384000">- Added patch twitter-api.diff to make choqok work with the
  Twitter api v1.1 (bko#264091)</changelog>
<changelog author="fisiu@opensuse.org" date="1378296000">- Update to 1.4:
  * Support for Twitter API v1.1.
  * "Mark timeline as read" menu item added to tabs context menu.
  * Show "In reply to" in twitter search timelines.
  * Identi.ca support removed from StatusNet plugin.
  * And some other minor fixes
- Drop twitter-api.diff: fixed upstream.</changelog>
<changelog author="fisiu@opensuse.org" date="1391688000">- Add choqok-1.4-twitter-favorities-fix.patch: fix bnc#862467.
- Add choqok-1.4-plugin-yourls-fix.patch: fix yourls shortener plugin,
  kde#265219.</changelog>

</package>
<package pkgid="e8206d0db3264ca548e526167d3df22dc3379326271c52260630c1fdacc209d3" name="chromedriver" arch="i586">
    <version epoch="0" ver="31.0.1650.57" rel="8.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376222400">- Update to 30.0.1594
  * Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
- Chromium now expects the SUID-helper installed in the same
  directory as chromium. So let's create a symlink to the helper
  in /usr/lib</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>

</package>
<package pkgid="495bff665a64daf6ab296a2ab2f9e6d8401385c750645f6f5d9812ee4cf0768f" name="chromedriver" arch="i586">
    <version epoch="0" ver="31.0.1650.63" rel="13.7"/>

<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.</changelog>

</package>
<package pkgid="55ee0af4f4f6aa11aef9b85e481e447198756da97e073824064ae69c9012b6e8" name="chromedriver" arch="i586">
    <version epoch="0" ver="32.0.1700.102" rel="17.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>

</package>
<package pkgid="5b3341def2efae7cb1f14ccd6c84b5299ea02e8feb55d1a4bfe0fb27a535b6bb" name="chromedriver" arch="i586">
    <version epoch="0" ver="33.0.1750.117" rel="21.2"/>

<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>

</package>
<package pkgid="34a0d24584287f3cda6ec2c6b60ba713f642fa81d74e53f97ddc35bab1e303b5" name="chromedriver" arch="i586">
    <version epoch="0" ver="33.0.1750.152" rel="25.2"/>

<changelog author="andreas.stieger@gmx.de" date="1377518400">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>

</package>
<package pkgid="63dd8135edcbdfadbd2fdccbdc72fa3a5f43dc7c998402abf5f038995f57418a" name="chromedriver" arch="i586">
    <version epoch="0" ver="34.0.1847.116" rel="29.3"/>

<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>

</package>
<package pkgid="a114e7c6ddc05d455edb59fd3cc7fbd85b76bf9eb20c923d453fcf32c6a22ae3" name="chromedriver" arch="i586">
    <version epoch="0" ver="34.0.1847.132" rel="33.1"/>

<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>

</package>
<package pkgid="8c5a266579e59e97ebcc39d4eedafbb2baa7dc7b39fa390cd5233e8dae68bd91" name="chromedriver" arch="i586">
    <version epoch="0" ver="35.0.1916.114" rel="37.4"/>

<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>

</package>
<package pkgid="cbd27084f087c45539218bb98a14fa3b7ea62c9dcd5d9af2fb59e6b6acca62b1" name="chromedriver" arch="i586">
    <version epoch="0" ver="36.0.1985.125" rel="41.1"/>

<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>

</package>
<package pkgid="41322291a70cf20054ee28e1e15cb1626146d013e405407fd654c4f0e2d7b360" name="chromedriver" arch="i586">
    <version epoch="0" ver="37.0.2062.94" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>

</package>
<package pkgid="39785b44b01f114274d62ab68be001f54fdee3151e33acf3278cd4ec7d71d119" name="chromedriver" arch="i586">
    <version epoch="0" ver="38.0.2125.104" rel="54.4"/>

<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>

</package>
<package pkgid="37c5f9158ffc7127b5e3ef52feeb9028f357b64632331a7f6709105600404b0f" name="chromedriver" arch="i586">
    <version epoch="0" ver="39.0.2171.65" rel="58.4"/>

<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>

</package>
<package pkgid="2b21710a78825bcdca051d5d012e94ac7b122ea63048e80549e34b9d8cc0cecc" name="chromedriver" arch="i586">
    <version epoch="0" ver="40.0.2214.111" rel="68.2"/>

<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>

</package>
<package pkgid="dfb55385cec17af9d680e1e93d184e527e6f85caff22c505772a1c5444a780d0" name="chromedriver" arch="i586">
    <version epoch="0" ver="41.0.2272.118" rel="75.1"/>

<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>

</package>
<package pkgid="6283313115147ce37a6d9f8979ad150b33abd048dc0bb60fce8223a6d9756fe6" name="chromedriver" arch="i586">
    <version epoch="0" ver="41.0.2272.76" rel="72.1"/>

<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>

</package>
<package pkgid="c300b35c673ae0927801f68a30e81020813475d61161f537d0125da9fbd045b1" name="chromedriver" arch="i586">
    <version epoch="0" ver="42.0.2311.135" rel="81.1"/>

<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>

</package>
<package pkgid="ba4fbd7cb185287cc7def845544b60ca7434b6eb7fa862a2e354fdd807524b87" name="chromedriver" arch="i586">
    <version epoch="0" ver="42.0.2311.90" rel="78.2"/>

<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>

</package>
<package pkgid="7413490b72192f1e6b55342252288e28c7db9f64f6f7492e9a7b0ac0fe87b107" name="chromedriver" arch="i586">
    <version epoch="0" ver="43.0.2357.130" rel="89.1"/>

<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>

</package>
<package pkgid="df50d859a0d72c32dac41c63139254e53b74ba0f0608149d2a6dc6bc9f6a0f05" name="chromedriver" arch="i586">
    <version epoch="0" ver="43.0.2357.65" rel="84.1"/>

<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>

</package>
<package pkgid="4f58f727590b590b4f83e022559c835926d3682e34e27ff27fae6c33e0fa5d38" name="chromedriver" arch="i586">
    <version epoch="0" ver="44.0.2403.89" rel="93.1"/>

<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89 [bnc#939077]
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="879391032c7c0d9374b563b1db82b821429c8f510991b4ec6da89a9781405ae5" name="chromedriver" arch="i586">
    <version epoch="0" ver="45.0.2454.101" rel="105.1"/>

<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>

</package>
<package pkgid="84a6bfbe1924ef944050aa09f3d753f77f578ca8082bfcabe5db4f776e4a2cbd" name="chromedriver" arch="i586">
    <version epoch="0" ver="45.0.2454.85" rel="98.1"/>

<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>

</package>
<package pkgid="331eab41d33f7577947911909670e05ae6bcb48f392999b20f443fa3ad327fae" name="chromedriver" arch="i586">
    <version epoch="0" ver="46.0.2490.71" rel="109.1"/>

<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>

</package>
<package pkgid="dcd5528cd7461e02dca1a887f26a8156e251f2f789deeff26c4347fbca061c22" name="chromedriver" arch="i586">
    <version epoch="0" ver="46.0.2490.86" rel="112.1"/>

<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>

</package>
<package pkgid="f32cc43454bae98f249328054facd5549caeff6e2fb3f75ed722520cae07e149" name="chromedriver" arch="i586">
    <version epoch="0" ver="47.0.2526.106" rel="119.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>

</package>
<package pkgid="a74f68245867c6b19182127777ef1568f58aeb380a800e417ddc1e2abde286e4" name="chromedriver" arch="i586">
    <version epoch="0" ver="47.0.2526.80" rel="116.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>

</package>
<package pkgid="9ce14f44d3e2e90543dac446407b700f7e79a975663d23e883e538590d5ff09a" name="chromedriver" arch="i586">
    <version epoch="0" ver="48.0.2564.109" rel="125.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chomium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="3c991c6cca0fd74e70cc8d8980845ba5946feda57eaeb7174ffa5451f377c730" name="chromedriver" arch="i586">
    <version epoch="0" ver="48.0.2564.116" rel="129.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>

</package>
<package pkgid="fb68b33b239686667fe4d4bc5f799ad34d09fdedc5182b67cc7330534f448f51" name="chromedriver" arch="i586">
    <version epoch="0" ver="48.0.2564.116" rel="132.2"/>

<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="b78010e834676f0733a9c9cf62e55d2eb6d92044969ed5b12d88e3cde0cc8d0e" name="chromedriver" arch="i586">
    <version epoch="0" ver="48.0.2564.82" rel="122.1"/>

<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>

</package>
<package pkgid="0133a42121c1e685e3d15cb625807590599694cf808b5dc91a0ad8b0da04453b" name="chromedriver" arch="i586">
    <version epoch="0" ver="49.0.2623.110" rel="141.2"/>

<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>

</package>
<package pkgid="3585468dba612f53cdec7b86a85ccaa28dbbf26eb890fc9cefdf5e06ecad0dd5" name="chromedriver" arch="i586">
    <version epoch="0" ver="49.0.2623.75" rel="135.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>

</package>
<package pkgid="5d1091d87ddc8f54262a74cf3806c8669743c7041cb8e6e9a8c5c48177c860c0" name="chromedriver" arch="i586">
    <version epoch="0" ver="49.0.2623.87" rel="138.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>

</package>
<package pkgid="a8f1dfacff2726b0e22aa022310033da0941402e554a53a537f4fbaaa6859d53" name="chromedriver" arch="i586">
    <version epoch="0" ver="50.0.2661.75" rel="144.1"/>

<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>

</package>
<package pkgid="200f5d9de49ea025cf2ce7c5c55cd971756878e03b0b24cffd02b883039e3c5f" name="chromedriver" arch="i586">
    <version epoch="0" ver="51.0.2704.103" rel="147.1"/>

<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- _constraints: increase memory. It takes 1.2G to build some .o, and
  with -j4 this results in OOM.</changelog>
<changelog author="astieger@suse.com" date="1461931200">- Update to Chromium 50.0.2661.94 (boo#977830)
  * Security fixes:
  - CVE-2016-1660: Out-of-bounds write in Blink
  - CVE-2016-1661: Memory corruption in cross-process frames
  - CVE-2016-1662: Use-after-free in extensions
  - CVE-2016-1663: Use-after-free in Blink?s V8 bindings
  - CVE-2016-1664: Address bar spoofing
  - CVE-2016-1665: Information leak in V8
  - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1463140800">- Update to Chromium 50.0.2661.102 (boo#979859)
  * Security fixes:
  - CVE-2016-1667: Same origin bypass in DOM
  - CVE-2016-1668: Same origin bypass in Blink V8 bindings
  - CVE-2016-1669: Buffer overflow in V8
  - CVE-2016-1670: Race condition in loader</changelog>
<changelog author="tittiatcoke@gmail.com" date="1464264000">- Update to Chromium 51.0.2704.63 [boo#981886]
  * Security fixes:
  - CVE-2016-1672: Cross-origin bypass in extension bindings
  - CVE-2016-1673: Cross-origin bypass in Blink
  - CVE-2016-1674: Cross-origin bypass in extensions
  - CVE-2016-1675: Cross-origin bypass in Blink
  - CVE-2016-1676: Cross-origin bypass in extension bindings
  - CVE-2016-1677: Type confusion in V8
  - CVE-2016-1678: Heap overflow in V8
  - CVE-2016-1679: Heap use-after-free in V8 bindings
  - CVE-2016-1680: Heap use-after-free in Skia
  - CVE-2016-1681: Heap overflow in PDFium
  - CVE-2016-1682: CSP bypass for ServiceWorker
  - CVE-2016-1683: Out-of-bounds access in libxslt
  - CVE-2016-1684: Integer overflow in libxslt
  - CVE-2016-1685: Out-of-bounds read in PDFium
  - CVE-2016-1686: Out-of-bounds read in PDFium
  - CVE-2016-1687: Information leak in extensions
  - CVE-2016-1688: Out-of-bounds read in V8
  - CVE-2016-1689: Heap buffer overflow in media
  - CVE-2016-1690: Heap use-after-free in Autofill
  - CVE-2016-1691: Heap buffer-overflow in Skia
  - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker
  - CVE-2016-1693: HTTP Download of Software Removal Tool
  - CVE-2016-1694: HPKP pins removed on cache clearance
  - CVE-2016-1695: Various fixes from internal audits, fuzzing
    and other initiatives
- drop chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch
  now upstream</changelog>
<changelog author="astieger@suse.com" date="1464868800">- Update to Chromium 51.0.2704.79 [boo#982719]
  * Security fixes:
  - CVE-2016-1696: Cross-origin bypass in Extension bindings
  - CVE-2016-1697: Cross-origin bypass in Blink
  - CVE-2016-1698: Information leak in Extension bindings
  - CVE-2016-1699: Parameter sanitization failure in DevTools
  - CVE-2016-1700: Use-after-free in Extensions
  - CVE-2016-1701: Use-after-free in Autofill
  - CVE-2016-1702: Out-of-bounds read in Skia
  - CVE-2016-1703: Various fixes from internal audits, fuzzing
    and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1465300800">- Update to Chromium 51.0.2704.84
  * No further changelog</changelog>
<changelog author="astieger@suse.com" date="1466164800">- Update to Chromium 51.0.2704.103
  * Security fixes:
  - CVE-2016-1704: Various fixes from internal audits, fuzzing and
    other initiatives (boo#985397)</changelog>

</package>
<package pkgid="2772c35d0579ff0ae90de46c06de5a7b7dbbab0a3da118eabde321d260738ace" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="31.0.1650.57" rel="8.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376222400">- Update to 30.0.1594
  * Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
- Chromium now expects the SUID-helper installed in the same
  directory as chromium. So let's create a symlink to the helper
  in /usr/lib</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>

</package>
<package pkgid="2ef490322e8dc553000e3bf04aa50522fb2aeed1f84a7eba204c1ff6f5d88326" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="31.0.1650.63" rel="13.7"/>

<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.</changelog>

</package>
<package pkgid="282167192bd925a40f91b11dd693506c1bf2524d74e257f1da2f4cbf44a8d9dc" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="32.0.1700.102" rel="17.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>

</package>
<package pkgid="f92802e40d1ad8d4cd1caef891ede198746a9d38c6bd53c92c6d175e4ea70227" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="33.0.1750.117" rel="21.2"/>

<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>

</package>
<package pkgid="ee707587dfd8a1f17861699658939a99b8876f8c193993f753bc98db3def9dd7" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="33.0.1750.152" rel="25.2"/>

<changelog author="andreas.stieger@gmx.de" date="1377518400">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>

</package>
<package pkgid="095a031cf5cd38b8c369e4e4d874918ec1362f61c1a7aa48b23f4f29c471ab61" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="34.0.1847.116" rel="29.3"/>

<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>

</package>
<package pkgid="0901f4785afb0dfe7aaf56df33078cf85fef61197dfb9d5056ccf6abac634faf" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="34.0.1847.132" rel="33.1"/>

<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>

</package>
<package pkgid="d1afa591b3c9eb635c040d73d2b42a9d483210cd2f32207c9020963575146d4a" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="35.0.1916.114" rel="37.4"/>

<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>

</package>
<package pkgid="261bc8cf9196ffa4b1fc4d264b1d19b0e3c789b95d080fb1000e6342e80a9471" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="36.0.1985.125" rel="41.1"/>

<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>

</package>
<package pkgid="f50e27005f8c140552ecb8bd15456114e0abb8e15d34f838df37a2dfa932294f" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="37.0.2062.94" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>

</package>
<package pkgid="78f754de07d3177543da5062977325f6f6b6510b9d612e1924fd3253b73e5920" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="38.0.2125.104" rel="54.4"/>

<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>

</package>
<package pkgid="ce6846aca12db440c31e602d2bf6dc62dd0f146a679d8365c4c86a368f9de0a2" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="39.0.2171.65" rel="58.4"/>

<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>

</package>
<package pkgid="4b1f9c10a5fd79c4382229ba379003cb1e66e5b07ff7a96bfcefdca874508a6c" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="40.0.2214.111" rel="68.2"/>

<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>

</package>
<package pkgid="2520198426167653298b83a00dbd07d9c39651f145aec52b63cbd4eaa9ce23d5" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="41.0.2272.118" rel="75.1"/>

<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>

</package>
<package pkgid="c3aa1491f026d7dc957d87624494ef1cc0d3503347919ce3334182eda7b292b7" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="41.0.2272.76" rel="72.1"/>

<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>

</package>
<package pkgid="2bd77a543eacfc7fb3d2ed7348ea35aad837d6ba94651d9e77bf0042ca347dd3" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="42.0.2311.135" rel="81.1"/>

<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>

</package>
<package pkgid="703585a98ff9bbfa4a8091aa9250398ba3e29de30968e17c262b4b86fc6a7adc" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="42.0.2311.90" rel="78.2"/>

<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>

</package>
<package pkgid="6eea46266425a90ca56a98578ea047e33e71acc3cdad0a8e7184baba7af5f881" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="43.0.2357.130" rel="89.1"/>

<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>

</package>
<package pkgid="01a2ad5410880122c4b8eef8c6d4d6dc5d7b60939890bd1c027245e2f78859a4" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="43.0.2357.65" rel="84.1"/>

<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>

</package>
<package pkgid="396c23a0db9b3ef83c9321e1fd7ec405557635e2c7c2b092a05db107bad967cc" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="44.0.2403.89" rel="93.1"/>

<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89 [bnc#939077]
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="fbc25a4b03bef99a4b77927d0ce57bf88774808bfb59c379c3a74dc8d79be5aa" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="45.0.2454.101" rel="105.1"/>

<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>

</package>
<package pkgid="f8a13bcd965c1282f7c3fff25506be502eb9d6e62d7f6a94bc336544e5ea91c1" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="45.0.2454.85" rel="98.1"/>

<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>

</package>
<package pkgid="4be3465763b7c2f8e12d04067f11bf853d0c5cd1dd8d4c9dfafb8ce56c32710e" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="46.0.2490.71" rel="109.1"/>

<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>

</package>
<package pkgid="b678400b7c0116ad49d57d847de7c87369e27343497fd0e69aa8136eb83c6f38" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="46.0.2490.86" rel="112.1"/>

<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>

</package>
<package pkgid="cedcf704472893879d8b2efd996733ab306cdcbbc3c5ae95dbb709ff9d93eaea" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="47.0.2526.106" rel="119.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>

</package>
<package pkgid="8a51601993c1c38d20bac283c2f251b7d294b083a5aa515cd76499b9ec142a88" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="47.0.2526.80" rel="116.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>

</package>
<package pkgid="ffa9c5d238084406d4ba6d9612e99fe32e961bcd7bfae6bb75fabbb2b15506f9" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="48.0.2564.109" rel="125.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chomium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="141e97fb02a4c92e383e872b3d60d7c61790a249159de06fd770f884d3d198b7" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="48.0.2564.116" rel="129.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>

</package>
<package pkgid="66a2be20056f2cc6bca72bbb61ed229ea8d03bc3af5feceb04ec21f81a5e42da" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="48.0.2564.116" rel="132.2"/>

<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="630fe140e1ff614b2f6f268a418fdb1feaa33894965adc3ac52f8b159a5c9997" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="48.0.2564.82" rel="122.1"/>

<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>

</package>
<package pkgid="9e14bdb52df28604467daafb3cf0b03e557fe9c1702d51a8ea8b17c691063bd3" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="49.0.2623.110" rel="141.2"/>

<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>

</package>
<package pkgid="fd10bcc7f1667dfbc3d3d361ac9565bdf3eb58740326b638e63c5ab2bd9da577" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="49.0.2623.75" rel="135.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>

</package>
<package pkgid="4a1044088ffb4de884f6a65267695092738886da58b7d4e74cd9c23e6cac1980" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="49.0.2623.87" rel="138.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>

</package>
<package pkgid="2d8626446922af7687ec763f3ebf8b95a8be33528e43739e5de3e0ef8feebf10" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="50.0.2661.75" rel="144.1"/>

<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>

</package>
<package pkgid="cba1d2a540bf43826f1cd0868d108eddf3bdbf0b9a2e614345de3ddad3a8d5bc" name="chromedriver" arch="x86_64">
    <version epoch="0" ver="51.0.2704.103" rel="147.1"/>

<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- _constraints: increase memory. It takes 1.2G to build some .o, and
  with -j4 this results in OOM.</changelog>
<changelog author="astieger@suse.com" date="1461931200">- Update to Chromium 50.0.2661.94 (boo#977830)
  * Security fixes:
  - CVE-2016-1660: Out-of-bounds write in Blink
  - CVE-2016-1661: Memory corruption in cross-process frames
  - CVE-2016-1662: Use-after-free in extensions
  - CVE-2016-1663: Use-after-free in Blink?s V8 bindings
  - CVE-2016-1664: Address bar spoofing
  - CVE-2016-1665: Information leak in V8
  - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1463140800">- Update to Chromium 50.0.2661.102 (boo#979859)
  * Security fixes:
  - CVE-2016-1667: Same origin bypass in DOM
  - CVE-2016-1668: Same origin bypass in Blink V8 bindings
  - CVE-2016-1669: Buffer overflow in V8
  - CVE-2016-1670: Race condition in loader</changelog>
<changelog author="tittiatcoke@gmail.com" date="1464264000">- Update to Chromium 51.0.2704.63 [boo#981886]
  * Security fixes:
  - CVE-2016-1672: Cross-origin bypass in extension bindings
  - CVE-2016-1673: Cross-origin bypass in Blink
  - CVE-2016-1674: Cross-origin bypass in extensions
  - CVE-2016-1675: Cross-origin bypass in Blink
  - CVE-2016-1676: Cross-origin bypass in extension bindings
  - CVE-2016-1677: Type confusion in V8
  - CVE-2016-1678: Heap overflow in V8
  - CVE-2016-1679: Heap use-after-free in V8 bindings
  - CVE-2016-1680: Heap use-after-free in Skia
  - CVE-2016-1681: Heap overflow in PDFium
  - CVE-2016-1682: CSP bypass for ServiceWorker
  - CVE-2016-1683: Out-of-bounds access in libxslt
  - CVE-2016-1684: Integer overflow in libxslt
  - CVE-2016-1685: Out-of-bounds read in PDFium
  - CVE-2016-1686: Out-of-bounds read in PDFium
  - CVE-2016-1687: Information leak in extensions
  - CVE-2016-1688: Out-of-bounds read in V8
  - CVE-2016-1689: Heap buffer overflow in media
  - CVE-2016-1690: Heap use-after-free in Autofill
  - CVE-2016-1691: Heap buffer-overflow in Skia
  - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker
  - CVE-2016-1693: HTTP Download of Software Removal Tool
  - CVE-2016-1694: HPKP pins removed on cache clearance
  - CVE-2016-1695: Various fixes from internal audits, fuzzing
    and other initiatives
- drop chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch
  now upstream</changelog>
<changelog author="astieger@suse.com" date="1464868800">- Update to Chromium 51.0.2704.79 [boo#982719]
  * Security fixes:
  - CVE-2016-1696: Cross-origin bypass in Extension bindings
  - CVE-2016-1697: Cross-origin bypass in Blink
  - CVE-2016-1698: Information leak in Extension bindings
  - CVE-2016-1699: Parameter sanitization failure in DevTools
  - CVE-2016-1700: Use-after-free in Extensions
  - CVE-2016-1701: Use-after-free in Autofill
  - CVE-2016-1702: Out-of-bounds read in Skia
  - CVE-2016-1703: Various fixes from internal audits, fuzzing
    and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1465300800">- Update to Chromium 51.0.2704.84
  * No further changelog</changelog>
<changelog author="astieger@suse.com" date="1466164800">- Update to Chromium 51.0.2704.103
  * Security fixes:
  - CVE-2016-1704: Various fixes from internal audits, fuzzing and
    other initiatives (boo#985397)</changelog>

</package>
<package pkgid="f5d86a492d13962cb8d19e58d543d60ba0c121d9124a12d0e3a583dddeafc20b" name="chromium" arch="i586">
    <version epoch="0" ver="31.0.1650.57" rel="8.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376222400">- Update to 30.0.1594
  * Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
- Chromium now expects the SUID-helper installed in the same
  directory as chromium. So let's create a symlink to the helper
  in /usr/lib</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>

</package>
<package pkgid="91ce0bd61b487903fc91fd1541f05ada8f23c972087744b24efa8c887da590bb" name="chromium" arch="i586">
    <version epoch="0" ver="31.0.1650.63" rel="13.7"/>

<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.</changelog>

</package>
<package pkgid="500c8c4ee217a2a109e2ce26522039c5d958491c9909491b45f8429621fb2a30" name="chromium" arch="i586">
    <version epoch="0" ver="32.0.1700.102" rel="17.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>

</package>
<package pkgid="c91f8b5b8ad491a30c83a1ee08a2807b2ee3f17fb1282fc26542b4d1777e84ce" name="chromium" arch="i586">
    <version epoch="0" ver="33.0.1750.117" rel="21.2"/>

<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>

</package>
<package pkgid="6ad1fa2a9e110645d23c9ada2451240f9a1140f4eac11b414945c8471435d249" name="chromium" arch="i586">
    <version epoch="0" ver="33.0.1750.152" rel="25.2"/>

<changelog author="andreas.stieger@gmx.de" date="1377518400">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>

</package>
<package pkgid="a3767ee1244945e2ae0cdc1bf23416d7e2cace2ba9932fc839b69441a3dd699b" name="chromium" arch="i586">
    <version epoch="0" ver="34.0.1847.116" rel="29.3"/>

<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>

</package>
<package pkgid="fb0e0cfc4d334b696723677cd48cfcf7da2f6b6c223d5529a9e259a1821baaf2" name="chromium" arch="i586">
    <version epoch="0" ver="34.0.1847.132" rel="33.1"/>

<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>

</package>
<package pkgid="a343f4792d65d9e5ce86efd7298ea831a2a7b4d3fa08165e67a9476aa3dd741d" name="chromium" arch="i586">
    <version epoch="0" ver="35.0.1916.114" rel="37.4"/>

<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>

</package>
<package pkgid="46decbfa08c23c263bc2c5ad89527b33b3fab386e054094c5a8aed1c87ae4f0a" name="chromium" arch="i586">
    <version epoch="0" ver="36.0.1985.125" rel="41.1"/>

<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>

</package>
<package pkgid="9afe6b15208b6ba3192ae7ab6423c666570c22edf2ce5de8659035ce0c1d4a32" name="chromium" arch="i586">
    <version epoch="0" ver="37.0.2062.94" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>

</package>
<package pkgid="8812aaebf4dd612317862e3c914adfaa8a608e3f4885e148d1c175ddd770a750" name="chromium" arch="i586">
    <version epoch="0" ver="38.0.2125.104" rel="54.4"/>

<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>

</package>
<package pkgid="a7845429119f8c3d649789ef90c778bfb8d7370ba47fdbdc40c63bd6f63e80d9" name="chromium" arch="i586">
    <version epoch="0" ver="39.0.2171.65" rel="58.4"/>

<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>

</package>
<package pkgid="28717c58992b458f96b26d5438499a8ff39ad5a51b06a90d7aa6af2e310b6c8e" name="chromium" arch="i586">
    <version epoch="0" ver="40.0.2214.111" rel="68.2"/>

<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>

</package>
<package pkgid="60a3dd562c85ef173b881025ddb06803111c57a394cf977ddea943e610a93003" name="chromium" arch="i586">
    <version epoch="0" ver="41.0.2272.118" rel="75.1"/>

<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>

</package>
<package pkgid="bdee2bd0b451190444c65db5149a52da4e8e39accd3a0f5ea962e0e5604b5557" name="chromium" arch="i586">
    <version epoch="0" ver="41.0.2272.76" rel="72.1"/>

<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>

</package>
<package pkgid="a3800a392ade68fb66d0b6dc03a04aab26c5b663114477f03eca65bf90a6e9f2" name="chromium" arch="i586">
    <version epoch="0" ver="42.0.2311.135" rel="81.1"/>

<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>

</package>
<package pkgid="156d0bafad23588f45b2cc4c7e014ee3d6aa1a6d1a4364e47d49a71a7c9fa7b7" name="chromium" arch="i586">
    <version epoch="0" ver="42.0.2311.90" rel="78.2"/>

<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>

</package>
<package pkgid="fc0c879df9a9ae3f56b5d87b97e3898e9c2c627e9778c1d30eb01d4362d49cde" name="chromium" arch="i586">
    <version epoch="0" ver="43.0.2357.130" rel="89.1"/>

<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>

</package>
<package pkgid="41d44479ab18284668f8afcf5499ce2be253eae1a578f8cddbb9961cb012ac23" name="chromium" arch="i586">
    <version epoch="0" ver="43.0.2357.65" rel="84.1"/>

<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>

</package>
<package pkgid="92c8be09dc75982eee7ad818e0d7f72b77e2c958ebade2c58ce9bbc0adf1a5bf" name="chromium" arch="i586">
    <version epoch="0" ver="44.0.2403.89" rel="93.1"/>

<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89 [bnc#939077]
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="e526307daae5f0162dd56d2eea46d14900f723f52606bf9644fddd6b33b7590d" name="chromium" arch="i586">
    <version epoch="0" ver="45.0.2454.101" rel="105.1"/>

<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>

</package>
<package pkgid="7dbb25414c8720c117a632d2dcd1648824fd110fca28deae89ed3af06079cb22" name="chromium" arch="i586">
    <version epoch="0" ver="45.0.2454.85" rel="98.1"/>

<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>

</package>
<package pkgid="35f9a0ec048fa33d15e022c66beb0ea4ae73376dade9617727b8cae930147538" name="chromium" arch="i586">
    <version epoch="0" ver="46.0.2490.71" rel="109.1"/>

<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>

</package>
<package pkgid="fc62a20d1b4987c471aea57dbe4602a0026431f743060832faf4a1bba4db04b0" name="chromium" arch="i586">
    <version epoch="0" ver="46.0.2490.86" rel="112.1"/>

<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>

</package>
<package pkgid="892bde4f97563694cc329bf10f9ccd1df520a0b80e970068f893612fd131e219" name="chromium" arch="i586">
    <version epoch="0" ver="47.0.2526.106" rel="119.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>

</package>
<package pkgid="327b0f78309b887fd8930bd2868188856103991bdf5b88185d4e5246840ed1fc" name="chromium" arch="i586">
    <version epoch="0" ver="47.0.2526.80" rel="116.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>

</package>
<package pkgid="b2445f8cac53179b67801d0b02a5049062edf257418f9ba9a278d77a51253028" name="chromium" arch="i586">
    <version epoch="0" ver="48.0.2564.109" rel="125.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chomium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="772ae46fc3e4ae5ceb3fdf680cf17a8bc59a675837db0d9df17086f9956213af" name="chromium" arch="i586">
    <version epoch="0" ver="48.0.2564.116" rel="129.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>

</package>
<package pkgid="b90f76b2543efd0a4046b9dd418f8103974dba7d2d7e3f63df3caff427b06215" name="chromium" arch="i586">
    <version epoch="0" ver="48.0.2564.116" rel="132.2"/>

<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="9926e0fce81aa0e02913bdd96fd328341718784a4a92cf399ae5762285bd25d9" name="chromium" arch="i586">
    <version epoch="0" ver="48.0.2564.82" rel="122.1"/>

<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>

</package>
<package pkgid="d5122350823a2bef5734cbd63c68fb566ce03f366c55ae3e919551c4b14094f2" name="chromium" arch="i586">
    <version epoch="0" ver="49.0.2623.110" rel="141.2"/>

<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>

</package>
<package pkgid="8efdddb3c012bee0bda87de98b00bf825c4c1c8261ba99b9d7e12ef560e0922e" name="chromium" arch="i586">
    <version epoch="0" ver="49.0.2623.75" rel="135.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>

</package>
<package pkgid="74e49c39c275599064b46a83ce9a6cec3e2ac06043b18beffbc29c745002dc0b" name="chromium" arch="i586">
    <version epoch="0" ver="49.0.2623.87" rel="138.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>

</package>
<package pkgid="6d9e478aafbaf5cdbf49a0fa822bd24aae1f5cbd0549985041425cbe3df09157" name="chromium" arch="i586">
    <version epoch="0" ver="50.0.2661.75" rel="144.1"/>

<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>

</package>
<package pkgid="9326803f6d21c845619c00f05e66293cca111c81ba8db8e4bf2404e09c4ed7a5" name="chromium" arch="i586">
    <version epoch="0" ver="51.0.2704.103" rel="147.1"/>

<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- _constraints: increase memory. It takes 1.2G to build some .o, and
  with -j4 this results in OOM.</changelog>
<changelog author="astieger@suse.com" date="1461931200">- Update to Chromium 50.0.2661.94 (boo#977830)
  * Security fixes:
  - CVE-2016-1660: Out-of-bounds write in Blink
  - CVE-2016-1661: Memory corruption in cross-process frames
  - CVE-2016-1662: Use-after-free in extensions
  - CVE-2016-1663: Use-after-free in Blink?s V8 bindings
  - CVE-2016-1664: Address bar spoofing
  - CVE-2016-1665: Information leak in V8
  - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1463140800">- Update to Chromium 50.0.2661.102 (boo#979859)
  * Security fixes:
  - CVE-2016-1667: Same origin bypass in DOM
  - CVE-2016-1668: Same origin bypass in Blink V8 bindings
  - CVE-2016-1669: Buffer overflow in V8
  - CVE-2016-1670: Race condition in loader</changelog>
<changelog author="tittiatcoke@gmail.com" date="1464264000">- Update to Chromium 51.0.2704.63 [boo#981886]
  * Security fixes:
  - CVE-2016-1672: Cross-origin bypass in extension bindings
  - CVE-2016-1673: Cross-origin bypass in Blink
  - CVE-2016-1674: Cross-origin bypass in extensions
  - CVE-2016-1675: Cross-origin bypass in Blink
  - CVE-2016-1676: Cross-origin bypass in extension bindings
  - CVE-2016-1677: Type confusion in V8
  - CVE-2016-1678: Heap overflow in V8
  - CVE-2016-1679: Heap use-after-free in V8 bindings
  - CVE-2016-1680: Heap use-after-free in Skia
  - CVE-2016-1681: Heap overflow in PDFium
  - CVE-2016-1682: CSP bypass for ServiceWorker
  - CVE-2016-1683: Out-of-bounds access in libxslt
  - CVE-2016-1684: Integer overflow in libxslt
  - CVE-2016-1685: Out-of-bounds read in PDFium
  - CVE-2016-1686: Out-of-bounds read in PDFium
  - CVE-2016-1687: Information leak in extensions
  - CVE-2016-1688: Out-of-bounds read in V8
  - CVE-2016-1689: Heap buffer overflow in media
  - CVE-2016-1690: Heap use-after-free in Autofill
  - CVE-2016-1691: Heap buffer-overflow in Skia
  - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker
  - CVE-2016-1693: HTTP Download of Software Removal Tool
  - CVE-2016-1694: HPKP pins removed on cache clearance
  - CVE-2016-1695: Various fixes from internal audits, fuzzing
    and other initiatives
- drop chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch
  now upstream</changelog>
<changelog author="astieger@suse.com" date="1464868800">- Update to Chromium 51.0.2704.79 [boo#982719]
  * Security fixes:
  - CVE-2016-1696: Cross-origin bypass in Extension bindings
  - CVE-2016-1697: Cross-origin bypass in Blink
  - CVE-2016-1698: Information leak in Extension bindings
  - CVE-2016-1699: Parameter sanitization failure in DevTools
  - CVE-2016-1700: Use-after-free in Extensions
  - CVE-2016-1701: Use-after-free in Autofill
  - CVE-2016-1702: Out-of-bounds read in Skia
  - CVE-2016-1703: Various fixes from internal audits, fuzzing
    and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1465300800">- Update to Chromium 51.0.2704.84
  * No further changelog</changelog>
<changelog author="astieger@suse.com" date="1466164800">- Update to Chromium 51.0.2704.103
  * Security fixes:
  - CVE-2016-1704: Various fixes from internal audits, fuzzing and
    other initiatives (boo#985397)</changelog>

</package>
<package pkgid="ea0a39fc3cfaa2ce0c8201a725fa24e0ee5b3adf2cda0890e8457ce47e0759d3" name="chromium" arch="src">
    <version epoch="0" ver="31.0.1650.57" rel="8.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376222400">- Update to 30.0.1594
  * Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
- Chromium now expects the SUID-helper installed in the same
  directory as chromium. So let's create a symlink to the helper
  in /usr/lib</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>

</package>
<package pkgid="730226d83407a39e2f7c5be93235c80aebd85f163cc09250b8649dad7a0a3c1e" name="chromium" arch="src">
    <version epoch="0" ver="31.0.1650.63" rel="13.7"/>

<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.</changelog>

</package>
<package pkgid="4d675e567ad77c0373db254579e36c24457952df795e8d77f088271080f77a0e" name="chromium" arch="src">
    <version epoch="0" ver="32.0.1700.102" rel="17.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>

</package>
<package pkgid="50447ea71aea63edd10e2f2ba1c0916703302ff03c132590cf337c54346c9f4d" name="chromium" arch="src">
    <version epoch="0" ver="33.0.1750.117" rel="21.2"/>

<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>

</package>
<package pkgid="8e8d8dcb1d31dd2cf604e105ddfd1ab4f7f106fc44fb748a931eea280e6928f5" name="chromium" arch="src">
    <version epoch="0" ver="33.0.1750.152" rel="25.2"/>

<changelog author="andreas.stieger@gmx.de" date="1377518400">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>

</package>
<package pkgid="fa22852bf7d884ad3ec79a0447b53f78dcba37aafb64f342540f880f0a5fe839" name="chromium" arch="src">
    <version epoch="0" ver="34.0.1847.116" rel="29.3"/>

<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>

</package>
<package pkgid="5b5e144b2caa8f41524005e067fd2e8a2e4ae5690b25aeac11b7b6a8c499863b" name="chromium" arch="src">
    <version epoch="0" ver="34.0.1847.132" rel="33.1"/>

<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>

</package>
<package pkgid="776a8259e2199bfc859923e2357d758f2d802741cf980b57d612b77e99f7d57d" name="chromium" arch="src">
    <version epoch="0" ver="35.0.1916.114" rel="37.4"/>

<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>

</package>
<package pkgid="b0d632909cfa348faba592bd30019dea1266877178365044660faf651b713dd9" name="chromium" arch="src">
    <version epoch="0" ver="36.0.1985.125" rel="41.1"/>

<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>

</package>
<package pkgid="38c3c6b260e1b4fbe65c05699c270ac80040c606d198c40450329f24cceb1fed" name="chromium" arch="src">
    <version epoch="0" ver="37.0.2062.94" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>

</package>
<package pkgid="77ace814a22e64700483946567509b1cd956a0c6353ac75980639de10a00b6a7" name="chromium" arch="src">
    <version epoch="0" ver="38.0.2125.104" rel="54.4"/>

<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>

</package>
<package pkgid="5a21e64bfefb41a15fb82a9401ff54e507e49a22f6bf08d691d480c2a476ce47" name="chromium" arch="src">
    <version epoch="0" ver="39.0.2171.65" rel="58.4"/>

<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>

</package>
<package pkgid="5f71523eba2e8110fe65e45fccd3b9fdaae6a94b945a3bb8ecd715cabbf09bfe" name="chromium" arch="src">
    <version epoch="0" ver="40.0.2214.111" rel="68.2"/>

<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>

</package>
<package pkgid="1bf9796feed0239d7aa42718c40caf97989dc3044bd6d446fd7347d0ef560170" name="chromium" arch="src">
    <version epoch="0" ver="41.0.2272.118" rel="75.1"/>

<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>

</package>
<package pkgid="c88dfad8b45c170267b7821f16a9701189495abec28a0a2808d4623b40feafec" name="chromium" arch="src">
    <version epoch="0" ver="41.0.2272.76" rel="72.1"/>

<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>

</package>
<package pkgid="f35045ceddd6222e9cec33682250a2383929109b5546b8debec58d910233d4bc" name="chromium" arch="src">
    <version epoch="0" ver="42.0.2311.135" rel="81.1"/>

<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>

</package>
<package pkgid="d84fa0a87d43aecbf4406bd737677f9ff3e91cec9ca596a54ee5232fa7f48097" name="chromium" arch="src">
    <version epoch="0" ver="42.0.2311.90" rel="78.2"/>

<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>

</package>
<package pkgid="04777591d05f2d4affdc01ffc027c84be864037b728a2eaa11e7a36c5a72b466" name="chromium" arch="src">
    <version epoch="0" ver="43.0.2357.130" rel="89.1"/>

<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>

</package>
<package pkgid="6bb3c6d66de24ee31703227049c105d72225808370095aadd33ff091a7b6dad5" name="chromium" arch="src">
    <version epoch="0" ver="43.0.2357.65" rel="84.1"/>

<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>

</package>
<package pkgid="d511e966512126eda2837e39ebaa9b9a2d5d0374994060798c76b17930c88092" name="chromium" arch="src">
    <version epoch="0" ver="44.0.2403.89" rel="93.1"/>

<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89 [bnc#939077]
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="d70049f6c1eddcc8130ec18653030175e23bd69c307460f9780f6c681da3a52c" name="chromium" arch="src">
    <version epoch="0" ver="45.0.2454.101" rel="105.1"/>

<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>

</package>
<package pkgid="36ebe59b8ec4c22be06f155ebcc4a40f658d6f5c0ecba121ac385d84efd02393" name="chromium" arch="src">
    <version epoch="0" ver="45.0.2454.85" rel="98.1"/>

<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>

</package>
<package pkgid="7b222b0c8758747a61bedcc2ef5c12821e9f905f77355f23e4eb305d02308759" name="chromium" arch="src">
    <version epoch="0" ver="46.0.2490.71" rel="109.1"/>

<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>

</package>
<package pkgid="5484a55ff7eb9478566571b5f77fe983620d3874c0027a7a5d65403f0bf0c643" name="chromium" arch="src">
    <version epoch="0" ver="46.0.2490.86" rel="112.1"/>

<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>

</package>
<package pkgid="9d014b7928c7a32f3fa94345095c1ce7d0e61cb13b1c3a1275acb34f9c6de8b9" name="chromium" arch="src">
    <version epoch="0" ver="47.0.2526.106" rel="119.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>

</package>
<package pkgid="b53db93092e7147f4b4e40ba193fa6806960be54055b34d40f1e59a0843ef3bd" name="chromium" arch="src">
    <version epoch="0" ver="47.0.2526.80" rel="116.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>

</package>
<package pkgid="8612c63236387eed620e8bdf19e4d7fbc1e8b48f894711540ec251df67066728" name="chromium" arch="src">
    <version epoch="0" ver="48.0.2564.109" rel="125.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chomium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="80e1195de65f5516ebd29e486ffebae52144508c69e794b910ab88a6c0e63b5a" name="chromium" arch="src">
    <version epoch="0" ver="48.0.2564.116" rel="129.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>

</package>
<package pkgid="a3cae3b5b86e8e88ade4ca3363291b47d732a95e13eea886b3a6d43d0a447c09" name="chromium" arch="src">
    <version epoch="0" ver="48.0.2564.116" rel="132.2"/>

<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="2506c04ff7449c197a7157c1c659aa15da6a34b2639a6c9e077bcd2740d6d3dc" name="chromium" arch="src">
    <version epoch="0" ver="48.0.2564.82" rel="122.1"/>

<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>

</package>
<package pkgid="ca571634fd416c4ef2d862231d4698c680cf2c01ded00457c95e12aee5c6725e" name="chromium" arch="src">
    <version epoch="0" ver="49.0.2623.110" rel="141.2"/>

<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>

</package>
<package pkgid="f71b26629d9a4fc18aeaba7e89996ea45065fc8cc6cbc2824df0f46edeb8efa8" name="chromium" arch="src">
    <version epoch="0" ver="49.0.2623.75" rel="135.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>

</package>
<package pkgid="8842bd2e3cd481681378a4ccff225400f6741aa683c0ac10e453bdd989bb1eb3" name="chromium" arch="src">
    <version epoch="0" ver="49.0.2623.87" rel="138.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>

</package>
<package pkgid="456ff49523762c5151c92205d83904feb3d542db9572c7fba816fac5820bc8fc" name="chromium" arch="src">
    <version epoch="0" ver="50.0.2661.75" rel="144.1"/>

<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>

</package>
<package pkgid="58537eb1935789af243bf57da1ca69c48bf66881b0d1bcf769fc1dcc39ad51de" name="chromium" arch="src">
    <version epoch="0" ver="51.0.2704.103" rel="147.1"/>

<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- _constraints: increase memory. It takes 1.2G to build some .o, and
  with -j4 this results in OOM.</changelog>
<changelog author="astieger@suse.com" date="1461931200">- Update to Chromium 50.0.2661.94 (boo#977830)
  * Security fixes:
  - CVE-2016-1660: Out-of-bounds write in Blink
  - CVE-2016-1661: Memory corruption in cross-process frames
  - CVE-2016-1662: Use-after-free in extensions
  - CVE-2016-1663: Use-after-free in Blink?s V8 bindings
  - CVE-2016-1664: Address bar spoofing
  - CVE-2016-1665: Information leak in V8
  - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1463140800">- Update to Chromium 50.0.2661.102 (boo#979859)
  * Security fixes:
  - CVE-2016-1667: Same origin bypass in DOM
  - CVE-2016-1668: Same origin bypass in Blink V8 bindings
  - CVE-2016-1669: Buffer overflow in V8
  - CVE-2016-1670: Race condition in loader</changelog>
<changelog author="tittiatcoke@gmail.com" date="1464264000">- Update to Chromium 51.0.2704.63 [boo#981886]
  * Security fixes:
  - CVE-2016-1672: Cross-origin bypass in extension bindings
  - CVE-2016-1673: Cross-origin bypass in Blink
  - CVE-2016-1674: Cross-origin bypass in extensions
  - CVE-2016-1675: Cross-origin bypass in Blink
  - CVE-2016-1676: Cross-origin bypass in extension bindings
  - CVE-2016-1677: Type confusion in V8
  - CVE-2016-1678: Heap overflow in V8
  - CVE-2016-1679: Heap use-after-free in V8 bindings
  - CVE-2016-1680: Heap use-after-free in Skia
  - CVE-2016-1681: Heap overflow in PDFium
  - CVE-2016-1682: CSP bypass for ServiceWorker
  - CVE-2016-1683: Out-of-bounds access in libxslt
  - CVE-2016-1684: Integer overflow in libxslt
  - CVE-2016-1685: Out-of-bounds read in PDFium
  - CVE-2016-1686: Out-of-bounds read in PDFium
  - CVE-2016-1687: Information leak in extensions
  - CVE-2016-1688: Out-of-bounds read in V8
  - CVE-2016-1689: Heap buffer overflow in media
  - CVE-2016-1690: Heap use-after-free in Autofill
  - CVE-2016-1691: Heap buffer-overflow in Skia
  - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker
  - CVE-2016-1693: HTTP Download of Software Removal Tool
  - CVE-2016-1694: HPKP pins removed on cache clearance
  - CVE-2016-1695: Various fixes from internal audits, fuzzing
    and other initiatives
- drop chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch
  now upstream</changelog>
<changelog author="astieger@suse.com" date="1464868800">- Update to Chromium 51.0.2704.79 [boo#982719]
  * Security fixes:
  - CVE-2016-1696: Cross-origin bypass in Extension bindings
  - CVE-2016-1697: Cross-origin bypass in Blink
  - CVE-2016-1698: Information leak in Extension bindings
  - CVE-2016-1699: Parameter sanitization failure in DevTools
  - CVE-2016-1700: Use-after-free in Extensions
  - CVE-2016-1701: Use-after-free in Autofill
  - CVE-2016-1702: Out-of-bounds read in Skia
  - CVE-2016-1703: Various fixes from internal audits, fuzzing
    and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1465300800">- Update to Chromium 51.0.2704.84
  * No further changelog</changelog>
<changelog author="astieger@suse.com" date="1466164800">- Update to Chromium 51.0.2704.103
  * Security fixes:
  - CVE-2016-1704: Various fixes from internal audits, fuzzing and
    other initiatives (boo#985397)</changelog>

</package>
<package pkgid="98018eb9cb02799516bcfb115dac7f03e13c549e899f85a5da22e9b4c6d1f138" name="chromium" arch="x86_64">
    <version epoch="0" ver="31.0.1650.57" rel="8.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376222400">- Update to 30.0.1594
  * Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
- Chromium now expects the SUID-helper installed in the same
  directory as chromium. So let's create a symlink to the helper
  in /usr/lib</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>

</package>
<package pkgid="208372615890f3d778911953fd7b9eecb92106da5980ac14aa32bdcc88f97e63" name="chromium" arch="x86_64">
    <version epoch="0" ver="31.0.1650.63" rel="13.7"/>

<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.</changelog>

</package>
<package pkgid="04531aadac5f637964ebf074c514a293c7ab6d960f6bf50c9b067b2338577637" name="chromium" arch="x86_64">
    <version epoch="0" ver="32.0.1700.102" rel="17.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>

</package>
<package pkgid="94bd8072b157c6fbd4d4a7f4a0b9453039699968565d3b53f3ef262e8d17873d" name="chromium" arch="x86_64">
    <version epoch="0" ver="33.0.1750.117" rel="21.2"/>

<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>

</package>
<package pkgid="2d5705b6af07d8b47c9b56e4da34a24d44b68ebfcb56770e5a1c92785e8c6140" name="chromium" arch="x86_64">
    <version epoch="0" ver="33.0.1750.152" rel="25.2"/>

<changelog author="andreas.stieger@gmx.de" date="1377518400">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>

</package>
<package pkgid="5206ce5942e4ea2754c90234890212a107099cff0f036690fc6262dd09cace28" name="chromium" arch="x86_64">
    <version epoch="0" ver="34.0.1847.116" rel="29.3"/>

<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>

</package>
<package pkgid="6738765f24f96744984d01c57c9d8448789b0ea181048c9a3cd106854233b269" name="chromium" arch="x86_64">
    <version epoch="0" ver="34.0.1847.132" rel="33.1"/>

<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>

</package>
<package pkgid="856c7a3f3b5830ff18353124dd069d160570bdea2d4a9044f9230a11b314565f" name="chromium" arch="x86_64">
    <version epoch="0" ver="35.0.1916.114" rel="37.4"/>

<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>

</package>
<package pkgid="fdc33de50d7d75d8c44b6f8b464ba9076bbb26e099a5b349cd3a54b9a34776f3" name="chromium" arch="x86_64">
    <version epoch="0" ver="36.0.1985.125" rel="41.1"/>

<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>

</package>
<package pkgid="9d72407f6b7bfc7d35516f0e05c3611e519a7b1e86c912c6940c2cc559d7d842" name="chromium" arch="x86_64">
    <version epoch="0" ver="37.0.2062.94" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>

</package>
<package pkgid="6abdf675d547f5863bdb0a31eda325e24d1a30645e6506113efdc311f6f73152" name="chromium" arch="x86_64">
    <version epoch="0" ver="38.0.2125.104" rel="54.4"/>

<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>

</package>
<package pkgid="79b755752cfffa91877a8a35f7d4b993f0d84a773218d0c004ea78db10a58ea0" name="chromium" arch="x86_64">
    <version epoch="0" ver="39.0.2171.65" rel="58.4"/>

<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>

</package>
<package pkgid="d5538ff013d7db6f5c70640b276faeafe9222524412e6eeaf077e5c3118bb7a7" name="chromium" arch="x86_64">
    <version epoch="0" ver="40.0.2214.111" rel="68.2"/>

<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>

</package>
<package pkgid="3ff7d11e87f5b5875c238e705f4245b9752816db3f5e438993ee8323698fe6bf" name="chromium" arch="x86_64">
    <version epoch="0" ver="41.0.2272.118" rel="75.1"/>

<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>

</package>
<package pkgid="600491bbde34cb0fac5b6905dce132147d3d99f3ba41d5eba1043d7f528eb898" name="chromium" arch="x86_64">
    <version epoch="0" ver="41.0.2272.76" rel="72.1"/>

<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>

</package>
<package pkgid="1fed45e9f98368f8e2dc678a30cd7a0e7db51b37c06a679e1a7776cbaee62617" name="chromium" arch="x86_64">
    <version epoch="0" ver="42.0.2311.135" rel="81.1"/>

<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>

</package>
<package pkgid="0c3550192b04883620eb2cb5581370aa8acb4e6aa11d3d4ec0d5b0ae15716d32" name="chromium" arch="x86_64">
    <version epoch="0" ver="42.0.2311.90" rel="78.2"/>

<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>

</package>
<package pkgid="5218d2603f052e8dc62ac343b15cc35fe951bd1700e9708a82bf5209421a769c" name="chromium" arch="x86_64">
    <version epoch="0" ver="43.0.2357.130" rel="89.1"/>

<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>

</package>
<package pkgid="94eef784826ade456def783d6d3cf0c1e1eaade7fdedfa5c053d09c0666c9553" name="chromium" arch="x86_64">
    <version epoch="0" ver="43.0.2357.65" rel="84.1"/>

<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>

</package>
<package pkgid="cfc539b2a2126daf6a102069ec34f2b7fc622a069531a73cc3a9ad588257916f" name="chromium" arch="x86_64">
    <version epoch="0" ver="44.0.2403.89" rel="93.1"/>

<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89 [bnc#939077]
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="083df2a5b9f82f7893b3fa5f7daf0438782e3f48ddd7bf40e47db46747f99c28" name="chromium" arch="x86_64">
    <version epoch="0" ver="45.0.2454.101" rel="105.1"/>

<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>

</package>
<package pkgid="a7de5590144dca8cbd5b24ef827d20c18e346bb4be0a83eea5c2042ddb731c7b" name="chromium" arch="x86_64">
    <version epoch="0" ver="45.0.2454.85" rel="98.1"/>

<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>

</package>
<package pkgid="3e8b749e6e0b5bd115735e742507f6e4c5181303a36b6a987f546d2093101a4f" name="chromium" arch="x86_64">
    <version epoch="0" ver="46.0.2490.71" rel="109.1"/>

<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>

</package>
<package pkgid="0c5e18b2876bb923f8c8e97609af292f9d1fdac6c08429dffd9829969d2c18c0" name="chromium" arch="x86_64">
    <version epoch="0" ver="46.0.2490.86" rel="112.1"/>

<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>

</package>
<package pkgid="0b195cfa7beae9fddf49917dc38ee8e1441206ca0e6519d0d7db11d87552074a" name="chromium" arch="x86_64">
    <version epoch="0" ver="47.0.2526.106" rel="119.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>

</package>
<package pkgid="4c9bd302c8857d83128213bb3356bb115b31587e4be8d5e364b4345ee015ac54" name="chromium" arch="x86_64">
    <version epoch="0" ver="47.0.2526.80" rel="116.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>

</package>
<package pkgid="cf78ce92abf22a6c05f1953a9dc0b4831d844e949d331a90abfa33f6e2be9bbc" name="chromium" arch="x86_64">
    <version epoch="0" ver="48.0.2564.109" rel="125.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chomium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="b2bfdca49aa58be377db8fff54f6ab9ed6e0337ae8c3e29b16d1b3003cb9c56a" name="chromium" arch="x86_64">
    <version epoch="0" ver="48.0.2564.116" rel="129.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>

</package>
<package pkgid="1344c51c36985c3e502223fbdad45b9693440d1cc7c172429dc258f83a4d50e5" name="chromium" arch="x86_64">
    <version epoch="0" ver="48.0.2564.116" rel="132.2"/>

<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="7c31a8aef87af484af079ae209b6a56477f5848d7e3b1c572370fff21ea73e26" name="chromium" arch="x86_64">
    <version epoch="0" ver="48.0.2564.82" rel="122.1"/>

<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>

</package>
<package pkgid="a4313cf6020a01ef7faa7e8ad134d198644001dd09d2955a721d94881f45357f" name="chromium" arch="x86_64">
    <version epoch="0" ver="49.0.2623.110" rel="141.2"/>

<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>

</package>
<package pkgid="abb863332d34e994c4868f93f88832348c1d5fb49b2b904eb682e1289937d9a0" name="chromium" arch="x86_64">
    <version epoch="0" ver="49.0.2623.75" rel="135.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>

</package>
<package pkgid="ade45122b27268ab700055be367a64b68e9d99da73600ae6af0b041c6c8a767d" name="chromium" arch="x86_64">
    <version epoch="0" ver="49.0.2623.87" rel="138.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>

</package>
<package pkgid="119e9e259bb5891b5e76dcaef943e6845a2cc07d84de002a982a68b524fc4ee3" name="chromium" arch="x86_64">
    <version epoch="0" ver="50.0.2661.75" rel="144.1"/>

<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>

</package>
<package pkgid="0979ff9a6c64285aae27495abd43adcd8c2af6c0793fae1b7c35bb1dc6861831" name="chromium" arch="x86_64">
    <version epoch="0" ver="51.0.2704.103" rel="147.1"/>

<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- _constraints: increase memory. It takes 1.2G to build some .o, and
  with -j4 this results in OOM.</changelog>
<changelog author="astieger@suse.com" date="1461931200">- Update to Chromium 50.0.2661.94 (boo#977830)
  * Security fixes:
  - CVE-2016-1660: Out-of-bounds write in Blink
  - CVE-2016-1661: Memory corruption in cross-process frames
  - CVE-2016-1662: Use-after-free in extensions
  - CVE-2016-1663: Use-after-free in Blink?s V8 bindings
  - CVE-2016-1664: Address bar spoofing
  - CVE-2016-1665: Information leak in V8
  - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1463140800">- Update to Chromium 50.0.2661.102 (boo#979859)
  * Security fixes:
  - CVE-2016-1667: Same origin bypass in DOM
  - CVE-2016-1668: Same origin bypass in Blink V8 bindings
  - CVE-2016-1669: Buffer overflow in V8
  - CVE-2016-1670: Race condition in loader</changelog>
<changelog author="tittiatcoke@gmail.com" date="1464264000">- Update to Chromium 51.0.2704.63 [boo#981886]
  * Security fixes:
  - CVE-2016-1672: Cross-origin bypass in extension bindings
  - CVE-2016-1673: Cross-origin bypass in Blink
  - CVE-2016-1674: Cross-origin bypass in extensions
  - CVE-2016-1675: Cross-origin bypass in Blink
  - CVE-2016-1676: Cross-origin bypass in extension bindings
  - CVE-2016-1677: Type confusion in V8
  - CVE-2016-1678: Heap overflow in V8
  - CVE-2016-1679: Heap use-after-free in V8 bindings
  - CVE-2016-1680: Heap use-after-free in Skia
  - CVE-2016-1681: Heap overflow in PDFium
  - CVE-2016-1682: CSP bypass for ServiceWorker
  - CVE-2016-1683: Out-of-bounds access in libxslt
  - CVE-2016-1684: Integer overflow in libxslt
  - CVE-2016-1685: Out-of-bounds read in PDFium
  - CVE-2016-1686: Out-of-bounds read in PDFium
  - CVE-2016-1687: Information leak in extensions
  - CVE-2016-1688: Out-of-bounds read in V8
  - CVE-2016-1689: Heap buffer overflow in media
  - CVE-2016-1690: Heap use-after-free in Autofill
  - CVE-2016-1691: Heap buffer-overflow in Skia
  - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker
  - CVE-2016-1693: HTTP Download of Software Removal Tool
  - CVE-2016-1694: HPKP pins removed on cache clearance
  - CVE-2016-1695: Various fixes from internal audits, fuzzing
    and other initiatives
- drop chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch
  now upstream</changelog>
<changelog author="astieger@suse.com" date="1464868800">- Update to Chromium 51.0.2704.79 [boo#982719]
  * Security fixes:
  - CVE-2016-1696: Cross-origin bypass in Extension bindings
  - CVE-2016-1697: Cross-origin bypass in Blink
  - CVE-2016-1698: Information leak in Extension bindings
  - CVE-2016-1699: Parameter sanitization failure in DevTools
  - CVE-2016-1700: Use-after-free in Extensions
  - CVE-2016-1701: Use-after-free in Autofill
  - CVE-2016-1702: Out-of-bounds read in Skia
  - CVE-2016-1703: Various fixes from internal audits, fuzzing
    and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1465300800">- Update to Chromium 51.0.2704.84
  * No further changelog</changelog>
<changelog author="astieger@suse.com" date="1466164800">- Update to Chromium 51.0.2704.103
  * Security fixes:
  - CVE-2016-1704: Various fixes from internal audits, fuzzing and
    other initiatives (boo#985397)</changelog>

</package>
<package pkgid="cfe8a7f271f50ab1a98056d919ef0534c76ed84a26d3f22896fa20141da83a88" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="31.0.1650.57" rel="8.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376222400">- Update to 30.0.1594
  * Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
- Chromium now expects the SUID-helper installed in the same
  directory as chromium. So let's create a symlink to the helper
  in /usr/lib</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>

</package>
<package pkgid="9758c80191651c7807f9ad57a1bb5cfc4b068c8cee573e58d4768182dab48917" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="31.0.1650.63" rel="13.7"/>

<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.</changelog>

</package>
<package pkgid="ed1e8eeae11e2ecea9234580df00a15d33a01e93337aad220d86bc74050c334d" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="32.0.1700.102" rel="17.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>

</package>
<package pkgid="1b47b7d317fe328ff65b880773b6184561a5d271e1f308d29060add9131ff61e" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="33.0.1750.117" rel="21.2"/>

<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>

</package>
<package pkgid="1544819ca08fa458187d69a8a24f91b1f7d14140bc0dae938d6ea3e5b228bd95" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="33.0.1750.152" rel="25.2"/>

<changelog author="andreas.stieger@gmx.de" date="1377518400">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>

</package>
<package pkgid="5c9731d771f8b915aa33af46548a98daf145441b22d0a2bd577818de700a691d" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="34.0.1847.116" rel="29.3"/>

<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>

</package>
<package pkgid="0ea8be6589e20cfc629c501b345fbefc44b0fdd769c0941266485b506c56771f" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="34.0.1847.132" rel="33.1"/>

<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>

</package>
<package pkgid="8d3ccf37db3b098edbec030f78297a8de733911ebc58a73107efef4ec3d6c3b7" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="35.0.1916.114" rel="37.4"/>

<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>

</package>
<package pkgid="165f4e798c65f1935c0879aeef5fd25149af8c84b8aa6718400de92679cc94ba" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="36.0.1985.125" rel="41.1"/>

<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>

</package>
<package pkgid="f01ef4cc0107cffabae9e2e6ee4ce619531eff25c1b64912887a5afe2e5296ce" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="37.0.2062.94" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>

</package>
<package pkgid="c6dc19dc3c97a6018e38cc9eef38db455f69635c87ed002adf13b781daa78c23" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="38.0.2125.104" rel="54.4"/>

<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>

</package>
<package pkgid="0c86639fbb64843f8dc05228bd0b5eb69facd918ca6a739d3e9d8035d7e75919" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="39.0.2171.65" rel="58.4"/>

<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>

</package>
<package pkgid="bf2b79b8cdb1dd9678625f454ed575204b0a4c414e06c1f7f5c694a03efc6365" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="40.0.2214.111" rel="68.2"/>

<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>

</package>
<package pkgid="76058d9076f48eb0fb5f307941d393295e00bbc30dac0ecdf6a64a8129f06578" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="41.0.2272.118" rel="75.1"/>

<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>

</package>
<package pkgid="3b2374ad30578b9413cae62e07e966c3922c8dfbc3facdfdb578117e002a9b99" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="41.0.2272.76" rel="72.1"/>

<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>

</package>
<package pkgid="9dccb20ced475768a58793aedb13eafe116331c5ae472c9695cb3d9a8e999712" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="42.0.2311.135" rel="81.1"/>

<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>

</package>
<package pkgid="ee91a81a66c203fd82a769e88caebe33e043394f7603ed6ea149f2ef930dbd19" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="42.0.2311.90" rel="78.2"/>

<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>

</package>
<package pkgid="df2b06c34a215f5d4960ebde73b4f2ca60350da6fbd5bbf3ceb8d2dd0c78070c" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="43.0.2357.130" rel="89.1"/>

<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>

</package>
<package pkgid="13265aecb715cd9e789315c737af7116e6a8886443bec560624fbc2f8f472dd6" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="43.0.2357.65" rel="84.1"/>

<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>

</package>
<package pkgid="22bc4527c6cba4c8556c3aa90f2a0cc98ad8434c12e197476b63ed33b41b8186" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="44.0.2403.89" rel="93.1"/>

<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89 [bnc#939077]
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="0294a0e1f09b255effd4f956509e8b141f7eceae917c6fec8632f2284f87d503" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="45.0.2454.101" rel="105.1"/>

<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>

</package>
<package pkgid="1967c566a4b0c0cc6d5cabfcb0378cc55ba7028ee9cedd7e883787a3e0f681f1" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="45.0.2454.85" rel="98.1"/>

<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>

</package>
<package pkgid="f2c7ee9f56ff2b0bd4a442f8fa719d6c611c567a8043d3ded76f8d42694d6b96" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="46.0.2490.71" rel="109.1"/>

<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>

</package>
<package pkgid="5be413e37422d1abe7a99a5442ad20fbccbc143992179fdd5c73d867932df792" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="46.0.2490.86" rel="112.1"/>

<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>

</package>
<package pkgid="8e3b5f6fcbe12b595eefbc6bc2848fa6b5c474f0822d51b3f15496d0cf38cae9" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="47.0.2526.106" rel="119.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>

</package>
<package pkgid="9238c2c7253438314f56f0d1c79056a358a1dad586c43f3865be3bc3dd99383d" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="47.0.2526.80" rel="116.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>

</package>
<package pkgid="1756787fbcc49377b9eaeff27ccc63b41c1acc9d1ccdfa321406531793524309" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="48.0.2564.109" rel="125.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chomium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="5570ec272031ade787a7131efb7dba42264ac499943c0f8b4be2b64de4c88353" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="48.0.2564.116" rel="129.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>

</package>
<package pkgid="cf6726236f17ac4a2956b65abbeccd7cd86947858092b70d396ada71097f7831" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="48.0.2564.116" rel="132.2"/>

<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="5c940341100034a4e77e67ac7570d32e10c48abe0a359178de980a6afff26e82" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="48.0.2564.82" rel="122.1"/>

<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>

</package>
<package pkgid="d3d05ab5de5bf194f93efb2838bda9b5a01edcc08fbe97fb96425deed0bd2560" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="49.0.2623.110" rel="141.2"/>

<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>

</package>
<package pkgid="5ed6d4f725635c59ffc3baf84e3de7f2069e2ea1a418dc6b46e5c26f141f572d" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="49.0.2623.75" rel="135.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>

</package>
<package pkgid="6e01a14f9f5f0cd3147ced5b43f38e28a765261ba505a9156b40786cf63b15b6" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="49.0.2623.87" rel="138.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>

</package>
<package pkgid="26ff2870437f288b55df4fb2c1289067ae7cc4d0cf6f1b0c52033a371cb8ac3b" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="50.0.2661.75" rel="144.1"/>

<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>

</package>
<package pkgid="8b3985d682382fcd77ffe60e2ec4c78049108aecb4f0dc776134ca02a8398607" name="chromium-desktop-gnome" arch="i586">
    <version epoch="0" ver="51.0.2704.103" rel="147.1"/>

<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- _constraints: increase memory. It takes 1.2G to build some .o, and
  with -j4 this results in OOM.</changelog>
<changelog author="astieger@suse.com" date="1461931200">- Update to Chromium 50.0.2661.94 (boo#977830)
  * Security fixes:
  - CVE-2016-1660: Out-of-bounds write in Blink
  - CVE-2016-1661: Memory corruption in cross-process frames
  - CVE-2016-1662: Use-after-free in extensions
  - CVE-2016-1663: Use-after-free in Blink?s V8 bindings
  - CVE-2016-1664: Address bar spoofing
  - CVE-2016-1665: Information leak in V8
  - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1463140800">- Update to Chromium 50.0.2661.102 (boo#979859)
  * Security fixes:
  - CVE-2016-1667: Same origin bypass in DOM
  - CVE-2016-1668: Same origin bypass in Blink V8 bindings
  - CVE-2016-1669: Buffer overflow in V8
  - CVE-2016-1670: Race condition in loader</changelog>
<changelog author="tittiatcoke@gmail.com" date="1464264000">- Update to Chromium 51.0.2704.63 [boo#981886]
  * Security fixes:
  - CVE-2016-1672: Cross-origin bypass in extension bindings
  - CVE-2016-1673: Cross-origin bypass in Blink
  - CVE-2016-1674: Cross-origin bypass in extensions
  - CVE-2016-1675: Cross-origin bypass in Blink
  - CVE-2016-1676: Cross-origin bypass in extension bindings
  - CVE-2016-1677: Type confusion in V8
  - CVE-2016-1678: Heap overflow in V8
  - CVE-2016-1679: Heap use-after-free in V8 bindings
  - CVE-2016-1680: Heap use-after-free in Skia
  - CVE-2016-1681: Heap overflow in PDFium
  - CVE-2016-1682: CSP bypass for ServiceWorker
  - CVE-2016-1683: Out-of-bounds access in libxslt
  - CVE-2016-1684: Integer overflow in libxslt
  - CVE-2016-1685: Out-of-bounds read in PDFium
  - CVE-2016-1686: Out-of-bounds read in PDFium
  - CVE-2016-1687: Information leak in extensions
  - CVE-2016-1688: Out-of-bounds read in V8
  - CVE-2016-1689: Heap buffer overflow in media
  - CVE-2016-1690: Heap use-after-free in Autofill
  - CVE-2016-1691: Heap buffer-overflow in Skia
  - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker
  - CVE-2016-1693: HTTP Download of Software Removal Tool
  - CVE-2016-1694: HPKP pins removed on cache clearance
  - CVE-2016-1695: Various fixes from internal audits, fuzzing
    and other initiatives
- drop chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch
  now upstream</changelog>
<changelog author="astieger@suse.com" date="1464868800">- Update to Chromium 51.0.2704.79 [boo#982719]
  * Security fixes:
  - CVE-2016-1696: Cross-origin bypass in Extension bindings
  - CVE-2016-1697: Cross-origin bypass in Blink
  - CVE-2016-1698: Information leak in Extension bindings
  - CVE-2016-1699: Parameter sanitization failure in DevTools
  - CVE-2016-1700: Use-after-free in Extensions
  - CVE-2016-1701: Use-after-free in Autofill
  - CVE-2016-1702: Out-of-bounds read in Skia
  - CVE-2016-1703: Various fixes from internal audits, fuzzing
    and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1465300800">- Update to Chromium 51.0.2704.84
  * No further changelog</changelog>
<changelog author="astieger@suse.com" date="1466164800">- Update to Chromium 51.0.2704.103
  * Security fixes:
  - CVE-2016-1704: Various fixes from internal audits, fuzzing and
    other initiatives (boo#985397)</changelog>

</package>
<package pkgid="bd1a0edb6c4ed0d8f55f20caa8ce0122df09cb923d386d1d27d7eaa7d0703294" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="31.0.1650.57" rel="8.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376222400">- Update to 30.0.1594
  * Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
- Chromium now expects the SUID-helper installed in the same
  directory as chromium. So let's create a symlink to the helper
  in /usr/lib</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>

</package>
<package pkgid="4fb35a858cd4425cb47cb85a04b34e6363330fac88431ff42ee5c31a46bad016" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="31.0.1650.63" rel="13.7"/>

<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.</changelog>

</package>
<package pkgid="e3c633d1a16328bed187edcf38f8c11020155dcb284c504b18c5b20f003687a9" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="32.0.1700.102" rel="17.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>

</package>
<package pkgid="e019e4021a9abd2e13552cdac534d91a3e8995b9c643063209f2109351380be1" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="33.0.1750.117" rel="21.2"/>

<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>

</package>
<package pkgid="4151b74aac2eaca72763b58c8212fc05e7d3805d096c44438a262e91df737d39" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="33.0.1750.152" rel="25.2"/>

<changelog author="andreas.stieger@gmx.de" date="1377518400">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>

</package>
<package pkgid="44f2a94f8ce349b85d1e9a48e3699e779dd17565d635d06501a6812a255476d6" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="34.0.1847.116" rel="29.3"/>

<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>

</package>
<package pkgid="fef717e9e3ad5e0ce68848f438752212d8ace9f4b5ddc87209ecadac3e7aea5c" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="34.0.1847.132" rel="33.1"/>

<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>

</package>
<package pkgid="82917d0075750e298f6fc8fd14abd9fe1920e1e9a040a5621be2212e237d1fb1" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="35.0.1916.114" rel="37.4"/>

<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>

</package>
<package pkgid="8814bf8cb362d41adf18290e8a7e67f687d7787c911a977497e1e678e7ab59e7" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="36.0.1985.125" rel="41.1"/>

<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>

</package>
<package pkgid="0084577d96141d7c7ebfe2dafdfe0a9377bca8e75f4f070c2828f56333c59a43" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="37.0.2062.94" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>

</package>
<package pkgid="05668b33a31b13c76cb125b915009e44cd561e6d2762590a04a736bfb649a8b6" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="38.0.2125.104" rel="54.4"/>

<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>

</package>
<package pkgid="5629260bead2340d9987ce4f6099fc61d824e5b42608b5c6d8ad52d6cee0cebb" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="39.0.2171.65" rel="58.4"/>

<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>

</package>
<package pkgid="42cd552a4f85153626a62bedc4a4040ae468c77b85c2caa19b3861a396d301e8" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="40.0.2214.111" rel="68.2"/>

<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>

</package>
<package pkgid="846169102d7361d8e50ead3506f9ebc98552d56a0b3e58ab78cf7f7d073d1663" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="41.0.2272.118" rel="75.1"/>

<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>

</package>
<package pkgid="385b788754eebc07337fb8cfe8379af26350541a71c88e02c941f6e0a97529ec" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="41.0.2272.76" rel="72.1"/>

<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>

</package>
<package pkgid="00dec79862824eeb17ea67df74ec70bf03812ae42795863c475a05afb4c85c9a" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="42.0.2311.135" rel="81.1"/>

<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>

</package>
<package pkgid="323f50cf997bb0941e45a20870034aa23b63e4848139933d03946a859fe78de2" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="42.0.2311.90" rel="78.2"/>

<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>

</package>
<package pkgid="c01f816ca872c3ee4ce08542772b673259fa3e4ec5a1ae78940ded327f91dc4e" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="43.0.2357.130" rel="89.1"/>

<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>

</package>
<package pkgid="00b989a959f6a15a049fc30b6baa65c14290682683e167774bd6414fe9370bc9" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="43.0.2357.65" rel="84.1"/>

<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>

</package>
<package pkgid="e0274e90226dd389d2783cb6449b339116cd2ad0e0cc35feaf13f571151fa965" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="44.0.2403.89" rel="93.1"/>

<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89 [bnc#939077]
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="e909cabe40fc872f37c18f11bb094e6d30bcbd2dacf208e31bf9aff3d8a4d6e2" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="45.0.2454.101" rel="105.1"/>

<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>

</package>
<package pkgid="0e12e79fc2cb3f516ad4cd9476f9546e73f7dfb465fb2aed189457e34f1f8b04" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="45.0.2454.85" rel="98.1"/>

<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>

</package>
<package pkgid="e44f96dea4916420d2f39c571e777695182541d7761f2c4959d4bd9284576a51" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="46.0.2490.71" rel="109.1"/>

<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>

</package>
<package pkgid="5041375c63c305283700cd0885470b3e92f99fbf847f4b321621a2c539653a14" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="46.0.2490.86" rel="112.1"/>

<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>

</package>
<package pkgid="729aa8f4e7df408a8d4e0675665bf4f9830966e5353595e1268c9ecf1dadbfcf" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="47.0.2526.106" rel="119.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>

</package>
<package pkgid="599d036ebca46eb395561649bc128d389932810d3e7500a12baf8421dcc821fe" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="47.0.2526.80" rel="116.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>

</package>
<package pkgid="fb729e16ae77f2cd6b02ce415c8fbfae42d44292342329a6ddf5a9a33436a141" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="48.0.2564.109" rel="125.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chomium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="a9f4ba19dd3cc52b79dee2bc29f9d382e07438611c4cc4dae4578b40433c9898" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="48.0.2564.116" rel="129.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>

</package>
<package pkgid="9ca6f6338b69083eac50ee4809edf1d7954f1d0dcea2b7f9a1904b537c98e4b4" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="48.0.2564.116" rel="132.2"/>

<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="ac26f07eb4bbe66d52fc0bfcd0d5d41ea27e269bb3ac1d28ad60216bb4f1f843" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="48.0.2564.82" rel="122.1"/>

<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>

</package>
<package pkgid="8f6db530c31bdc9f731d6dbb0a9c52d7bd28d460d47e156d272cafa58ade2267" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="49.0.2623.110" rel="141.2"/>

<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>

</package>
<package pkgid="d88482aa605f05dd6570142f016bb88d2a4d1ad422610066bb1cebd0ca12bab4" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="49.0.2623.75" rel="135.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>

</package>
<package pkgid="8ddfbeaae540784f47adbb52c6fdd1ca55cc2712fce3ccc343312188220a129d" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="49.0.2623.87" rel="138.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>

</package>
<package pkgid="7b0e8027bf1cd4d419f0cf99ef69b7c81f6526916abca6f25ed77cd9ef1024f6" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="50.0.2661.75" rel="144.1"/>

<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>

</package>
<package pkgid="a37a0d51c20284a25342409b0d16f10ddb0fde7c057d0fe23850104b964b5205" name="chromium-desktop-gnome" arch="x86_64">
    <version epoch="0" ver="51.0.2704.103" rel="147.1"/>

<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- _constraints: increase memory. It takes 1.2G to build some .o, and
  with -j4 this results in OOM.</changelog>
<changelog author="astieger@suse.com" date="1461931200">- Update to Chromium 50.0.2661.94 (boo#977830)
  * Security fixes:
  - CVE-2016-1660: Out-of-bounds write in Blink
  - CVE-2016-1661: Memory corruption in cross-process frames
  - CVE-2016-1662: Use-after-free in extensions
  - CVE-2016-1663: Use-after-free in Blink?s V8 bindings
  - CVE-2016-1664: Address bar spoofing
  - CVE-2016-1665: Information leak in V8
  - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1463140800">- Update to Chromium 50.0.2661.102 (boo#979859)
  * Security fixes:
  - CVE-2016-1667: Same origin bypass in DOM
  - CVE-2016-1668: Same origin bypass in Blink V8 bindings
  - CVE-2016-1669: Buffer overflow in V8
  - CVE-2016-1670: Race condition in loader</changelog>
<changelog author="tittiatcoke@gmail.com" date="1464264000">- Update to Chromium 51.0.2704.63 [boo#981886]
  * Security fixes:
  - CVE-2016-1672: Cross-origin bypass in extension bindings
  - CVE-2016-1673: Cross-origin bypass in Blink
  - CVE-2016-1674: Cross-origin bypass in extensions
  - CVE-2016-1675: Cross-origin bypass in Blink
  - CVE-2016-1676: Cross-origin bypass in extension bindings
  - CVE-2016-1677: Type confusion in V8
  - CVE-2016-1678: Heap overflow in V8
  - CVE-2016-1679: Heap use-after-free in V8 bindings
  - CVE-2016-1680: Heap use-after-free in Skia
  - CVE-2016-1681: Heap overflow in PDFium
  - CVE-2016-1682: CSP bypass for ServiceWorker
  - CVE-2016-1683: Out-of-bounds access in libxslt
  - CVE-2016-1684: Integer overflow in libxslt
  - CVE-2016-1685: Out-of-bounds read in PDFium
  - CVE-2016-1686: Out-of-bounds read in PDFium
  - CVE-2016-1687: Information leak in extensions
  - CVE-2016-1688: Out-of-bounds read in V8
  - CVE-2016-1689: Heap buffer overflow in media
  - CVE-2016-1690: Heap use-after-free in Autofill
  - CVE-2016-1691: Heap buffer-overflow in Skia
  - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker
  - CVE-2016-1693: HTTP Download of Software Removal Tool
  - CVE-2016-1694: HPKP pins removed on cache clearance
  - CVE-2016-1695: Various fixes from internal audits, fuzzing
    and other initiatives
- drop chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch
  now upstream</changelog>
<changelog author="astieger@suse.com" date="1464868800">- Update to Chromium 51.0.2704.79 [boo#982719]
  * Security fixes:
  - CVE-2016-1696: Cross-origin bypass in Extension bindings
  - CVE-2016-1697: Cross-origin bypass in Blink
  - CVE-2016-1698: Information leak in Extension bindings
  - CVE-2016-1699: Parameter sanitization failure in DevTools
  - CVE-2016-1700: Use-after-free in Extensions
  - CVE-2016-1701: Use-after-free in Autofill
  - CVE-2016-1702: Out-of-bounds read in Skia
  - CVE-2016-1703: Various fixes from internal audits, fuzzing
    and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1465300800">- Update to Chromium 51.0.2704.84
  * No further changelog</changelog>
<changelog author="astieger@suse.com" date="1466164800">- Update to Chromium 51.0.2704.103
  * Security fixes:
  - CVE-2016-1704: Various fixes from internal audits, fuzzing and
    other initiatives (boo#985397)</changelog>

</package>
<package pkgid="0110618783fc5a388e5abc3bfa09e46f7374dee4b455dfd75f594ce4f102b803" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="31.0.1650.57" rel="8.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376222400">- Update to 30.0.1594
  * Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
- Chromium now expects the SUID-helper installed in the same
  directory as chromium. So let's create a symlink to the helper
  in /usr/lib</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>

</package>
<package pkgid="d54ca88034b85ae954b647d19091784407e97a9863bfb28206ad0d7263c0d7a2" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="31.0.1650.63" rel="13.7"/>

<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.</changelog>

</package>
<package pkgid="c335c45c61de851a2593e24a8917e6636eb39f68e1c1a6d797d6ccd941b92d0c" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="32.0.1700.102" rel="17.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>

</package>
<package pkgid="5f61ed9540768cefc0a381a3318982f7ddcfa44c13984fc86498561701113cb5" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="33.0.1750.117" rel="21.2"/>

<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>

</package>
<package pkgid="d1713199f1174ad7984a991517568ca8691a055d55be1d288ac5b1b6cf767dc0" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="33.0.1750.152" rel="25.2"/>

<changelog author="andreas.stieger@gmx.de" date="1377518400">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>

</package>
<package pkgid="2c1b7569f12c63426b044588fd4a4754b4cdc01e8cb73b939e5d79e4612f07aa" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="34.0.1847.116" rel="29.3"/>

<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>

</package>
<package pkgid="83901be72d3a6771803bd46cf30858a179f338222cb6a46419af4d6eb06ae4d6" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="34.0.1847.132" rel="33.1"/>

<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>

</package>
<package pkgid="58d3c887b76f79b4cf41933b32a9e058ff456ea0fa7783ec3ea6830b88b85704" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="35.0.1916.114" rel="37.4"/>

<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>

</package>
<package pkgid="bbaf18a81280d7ce1243b92f3db5101f51eb811c9a95269b26d58d156cb32a6c" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="36.0.1985.125" rel="41.1"/>

<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>

</package>
<package pkgid="e30def164dc3e0a501f709d697c4313571efbf54b40b1ee5e50c30170cebdd2a" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="37.0.2062.94" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>

</package>
<package pkgid="3959930f2d2a15d092618df5e08a0e3cedf84a5b325d1a34a4a4d15a756be20a" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="38.0.2125.104" rel="54.4"/>

<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>

</package>
<package pkgid="caf7c37708ac15188d7e8a75cb24c4356a2bffa2f89b0298747f27ea89166239" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="39.0.2171.65" rel="58.4"/>

<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>

</package>
<package pkgid="dc754f95a8636014b9d9a0d1362f02deba929b935ebef70084137f8010ebdc25" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="40.0.2214.111" rel="68.2"/>

<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>

</package>
<package pkgid="2922d7b1d3214961ebda07249d7a0c02d1ff3472c4e1f7c39198d54b7ddab69d" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="41.0.2272.118" rel="75.1"/>

<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>

</package>
<package pkgid="2edfc6855d1a51069f6155b814271d70ca45b897ec151c898576910e8e4971e3" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="41.0.2272.76" rel="72.1"/>

<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>

</package>
<package pkgid="74715f60fa1d7062449320a704ce3a4792c08f3dedcfd56cc12e84f3f654a215" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="42.0.2311.135" rel="81.1"/>

<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>

</package>
<package pkgid="67908545b7c1db4a81fd0b257343dcff6e55dfe791b73081cce5e0f3c15a0be5" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="42.0.2311.90" rel="78.2"/>

<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>

</package>
<package pkgid="4005d587f24fde4b5027a3ef9682e9760da7e84c7d1307559b1b578e2caaa8e3" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="43.0.2357.130" rel="89.1"/>

<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>

</package>
<package pkgid="86e03763540be9534675e07640113cf622f33b1c28d13763dc3e20675fe79c2e" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="43.0.2357.65" rel="84.1"/>

<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>

</package>
<package pkgid="386a672479aa6a543bd4489d31b40ec7cc69e5da9183367dfbae52294f6bc27b" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="44.0.2403.89" rel="93.1"/>

<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89 [bnc#939077]
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="1de3ebdaec303102f1a7dc53d26ac474c4e6ebdc099716f01a8d88bff3019a8d" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="45.0.2454.101" rel="105.1"/>

<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>

</package>
<package pkgid="b84a22c9c7d9fa9e8ecc06e1b9f709d6380318ea597b1e84740e94b70476fb27" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="45.0.2454.85" rel="98.1"/>

<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>

</package>
<package pkgid="f8c9c4955d1d299ea7b45994daf81dfe8430b275c335c6e948306a514e914080" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="46.0.2490.71" rel="109.1"/>

<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>

</package>
<package pkgid="27618ef7539c0e35e73ef3b09356a015b733a2c885c31197eb3c5bd612048c96" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="46.0.2490.86" rel="112.1"/>

<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>

</package>
<package pkgid="9c73f726d6044598d44f832b853e44ccc97fd5c1180891e603569436d24029d0" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="47.0.2526.106" rel="119.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>

</package>
<package pkgid="1dd9738b82724faf6f15a812165d61b6e07fca4a246df330ef4dc9c4d00b4ae5" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="47.0.2526.80" rel="116.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>

</package>
<package pkgid="f61beb7bbd88011e0185a1f23b4180461961c4554986e946dda84a085e153d2b" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="48.0.2564.109" rel="125.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chomium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="652c32202aae9c7bfcd51d3555fe7ad637ad0ef01e7235fa1d44449b6e7b1dfd" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="48.0.2564.116" rel="129.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>

</package>
<package pkgid="9321386384f187bc4c3841dc1fc391cd1e213584716383ac418bb56f9474564a" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="48.0.2564.116" rel="132.2"/>

<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="4e465ffd1e1b5d602a7e09d264891d76ee16a1bbb44832aebdd5be816c1c1084" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="48.0.2564.82" rel="122.1"/>

<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>

</package>
<package pkgid="fe9796b824da875e145bd1e8eda62f83cae60f8098d02c493fe5d85aa056384d" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="49.0.2623.110" rel="141.2"/>

<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>

</package>
<package pkgid="f399e28a181950c5b88209815e353a8b12d844cf9e1978febd32cc031d195d64" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="49.0.2623.75" rel="135.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>

</package>
<package pkgid="22b29e293e8ba3ee1dfea95c317a0057969105eb9f53a6fcd9c0f64342cd369b" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="49.0.2623.87" rel="138.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>

</package>
<package pkgid="f3bbc6fa5b4f959ebabbf5bc35da521acfffa34f0fe173da6661e669ea9fc594" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="50.0.2661.75" rel="144.1"/>

<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>

</package>
<package pkgid="843bde160974886369bf763b26aa01df3495fb973341ea789d1e7c0453506949" name="chromium-desktop-kde" arch="i586">
    <version epoch="0" ver="51.0.2704.103" rel="147.1"/>

<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- _constraints: increase memory. It takes 1.2G to build some .o, and
  with -j4 this results in OOM.</changelog>
<changelog author="astieger@suse.com" date="1461931200">- Update to Chromium 50.0.2661.94 (boo#977830)
  * Security fixes:
  - CVE-2016-1660: Out-of-bounds write in Blink
  - CVE-2016-1661: Memory corruption in cross-process frames
  - CVE-2016-1662: Use-after-free in extensions
  - CVE-2016-1663: Use-after-free in Blink?s V8 bindings
  - CVE-2016-1664: Address bar spoofing
  - CVE-2016-1665: Information leak in V8
  - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1463140800">- Update to Chromium 50.0.2661.102 (boo#979859)
  * Security fixes:
  - CVE-2016-1667: Same origin bypass in DOM
  - CVE-2016-1668: Same origin bypass in Blink V8 bindings
  - CVE-2016-1669: Buffer overflow in V8
  - CVE-2016-1670: Race condition in loader</changelog>
<changelog author="tittiatcoke@gmail.com" date="1464264000">- Update to Chromium 51.0.2704.63 [boo#981886]
  * Security fixes:
  - CVE-2016-1672: Cross-origin bypass in extension bindings
  - CVE-2016-1673: Cross-origin bypass in Blink
  - CVE-2016-1674: Cross-origin bypass in extensions
  - CVE-2016-1675: Cross-origin bypass in Blink
  - CVE-2016-1676: Cross-origin bypass in extension bindings
  - CVE-2016-1677: Type confusion in V8
  - CVE-2016-1678: Heap overflow in V8
  - CVE-2016-1679: Heap use-after-free in V8 bindings
  - CVE-2016-1680: Heap use-after-free in Skia
  - CVE-2016-1681: Heap overflow in PDFium
  - CVE-2016-1682: CSP bypass for ServiceWorker
  - CVE-2016-1683: Out-of-bounds access in libxslt
  - CVE-2016-1684: Integer overflow in libxslt
  - CVE-2016-1685: Out-of-bounds read in PDFium
  - CVE-2016-1686: Out-of-bounds read in PDFium
  - CVE-2016-1687: Information leak in extensions
  - CVE-2016-1688: Out-of-bounds read in V8
  - CVE-2016-1689: Heap buffer overflow in media
  - CVE-2016-1690: Heap use-after-free in Autofill
  - CVE-2016-1691: Heap buffer-overflow in Skia
  - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker
  - CVE-2016-1693: HTTP Download of Software Removal Tool
  - CVE-2016-1694: HPKP pins removed on cache clearance
  - CVE-2016-1695: Various fixes from internal audits, fuzzing
    and other initiatives
- drop chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch
  now upstream</changelog>
<changelog author="astieger@suse.com" date="1464868800">- Update to Chromium 51.0.2704.79 [boo#982719]
  * Security fixes:
  - CVE-2016-1696: Cross-origin bypass in Extension bindings
  - CVE-2016-1697: Cross-origin bypass in Blink
  - CVE-2016-1698: Information leak in Extension bindings
  - CVE-2016-1699: Parameter sanitization failure in DevTools
  - CVE-2016-1700: Use-after-free in Extensions
  - CVE-2016-1701: Use-after-free in Autofill
  - CVE-2016-1702: Out-of-bounds read in Skia
  - CVE-2016-1703: Various fixes from internal audits, fuzzing
    and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1465300800">- Update to Chromium 51.0.2704.84
  * No further changelog</changelog>
<changelog author="astieger@suse.com" date="1466164800">- Update to Chromium 51.0.2704.103
  * Security fixes:
  - CVE-2016-1704: Various fixes from internal audits, fuzzing and
    other initiatives (boo#985397)</changelog>

</package>
<package pkgid="c9276682d68e09774e7b254871e5aa11d384263086e11d4f544c2a0ccdbf80cd" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="31.0.1650.57" rel="8.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376222400">- Update to 30.0.1594
  * Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
- Chromium now expects the SUID-helper installed in the same
  directory as chromium. So let's create a symlink to the helper
  in /usr/lib</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>

</package>
<package pkgid="9d244c46daf1addc2c4a1ccb7d881766c468de94c2500fa650640ad3f895ad3d" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="31.0.1650.63" rel="13.7"/>

<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.</changelog>

</package>
<package pkgid="a257bbf0ad9c6ab97617215f2f2f43a4a64632dbbd7ac8784a96ea9a99d6f585" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="32.0.1700.102" rel="17.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>

</package>
<package pkgid="5b374f1901ad2113b8c372e791787f90ce2ac11196099240f0d6d9082e360255" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="33.0.1750.117" rel="21.2"/>

<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>

</package>
<package pkgid="614ea99d3fcc14e4451e389cfb3b14cb66c0c6f671733e2a0df0c2d9e8fa9eda" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="33.0.1750.152" rel="25.2"/>

<changelog author="andreas.stieger@gmx.de" date="1377518400">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>

</package>
<package pkgid="84e5ce0f98f0a4ec2fa21c8a289262f6c6aff319dc9802a80829954c9f6942e1" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="34.0.1847.116" rel="29.3"/>

<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>

</package>
<package pkgid="307e39047324dcaa1908fd25d46b602cb882eb96959b312beaa1d33826d8c756" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="34.0.1847.132" rel="33.1"/>

<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>

</package>
<package pkgid="a58fa066404a55dca2ff7f64dac52b123eb0614a8727c60a9432a488dfd116fd" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="35.0.1916.114" rel="37.4"/>

<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>

</package>
<package pkgid="a048867fa328c35874f40d36eb2e388b35cd73f779cbf4fe47ea6edac3c90b69" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="36.0.1985.125" rel="41.1"/>

<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>

</package>
<package pkgid="c25a7db07217624f9496276ea7986f8f57c0a4b1f239c9bfc02f3d7922a958c8" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="37.0.2062.94" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>

</package>
<package pkgid="42c8ba739439ae1fe925098f1f48c45802c39485e9c2aa48062f709057042e92" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="38.0.2125.104" rel="54.4"/>

<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>

</package>
<package pkgid="e926f6091bdc879028f22b48bde996a3622c32e0a6c28291693bbb62b7e4d269" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="39.0.2171.65" rel="58.4"/>

<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>

</package>
<package pkgid="98732a3f5c5dd0d35805e5c408084dcdc5f5b149ab89213a5917680322a4db02" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="40.0.2214.111" rel="68.2"/>

<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>

</package>
<package pkgid="47f9228f4b8c964c8a9ff6b99205c852e170dc78996ea2c63b26001db0ab1550" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="41.0.2272.118" rel="75.1"/>

<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>

</package>
<package pkgid="a2b576ccfd1d4fde560ce5b06b35ffe1178bb78b46ab9050962c01bf1ee6c14f" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="41.0.2272.76" rel="72.1"/>

<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>

</package>
<package pkgid="e5cc2c946325f75068893790cfb3bc7676bfca913d8769f4b7e2b3dec09e58fa" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="42.0.2311.135" rel="81.1"/>

<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>

</package>
<package pkgid="19276f4c0c244de00ec158f81d9ceeeff29bc9b926506f7269d198815db95191" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="42.0.2311.90" rel="78.2"/>

<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>

</package>
<package pkgid="4b63c6b2d48b25c9f9f46ffba91d4fd7bc4b8e774e68f6332b6b704680d6c9cb" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="43.0.2357.130" rel="89.1"/>

<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>

</package>
<package pkgid="d075ea56cbf7fe209c047e83e92a70b0e599cf1f1ea360b1694d56f48cef0038" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="43.0.2357.65" rel="84.1"/>

<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>

</package>
<package pkgid="1ba506fced272862f5eb61b1b22dfe665fb0e181a525977ea3f9df6415aaa805" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="44.0.2403.89" rel="93.1"/>

<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89 [bnc#939077]
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="e6f0828479334acfe72f23390783a5ed5ffb03670e0beae30b7776ee2e15dc10" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="45.0.2454.101" rel="105.1"/>

<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>

</package>
<package pkgid="bee694285b3a2fd6329e4faa0adebf6e78a27a261f9eaf5b3b5fe25f8a9b4aa3" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="45.0.2454.85" rel="98.1"/>

<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>

</package>
<package pkgid="98e2dcfc898554d8a6364d6ffaaea001c62784d482bbc1762a818cc57944fc8e" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="46.0.2490.71" rel="109.1"/>

<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>

</package>
<package pkgid="6d1839664d797a542b3c35bb2838b88bab809ed6ce062bfc41efcecd44498167" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="46.0.2490.86" rel="112.1"/>

<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>

</package>
<package pkgid="c8418b8d14390a572c2dec84591575fbbf105109ce61c9e6c8e7be5e743c9480" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="47.0.2526.106" rel="119.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>

</package>
<package pkgid="f7088b3688f148d72deca5375f115c615513ffb9ba5da6e3ced25a6572fe7f9b" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="47.0.2526.80" rel="116.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>

</package>
<package pkgid="451fe9c54eec5acd9efaff2972bc4bd3d5659bafe139bc6906e727ab95efcb61" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="48.0.2564.109" rel="125.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chomium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="81f0f79bada942d2ad64a75a4dbb3408c59f462feb120af9b4d4e3564a8bbaf7" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="48.0.2564.116" rel="129.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>

</package>
<package pkgid="a6902b9e69fd83af52c85637b22668bbe8b31bca88c7f5ee8c49139155d4a489" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="48.0.2564.116" rel="132.2"/>

<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="da94c03dc39187c5b841d83a6c2b38c070085284ea5fe0102b7a28ba6c5c0867" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="48.0.2564.82" rel="122.1"/>

<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>

</package>
<package pkgid="a481c35f5cefc91ad5aa1f69685186c2770a07f9690b3cbe8a11397bf6d9215d" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="49.0.2623.110" rel="141.2"/>

<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>

</package>
<package pkgid="8df4f4cb3fa8d1c46d415f26b8826c62854f9aab2b9e862f599fa394b25982e9" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="49.0.2623.75" rel="135.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>

</package>
<package pkgid="fa286e1bffcdc854bc4e5f1316dab66d537842b77fe61d7a87c863b33ee98109" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="49.0.2623.87" rel="138.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>

</package>
<package pkgid="b57b6faed96a1a8ea594bd3a02cdbe10d83beb2d0c6bdb3dfaa6814d360ecec3" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="50.0.2661.75" rel="144.1"/>

<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>

</package>
<package pkgid="68a693da6703891457d399439d7920f8e1a12d4b31516aefb9a6e8a79c9b9bab" name="chromium-desktop-kde" arch="x86_64">
    <version epoch="0" ver="51.0.2704.103" rel="147.1"/>

<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- _constraints: increase memory. It takes 1.2G to build some .o, and
  with -j4 this results in OOM.</changelog>
<changelog author="astieger@suse.com" date="1461931200">- Update to Chromium 50.0.2661.94 (boo#977830)
  * Security fixes:
  - CVE-2016-1660: Out-of-bounds write in Blink
  - CVE-2016-1661: Memory corruption in cross-process frames
  - CVE-2016-1662: Use-after-free in extensions
  - CVE-2016-1663: Use-after-free in Blink?s V8 bindings
  - CVE-2016-1664: Address bar spoofing
  - CVE-2016-1665: Information leak in V8
  - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1463140800">- Update to Chromium 50.0.2661.102 (boo#979859)
  * Security fixes:
  - CVE-2016-1667: Same origin bypass in DOM
  - CVE-2016-1668: Same origin bypass in Blink V8 bindings
  - CVE-2016-1669: Buffer overflow in V8
  - CVE-2016-1670: Race condition in loader</changelog>
<changelog author="tittiatcoke@gmail.com" date="1464264000">- Update to Chromium 51.0.2704.63 [boo#981886]
  * Security fixes:
  - CVE-2016-1672: Cross-origin bypass in extension bindings
  - CVE-2016-1673: Cross-origin bypass in Blink
  - CVE-2016-1674: Cross-origin bypass in extensions
  - CVE-2016-1675: Cross-origin bypass in Blink
  - CVE-2016-1676: Cross-origin bypass in extension bindings
  - CVE-2016-1677: Type confusion in V8
  - CVE-2016-1678: Heap overflow in V8
  - CVE-2016-1679: Heap use-after-free in V8 bindings
  - CVE-2016-1680: Heap use-after-free in Skia
  - CVE-2016-1681: Heap overflow in PDFium
  - CVE-2016-1682: CSP bypass for ServiceWorker
  - CVE-2016-1683: Out-of-bounds access in libxslt
  - CVE-2016-1684: Integer overflow in libxslt
  - CVE-2016-1685: Out-of-bounds read in PDFium
  - CVE-2016-1686: Out-of-bounds read in PDFium
  - CVE-2016-1687: Information leak in extensions
  - CVE-2016-1688: Out-of-bounds read in V8
  - CVE-2016-1689: Heap buffer overflow in media
  - CVE-2016-1690: Heap use-after-free in Autofill
  - CVE-2016-1691: Heap buffer-overflow in Skia
  - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker
  - CVE-2016-1693: HTTP Download of Software Removal Tool
  - CVE-2016-1694: HPKP pins removed on cache clearance
  - CVE-2016-1695: Various fixes from internal audits, fuzzing
    and other initiatives
- drop chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch
  now upstream</changelog>
<changelog author="astieger@suse.com" date="1464868800">- Update to Chromium 51.0.2704.79 [boo#982719]
  * Security fixes:
  - CVE-2016-1696: Cross-origin bypass in Extension bindings
  - CVE-2016-1697: Cross-origin bypass in Blink
  - CVE-2016-1698: Information leak in Extension bindings
  - CVE-2016-1699: Parameter sanitization failure in DevTools
  - CVE-2016-1700: Use-after-free in Extensions
  - CVE-2016-1701: Use-after-free in Autofill
  - CVE-2016-1702: Out-of-bounds read in Skia
  - CVE-2016-1703: Various fixes from internal audits, fuzzing
    and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1465300800">- Update to Chromium 51.0.2704.84
  * No further changelog</changelog>
<changelog author="astieger@suse.com" date="1466164800">- Update to Chromium 51.0.2704.103
  * Security fixes:
  - CVE-2016-1704: Various fixes from internal audits, fuzzing and
    other initiatives (boo#985397)</changelog>

</package>
<package pkgid="5ce3023b1974333bac74478c2a3d6d293774da1f616b60d0f30317613b350853" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="31.0.1650.57" rel="8.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376222400">- Update to 30.0.1594
  * Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
- Chromium now expects the SUID-helper installed in the same
  directory as chromium. So let's create a symlink to the helper
  in /usr/lib</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>

</package>
<package pkgid="f7d7137173ab00609771c9f5abf860a807054ca08fb3ea537c999b926517613a" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="31.0.1650.63" rel="13.7"/>

<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.</changelog>

</package>
<package pkgid="d1862e10513d33b5b989021c55e498becf8a3bf67bc1413add3b744d72f8c346" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="32.0.1700.102" rel="17.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>

</package>
<package pkgid="67fc57372ba3901c6c805646258a19c4418d1f3d5700de35cb140a936e93aa23" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="33.0.1750.117" rel="21.2"/>

<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>

</package>
<package pkgid="9fbafd93993b59f1d26fa4a552b426539621ff9cc1e50343ae299178bae93847" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="33.0.1750.152" rel="25.2"/>

<changelog author="andreas.stieger@gmx.de" date="1377518400">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>

</package>
<package pkgid="8cc49f7f480ce690a5bbb061316e19c5112dfa876a4d2769ed0a9ca520209fa3" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="34.0.1847.116" rel="29.3"/>

<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>

</package>
<package pkgid="1c1ae04f912624eca69710f39f4ca7f7f015785830a3bbb4f0a623e4b358243f" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="34.0.1847.132" rel="33.1"/>

<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>

</package>
<package pkgid="115b6393c8fb452d5d0a4a7605262b16f97f2b201369d1d6ad27e072501d02f7" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="35.0.1916.114" rel="37.4"/>

<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>

</package>
<package pkgid="fa9ffe536996b9e10aa1af7374c7ec46fe71325b2b6f8006d57dc66ee8f0d49c" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="36.0.1985.125" rel="41.1"/>

<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>

</package>
<package pkgid="19c3cafbfe172628cbcda9a2e8c8f452107908f4e609924f8b1f444a7dda3ccd" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="37.0.2062.94" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>

</package>
<package pkgid="8bca2283496c9b728ce658ae2e24678dde85b1bd8a487cf3f16a50a210bfc682" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="38.0.2125.104" rel="54.4"/>

<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>

</package>
<package pkgid="727ee983d9025a62722dea6352ae63c1543aed35099b022e5fef3a97ca06f5e3" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="39.0.2171.65" rel="58.4"/>

<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>

</package>
<package pkgid="ff6d3baf83e8077d39fa2de348326b3f4d29b60b199806f729c2864d02914568" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="40.0.2214.111" rel="68.2"/>

<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>

</package>
<package pkgid="5afcb68bee3d63949bb39df37e30521061d06562e81510d8f3752013fd5fd67a" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="41.0.2272.118" rel="75.1"/>

<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>

</package>
<package pkgid="d5ab8725f6aada683d098909ebf559b36b97cfb0987c657e7730fca1d004e136" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="41.0.2272.76" rel="72.1"/>

<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>

</package>
<package pkgid="dfd543fbfcc65baa0f753cd325aece5ab6c83699c8c2557eab4ae9961f49ae4c" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="42.0.2311.135" rel="81.1"/>

<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>

</package>
<package pkgid="15a7fe264adb11b330ae3030d57c066236f4cc7bd89215f99336d85fa74d6c68" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="42.0.2311.90" rel="78.2"/>

<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>

</package>
<package pkgid="0c1903af48a7278536d4a32bd8e161d328ead70e407a49d07c4214ab6e37b249" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="43.0.2357.130" rel="89.1"/>

<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>

</package>
<package pkgid="838dbac2dac72b2d31c8efea6c983bf7ce04e1e80f75db08ac9019bfa28362eb" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="43.0.2357.65" rel="84.1"/>

<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>

</package>
<package pkgid="31578dff4f6ff00d105bb27b5c58b79da859aef6e5952627a7ecba84f21deae2" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="44.0.2403.89" rel="93.1"/>

<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89 [bnc#939077]
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="cd6eb01a97ad113f403fbf9190a4243678c0ca5b5df0672e09de8232ac73b04b" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="45.0.2454.101" rel="105.1"/>

<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>

</package>
<package pkgid="303089b68a9092bbd590be0a4def8ac1ece93097d2322bc80af23d0366a2a0f0" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="45.0.2454.85" rel="98.1"/>

<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>

</package>
<package pkgid="67168b8b149c5277fd327903e6bae1f3290f4315726646cefed49ffe3c70d3b4" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="46.0.2490.71" rel="109.1"/>

<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>

</package>
<package pkgid="436b2ff34d9afe0a12eedbc2da37212c80d1cb70de0e2ef43e0d96d0dbbb3935" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="46.0.2490.86" rel="112.1"/>

<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>

</package>
<package pkgid="af851d58a296ff91663bc56172b8d55ac170b142f0c5bf36cd356a64c90b4ba4" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="47.0.2526.106" rel="119.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>

</package>
<package pkgid="3e812d89147c2073b79e755baaa9b7988999f67c40f33bc87f714749f0e3ce46" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="47.0.2526.80" rel="116.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>

</package>
<package pkgid="b1061e40fa934a965c92cd89cc7bf4a6c7860c5c59b6e21d464b374d81f144c3" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="48.0.2564.109" rel="125.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chomium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="139871d24e805bf036a80176500de818173e893dc408c66b2f2ec2edc8dc627f" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="48.0.2564.116" rel="129.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>

</package>
<package pkgid="0e4c0ccf9e6ae6a463953c3fae2e2ff7681a00b24fa95cec893431800137d357" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="48.0.2564.116" rel="132.2"/>

<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="5c3fac732318c03d317282bd939682c5b8e04b4f6e26d0ebbe69e19424e31dbe" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="48.0.2564.82" rel="122.1"/>

<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>

</package>
<package pkgid="e337112abde7e2e92bced6232289c2bc63b4413c1b24f0cc5fcfb3a1dd328d9f" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="49.0.2623.110" rel="141.2"/>

<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>

</package>
<package pkgid="04155d5ebe63a5c3bef6fca64de15723aee1f0fb040a1d036d1c3b6b9533104e" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="49.0.2623.75" rel="135.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>

</package>
<package pkgid="5cab461e8c13825711747f4ed643b951d9ca4dbfdad0995748a620718ad50a6d" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="49.0.2623.87" rel="138.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>

</package>
<package pkgid="c1050a266cb6b895bd886ad5aafb0976ca631a259dd2dae2f7706c4e6f65e4c1" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="50.0.2661.75" rel="144.1"/>

<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>

</package>
<package pkgid="dbe01c5ab324766d4190edda5f4cb1c05affebf8c81d78681957c8659c2c4940" name="chromium-ffmpegsumo" arch="i586">
    <version epoch="0" ver="51.0.2704.103" rel="147.1"/>

<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- _constraints: increase memory. It takes 1.2G to build some .o, and
  with -j4 this results in OOM.</changelog>
<changelog author="astieger@suse.com" date="1461931200">- Update to Chromium 50.0.2661.94 (boo#977830)
  * Security fixes:
  - CVE-2016-1660: Out-of-bounds write in Blink
  - CVE-2016-1661: Memory corruption in cross-process frames
  - CVE-2016-1662: Use-after-free in extensions
  - CVE-2016-1663: Use-after-free in Blink?s V8 bindings
  - CVE-2016-1664: Address bar spoofing
  - CVE-2016-1665: Information leak in V8
  - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1463140800">- Update to Chromium 50.0.2661.102 (boo#979859)
  * Security fixes:
  - CVE-2016-1667: Same origin bypass in DOM
  - CVE-2016-1668: Same origin bypass in Blink V8 bindings
  - CVE-2016-1669: Buffer overflow in V8
  - CVE-2016-1670: Race condition in loader</changelog>
<changelog author="tittiatcoke@gmail.com" date="1464264000">- Update to Chromium 51.0.2704.63 [boo#981886]
  * Security fixes:
  - CVE-2016-1672: Cross-origin bypass in extension bindings
  - CVE-2016-1673: Cross-origin bypass in Blink
  - CVE-2016-1674: Cross-origin bypass in extensions
  - CVE-2016-1675: Cross-origin bypass in Blink
  - CVE-2016-1676: Cross-origin bypass in extension bindings
  - CVE-2016-1677: Type confusion in V8
  - CVE-2016-1678: Heap overflow in V8
  - CVE-2016-1679: Heap use-after-free in V8 bindings
  - CVE-2016-1680: Heap use-after-free in Skia
  - CVE-2016-1681: Heap overflow in PDFium
  - CVE-2016-1682: CSP bypass for ServiceWorker
  - CVE-2016-1683: Out-of-bounds access in libxslt
  - CVE-2016-1684: Integer overflow in libxslt
  - CVE-2016-1685: Out-of-bounds read in PDFium
  - CVE-2016-1686: Out-of-bounds read in PDFium
  - CVE-2016-1687: Information leak in extensions
  - CVE-2016-1688: Out-of-bounds read in V8
  - CVE-2016-1689: Heap buffer overflow in media
  - CVE-2016-1690: Heap use-after-free in Autofill
  - CVE-2016-1691: Heap buffer-overflow in Skia
  - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker
  - CVE-2016-1693: HTTP Download of Software Removal Tool
  - CVE-2016-1694: HPKP pins removed on cache clearance
  - CVE-2016-1695: Various fixes from internal audits, fuzzing
    and other initiatives
- drop chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch
  now upstream</changelog>
<changelog author="astieger@suse.com" date="1464868800">- Update to Chromium 51.0.2704.79 [boo#982719]
  * Security fixes:
  - CVE-2016-1696: Cross-origin bypass in Extension bindings
  - CVE-2016-1697: Cross-origin bypass in Blink
  - CVE-2016-1698: Information leak in Extension bindings
  - CVE-2016-1699: Parameter sanitization failure in DevTools
  - CVE-2016-1700: Use-after-free in Extensions
  - CVE-2016-1701: Use-after-free in Autofill
  - CVE-2016-1702: Out-of-bounds read in Skia
  - CVE-2016-1703: Various fixes from internal audits, fuzzing
    and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1465300800">- Update to Chromium 51.0.2704.84
  * No further changelog</changelog>
<changelog author="astieger@suse.com" date="1466164800">- Update to Chromium 51.0.2704.103
  * Security fixes:
  - CVE-2016-1704: Various fixes from internal audits, fuzzing and
    other initiatives (boo#985397)</changelog>

</package>
<package pkgid="1f5818ef52a89075845287bee27aedb2f1b711bb03ea85463c35b4723b47a348" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="31.0.1650.57" rel="8.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376222400">- Update to 30.0.1594
  * Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
- Chromium now expects the SUID-helper installed in the same
  directory as chromium. So let's create a symlink to the helper
  in /usr/lib</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>

</package>
<package pkgid="a415c6374f7d4d7d7c8793309973ef1105b772423b2d6082427ae2f3ee638404" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="31.0.1650.63" rel="13.7"/>

<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.</changelog>

</package>
<package pkgid="e6aa629e623ecdc82d5c61f77b9e8f4c012718b20201d556a6f164f8f68b1bf3" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="32.0.1700.102" rel="17.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>

</package>
<package pkgid="4df2843d73725a65ad20373f0590dc48329a615244c267786b717f42a6707b8d" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="33.0.1750.117" rel="21.2"/>

<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>

</package>
<package pkgid="ba902cbc81a39dce3a7a080a6a6013849d93124541cc42bf518b8ff29a5a7925" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="33.0.1750.152" rel="25.2"/>

<changelog author="andreas.stieger@gmx.de" date="1377518400">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>

</package>
<package pkgid="efa05b143c339449d3a23490f5088a5c4feaaa4280eadd5eb11e00dd06da1f26" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="34.0.1847.116" rel="29.3"/>

<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>

</package>
<package pkgid="5a797bcb1ee0489aab81419a51d0fb38541df9f487c337739bae3bc05ce95421" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="34.0.1847.132" rel="33.1"/>

<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>

</package>
<package pkgid="77313e5f090f7d1834e810961ead5480883eea1a54b0701c15cba460d8f5d8aa" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="35.0.1916.114" rel="37.4"/>

<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>

</package>
<package pkgid="48468e191e3ba1285402635c76847f51655b7f3105dc7391862b409875074cd0" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="36.0.1985.125" rel="41.1"/>

<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>

</package>
<package pkgid="83a1eac6a70cd108b12cbbc0751453dd27944ee17123897e5f16369364d9501d" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="37.0.2062.94" rel="50.1"/>

<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>

</package>
<package pkgid="1997891931761ae1e4d9b24308d4b3824a22202531599911d0532c7835abd72c" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="38.0.2125.104" rel="54.4"/>

<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>

</package>
<package pkgid="6d0ea6e630a2760700e61fd2b5cd5270ac1e6988bab4dfdb4599718031e381d0" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="39.0.2171.65" rel="58.4"/>

<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407240000">- Add directory remoting_locales to the package to complete
  the language support within Chromium</changelog>
<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>

</package>
<package pkgid="b8e9f2f867fcfabd99b73439aff8bc901a85c9c60570b6b94c441ea71ea956d3" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="40.0.2214.111" rel="68.2"/>

<changelog author="tittiatcoke@gmail.com" date="1407931200">- Update to Chromium 36.0.1985.143
  Security Fixes (bnc#891717)
  * CVE-2014-3165: Use-after-free in web sockets
  * CVE-2014-3166: Information disclosure in SPDY
  * CVE-2014-3167: Various fixes from internal audits, fuzzing and
    other initiatives
  and 9 more fixes for which no description was given</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409140800">- Update to Chromium 37.0.2062.94
  Security Fixes (bnc#893720)
  * CVE-2014-3176, CVE-2014-3177: A combination of bugs in V8, IPC,
    sync, and extensions that can lead to remote code execution
    outside of the sandbox.
  * CVE-2014-3168: Use-after-free in SVG
  * CVE-2014-3169: Use-after-free in DOM
  * CVE-2014-3170: Extension permission dialog spoofing
  * CVE-2014-3171: Use-after-free in bindings
  * CVE-2014-3172: Issue related to extension debugging
  * CVE-2014-3173: Uninitialized memory read in WebGL
  * CVE-2014-3174: Uninitialized memory read in Web Audio
  * CVE-2014-3175: Various fixes from internal audits, fuzzing
    and other initiatives
  and 41 more security fixes for which no description was given
- Drop the following patches as they are no longer required:
  * chromium-23.0.1245-no-test-sources.patch
  * no-download-nacl.diff
  * chromium-no-courgette.patch</changelog>
<changelog author="josua.m@t-online.de" date="1409486400">- add toolchain_linux_arm
- disable NaCl on ARM because it doesn't build
- add arm-webrtc-fix.patch
- add chromium-arm-r0.patch
- add skia.patch
- build components as shared libaries on arm</changelog>
<changelog author="tittiatcoke@gmail.com" date="1409572800">- Switch to shared libraries as a global default. This hopefully
  speeds up the builds a little and prevents out-of-memory on OBS
- Move the chrome sandbox binary to the main package and remove the
  sub-package for it. This should resolve build issues when having
  the debug flag on.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>

</package>
<package pkgid="801c0701cf84d207430e11b5d1e6ab4d56282c97200e8800a31937756a8824c6" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="41.0.2272.118" rel="75.1"/>

<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>

</package>
<package pkgid="5e6617d03d6678f4e828259b98d3697e805b77353bd159d8716e18ca59d7cc95" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="41.0.2272.76" rel="72.1"/>

<changelog author="tittiatcoke@gmail.com" date="1410091200">- Update to Chromium 37.0.2062.103
  * This addresses some user feedback related to how Chrome
    renders text when display scaling is set to 125% or lower.
- Combine the two toolchain tars into a single one.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1410350400">- Update to Chromium 37.0.2062.120
  * Security Fixes (bnc#896106)
  - CVE-2014-3178: Use-after-free in rendering</changelog>
<changelog author="tittiatcoke@gmail.com" date="1412769600">- Update to Chromium 38.0.2125.101
  This update includes 159 security fixes, including 113 relatively
  minor fixes. Highlighted securtiy fixes are:
  CVE-2014-3188: A combination of V8 and IPC bugs that can lead to
    remote code execution outside of the sandbox
  CVE-2014-3189: Out-of-bounds read in PDFium
  CVE-2014-3190: Use-after-free in Events
  CVE-2014-3191: Use-after-free in Rendering
  CVE-2014-3192: Use-after-free in DOM
  CVE-2014-3193: Type confusion in Session Management
  CVE-2014-3194: Use-after-free in Web Workers
  CVE-2014-3195: Information Leak in V8
  CVE-2014-3196: Permissions bypass in Windows Sandbox
  CVE-2014-3197: Information Leak in XSS Auditor
  CVE-2014-3198: Out-of-bounds read in PDFium
  CVE-2014-3199: Release Assert in V8 bindings
  CVE-2014-3200: Various fixes from internal audits, fuzzing and
    other initiatives
- Drop the build of the Native Client. This is actually not a build
  as that prebuild binaries are being shipped. Also Google no
  longer provides prebuild binaries for the NativeClient for 32bit.
  Chromium as webbrowser is not affected by this and it bring
  Chromium inline with the regulations that prebuild binaries
  should not be shipped.
  * toolchaing_linux tarball dropped
  * Spec-file cleaned for NaCl stuff
- Added patch no-clang-on-packman.diff to prevent the usage of
  clang on packman, which is not supported there</changelog>
<changelog author="tittiatcoke@gmail.com" date="1413374400">- Update to Chromium 38.0.2125.104
  * Several bugfixes
- Updated source url to point to the right location</changelog>
<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>

</package>
<package pkgid="fc29d5dbd3c3cd3223d768b55e0cd852f45f06583bbf1f8c564a6fb65e5e0177" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="42.0.2311.135" rel="81.1"/>

<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>

</package>
<package pkgid="4e5eefc5630ceff93d020df81bacbbac1da3e0da11309f39780bdfad2f060a02" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="42.0.2311.90" rel="78.2"/>

<changelog author="tittiatcoke@gmail.com" date="1414497600">- Update to Chromium 38.0.2125.111
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1415966400">- Update to Chromium 38.0.2125.122
  * Several bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1416398400">- Update to Chromium 39.0.2171.65
  * Security fixes:
  - CVE-2014-7899: Address bar spoofing (boo#906320)
  - CVE-2014-7900: Use-after-free in pdfium (boo#906317)
  - CVE-2014-7901: Integer overflow in pdfium (boo#906322)
  - CVE-2014-7902: Use-after-free in pdfium (boo#906328)
  - CVE-2014-7903: Buffer overflow in pdfium (boo#906318)
  - CVE-2014-7904: Buffer overflow in Skia (boo#906321)
  - CVE-2014-7905: Flaw allowing navigation to intents that do
    not have the BROWSABLE category (boo#906330)
  - CVE-2014-7906: Use-after-free in pepper plugins (boo#906319)
  - CVE-2014-0574: Double-free in Flash
  - CVE-2014-7907: Use-after-free in blink (boo#906323)
  - CVE-2014-7908: Integer overflow in media (boo#906324)
  - CVE-2014-7909: Uninitialized memory read in Skia (boo#906326)
  - CVE-2014-7910: Various fixes from internal audits, fuzzing
    and other initiatives (boo#906327)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>

</package>
<package pkgid="16ca565a30ba3507698c4a0e650bd0e7b741610296519490fee4c9bef07e97eb" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="43.0.2357.130" rel="89.1"/>

<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>

</package>
<package pkgid="8ba3eaa253fdae40895e6b8a6fab454e9474b76c4bbd3ac329016743393efab8" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="43.0.2357.65" rel="84.1"/>

<changelog author="tittiatcoke@gmail.com" date="1417003200">- Update to Chromium 39.0.2171.71
  * Bugfixes</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1417348800">- fix using 'echo' command in chromium-browser.sh script</changelog>
<changelog author="tittiatcoke@gmail.com" date="1418212800">- Update to Chromium 39.0.2171.95
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1421150400">- Update to Chromium 39.0.2171.99
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422014400">- Update to Chromium 40.0.2214.91
  * Security Fixes:
  - CVE-2014-7923: Memory corruption in ICU
  - CVE-2014-7924: Use-after-free in IndexedDB
  - CVE-2014-7925: Use-after-free in WebAudio
  - CVE-2014-7926: Memory corruption in ICU
  - CVE-2014-7927: Memory corruption in V8
  - CVE-2014-7928: Memory corruption in V8
  - CVE-2014-7930: Use-after-free in DOM
  - VE-2014-7931: Memory corruption in V8
  - CVE-2014-7929: Use-after-free in DOM
  - CVE-2014-7932: Use-after-free in DOM
  - CVE-2014-7933: Use-after-free in FFmpeg
  - CVE-2014-7934: Use-after-free in DOM
  - CVE-2014-7935: Use-after-free in Speech
  - CVE-2014-7936: Use-after-free in Views
  - CVE-2014-7937: Use-after-free in FFmpeg
  - CVE-2014-7938: Memory corruption in Fonts
  - CVE-2014-7939: Same-origin-bypass in V8
  - CVE-2014-7940: Uninitialized-value in ICU
  - CVE-2014-7941: Out-of-bounds read in UI
  - CVE-2014-7942: Uninitialized-value in Fonts
  - CVE-2014-7943: Out-of-bounds read in Skia
  - CVE-2014-7944: Out-of-bounds read in PDFium
  - CVE-2014-7945: Out-of-bounds read in PDFium
  - CVE-2014-7946: Out-of-bounds read in Fonts
  - CVE-2014-7947: Out-of-bounds read in PDFium
  - CVE-2014-7948: Caching error in AppCache
  - CVE-2015-1205: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 3.30 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422446400">- Update to Chromium 40.0.2214.93
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1422705600">- Update to Chromium 40.0.2214.94
  - Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>

</package>
<package pkgid="6ec25709051871876e6067cb56897d7704b277560ecd783922930f0d32353724" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="44.0.2403.89" rel="93.1"/>

<changelog author="tittiatcoke@gmail.com" date="1423396800">- Update to Chromium 40.0.2214.111
  * Security Fixes:
  - CVE-2015-1209: Use-after-free in DOM
  - CVE-2015-1210: Cross-origin-bypass in V8 bindings
  - CVE-2015-1211: Privilege escalation using service workers
  - CVE-2015-1212: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424260800">- Utilize the _service file to download the chromium tarball</changelog>
<changelog author="tittiatcoke@gmail.com" date="1424433600">- Update to Chromium 40.0.2214.115
  * Bugfixes</changelog>
<changelog author="meissner@suse.com" date="1424692800">- uses around 5.8GB for building, assign like 6GB in _constraints</changelog>
<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89 [bnc#939077]
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="2bdb21b29bad9a09cd9eed26daa837d693aff5c3e249da9d55fafdc4220b09be" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="45.0.2454.101" rel="105.1"/>

<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>

</package>
<package pkgid="af21a7f29b9385a8abbafe564c5d4f6a2cedb191ab9aa75cbfacd8084011f7b5" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="45.0.2454.85" rel="98.1"/>

<changelog author="meissner@suse.com" date="1425038400">- regular diskusage is more like 20GB+</changelog>
<changelog author="tittiatcoke@gmail.com" date="1425470400">- Update to Chromium 41.0.2272.76
  Security fixes:
  * CVE-2015-1212: Out-of-bounds write in media
  * CVE-2015-1213: Out-of-bounds write in skia filters
  * CVE-2015-1214: Out-of-bounds write in skia filters
  * CVE-2015-1215: Out-of-bounds write in skia filters
  * CVE-2015-1216: Use-after-free in v8 bindings
  * CVE-2015-1217: Type confusion in v8 bindings
  * CVE-2015-1218: Use-after-free in dom
  * CVE-2015-1219: Integer overflow in webgl
  * CVE-2015-1220: Use-after-free in gif decoder
  * CVE-2015-1221: Use-after-free in web databases
  * CVE-2015-1222: Use-after-free in service workers
  * CVE-2015-1223: Use-after-free in dom
  * CVE-2015-1230: Type confusion in v8
  * CVE-2015-1224: Out-of-bounds read in vpxdecoder
  * CVE-2015-1225: Out-of-bounds read in pdfium
  * CVE-2015-1226: Validation issue in debugger
  * CVE-2015-1227: Uninitialized value in blink
  * CVE-2015-1228: Uninitialized value in rendering
  * CVE-2015-1229: Cookie injection via proxies
  * CVE-2015-1231: Various fixes from internal audits
  * Multiple vulnerabilities in V8 fixed at the tip of the 4.1 branch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426161600">- Update to Chromium 41.0.2272.89
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1426939200">- Update to Chromium 41.0.2272.101
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>

</package>
<package pkgid="8e106fe03910acb39240948121a32b30f2af78586a6112c17fccebd7b7cec34c" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="46.0.2490.71" rel="109.1"/>

<changelog author="tittiatcoke@gmail.com" date="1427976000">- Update to Chromium 41.0.2272.118
  Security fixes:
  * CVE-2015-1233: A combination of V8, Gamepad and IPC bugs that
    can lead to remote code execution outside of
    the sandbox
  * CVE-2015-1234: Buffer overflow via race condition in GPU</changelog>
<changelog author="tittiatcoke@gmail.com" date="1429099200">- Update to Chromium 42.0.2311.90
  * A number of new apps, extension and Web Platform APIs (including the Push API!)
  * Lots of under the hood changes for stability and performance
  * Security fixes, including:
  - CVE-2015-1235: Cross-origin-bypass in HTML parser
  - CVE-2015-1236: Cross-origin-bypass in Blink
  - CVE-2015-1237: Use-after-free in IPC
  - CVE-2015-1238: Out-of-bounds write in Skia
  - CVE-2015-1240: Out-of-bounds read in WebGL
  - CVE-2015-1241: Tap-Jacking
  - CVE-2015-1242: Type confusion in V8
  - CVE-2015-1244: HSTS bypass in WebSockets
  - CVE-2015-1245: Use-after-free in PDFium
  - CVE-2015-1246: Out-of-bounds read in Blink
  - CVE-2015-1247: Scheme issues in OpenSearch
  - CVE-2015-1248: SafeBrowsing bypass
  - CVE-2015-1249: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430136000">- Fix for missing Chromium icon in the taskbar.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>

</package>
<package pkgid="8094e7bc3cf8ba5316e4b85e92668f748d51752e7e8736062a2ed701c77f03db" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="46.0.2490.86" rel="112.1"/>

<changelog author="tittiatcoke@gmail.com" date="1430308800">- Update to Chromium 42.0.2311.135
  * Security fixes:
  - CVE-2015-1243: Use-after-free in DOM
  - CVE-2015-1250: Various fixes from internal audits, fuzzing and other initiatives
    and 3 more security fixes.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432123200">- Update to Chromium 43.0.2357.65
  * Security fixes:
  - CVE-2015-1252: Sandbox escape in Chrome
  - CVE-2015-1253: Cross-origin bypass in DOM
  - CVE-2015-1254: Cross-origin bypass in Editing
  - CVE-2015-1255: Use-after-free in WebAudio
  - CVE-2015-1256: Use-after-free in SVG
  - CVE-2015-1251: Use-after-free in Speech
  - CVE-2015-1257: Container-overflow in SVG
  - CVE-2015-1258: Negative-size parameter in Libvpx
  - CVE-2015-1259: Uninitialized value in PDFium
  - CVE-2015-1260: Use-after-free in WebRTC
  - CVE-2015-1261: URL bar spoofing
  - CVE-2015-1262: Uninitialized value in Blink
  - CVE-2015-1263: Insecure download of spellcheck dictionary
  - CVE-2015-1264: Cross-site scripting in bookmarks
  - CVE-2015-1265: Various fixes from internal audits, fuzzing and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.3 branch (currently 4.3.61.21)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1432728000">- Update to Chromium 43.0.2357.81
  * Bug-fixes:
  - Fixed an issue where sometimes a blank page would print
  - Icons not displaying properly on Linux</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>

</package>
<package pkgid="c5e84dfb77a52da8a5bbb279c5cbfb2b6d89c4ea4fa4a995bb685a8ff18be9b5" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="47.0.2526.106" rel="119.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>

</package>
<package pkgid="8fc2483eb0011f98da5506568445314d850a7c703c563b8eb534cfd957b88341" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="47.0.2526.80" rel="116.1"/>

<changelog author="tittiatcoke@gmail.com" date="1434110400">- Update to Chromium 43.0.2357.125
  * Bug-fixes:
  - esolved browser font magnification/scaling issue.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1434542400">- Add the buildflag enable_hotwording=0 to prevent that Chromium
  downloads a binary blob for speechrecognition (boo#935022)
- Add patch gcc50-fixes.diff to enable building against GCC 5. The
  patch fixes the python regular expression and ensures to return
  a two digit value for the GCC version</changelog>
<changelog author="tittiatcoke@gmail.com" date="1435060800">- Update to Chromium 43.0.2357.130
  - Security fixes (boo#935723)
  * CVE-2015-1266: Scheme validation error in WebUI
  * CVE-2015-1268: Cross-origin bypass in Blink
  * CVE-2015-1267: Cross-origin bypass in Blink
  * CVE-2015-1269: Normalization error in HSTS/HPKP preload list</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436356800">- Update to Chromium 43.0.2357.132
  No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1436961600">- Update to Chromium 43.0.2357.134
  Update of the Pepper Flash plugin to 18.0.0.209</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437480000">- Update to Chromium 44.0.2403.89
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  * Security fixes:
  - CVE-2015-1271: Heap-buffer-overflow in pdfium
  - CVE-2015-1273: Heap-buffer-overflow in pdfium
  - CVE-2015-1274: Settings allowed executable files to run
    immediately after download
  - CVE-2015-1275: UXSS in Chrome for Android
  - CVE-2015-1276: Use-after-free in IndexedDB
  - CVE-2015-1279: Heap-buffer-overflow in pdfium
  - CVE-2015-1280: Memory corruption in skia
  - CVE-2015-1281: CSP bypass
  - CVE-2015-1282: Use-after-free in pdfium
  - CVE-2015-1283: Heap-buffer-overflow in expat
  - CVE-2015-1284: Use-after-free in blink
  - CVE-2015-1286: UXSS in blink
  - CVE-2015-1287: SOP bypass with CSS
  - CVE-2015-1270: Uninitialized memory read in ICU
  - CVE-2015-1272: Use-after-free related to unexpected GPU
    process termination
  - CVE-2015-1277: Use-after-free in accessibility
  - CVE-2015-1278: URL spoofing using pdf files
  - CVE-2015-1285: Information leak in XSS auditor
  - CVE-2015-1288: Spell checking dictionaries fetched over HTTP
  - CVE-2015-1289: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>

</package>
<package pkgid="70121cefbdfd8ba1705edc853e3f6055d0f27fa7e7899bc8ee53fb1837b176ac" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="48.0.2564.109" rel="125.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chomium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>

</package>
<package pkgid="4924c12d218fca0aa844edef0432b7cd5087eb666a1e354b58614137dafb2af6" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="48.0.2564.116" rel="129.1"/>

<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>

</package>
<package pkgid="70ec94a7ac40cb3504a3158c06babbf8e548b517371e4fc9474cf1622d7d6ac3" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="48.0.2564.116" rel="132.2"/>

<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="28640aebec7defdfc73999241f98cd6127417398b84ce90f53faf30d72d76dcb" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="48.0.2564.82" rel="122.1"/>

<changelog author="tittiatcoke@gmail.com" date="1437825600">- Update to Chromium 44.0.2403.107
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438171200">- Update to Chromium 44.0.2403.125
  * No changelog available
- The chromium-ffmpeg package (on Packman) now requires the same
  version for the main chromium package. This should prevent the
  issues arised from the libffmpeg switch that Google did recently</changelog>
<changelog author="tittiatcoke@gmail.com" date="1438776000">- Update to Chromium 44.0.2403.130
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1441972800">- Update to Chromium 45.0.2454.85
  Security fixes:
  * CVE-2015-1291: Cross-origin bypass in DOM
  * CVE-2015-1292: Cross-origin bypass in ServiceWorker
  * CVE-2015-1293: Cross-origin bypass in DOM
  * CVE-2015-1294: Use-after-free in Skia
  * CVE-2015-1295: Use-after-free in Printing
  * CVE-2015-1296: Character spoofing in omnibox
  * CVE-2015-1297: Permission scoping error in WebRequest
  * CVE-2015-1298: URL validation error in extensions
  * CVE-2015-1299: Use-after-free in Blink
  * CVE-2015-1300: Information leak in Blink
  * CVE-2015-1301: Various fixes from internal audits, fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442404800">- Update to Chromium 45.0.2454.93
  - No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1442923200">- Update to Chromium 45.0.2454.99
  - No changelog available
- Add upstream patch correct-blacklist.diff
  * This should restore the correct behavior of the option
  - -ignore-gpu-blacklist.
    https://code.google.com/p/chromium/issues/detail?id=509336</changelog>
<changelog author="tittiatcoke@gmail.com" date="1443873600">- Update to Chromium 45.0.2454.101
  * Security fixes:
  - CVE-2015-1303: Cross-origin bypass in DOM [boo#947504]
  - CVE-2015-1304: Cross-origin bypass in V8 [boo#947507]</changelog>
<changelog author="tittiatcoke@gmail.com" date="1444824000">- Update to Chromium 46.0.2490.71
  * Security fixes (boo#950290)
  - CVE-2015-6755: Cross-origin bypass in Blink
  - CVE-2015-6756: Use-after-free in PDFium
  - CVE-2015-6757: Use-after-free in ServiceWorker
  - CVE-2015-6758: Bad-cast in PDFium
  - CVE-2015-6759: Information leakage in LocalStorage
  - CVE-2015-6760: Improper error handling in libANGLE
  - CVE-2015-6761: Memory corruption in FFMpeg
  - CVE-2015-6762: CORS bypass via CSS fonts
  - CVE-2015-6763: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.6 branch (currently 4.6.85.23) CVE-2015-7834
- drop upstreamed correct-blacklist.diff
- add chromium-46.0.2490.71-fix-missing-i18n_process_css_test.patch
  to fix build
- remove remoting_locales from spec</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445256000">- Change the default homepage based on the new landingpage
  for the openSUSE Project. (boo#950957)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1445601600">- Update to Chromium 46.0.2490.80
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1447243200">- Update to Chromium 46.0.2490.86
  * Security fixes (boo#954579):
  - CVE-2015-1302: Information leak in PDF viewer</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>

</package>
<package pkgid="f5286321d833dc7fe276f513713bd77630a86055cd9a87421c8e218fa9489b5f" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="49.0.2623.110" rel="141.2"/>

<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>

</package>
<package pkgid="d1364e976cf7af316e0c5d84ca847eb116f513300a3d9cf086bdf0474104cbb9" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="49.0.2623.75" rel="135.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449057600">- Update to Chromium 47.0.2526.73
  * Security fixes (boo#957519)
  - CVE-2015-6765: Use-after-free in AppCache
  - CVE-2015-6766: Use-after-free in AppCache
  - CVE-2015-6767: Use-after-free in AppCache
  - CVE-2015-6768: Cross-origin bypass in DOM
  - CVE-2015-6769: Cross-origin bypass in core
  - CVE-2015-6770: Cross-origin bypass in DOM
  - CVE-2015-6771: Out of bounds access in v8
  - CVE-2015-6772: Cross-origin bypass in DOM
  - CVE-2015-6764: Out of bounds access in v8
  - CVE-2015-6773: Out of bounds access in Skia
  - CVE-2015-6774: Use-after-free in Extensions
  - CVE-2015-6775: Type confusion in PDFium
  - CVE-2015-6776: Out of bounds access in PDFium
  - CVE-2015-6777: Use-after-free in DOM
  - CVE-2015-6778: Out of bounds access in PDFium
  - CVE-2015-6779: Scheme bypass in PDFium
  - CVE-2015-6780: Use-after-free in Infobars
  - CVE-2015-6781: Integer overflow in Sfntly
  - CVE-2015-6782: Content spoofing in Omnibox
  - CVE-2015-6783: Signature validation issue in
    Android Crazy Linker.
  - CVE-2015-6784: Escaping issue in saved pages
  - CVE-2015-6785: Wildcard matching issue in CSP
  - CVE-2015-6786: Scheme bypass in CSP
  - CVE-2015-6787: Various fixes from internal audits, fuzzing
    and other initiatives.
  - Multiple vulnerabilities in V8 fixed at the tip of the
    4.7 branch (currently 4.7.80.23)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>

</package>
<package pkgid="f7dd5e5d647a65342bb69f03c4823593d014d8241ad615752d44c3b1db420bae" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="49.0.2623.87" rel="138.1"/>

<changelog author="tittiatcoke@gmail.com" date="1449316800">- Enable the possibility to utilize the Widevine plugin
  within chromium. (boo#954103)
  * Add patch: fix_building_widevinecdm_with_chromium.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1449748800">- Update to Chromium 47.0.2526.80 [boo#958481]
  * Security fixes
  - CVE-2015-6788: Type confusion in extensions
  - CVE-2015-6789: Use-after-free in Blink
  - CVE-2015-6790: Escaping issue in saved pages
  - CVE-2015-6791: Various fixes from internal audits, fuzzing
    and other initiatives
- Drop unused patch fix-clang.diff.</changelog>
<changelog author="jimmy@boombatower.com" date="1450094400">- Enable VA-API hardware acceleration in Linux.
  * chromium-enable-vaapi.patch</changelog>
<changelog author="astieger@suse.com" date="1450612800">- Update to Chromium 47.0.2525.106, fixing the following security
  issue:
  * CVE-2015-6792: Fixes from internal audits and fuzzing. [boo#959458]</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>

</package>
<package pkgid="163146753c058782a67640a0a561ef595fc6d85e611b1f8c68d2451e392aec02" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="50.0.2661.75" rel="144.1"/>

<changelog author="stefan.bruens@rwth-aachen.de" date="1451217600">- Fix crash when trying to enable chromecast extension
  * Add patch: fix_network_api_crash.patch
    Fix https://code.google.com/p/chromium/issues/detail?id=572539</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1451304000">- Enable SSE2 on x86_64</changelog>
<changelog author="tittiatcoke@gmail.com" date="1452772800">- Update to Chromium 47.0.2526.111.
  * No changelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453464000">- Update to Chromium 48.0.2564.82
  * Security fixes:
  - CVE-2016-1612: Bad cast in V8 (boo#963184)
  - CVE-2016-1613: Use-after-free in PDFium (boo#963185)
  - CVE-2016-1614: Information leak in Blink (boo#963186)
  - CVE-2016-1615: Origin confusion in Omnibox (boo#963187)
  - CVE-2016-1616: URL Spoofing (boo#963188)
  - CVE-2016-1617: History sniffing with HSTS and CSP (boo#963189)
  - CVE-2016-1618: Weak random number generator in Blink (boo#963190)
  - CVE-2016-1619: Out-of-bounds read in PDFium (boo#963191)
  - CVE-2016-1620 chromium-browser: various fixes (boo#963192)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1453982400">- Update to Chromium 48.0.2564.97
  * No changelog available
- Update the desktop-kde package so that on Leap and TW, the kwallet5
  becomes the default. desktop-kde/gnome packages are no longer
  recommended as that the default is to automatically detect the
  password store. Only for those users that want to change this,
  they can select a different setup.</changelog>
<changelog author="tchvatal@suse.com" date="1454241600">- Use spec-cleaner
- Remove buildenv check that is moot for the update-alternatives script
- Build against the latest libjpeg rather than jpeg6
- Use update-alternatives as is required by the specification</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454241601">- Build against the in-source libjpeg to prevent graphical issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>

</package>
<package pkgid="5eb76a23cf1e689d7a24eadc4a7516eb14d8482dd3b238d670ec97af3fcc7058" name="chromium-ffmpegsumo" arch="x86_64">
    <version epoch="0" ver="51.0.2704.103" rel="147.1"/>

<changelog author="tittiatcoke@gmail.com" date="1454673600">- Update to Chromium 48.0.2564.103
  * No chnagelog available</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455019200">- Drop completely the option to build with system libraries. This
  could lead to issues (boo#965738)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455192000">- Don't build with libva support for openSUSE 13.2 and lower
  (boo#966082)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455364800">- Drop the libva support completely. It seems that this is causing
  more issues than it actually resolves. (boo#965566)
  * Drop chromium-enable-vaapi.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455537600">- Update to Chromium 48.0.2564.109
  * Security fixes (boo#965999)
  - CVE-2016-1622: Same-origin bypass in Extensions
  - CVE-2016-1623: Same-origin bypass in DOM
  - CVE-2016-1624: Buffer overflow in Brotli
  - CVE-2016-1625: Navigation bypass in Chrome Instant
  - CVE-2016-1626: Out-of-bounds read in PDFium
  - CVE-2016-1627: Various fixes from internal audits, fuzzing
    and other initiatives</changelog>
<changelog author="tittiatcoke@gmail.com" date="1455883200">- Update to Chromium 48.0.2564.116
  * Fixes a critical security flaw:
  - CVE-2016-1629: Same-origin bypass in Blink and Sandbox
    escape in Chrome. (boo#967376)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457092800">- Update to Chromium 49.0.2623.75
  * 26 security fixes, with the most important ones being:
  - CVE-2016-1630: Same-origin bypass in Blink
  - CVE-2016-1631: Same-origin bypass in Pepper Plugin
  - CVE-2016-1632: Bad cast in Extensions
  - CVE-2016-1633: Use-after-free in Blink
  - CVE-2016-1634: Use-after-free in Blink
  - CVE-2016-1635: Use-after-free in Blink
  - CVE-2016-1636: SRI Validation Bypass
  - CVE-2015-8126: Out-of-bounds access in libpng
  - CVE-2016-1637: Information Leak in Skia
  - CVE-2016-1638: WebAPI Bypass
  - CVE-2016-1639: Use-after-free in WebRTC
  - CVE-2016-1640: Origin confusion in Extensions UI
  - CVE-2016-1641: Use-after-free in Favicon
  - CVE-2016-1642: Various fixes from internal audits, fuzzing
    and other initiatives
  - Multiple vulnerabilities in V8 fixed at the tip of the 4.9
    branch (currently 4.9.385.26)
    (boo#969333)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457438400">- Change the build method used on Packman.
  * Drop patch no-clang-on-packman.diff . This is no longer required
    as that ninja is respecting the build flags correctly.
- Drop unused patch skia.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1457524800">- Update to Chromium 49.0.2623.87
  * Security fixes:
  - CVE-2016-1643: Type confusion in Blink (boo#970514)
  - CVE-2016-1644: Use-after-free in Blink (boo#970509)
  - CVE-2016-1645: Out-of-bounds write in PDFium (boo#970511)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459166400">- Update to Chromium 49.0.2623.108
  * Security fixes (boo#972834):
  - CVE-2016-1646: Out-of-bounds read in V8
  - CVE-2016-1647: Use-after-free in Navigation
  - CVE-2016-1648: Use-after-free in Extensions
  - CVE-2016-1649: Buffer overflow in libANGLE
  - CVE-2016-1650: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2016-3679: Multiple vulnerabilities in V8 fixed at the
    tip of the 4.9 branch (currently 4.9.385.33).</changelog>
<changelog author="tittiatcoke@gmail.com" date="1459339200">- Update to Chromium 49.0.2623.110
  * No changelog available</changelog>
<changelog author="astieger@suse.com" date="1460116800">- Update to Chromium 49.0.2623.112
  * Block user removal when login attempt is in progress
  * Add the SuppressUnsupportedOSWarning policy setting
  * Fix how Save-Page-As responds to web requests blocked by extensions
  * Fix preferred width calculation for 8bit ltr runs in rtl blocks</changelog>
<changelog author="tittiatcoke@gmail.com" date="1460635200">- Update to Chromium 50.0.2661.75 (boo#975572)
  * Security Fixes:
  - CVE-2016-1652: Universal XSS in extension bindings
  - CVE-2016-1653: Out-of-bounds write in V8
  - CVE-2016-1651: Out-of-bounds read in Pdfium JPEG2000 decoding
  - CVE-2016-1654: Uninitialized memory read in media
  - CVE-2016-1655: Use-after-free related to extensions
  - CVE-2016-1656: Android downloaded file path restriction bypass
  - CVE-2016-1657: Address bar spoofing
  - CVE-2016-1658: Potential leak of sensitive information to
    malicious extensions
  - CVE-2016-1659: Various fixes from internal audits, fuzzing
    and other initiatives
- add patch to fix GCC builds with component=shared_library:
  chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch</changelog>
<changelog author="jslaby@suse.com" date="1461326400">- _constraints: increase memory. It takes 1.2G to build some .o, and
  with -j4 this results in OOM.</changelog>
<changelog author="astieger@suse.com" date="1461931200">- Update to Chromium 50.0.2661.94 (boo#977830)
  * Security fixes:
  - CVE-2016-1660: Out-of-bounds write in Blink
  - CVE-2016-1661: Memory corruption in cross-process frames
  - CVE-2016-1662: Use-after-free in extensions
  - CVE-2016-1663: Use-after-free in Blink?s V8 bindings
  - CVE-2016-1664: Address bar spoofing
  - CVE-2016-1665: Information leak in V8
  - CVE-2016-1666: Various fixes from internal audits, fuzzing and other initiatives</changelog>
<changelog author="astieger@suse.com" date="1463140800">- Update to Chromium 50.0.2661.102 (boo#979859)
  * Security fixes:
  - CVE-2016-1667: Same origin bypass in DOM
  - CVE-2016-1668: Same origin bypass in Blink V8 bindings
  - CVE-2016-1669: Buffer overflow in V8
  - CVE-2016-1670: Race condition in loader</changelog>
<changelog author="tittiatcoke@gmail.com" date="1464264000">- Update to Chromium 51.0.2704.63 [boo#981886]
  * Security fixes:
  - CVE-2016-1672: Cross-origin bypass in extension bindings
  - CVE-2016-1673: Cross-origin bypass in Blink
  - CVE-2016-1674: Cross-origin bypass in extensions
  - CVE-2016-1675: Cross-origin bypass in Blink
  - CVE-2016-1676: Cross-origin bypass in extension bindings
  - CVE-2016-1677: Type confusion in V8
  - CVE-2016-1678: Heap overflow in V8
  - CVE-2016-1679: Heap use-after-free in V8 bindings
  - CVE-2016-1680: Heap use-after-free in Skia
  - CVE-2016-1681: Heap overflow in PDFium
  - CVE-2016-1682: CSP bypass for ServiceWorker
  - CVE-2016-1683: Out-of-bounds access in libxslt
  - CVE-2016-1684: Integer overflow in libxslt
  - CVE-2016-1685: Out-of-bounds read in PDFium
  - CVE-2016-1686: Out-of-bounds read in PDFium
  - CVE-2016-1687: Information leak in extensions
  - CVE-2016-1688: Out-of-bounds read in V8
  - CVE-2016-1689: Heap buffer overflow in media
  - CVE-2016-1690: Heap use-after-free in Autofill
  - CVE-2016-1691: Heap buffer-overflow in Skia
  - CVE-2016-1692: Limited cross-origin bypass in ServiceWorker
  - CVE-2016-1693: HTTP Download of Software Removal Tool
  - CVE-2016-1694: HPKP pins removed on cache clearance
  - CVE-2016-1695: Various fixes from internal audits, fuzzing
    and other initiatives
- drop chromium-50.0.2661.75-export_blink_Platform_symbols_in_shared_library_builds.patch
  now upstream</changelog>
<changelog author="astieger@suse.com" date="1464868800">- Update to Chromium 51.0.2704.79 [boo#982719]
  * Security fixes:
  - CVE-2016-1696: Cross-origin bypass in Extension bindings
  - CVE-2016-1697: Cross-origin bypass in Blink
  - CVE-2016-1698: Information leak in Extension bindings
  - CVE-2016-1699: Parameter sanitization failure in DevTools
  - CVE-2016-1700: Use-after-free in Extensions
  - CVE-2016-1701: Use-after-free in Autofill
  - CVE-2016-1702: Out-of-bounds read in Skia
  - CVE-2016-1703: Various fixes from internal audits, fuzzing
    and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1465300800">- Update to Chromium 51.0.2704.84
  * No further changelog</changelog>
<changelog author="astieger@suse.com" date="1466164800">- Update to Chromium 51.0.2704.103
  * Security fixes:
  - CVE-2016-1704: Various fixes from internal audits, fuzzing and
    other initiatives (boo#985397)</changelog>

</package>
<package pkgid="26244da3144dde153b0ef34b2d138239b9b90541ae242b7b280ceae67f355485" name="chromium-suid-helper" arch="i586">
    <version epoch="0" ver="31.0.1650.57" rel="8.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376222400">- Update to 30.0.1594
  * Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
- Chromium now expects the SUID-helper installed in the same
  directory as chromium. So let's create a symlink to the helper
  in /usr/lib</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>

</package>
<package pkgid="d437013d3cdfea0364d77b4afef5776811337a9da608399b9af78832f79e1692" name="chromium-suid-helper" arch="i586">
    <version epoch="0" ver="31.0.1650.63" rel="13.7"/>

<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.</changelog>

</package>
<package pkgid="e11408d5c4fd6c73f5b75fae67eed26da0a30a78dc93a14b849f037fc20e1a5e" name="chromium-suid-helper" arch="i586">
    <version epoch="0" ver="32.0.1700.102" rel="17.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>

</package>
<package pkgid="9c8e2643091bdd8be6a099a145bcf10dfb5df034672d4a9156a994258e98daa8" name="chromium-suid-helper" arch="i586">
    <version epoch="0" ver="33.0.1750.117" rel="21.2"/>

<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>

</package>
<package pkgid="77f10b083e6cce39f7465f0ebe0371ee1f70462b6eb11c72b43c2c551a556f65" name="chromium-suid-helper" arch="i586">
    <version epoch="0" ver="33.0.1750.152" rel="25.2"/>

<changelog author="andreas.stieger@gmx.de" date="1377518400">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>

</package>
<package pkgid="b995c7de10b1edeaa892202f7d6e2f041daa6f9f3aa0d18b691c7c240a392918" name="chromium-suid-helper" arch="i586">
    <version epoch="0" ver="34.0.1847.116" rel="29.3"/>

<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>

</package>
<package pkgid="df6fa22e8c7f0eef5f8c459a5266f5c067d2f080b4fb4bc86b0e6f249bd6c36c" name="chromium-suid-helper" arch="i586">
    <version epoch="0" ver="34.0.1847.132" rel="33.1"/>

<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>

</package>
<package pkgid="f42c40998f7169e54f58eba7624c9d1953b0dd16128de16bd01556ca56239f29" name="chromium-suid-helper" arch="i586">
    <version epoch="0" ver="35.0.1916.114" rel="37.4"/>

<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>

</package>
<package pkgid="8cce952c2f0f6d2e9feb0a61989a4b1884ab150766495f7bb3736a4b6e714107" name="chromium-suid-helper" arch="i586">
    <version epoch="0" ver="36.0.1985.125" rel="41.1"/>

<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>

</package>
<package pkgid="88f6f93589b3797bcca3a1e84fba5c06ce7250f5d8f6c98d07a26ccbf67c29df" name="chromium-suid-helper" arch="x86_64">
    <version epoch="0" ver="31.0.1650.57" rel="8.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376222400">- Update to 30.0.1594
  * Bug and stability fixes
- Correct specfile to properly own /usr/bin/chromium (bnc#831584)
- Chromium now expects the SUID-helper installed in the same
  directory as chromium. So let's create a symlink to the helper
  in /usr/lib</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>

</package>
<package pkgid="91398762b32b5be39aaadb87eec85767e7970ab273cbf65e6f298c158011352f" name="chromium-suid-helper" arch="x86_64">
    <version epoch="0" ver="31.0.1650.63" rel="13.7"/>

<changelog author="tittiatcoke@gmail.com" date="1376481600">- Update to 31.0.1601
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376654400">- Change the startup script so that Chromium will not start
  when the chrome_sandbox doesn't have the SETUID.
  (bnc#779448)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.</changelog>

</package>
<package pkgid="086ecb48c1c195dfaea172a36b20d215801ec873fff816a8bf013eade7315626" name="chromium-suid-helper" arch="x86_64">
    <version epoch="0" ver="32.0.1700.102" rel="17.2"/>

<changelog author="tittiatcoke@gmail.com" date="1376827200">- Update to 31.0.1605
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>

</package>
<package pkgid="1d148e35b00585f035c5300e9598145b3e6e0237889808698abd50aa0d3956dd" name="chromium-suid-helper" arch="x86_64">
    <version epoch="0" ver="33.0.1750.117" rel="21.2"/>

<changelog author="tittiatcoke@gmail.com" date="1377432000">- Update to 31.0.1611
  * Bug and stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1377518400">- Add patch exclude_ymp.diff to ensure that 1-click-install files
  are downloaded and NOT opened (bnc#836059)</changelog>
<changelog author="andreas.stieger@gmx.de" date="1377518401">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>

</package>
<package pkgid="5916e02fc99fc539bb57731d5dd08d16205529eebe843b8e07bd9e221458ba49" name="chromium-suid-helper" arch="x86_64">
    <version epoch="0" ver="33.0.1750.152" rel="25.2"/>

<changelog author="andreas.stieger@gmx.de" date="1377518400">- require mozilla-nss-devel &gt;= 3.14 and mozilla-nspr-devel &gt;= 4.9.5</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378123200">- Update to 31.0.1619
  * bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378814400">- Update to 31.0.1627
  * Bug and Stability fixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1379246400">- Update to 31.0.1632
  * Bug and Stability fixes
- Added the flag --enable-threaded-compositing to the startup
  script. This flag seems to be required when hardware acceleration
  is in use. This prevents websites from locking up on users in
  certain cases.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>

</package>
<package pkgid="1b87aa780d0bdce098af949f55f504525928ab943b815483693f986159e2ff7d" name="chromium-suid-helper" arch="x86_64">
    <version epoch="0" ver="34.0.1847.116" rel="29.3"/>

<changelog author="tittiatcoke@gmail.com" date="1380110400">- Update to Chromium 31.0.1640.0
  * Bug and Stability Fixes
- Fix destkop file for chromium by removing extension from icon
- Change the methodology for the Chromium packages. Build is
  now based on an official tarball. As soon as the Beta channel
  catches up with the current version, Chromium will be
  based on the Beta channel instead of svn snapshots</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380283200">- Do not build with system libxml (bnc#825157)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>

</package>
<package pkgid="b921590626c792a661063bc06e96ec7d5a045a868233a910f1dd5375b9dc16e3" name="chromium-suid-helper" arch="x86_64">
    <version epoch="0" ver="34.0.1847.132" rel="33.1"/>

<changelog author="tittiatcoke@gmail.com" date="1380628800">- Add patch chromium-fix-altgrkeys.diff
  - Make sure that AltGr is treated correctly (issue#296835)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380628801">- Update to Chromium 30.0.1599.66
  - Easier searching by image
  - A number of new apps/extension APIs
  - Lots of under the hood changes for stability and performance
- Security fixes:
  + CVE-2013-2906: Races in Web Audio
  + CVE-2013-2907: Out of bounds read in Window.prototype object
  + CVE-2013-2908: Address bar spoofing related to the
    “204 No Content” status code
  + CVE-2013-2909: Use after free in inline-block rendering
  + CVE-2013-2910: Use-after-free in Web Audio
  + CVE-2013-2911: Use-after-free in XSLT
  + CVE-2013-2912: Use-after-free in PPAPI
  + CVE-2013-2913: Use-after-free in XML document parsing
  + CVE-2013-2914: Use after free in the Windows color chooser
    dialog
  + CVE-2013-2915: Address bar spoofing via a malformed scheme
  + CVE-2013-2916: Address bar spoofing related to the “204 No
    Content” status code
  + CVE-2013-2917: Out of bounds read in Web Audio
  + CVE-2013-2918: Use-after-free in DOM
  + CVE-2013-2919: Memory corruption in V8
  + CVE-2013-2920: Out of bounds read in URL parsing
  + CVE-2013-2921: Use-after-free in resource loader
  + CVE-2013-2922: Use-after-free in template element
  + CVE-2013-2923: Various fixes from internal audits, fuzzing and
    other initiatives
  + CVE-2013-2924: Use-after-free in ICU. Upstream bug</changelog>
<changelog author="tittiatcoke@gmail.com" date="1381924800">- Update to Chromium 30.0.1599.101
  - Security Fixes:
    + CVE-2013-2925: Use after free in XHR
    + CVE-2013-2926: Use after free in editing
    + CVE-2013-2927: Use after free in forms.
    + CVE-2013-2928: Various fixes from internal audits,
    fuzzing and other initiatives.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>

</package>
<package pkgid="921e16dffcd05cb3d08bded7fa1cfd564a3ee0b2acd6dd8633acc4afe6cabd14" name="chromium-suid-helper" arch="x86_64">
    <version epoch="0" ver="35.0.1916.114" rel="37.4"/>

<changelog author="tittiatcoke@gmail.com" date="1382702400">- Update to Chromium 30.0.1599.114
  Stable Channel update: fix build for 32bit systems
- Drop patch chromium-fix-chromedriver-build.diff. This is now
  fixed upstream
- For openSUSE versions lower than 13.1, build against the in-tree
  libicu</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383825600">- Enable ARM build for Chromium.
  * Added patches chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch and chromium-fix-arm-sysroot.patch
    to resolve ARM specific build issues</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>

</package>
<package pkgid="666bf2f8f874ad4e8e8d226a9cf9be32c102665a45323a91685de15af989b0c8" name="chromium-suid-helper" arch="x86_64">
    <version epoch="0" ver="36.0.1985.125" rel="41.1"/>

<changelog author="tittiatcoke@gmail.com" date="1384344000">- Update to Chromium 31.0.1650.48
  Stable Channel update:
  - Security fixes:
  * CVE-2013-6621: Use after free related to speech input elements..
  * CVE-2013-6622: Use after free related to media elements.
  * CVE-2013-6623: Out of bounds read in SVG.
  * CVE-2013-6624: Use after free related to “id” attribute strings.
  * CVE-2013-6625: Use after free in DOM ranges.
  * CVE-2013-6626: Address bar spoofing related to interstitial warnings.
  * CVE-2013-6627: Out of bounds read in HTTP parsing.
  * CVE-2013-6628: Issue with certificates not being checked during TLS renegotiation.
  * CVE-2013-2931: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6629: Read of uninitialized memory in libjpeg and libjpeg-turbo.
  * CVE-2013-6630: Read of uninitialized memory in libjpeg-turbo.
  * CVE-2013-6631: Use after free in libjingle.
- Added patch chromium-fix-chromedriver-build.diff to fix the
  chromedriver build</changelog>
<changelog author="tittiatcoke@gmail.com" date="1384603200">- Update to Chromium 31.0.1650.57
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6632: Multiple memory corruption issues.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385553600">- Remove the build flags to build according to the Chrome ffmpeg
  branding and the proprietary codecs. (bnc#847971)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1386244800">- Update to Chromium 31.0.1650.63
  Stable channel update:
  - Security fixes:
  * CVE-2013-6634: Session fixation in sync related to 302 redirects
  * CVE-2013-6635: Use-after-free in editing
  * CVE-2013-6636: Address bar spoofing related to modal dialogs
  * CVE-2013-6637: Various fixes from internal audits, fuzzing and other initiatives.
  * CVE-2013-6638: Buffer overflow in v8
  * CVE-2013-6639: Out of bounds write in v8.
  * CVE-2013-6640: Out of bounds read in v8
  * and 12 other security fixes.
- Updated ExcludeArch to exclude aarch64, ppc, ppc64 and ppc64le.
    This is based on missing build requires (valgrind, v8, etc)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1389873600">- Update to Chromium 32.0.1700.77
  Stable channel update:
  - Security fixes:
  * CVE-2013-6646: Use-after-free in web workers
  * CVE-2013-6641: Use-after-free related to forms
  * CVE-2013-6643: Unprompted sync with an attacker’s
    Google account
  * CVE-2013-6645: Use-after-free related to speech input
    elements
  * CVE-2013-6644: Various fixes from internal audits, fuzzing
    and other initiatives
  - Other:
  * Tab indicators for sound, webcam and casting
  * Automatically blocking malware files
  * Lots of under the hood changes for stability and performance
- Remove patch chromium-fix-chromedriver-build.diff as that
  chromedriver is fixed upstream</changelog>
<changelog author="tittiatcoke@gmail.com" date="1390910400">- Update to Chromium 32.0.1700.102
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6649: Use-after-free in SVG images
  * CVE-2013-6650: Memory corruption in V8
  * and 12 other fixes
  - Other:
  * Mouse Pointer disappears after exiting full-screen mode
  * Drag and drop files into Chromium may not work properly
  * Quicktime Plugin crashes in Chromium
  * Chromium becomes unresponsive
  * Trackpad users may not be able to scroll horizontally
  * Scrolling does not work in combo box
  * Chromium does not work with all CSS minifiers such as
    whitespace around a media query's `and` keyword</changelog>
<changelog author="tittiatcoke@gmail.com" date="1392984000">- Update to Chromium 33.0.1750.117
  Stable channel update:
  - Security Fixes:
  * CVE-2013-6653: Use-after-free related to web contents
  * CVE-2013-6654: Bad cast in SVG
  * CVE-2013-6655: Use-after-free in layout
  * CVE-2013-6656: Information leak in XSS auditor
  * CVE-2013-6657: Information leak in XSS auditor
  * CVE-2013-6658: Use-after-free in layout
  * CVE-2013-6659: Issue with certificates validation in TLS
    handshake
  * CVE-2013-6660: Information leak in drag and drop
  * CVE-2013-6661: Various fixes from internal audits, fuzzing
    and other initiatives. Of these, seven are
    fixes for issues that could have allowed for
    sandbox escapes from compromised renderers.
  - Other:
  - Google Chrome Frame has been retired
- Added gn-binaries.tar.xz to have the right version of the Google
  depot tools during build.
- Added patch arm_disable_gn.patch to disable GN on ARM builds</changelog>
<changelog author="tittiatcoke@gmail.com" date="1394712000">- Update to Chromium 33.0.1750.149
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1700: Use-after-free in speech
  * CVE-2014-1701: UXSS in events
  * CVE-2014-1702: Use-after-free in web database
  * CVE-2014-1703: Potential sandbox escape due to a
    use-after-free in web sockets
  * CVE-2014-1704: Multiple vulnerabilities in V8 fixed in
    version 3.23.17.18</changelog>
<changelog author="tittiatcoke@gmail.com" date="1395057600">- Update to Chromium 33.0.1750.152
  Stable channel uodate:
  - Security fixes:
  * CVE-2014-1713: Use-after-free in Blink bindings
  * CVE-2014-1714: Windows clipboard vulnerability
  * CVE-2014-1705: Memory corruption in V8
  * CVE-2014-1715: Directory traversal issue</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396785600">- If people want to install newer versions of the ffmpeg library
  then let them. This is what they want.
- Remove the buildscript from the sources</changelog>
<changelog author="tittiatcoke@gmail.com" date="1396958400">- Update to Chromium 34.0.1847.116
  * Responsive Images and Unprefixed Web Audio
  * Import supervised users onto new computers
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  - Security fixes:
  * CVE-2014-1716: UXSS in V8
  * CVE-2014-1717: OOB access in V8
  * CVE-2014-1718: Integer overflow in compositor
  * CVE-2014-1719: Use-after-free in web workers
  * CVE-2014-1720: Use-after-free in DOM
  * CVE-2014-1721: Memory corruption in V8
  * CVE-2014-1722: Use-after-free in rendering
  * CVE-2014-1723: Url confusion with RTL characters
  * CVE-2014-1724: Use-after-free in speech
  * CVE-2014-1725: OOB read with window property
  * CVE-2014-1726: Local cross-origin bypass
  * CVE-2014-1727: Use-after-free in forms
  * CVE-2014-1728: Various fixes from internal audits,
    fuzzing and other initiatives
  * CVE-2014-1729: Multiple vulnerabilities in V8
- No longer build against system libraries as that Chromium works
  a lot better and crashes less on websites than with system libs
- Added package depot_tools.tar.gz as that the chromium build now
  requires it during the initial build phase. It just contains some
  utilities and nothing from it is being installed.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397044800">- Add patch arm_use_gold.patch to use the right gold binaries on
  ARM. Hopefully this resolves the build issues with running out of
  memory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1397131200">- Add patch chromium-fix-arm-skia-memset.patch to resolve a linking
  issue on ARM with regards to missing symbols.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398427200">- Update to Chromium 34.0.1847.131
  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1398686400">- Update to Chromium 34.0.1847.132
  * Security update:
  - CVE-2014-1730: Type confusion in V8
  - CVE-2014-1731: Type confusion in DOM
  - CVE-2014-1732: Use-after-free in Speech Recognition
  - CVE-2014-1733: Compiler bug in Seccomp-BPF
  - CVE-2014-1734: Various fixes from internal audits, fuzzing
    and other initiatives
  - CVE-2014-1735: Multiple vulnerabilities in V8 fixed in
    version 3.24.35.33</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400068800">- Update to Chromium 34.0.1847.137
  * Security updates:
  - CVE-2014-1740: Use-after-free in WebSockets
  - CVE-2014-1741: Integer overflow in DOM range
  - CVE-2014-1742: Use-after-free in editing</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400673600">- Update to Chromium 35.0.1916.114
  New Functionality
  * More developer control over touch input
  * New JavaScript features
  * Unprefixed Shadow DOM
  * A number of new apps/extension APIs
  * Lots of under the hood changes for stability and performance
  Security fixes:
  * CVE-2014-1743: Use-after-free in styles
  * CVE-2014-1744: Integer overflow in audio
  * CVE-2014-1745: Use-after-free in SVG
  * CVE-2014-1746: Out-of-bounds read in media filters
  * CVE-2014-1747: UXSS with local MHTML file
  * CVE-2014-1748: UI spoofing with scrollbar
  * CVE-2014-1749: Various fixes from internal audits, fuzzing and other initiatives
  * CVE-2014-3152: Integer underflow in V8 fixed
  and 17 more for which no detailed information is given.
- Drop patch chromium-vendor.patch.in as that does no longer apply
  due to upstream changes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1400760000">- Use also Ninja for openSUSE 12.3. This is the only method
  supported by upstream
- Drop support for Arm. Despite that chromium builds on Arm, it can
  not complete the link process and dies with out-of-memory, etc.
  Drop the specific Arm patches:
  * arm_disable_gn.patch, arm_use_gold.patch, chromium-arm-webrtc-fix.patch,
    chromium-fix-arm-icu.patch, chromium-fix-arm-skia-memset.patch,
    chromium-fix-arm-sysroot.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1402488000">- Update to Chromium 35.0.1916.153
  Security fixes (bnc#882264,bnc#882264,bnc#882265,bnc#882263):
  * CVE-2014-3154: Use-after-free in filesystem api
  * CVE-2014-3155: Out-of-bounds read in SPDY
  * CVE-2014-3156: Buffer overflow in clipboard
  * CVE-2014-3157: Heap overflow in media</changelog>
<changelog author="tittiatcoke@gmail.com" date="1406030400">- Update to Chromium 36.0.1985.125
  New Functionality:
  * Rich Notifications Improvements
  * An Updated Incognito / Guest NTP design
  * The addition of a Browser crash recovery bubble
  * Chrome App Launcher for Linux
  * Lots of under the hood changes for stability and performance
  Security Fixes (bnc#887952,bnc#887955):
  * CVE-2014-3160: Same-Origin-Policy bypass in SVG
  * CVE-2014-3162: Various fixes from internal audits, fuzzing
    and other initiatives
  and 24 more fixes for which no description was given.
  Packaging changes:
  * Switch to newer method to retrieve toolchain packages. Dropping
    the three naclsdk_*tgz files. Everything is now included in the
    toolchain_linux_x86.tar.bz2 tarball
  * Add Courgette.tar.xz as that the build process now requires
    some files from Courgette in order to build succesfully. This
    does not mean that Courgette is build/delivered.</changelog>

</package>
<package pkgid="8e9feb4d3c5777fdf1a58cb9429b9cdba81cdbf74ebda7e0ca828701d21cc821" name="cifs-utils" arch="i586">
    <version epoch="0" ver="6.2" rel="4.1"/>

<changelog author="lmuelle@suse.com" date="1334836800">- Don't care at all what the real uid is when we call toggle_dac_capability().</changelog>
<changelog author="lmuelle@suse.com" date="1334836801">- Don't package get-, setcifsacl, and cifs.idmap for Mandriva pre-201100.</changelog>
<changelog author="lmuelle@suse.com" date="1337169600">- BuildRequire libtalloc2-devel instead of libtalloc-devel for post 12.1
  systems.</changelog>
<changelog author="lmuelle@suse.com" date="1338379200">- Update to cifs-utils 5.5.
  + mount.cifs: don't pass credentials= option to the kernel
  + doc: update mailing list
  + mount.cifs: don't send a mandatory ver= option to the kernel
  + mount.cifs: remove smb2 multicall binary code
  + doc: remove old XML sources for mount.cifs.8 and cifs.upcall.8
  + mount.cifs: unused variables</changelog>
<changelog author="lmuelle@suse.com" date="1338465600">- BuildRequire libtalloc-devel unconditionally.</changelog>
<changelog author="lmuelle@suse.com" date="1338552000">- BuildIgnore libtalloc to prevent a package conflict on Fedora systems.</changelog>
<changelog author="lmuelle@suse.com" date="1338552001">- Do not call autoreconf while build.</changelog>
<changelog author="lmuelle@suse.com" date="1338552002">- BuildRequire libwbclient-devel for CentOS, Fedora, and RHEL builds too.</changelog>
<changelog author="lmuelle@suse.com" date="1339502400">- mount.cifs: set rc to 0 in libcap toggle_dac_capability</changelog>
<changelog author="lmuelle@suse.com" date="1339502401">- mount.cifs: initialize oldfsgid to surpress a warning while building for
  RHEL 4 or CentOS 5.</changelog>
<changelog author="lmuelle@suse.com" date="1344427200">- Update to cifs-utils 5.6.
  + -Werror has been removed by default from CFLAGS
  + PIE and RELRO are enabled by default at build time
  + better integration with systemd by allowing the use of
    /bin/systemd-ask-password if available
  + better checks and warnings from cifscreds when used in environments that
    do not have a session keyring
- No longer initialize oldfsgid inside acquire_mountpoint() of mount.cifs.c as
  - Werror got removed.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353499200">- Version 5.8
  * NFS-style device names are being deprecated in 6.0.
  * Many bugs in cifs.idmap, getcifsacl and setcifsacl have been fixed.</changelog>
<changelog author="lmuelle@suse.com" date="1358337600">- Update to cifs-utils 5.9.
  + new plugin architecture for the ID mapping tools
  + DOMAIN\username@password format for username= arguments is removed
  + full RELRO (vs. partial) is now enabled on all binaries</changelog>
<changelog author="lmuelle@suse.com" date="1358942400">- Set parsed_info-&gt;got_user when a cred file supplies a username;
  (bnc#800018).</changelog>
<changelog author="lmuelle@suse.com" date="1361448000">- Remove superfluous restart or stop of the cifs service; (bnc#804822).</changelog>
<changelog author="lmuelle@suse.com" date="1361880000">- Add cifstab named configuration file to post-12.2 systems; (bnc#804822);
  (bnc#821889).
- Really use of the existing cifs init script; (bnc#697218).</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="lmuelle@suse.com" date="1381233600">- Update to cifs-utils 6.2.
  + setcifsacl can now work without a plugin
  + systemd-ask-password is found using $PATH now
  + cifs.upcall now works with KEYRING: credcaches
- Update to cifs-utils 6.1.
  + minor bugfixes
  + allow cifs.upcall to use dedicated keytab
- Update to cifs-utils 6.0.
  + minor bugfixes and documentation updates
  + support for NFS-style device names removed</changelog>
<changelog author="lmuelle@suse.com" date="1381320000">- Verify source tar ball gpg signature.</changelog>
<changelog author="ohering@suse.de" date="1422532800">- Handle external rootflags and internal rootfsopts properly to
  preserve mount options from fstab (bnc#887379)</changelog>

</package>
<package pkgid="37d405b3d39cb4616a8eab2d8f53c09e971e63845644923717ec7a23945f728d" name="cifs-utils" arch="src">
    <version epoch="0" ver="6.2" rel="4.1"/>

<changelog author="lmuelle@suse.com" date="1334836800">- Don't care at all what the real uid is when we call toggle_dac_capability().</changelog>
<changelog author="lmuelle@suse.com" date="1334836801">- Don't package get-, setcifsacl, and cifs.idmap for Mandriva pre-201100.</changelog>
<changelog author="lmuelle@suse.com" date="1337169600">- BuildRequire libtalloc2-devel instead of libtalloc-devel for post 12.1
  systems.</changelog>
<changelog author="lmuelle@suse.com" date="1338379200">- Update to cifs-utils 5.5.
  + mount.cifs: don't pass credentials= option to the kernel
  + doc: update mailing list
  + mount.cifs: don't send a mandatory ver= option to the kernel
  + mount.cifs: remove smb2 multicall binary code
  + doc: remove old XML sources for mount.cifs.8 and cifs.upcall.8
  + mount.cifs: unused variables</changelog>
<changelog author="lmuelle@suse.com" date="1338465600">- BuildRequire libtalloc-devel unconditionally.</changelog>
<changelog author="lmuelle@suse.com" date="1338552000">- BuildIgnore libtalloc to prevent a package conflict on Fedora systems.</changelog>
<changelog author="lmuelle@suse.com" date="1338552001">- Do not call autoreconf while build.</changelog>
<changelog author="lmuelle@suse.com" date="1338552002">- BuildRequire libwbclient-devel for CentOS, Fedora, and RHEL builds too.</changelog>
<changelog author="lmuelle@suse.com" date="1339502400">- mount.cifs: set rc to 0 in libcap toggle_dac_capability</changelog>
<changelog author="lmuelle@suse.com" date="1339502401">- mount.cifs: initialize oldfsgid to surpress a warning while building for
  RHEL 4 or CentOS 5.</changelog>
<changelog author="lmuelle@suse.com" date="1344427200">- Update to cifs-utils 5.6.
  + -Werror has been removed by default from CFLAGS
  + PIE and RELRO are enabled by default at build time
  + better integration with systemd by allowing the use of
    /bin/systemd-ask-password if available
  + better checks and warnings from cifscreds when used in environments that
    do not have a session keyring
- No longer initialize oldfsgid inside acquire_mountpoint() of mount.cifs.c as
  - Werror got removed.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353499200">- Version 5.8
  * NFS-style device names are being deprecated in 6.0.
  * Many bugs in cifs.idmap, getcifsacl and setcifsacl have been fixed.</changelog>
<changelog author="lmuelle@suse.com" date="1358337600">- Update to cifs-utils 5.9.
  + new plugin architecture for the ID mapping tools
  + DOMAIN\username@password format for username= arguments is removed
  + full RELRO (vs. partial) is now enabled on all binaries</changelog>
<changelog author="lmuelle@suse.com" date="1358942400">- Set parsed_info-&gt;got_user when a cred file supplies a username;
  (bnc#800018).</changelog>
<changelog author="lmuelle@suse.com" date="1361448000">- Remove superfluous restart or stop of the cifs service; (bnc#804822).</changelog>
<changelog author="lmuelle@suse.com" date="1361880000">- Add cifstab named configuration file to post-12.2 systems; (bnc#804822);
  (bnc#821889).
- Really use of the existing cifs init script; (bnc#697218).</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="lmuelle@suse.com" date="1381233600">- Update to cifs-utils 6.2.
  + setcifsacl can now work without a plugin
  + systemd-ask-password is found using $PATH now
  + cifs.upcall now works with KEYRING: credcaches
- Update to cifs-utils 6.1.
  + minor bugfixes
  + allow cifs.upcall to use dedicated keytab
- Update to cifs-utils 6.0.
  + minor bugfixes and documentation updates
  + support for NFS-style device names removed</changelog>
<changelog author="lmuelle@suse.com" date="1381320000">- Verify source tar ball gpg signature.</changelog>
<changelog author="ohering@suse.de" date="1422532800">- Handle external rootflags and internal rootfsopts properly to
  preserve mount options from fstab (bnc#887379)</changelog>

</package>
<package pkgid="ba049aeeba360cab184f5d7c5d283f209e19db3efb721a59bbca14ab57647c6e" name="cifs-utils" arch="x86_64">
    <version epoch="0" ver="6.2" rel="4.1"/>

<changelog author="lmuelle@suse.com" date="1334836800">- Don't care at all what the real uid is when we call toggle_dac_capability().</changelog>
<changelog author="lmuelle@suse.com" date="1334836801">- Don't package get-, setcifsacl, and cifs.idmap for Mandriva pre-201100.</changelog>
<changelog author="lmuelle@suse.com" date="1337169600">- BuildRequire libtalloc2-devel instead of libtalloc-devel for post 12.1
  systems.</changelog>
<changelog author="lmuelle@suse.com" date="1338379200">- Update to cifs-utils 5.5.
  + mount.cifs: don't pass credentials= option to the kernel
  + doc: update mailing list
  + mount.cifs: don't send a mandatory ver= option to the kernel
  + mount.cifs: remove smb2 multicall binary code
  + doc: remove old XML sources for mount.cifs.8 and cifs.upcall.8
  + mount.cifs: unused variables</changelog>
<changelog author="lmuelle@suse.com" date="1338465600">- BuildRequire libtalloc-devel unconditionally.</changelog>
<changelog author="lmuelle@suse.com" date="1338552000">- BuildIgnore libtalloc to prevent a package conflict on Fedora systems.</changelog>
<changelog author="lmuelle@suse.com" date="1338552001">- Do not call autoreconf while build.</changelog>
<changelog author="lmuelle@suse.com" date="1338552002">- BuildRequire libwbclient-devel for CentOS, Fedora, and RHEL builds too.</changelog>
<changelog author="lmuelle@suse.com" date="1339502400">- mount.cifs: set rc to 0 in libcap toggle_dac_capability</changelog>
<changelog author="lmuelle@suse.com" date="1339502401">- mount.cifs: initialize oldfsgid to surpress a warning while building for
  RHEL 4 or CentOS 5.</changelog>
<changelog author="lmuelle@suse.com" date="1344427200">- Update to cifs-utils 5.6.
  + -Werror has been removed by default from CFLAGS
  + PIE and RELRO are enabled by default at build time
  + better integration with systemd by allowing the use of
    /bin/systemd-ask-password if available
  + better checks and warnings from cifscreds when used in environments that
    do not have a session keyring
- No longer initialize oldfsgid inside acquire_mountpoint() of mount.cifs.c as
  - Werror got removed.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353499200">- Version 5.8
  * NFS-style device names are being deprecated in 6.0.
  * Many bugs in cifs.idmap, getcifsacl and setcifsacl have been fixed.</changelog>
<changelog author="lmuelle@suse.com" date="1358337600">- Update to cifs-utils 5.9.
  + new plugin architecture for the ID mapping tools
  + DOMAIN\username@password format for username= arguments is removed
  + full RELRO (vs. partial) is now enabled on all binaries</changelog>
<changelog author="lmuelle@suse.com" date="1358942400">- Set parsed_info-&gt;got_user when a cred file supplies a username;
  (bnc#800018).</changelog>
<changelog author="lmuelle@suse.com" date="1361448000">- Remove superfluous restart or stop of the cifs service; (bnc#804822).</changelog>
<changelog author="lmuelle@suse.com" date="1361880000">- Add cifstab named configuration file to post-12.2 systems; (bnc#804822);
  (bnc#821889).
- Really use of the existing cifs init script; (bnc#697218).</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="lmuelle@suse.com" date="1381233600">- Update to cifs-utils 6.2.
  + setcifsacl can now work without a plugin
  + systemd-ask-password is found using $PATH now
  + cifs.upcall now works with KEYRING: credcaches
- Update to cifs-utils 6.1.
  + minor bugfixes
  + allow cifs.upcall to use dedicated keytab
- Update to cifs-utils 6.0.
  + minor bugfixes and documentation updates
  + support for NFS-style device names removed</changelog>
<changelog author="lmuelle@suse.com" date="1381320000">- Verify source tar ball gpg signature.</changelog>
<changelog author="ohering@suse.de" date="1422532800">- Handle external rootflags and internal rootfsopts properly to
  preserve mount options from fstab (bnc#887379)</changelog>

</package>
<package pkgid="0054fa4155262964267373b684b9f5318ebd510e50bd1461e5327208c9b62145" name="cifs-utils-devel" arch="i586">
    <version epoch="0" ver="6.2" rel="4.1"/>

<changelog author="lmuelle@suse.com" date="1334836800">- Don't care at all what the real uid is when we call toggle_dac_capability().</changelog>
<changelog author="lmuelle@suse.com" date="1334836801">- Don't package get-, setcifsacl, and cifs.idmap for Mandriva pre-201100.</changelog>
<changelog author="lmuelle@suse.com" date="1337169600">- BuildRequire libtalloc2-devel instead of libtalloc-devel for post 12.1
  systems.</changelog>
<changelog author="lmuelle@suse.com" date="1338379200">- Update to cifs-utils 5.5.
  + mount.cifs: don't pass credentials= option to the kernel
  + doc: update mailing list
  + mount.cifs: don't send a mandatory ver= option to the kernel
  + mount.cifs: remove smb2 multicall binary code
  + doc: remove old XML sources for mount.cifs.8 and cifs.upcall.8
  + mount.cifs: unused variables</changelog>
<changelog author="lmuelle@suse.com" date="1338465600">- BuildRequire libtalloc-devel unconditionally.</changelog>
<changelog author="lmuelle@suse.com" date="1338552000">- BuildIgnore libtalloc to prevent a package conflict on Fedora systems.</changelog>
<changelog author="lmuelle@suse.com" date="1338552001">- Do not call autoreconf while build.</changelog>
<changelog author="lmuelle@suse.com" date="1338552002">- BuildRequire libwbclient-devel for CentOS, Fedora, and RHEL builds too.</changelog>
<changelog author="lmuelle@suse.com" date="1339502400">- mount.cifs: set rc to 0 in libcap toggle_dac_capability</changelog>
<changelog author="lmuelle@suse.com" date="1339502401">- mount.cifs: initialize oldfsgid to surpress a warning while building for
  RHEL 4 or CentOS 5.</changelog>
<changelog author="lmuelle@suse.com" date="1344427200">- Update to cifs-utils 5.6.
  + -Werror has been removed by default from CFLAGS
  + PIE and RELRO are enabled by default at build time
  + better integration with systemd by allowing the use of
    /bin/systemd-ask-password if available
  + better checks and warnings from cifscreds when used in environments that
    do not have a session keyring
- No longer initialize oldfsgid inside acquire_mountpoint() of mount.cifs.c as
  - Werror got removed.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353499200">- Version 5.8
  * NFS-style device names are being deprecated in 6.0.
  * Many bugs in cifs.idmap, getcifsacl and setcifsacl have been fixed.</changelog>
<changelog author="lmuelle@suse.com" date="1358337600">- Update to cifs-utils 5.9.
  + new plugin architecture for the ID mapping tools
  + DOMAIN\username@password format for username= arguments is removed
  + full RELRO (vs. partial) is now enabled on all binaries</changelog>
<changelog author="lmuelle@suse.com" date="1358942400">- Set parsed_info-&gt;got_user when a cred file supplies a username;
  (bnc#800018).</changelog>
<changelog author="lmuelle@suse.com" date="1361448000">- Remove superfluous restart or stop of the cifs service; (bnc#804822).</changelog>
<changelog author="lmuelle@suse.com" date="1361880000">- Add cifstab named configuration file to post-12.2 systems; (bnc#804822);
  (bnc#821889).
- Really use of the existing cifs init script; (bnc#697218).</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="lmuelle@suse.com" date="1381233600">- Update to cifs-utils 6.2.
  + setcifsacl can now work without a plugin
  + systemd-ask-password is found using $PATH now
  + cifs.upcall now works with KEYRING: credcaches
- Update to cifs-utils 6.1.
  + minor bugfixes
  + allow cifs.upcall to use dedicated keytab
- Update to cifs-utils 6.0.
  + minor bugfixes and documentation updates
  + support for NFS-style device names removed</changelog>
<changelog author="lmuelle@suse.com" date="1381320000">- Verify source tar ball gpg signature.</changelog>
<changelog author="ohering@suse.de" date="1422532800">- Handle external rootflags and internal rootfsopts properly to
  preserve mount options from fstab (bnc#887379)</changelog>

</package>
<package pkgid="d7843be0352a3abe1e948ccdfa760fc1af1cef7aff9a60414315b26d03b2ae4b" name="cifs-utils-devel" arch="x86_64">
    <version epoch="0" ver="6.2" rel="4.1"/>

<changelog author="lmuelle@suse.com" date="1334836800">- Don't care at all what the real uid is when we call toggle_dac_capability().</changelog>
<changelog author="lmuelle@suse.com" date="1334836801">- Don't package get-, setcifsacl, and cifs.idmap for Mandriva pre-201100.</changelog>
<changelog author="lmuelle@suse.com" date="1337169600">- BuildRequire libtalloc2-devel instead of libtalloc-devel for post 12.1
  systems.</changelog>
<changelog author="lmuelle@suse.com" date="1338379200">- Update to cifs-utils 5.5.
  + mount.cifs: don't pass credentials= option to the kernel
  + doc: update mailing list
  + mount.cifs: don't send a mandatory ver= option to the kernel
  + mount.cifs: remove smb2 multicall binary code
  + doc: remove old XML sources for mount.cifs.8 and cifs.upcall.8
  + mount.cifs: unused variables</changelog>
<changelog author="lmuelle@suse.com" date="1338465600">- BuildRequire libtalloc-devel unconditionally.</changelog>
<changelog author="lmuelle@suse.com" date="1338552000">- BuildIgnore libtalloc to prevent a package conflict on Fedora systems.</changelog>
<changelog author="lmuelle@suse.com" date="1338552001">- Do not call autoreconf while build.</changelog>
<changelog author="lmuelle@suse.com" date="1338552002">- BuildRequire libwbclient-devel for CentOS, Fedora, and RHEL builds too.</changelog>
<changelog author="lmuelle@suse.com" date="1339502400">- mount.cifs: set rc to 0 in libcap toggle_dac_capability</changelog>
<changelog author="lmuelle@suse.com" date="1339502401">- mount.cifs: initialize oldfsgid to surpress a warning while building for
  RHEL 4 or CentOS 5.</changelog>
<changelog author="lmuelle@suse.com" date="1344427200">- Update to cifs-utils 5.6.
  + -Werror has been removed by default from CFLAGS
  + PIE and RELRO are enabled by default at build time
  + better integration with systemd by allowing the use of
    /bin/systemd-ask-password if available
  + better checks and warnings from cifscreds when used in environments that
    do not have a session keyring
- No longer initialize oldfsgid inside acquire_mountpoint() of mount.cifs.c as
  - Werror got removed.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353499200">- Version 5.8
  * NFS-style device names are being deprecated in 6.0.
  * Many bugs in cifs.idmap, getcifsacl and setcifsacl have been fixed.</changelog>
<changelog author="lmuelle@suse.com" date="1358337600">- Update to cifs-utils 5.9.
  + new plugin architecture for the ID mapping tools
  + DOMAIN\username@password format for username= arguments is removed
  + full RELRO (vs. partial) is now enabled on all binaries</changelog>
<changelog author="lmuelle@suse.com" date="1358942400">- Set parsed_info-&gt;got_user when a cred file supplies a username;
  (bnc#800018).</changelog>
<changelog author="lmuelle@suse.com" date="1361448000">- Remove superfluous restart or stop of the cifs service; (bnc#804822).</changelog>
<changelog author="lmuelle@suse.com" date="1361880000">- Add cifstab named configuration file to post-12.2 systems; (bnc#804822);
  (bnc#821889).
- Really use of the existing cifs init script; (bnc#697218).</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="lmuelle@suse.com" date="1381233600">- Update to cifs-utils 6.2.
  + setcifsacl can now work without a plugin
  + systemd-ask-password is found using $PATH now
  + cifs.upcall now works with KEYRING: credcaches
- Update to cifs-utils 6.1.
  + minor bugfixes
  + allow cifs.upcall to use dedicated keytab
- Update to cifs-utils 6.0.
  + minor bugfixes and documentation updates
  + support for NFS-style device names removed</changelog>
<changelog author="lmuelle@suse.com" date="1381320000">- Verify source tar ball gpg signature.</changelog>
<changelog author="ohering@suse.de" date="1422532800">- Handle external rootflags and internal rootfsopts properly to
  preserve mount options from fstab (bnc#887379)</changelog>

</package>
<package pkgid="527266f9cef9769df09fe08030aaeb080eb532381efbd93d43b6c0685afd71b3" name="clamav" arch="i586">
    <version epoch="0" ver="0.98.1" rel="6.2"/>

<changelog author="max@novell.com" date="1297252800">- Security update 0.9.7 (bnc#673753):
  ClamAV 0.97 brings many improvements, including complete Windows
  support, support for signatures based on SHA1 and SHA256, better
  error detection, as well as speed and memory optimizations. The
  complete list of changes is available in the ChangeLog file. For
  upgrade notes and tips please see:
  https://wiki.clamav.net/Main/UpgradeNotes097</changelog>
<changelog author="max@novell.com" date="1307620800">- New version 0.97.1 (bnc#698999):
  * libclamav/mew.c: harden boundary check on e8/e9 fixup
  * libclamav/matcher-hash.c: in hm_sort don't swap an item with
    itself (bb#2818)
  * freshclam/manager.c: fix return code of Rfc2822DateTime()
    (bb#2809)
  * libclamav/pdf.c: better detection for encrypted PDFs
    (bb #2448)
  * libclamav/c++: add support for building with external LLVM 2.9,
    and drop external 2.8 support
  * clamd: log request ip address for instream scans #bb2592
  * libclamav/c++/llvm/lib/Target/X86/X86InstrInfo.td: bb #2763
    don't assert on AVX chips (Intel Core i5 and i7)
  * sigtool: properly normalize html files (bb#2764)
  * sigtool/sigtool.c: fix formatting of hash dbs (bb#2765)
  * freshclam: add mirror statistics mechanism
  * libclamav/pe_icons.c: don't sigbus on sparc (bb#2695)
  * libclamav/pe.c: reset corrupted status before bytecode
    hooks (bb#2544)
  * sigtool, freshclam: put .info on top of container to speed
    up loading
  * sigtool: fix --verify-cdiff
  * sigtool: allow arbitrary names for --build
  * clamdscan: fix file exclusion (bb#2579)
  * clamd: add new option ClamukoExcludeUID (bb#2260)
  * libclamav/elf.c: fix incorrect detection of Broken.Executable
    (bb#2580)
  * shared/output.c: fix empty lines in syslog (bb#2578)
  * clamd: update description of ReadTimeout (bb#2565)
  * clamd: add new config option BytecodeUnsigned (bb#2537);
    drop "None" from BytecodeSecurity
  * clamscan: add new switch --bytecode-unsigned and drop
  - -bytecode-trust-all
  * sigtool/sigtool.c: improve handling of bytecode.info (bb#2292)
  * libclamav/others.c: make sure TLS key is initializer
    (bb #2588).
  * configure: check for enable_extended_FILE_stdio (bb #2542)
  * sigtool/sigtool.c: handle all signature formats with
  - -(list|find)-sigs (bb#2534)</changelog>
<changelog author="max@novell.com" date="1311681600">- New version 0.97.2 (bnc#708263):
  * libclamav/matcher-hash.c: off by one read in cli_hm_scan
    (bb#2818, CVE-2011-2721).
  * libclamav/pdf.c: fix encrypted pdf detection (bb #2988)
  * clamav-milter/clamfi.c: fix typo in error message (bb#3040)
  * libclamav/lzma_iface.c: shut up huge alloc warns for 7z/lzma
    (bb#2913)
  * libclamav/c++/bytecode2llvm.cpp: fix use of unaddressable data
    in bytecode_watchdog.
  * libclamav/phishcheck.c: fix safebrowsing detection on certain
    URLs</changelog>
<changelog author="max@suse.com" date="1318939200">- New version 0.97.3 (bnc#724856, CVE-2011-3627):
  * freshclam/manager.c: fix error when compiling without DNS
    support (bb#3056)
  * libclamav/pdf.c: flag and dump PDF objects with /Launch
    (bb #3514)
  * libclamav/bytecode.c,bytecode_api.c: fix recursion level crash
    (bb #3706).
  * docs: clarify behavior of --scan-*/Scan* options (bb#3134)
  * libclamav/bytecode_vm.c: fix opcode 20 error (bb #3100)
  * freshclam: fix pidfile removal (bb#3499)
  * libclamav/pdf.c:  fix incorrect blocking of some encrypted PDF
    with empty user passwords. (bb #3364)
  * sigtool/sigtool.c: fix calculation of max signature length</changelog>
<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>

</package>
<package pkgid="48318284370859e9429f8ba9fbd5d45bc21f984ed0508c040b335dd454717d50" name="clamav" arch="i586">
    <version epoch="0" ver="0.98.3" rel="10.2"/>

<changelog author="max@novell.com" date="1307620800">- New version 0.97.1 (bnc#698999):
  * libclamav/mew.c: harden boundary check on e8/e9 fixup
  * libclamav/matcher-hash.c: in hm_sort don't swap an item with
    itself (bb#2818)
  * freshclam/manager.c: fix return code of Rfc2822DateTime()
    (bb#2809)
  * libclamav/pdf.c: better detection for encrypted PDFs
    (bb #2448)
  * libclamav/c++: add support for building with external LLVM 2.9,
    and drop external 2.8 support
  * clamd: log request ip address for instream scans #bb2592
  * libclamav/c++/llvm/lib/Target/X86/X86InstrInfo.td: bb #2763
    don't assert on AVX chips (Intel Core i5 and i7)
  * sigtool: properly normalize html files (bb#2764)
  * sigtool/sigtool.c: fix formatting of hash dbs (bb#2765)
  * freshclam: add mirror statistics mechanism
  * libclamav/pe_icons.c: don't sigbus on sparc (bb#2695)
  * libclamav/pe.c: reset corrupted status before bytecode
    hooks (bb#2544)
  * sigtool, freshclam: put .info on top of container to speed
    up loading
  * sigtool: fix --verify-cdiff
  * sigtool: allow arbitrary names for --build
  * clamdscan: fix file exclusion (bb#2579)
  * clamd: add new option ClamukoExcludeUID (bb#2260)
  * libclamav/elf.c: fix incorrect detection of Broken.Executable
    (bb#2580)
  * shared/output.c: fix empty lines in syslog (bb#2578)
  * clamd: update description of ReadTimeout (bb#2565)
  * clamd: add new config option BytecodeUnsigned (bb#2537);
    drop "None" from BytecodeSecurity
  * clamscan: add new switch --bytecode-unsigned and drop
  - -bytecode-trust-all
  * sigtool/sigtool.c: improve handling of bytecode.info (bb#2292)
  * libclamav/others.c: make sure TLS key is initializer
    (bb #2588).
  * configure: check for enable_extended_FILE_stdio (bb #2542)
  * sigtool/sigtool.c: handle all signature formats with
  - -(list|find)-sigs (bb#2534)</changelog>
<changelog author="max@novell.com" date="1311681600">- New version 0.97.2 (bnc#708263):
  * libclamav/matcher-hash.c: off by one read in cli_hm_scan
    (bb#2818, CVE-2011-2721).
  * libclamav/pdf.c: fix encrypted pdf detection (bb #2988)
  * clamav-milter/clamfi.c: fix typo in error message (bb#3040)
  * libclamav/lzma_iface.c: shut up huge alloc warns for 7z/lzma
    (bb#2913)
  * libclamav/c++/bytecode2llvm.cpp: fix use of unaddressable data
    in bytecode_watchdog.
  * libclamav/phishcheck.c: fix safebrowsing detection on certain
    URLs</changelog>
<changelog author="max@suse.com" date="1318939200">- New version 0.97.3 (bnc#724856, CVE-2011-3627):
  * freshclam/manager.c: fix error when compiling without DNS
    support (bb#3056)
  * libclamav/pdf.c: flag and dump PDF objects with /Launch
    (bb #3514)
  * libclamav/bytecode.c,bytecode_api.c: fix recursion level crash
    (bb #3706).
  * docs: clarify behavior of --scan-*/Scan* options (bb#3134)
  * libclamav/bytecode_vm.c: fix opcode 20 error (bb #3100)
  * freshclam: fix pidfile removal (bb#3499)
  * libclamav/pdf.c:  fix incorrect blocking of some encrypted PDF
    with empty user passwords. (bb #3364)
  * sigtool/sigtool.c: fix calculation of max signature length</changelog>
<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>

</package>
<package pkgid="c3c418b88370301a7f4c1e2f0b80ff4b33f0c98dc9dcaf3417fca13dc2dbf03e" name="clamav" arch="i586">
    <version epoch="0" ver="0.98.4" rel="14.1"/>

<changelog author="max@novell.com" date="1311681600">- New version 0.97.2 (bnc#708263):
  * libclamav/matcher-hash.c: off by one read in cli_hm_scan
    (bb#2818, CVE-2011-2721).
  * libclamav/pdf.c: fix encrypted pdf detection (bb #2988)
  * clamav-milter/clamfi.c: fix typo in error message (bb#3040)
  * libclamav/lzma_iface.c: shut up huge alloc warns for 7z/lzma
    (bb#2913)
  * libclamav/c++/bytecode2llvm.cpp: fix use of unaddressable data
    in bytecode_watchdog.
  * libclamav/phishcheck.c: fix safebrowsing detection on certain
    URLs</changelog>
<changelog author="max@suse.com" date="1318939200">- New version 0.97.3 (bnc#724856, CVE-2011-3627):
  * freshclam/manager.c: fix error when compiling without DNS
    support (bb#3056)
  * libclamav/pdf.c: flag and dump PDF objects with /Launch
    (bb #3514)
  * libclamav/bytecode.c,bytecode_api.c: fix recursion level crash
    (bb #3706).
  * docs: clarify behavior of --scan-*/Scan* options (bb#3134)
  * libclamav/bytecode_vm.c: fix opcode 20 error (bb #3100)
  * freshclam: fix pidfile removal (bb#3499)
  * libclamav/pdf.c:  fix incorrect blocking of some encrypted PDF
    with empty user passwords. (bb #3364)
  * sigtool/sigtool.c: fix calculation of max signature length</changelog>
<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>

</package>
<package pkgid="7227adc40020e0202ff3ba3161a74958fba607827a58102f38180d249da5e7f5" name="clamav" arch="i586">
    <version epoch="0" ver="0.98.5" rel="22.3"/>

<changelog author="max@suse.com" date="1318939200">- New version 0.97.3 (bnc#724856, CVE-2011-3627):
  * freshclam/manager.c: fix error when compiling without DNS
    support (bb#3056)
  * libclamav/pdf.c: flag and dump PDF objects with /Launch
    (bb #3514)
  * libclamav/bytecode.c,bytecode_api.c: fix recursion level crash
    (bb #3706).
  * docs: clarify behavior of --scan-*/Scan* options (bb#3134)
  * libclamav/bytecode_vm.c: fix opcode 20 error (bb #3100)
  * freshclam: fix pidfile removal (bb#3499)
  * libclamav/pdf.c:  fix incorrect blocking of some encrypted PDF
    with empty user passwords. (bb #3364)
  * sigtool/sigtool.c: fix calculation of max signature length</changelog>
<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>

</package>
<package pkgid="75be1b585dd27113cb31db71e3b86e98db08bf3f35e644eb9eb03ee3ace2b9fb" name="clamav" arch="i586">
    <version epoch="0" ver="0.98.5" rel="26.2"/>

<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="max@suse.com" date="1421755200">- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193)
- Add clamav-soname.patch.</changelog>

</package>
<package pkgid="467e8337d0743fc4c4beed44e9ac9a980bb6cc29abd2cc7d5d8de879703f60b3" name="clamav" arch="i586">
    <version epoch="0" ver="0.98.6" rel="30.1"/>

<changelog author="dimstar@opensuse.org" date="1331985600">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="max@suse.com" date="1421755200">- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193)
- Add clamav-soname.patch.</changelog>
<changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>

</package>
<package pkgid="c1419a1f6b87cb2ef8aa7b7c26c56b273d12153ee8b621b8da8e8142c186d30c" name="clamav" arch="i586">
    <version epoch="0" ver="0.98.7" rel="33.1"/>

<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="max@suse.com" date="1421755200">- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193)
- Add clamav-soname.patch.</changelog>
<changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
<changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>

</package>
<package pkgid="1032b61fe6a8fc930a1208d0b9f4702fe6dc6aef7091358fb1a97adf13760401" name="clamav" arch="i586">
    <version epoch="0" ver="0.99" rel="36.1"/>

<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="uweigand@de.ibm.com" date="1387108800">- fix build failures on ppc64le:
  * fanotify is only supported on x86 platforms
  * building tomsfastmath on (non-x86) 64-bit platforms requires -DFP_64BIT</changelog>
<changelog author="max@suse.com" date="1390564800">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="max@suse.com" date="1391515200">- Improve handling of /var/run/clamav.</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify systemcalls for power, s390 and arm</changelog>
<changelog author="boris@steki.net" date="1394712000">- initial systemd support unit files</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in pre script</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
<changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.
- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193,
  clamav-soname.patch).</changelog>
<changelog author="max@suse.com" date="1422619200">- Don't need sendmail for building clamav-milter anymore,
  sendmail-devel is enough (bnc#915414).</changelog>
<changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
<changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
<changelog author="mpluskal@suse.com" date="1435752000">- Make clamd and clamav-milter services depend on freshclam as
  they need it</changelog>
<changelog author="p.drouand@gmail.com" date="1449057600">- Update to version 0.99
  * Processing of YARA rules(some limitations- see signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See signatures.pdf
    for full details.
  * New and improved on-access scanning for Linux. See the recent blog
    post and clamdoc.pdf for details on the new on-access capabilities.
  * A new ClamAV API callback function that is invoked when a virus
    is found. This is intended primarily for applications running in
    all-match mode. Any applications using all-match mode must use
    the new callback function to record and report detected viruses.
  * Configurable default password list to attempt zip file decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML files.
  * A new sigtool option(--ascii-normalize) allowing signature authors
    to more easily generate normalized versions of ascii files.
  * Windows installation directories changed from \Program Files\Sourcefire\
    ClamAV to \Program Files\ClamAV or \Program Files\ClamAV-x64.
- Refactor a little the specfile; remove some obsolete conditional
  macros, as clamav doesn't build for SLE11 anyway
- Remove clamav-sles9.patch; sles9 is not supported for a while</changelog>
<changelog author="max@suse.com" date="1449144000">- Version 0.99 fixes bsc#957728.</changelog>

</package>
<package pkgid="f98a6bb71556bb843605d90ed816c9dfb319c3f2e99036773c7044b6ec6fb47b" name="clamav" arch="i586">
    <version epoch="0" ver="0.99.2" rel="40.1"/>

<changelog author="max@suse.com" date="1391515200">- Improve handling of /var/run/clamav.</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify systemcalls for power, s390 and arm</changelog>
<changelog author="boris@steki.net" date="1394712000">- initial systemd support unit files</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in pre script</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
<changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.
- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193,
  clamav-soname.patch).</changelog>
<changelog author="max@suse.com" date="1422619200">- Don't need sendmail for building clamav-milter anymore,
  sendmail-devel is enough (bnc#915414).</changelog>
<changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
<changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
<changelog author="mpluskal@suse.com" date="1435752000">- Make clamd and clamav-milter services depend on freshclam as
  they need it</changelog>
<changelog author="p.drouand@gmail.com" date="1449057600">- Update to version 0.99
  * Processing of YARA rules(some limitations- see signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See signatures.pdf
    for full details.
  * New and improved on-access scanning for Linux. See the recent blog
    post and clamdoc.pdf for details on the new on-access capabilities.
  * A new ClamAV API callback function that is invoked when a virus
    is found. This is intended primarily for applications running in
    all-match mode. Any applications using all-match mode must use
    the new callback function to record and report detected viruses.
  * Configurable default password list to attempt zip file decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML files.
  * A new sigtool option(--ascii-normalize) allowing signature authors
    to more easily generate normalized versions of ascii files.
  * Windows installation directories changed from \Program Files\Sourcefire\
    ClamAV to \Program Files\ClamAV or \Program Files\ClamAV-x64.
- Refactor a little the specfile; remove some obsolete conditional
  macros, as clamav doesn't build for SLE11 anyway
- Remove clamav-sles9.patch; sles9 is not supported for a while</changelog>
<changelog author="max@suse.com" date="1449144000">- Version 0.99 fixes bsc#957728.</changelog>
<changelog author="max@suse.com" date="1455192000">- Buildrequire pcre-devel for the new regexp signatures
  (bsc#960237).</changelog>
<changelog author="max@suse.com" date="1458561600">- Update to version 0.99.1 (bsc#969814)
  * Add support for parsing Hancom Office files including
    extracting and scanning embedded objects.
  * Several bug fixes. For details, see
    http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html
    /usr/share/doc/packages/clamav/ChangeLog
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged maually, if
  a ClamAV update adds or removs options.</changelog>
<changelog author="fweiss@suse.com" date="1463054400">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names</changelog>

</package>
<package pkgid="7fdde11ee48b9c42589c1df7f702c7547ffd53a1457779dc767a9210012a2d26" name="clamav" arch="src">
    <version epoch="0" ver="0.98.1" rel="6.2"/>

<changelog author="max@novell.com" date="1297252800">- Security update 0.9.7 (bnc#673753):
  ClamAV 0.97 brings many improvements, including complete Windows
  support, support for signatures based on SHA1 and SHA256, better
  error detection, as well as speed and memory optimizations. The
  complete list of changes is available in the ChangeLog file. For
  upgrade notes and tips please see:
  https://wiki.clamav.net/Main/UpgradeNotes097</changelog>
<changelog author="max@novell.com" date="1307620800">- New version 0.97.1 (bnc#698999):
  * libclamav/mew.c: harden boundary check on e8/e9 fixup
  * libclamav/matcher-hash.c: in hm_sort don't swap an item with
    itself (bb#2818)
  * freshclam/manager.c: fix return code of Rfc2822DateTime()
    (bb#2809)
  * libclamav/pdf.c: better detection for encrypted PDFs
    (bb #2448)
  * libclamav/c++: add support for building with external LLVM 2.9,
    and drop external 2.8 support
  * clamd: log request ip address for instream scans #bb2592
  * libclamav/c++/llvm/lib/Target/X86/X86InstrInfo.td: bb #2763
    don't assert on AVX chips (Intel Core i5 and i7)
  * sigtool: properly normalize html files (bb#2764)
  * sigtool/sigtool.c: fix formatting of hash dbs (bb#2765)
  * freshclam: add mirror statistics mechanism
  * libclamav/pe_icons.c: don't sigbus on sparc (bb#2695)
  * libclamav/pe.c: reset corrupted status before bytecode
    hooks (bb#2544)
  * sigtool, freshclam: put .info on top of container to speed
    up loading
  * sigtool: fix --verify-cdiff
  * sigtool: allow arbitrary names for --build
  * clamdscan: fix file exclusion (bb#2579)
  * clamd: add new option ClamukoExcludeUID (bb#2260)
  * libclamav/elf.c: fix incorrect detection of Broken.Executable
    (bb#2580)
  * shared/output.c: fix empty lines in syslog (bb#2578)
  * clamd: update description of ReadTimeout (bb#2565)
  * clamd: add new config option BytecodeUnsigned (bb#2537);
    drop "None" from BytecodeSecurity
  * clamscan: add new switch --bytecode-unsigned and drop
  - -bytecode-trust-all
  * sigtool/sigtool.c: improve handling of bytecode.info (bb#2292)
  * libclamav/others.c: make sure TLS key is initializer
    (bb #2588).
  * configure: check for enable_extended_FILE_stdio (bb #2542)
  * sigtool/sigtool.c: handle all signature formats with
  - -(list|find)-sigs (bb#2534)</changelog>
<changelog author="max@novell.com" date="1311681600">- New version 0.97.2 (bnc#708263):
  * libclamav/matcher-hash.c: off by one read in cli_hm_scan
    (bb#2818, CVE-2011-2721).
  * libclamav/pdf.c: fix encrypted pdf detection (bb #2988)
  * clamav-milter/clamfi.c: fix typo in error message (bb#3040)
  * libclamav/lzma_iface.c: shut up huge alloc warns for 7z/lzma
    (bb#2913)
  * libclamav/c++/bytecode2llvm.cpp: fix use of unaddressable data
    in bytecode_watchdog.
  * libclamav/phishcheck.c: fix safebrowsing detection on certain
    URLs</changelog>
<changelog author="max@suse.com" date="1318939200">- New version 0.97.3 (bnc#724856, CVE-2011-3627):
  * freshclam/manager.c: fix error when compiling without DNS
    support (bb#3056)
  * libclamav/pdf.c: flag and dump PDF objects with /Launch
    (bb #3514)
  * libclamav/bytecode.c,bytecode_api.c: fix recursion level crash
    (bb #3706).
  * docs: clarify behavior of --scan-*/Scan* options (bb#3134)
  * libclamav/bytecode_vm.c: fix opcode 20 error (bb #3100)
  * freshclam: fix pidfile removal (bb#3499)
  * libclamav/pdf.c:  fix incorrect blocking of some encrypted PDF
    with empty user passwords. (bb #3364)
  * sigtool/sigtool.c: fix calculation of max signature length</changelog>
<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>

</package>
<package pkgid="b0962748d230543e16f33ee421452bde2256cb834fa6bf8a9cb3bc91cc3ce894" name="clamav" arch="src">
    <version epoch="0" ver="0.98.3" rel="10.2"/>

<changelog author="max@novell.com" date="1307620800">- New version 0.97.1 (bnc#698999):
  * libclamav/mew.c: harden boundary check on e8/e9 fixup
  * libclamav/matcher-hash.c: in hm_sort don't swap an item with
    itself (bb#2818)
  * freshclam/manager.c: fix return code of Rfc2822DateTime()
    (bb#2809)
  * libclamav/pdf.c: better detection for encrypted PDFs
    (bb #2448)
  * libclamav/c++: add support for building with external LLVM 2.9,
    and drop external 2.8 support
  * clamd: log request ip address for instream scans #bb2592
  * libclamav/c++/llvm/lib/Target/X86/X86InstrInfo.td: bb #2763
    don't assert on AVX chips (Intel Core i5 and i7)
  * sigtool: properly normalize html files (bb#2764)
  * sigtool/sigtool.c: fix formatting of hash dbs (bb#2765)
  * freshclam: add mirror statistics mechanism
  * libclamav/pe_icons.c: don't sigbus on sparc (bb#2695)
  * libclamav/pe.c: reset corrupted status before bytecode
    hooks (bb#2544)
  * sigtool, freshclam: put .info on top of container to speed
    up loading
  * sigtool: fix --verify-cdiff
  * sigtool: allow arbitrary names for --build
  * clamdscan: fix file exclusion (bb#2579)
  * clamd: add new option ClamukoExcludeUID (bb#2260)
  * libclamav/elf.c: fix incorrect detection of Broken.Executable
    (bb#2580)
  * shared/output.c: fix empty lines in syslog (bb#2578)
  * clamd: update description of ReadTimeout (bb#2565)
  * clamd: add new config option BytecodeUnsigned (bb#2537);
    drop "None" from BytecodeSecurity
  * clamscan: add new switch --bytecode-unsigned and drop
  - -bytecode-trust-all
  * sigtool/sigtool.c: improve handling of bytecode.info (bb#2292)
  * libclamav/others.c: make sure TLS key is initializer
    (bb #2588).
  * configure: check for enable_extended_FILE_stdio (bb #2542)
  * sigtool/sigtool.c: handle all signature formats with
  - -(list|find)-sigs (bb#2534)</changelog>
<changelog author="max@novell.com" date="1311681600">- New version 0.97.2 (bnc#708263):
  * libclamav/matcher-hash.c: off by one read in cli_hm_scan
    (bb#2818, CVE-2011-2721).
  * libclamav/pdf.c: fix encrypted pdf detection (bb #2988)
  * clamav-milter/clamfi.c: fix typo in error message (bb#3040)
  * libclamav/lzma_iface.c: shut up huge alloc warns for 7z/lzma
    (bb#2913)
  * libclamav/c++/bytecode2llvm.cpp: fix use of unaddressable data
    in bytecode_watchdog.
  * libclamav/phishcheck.c: fix safebrowsing detection on certain
    URLs</changelog>
<changelog author="max@suse.com" date="1318939200">- New version 0.97.3 (bnc#724856, CVE-2011-3627):
  * freshclam/manager.c: fix error when compiling without DNS
    support (bb#3056)
  * libclamav/pdf.c: flag and dump PDF objects with /Launch
    (bb #3514)
  * libclamav/bytecode.c,bytecode_api.c: fix recursion level crash
    (bb #3706).
  * docs: clarify behavior of --scan-*/Scan* options (bb#3134)
  * libclamav/bytecode_vm.c: fix opcode 20 error (bb #3100)
  * freshclam: fix pidfile removal (bb#3499)
  * libclamav/pdf.c:  fix incorrect blocking of some encrypted PDF
    with empty user passwords. (bb #3364)
  * sigtool/sigtool.c: fix calculation of max signature length</changelog>
<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>

</package>
<package pkgid="3659a3676529465e1b417c5e31b21e927a915215ec83d79eb1ddb2a7800da018" name="clamav" arch="src">
    <version epoch="0" ver="0.98.4" rel="14.1"/>

<changelog author="max@novell.com" date="1311681600">- New version 0.97.2 (bnc#708263):
  * libclamav/matcher-hash.c: off by one read in cli_hm_scan
    (bb#2818, CVE-2011-2721).
  * libclamav/pdf.c: fix encrypted pdf detection (bb #2988)
  * clamav-milter/clamfi.c: fix typo in error message (bb#3040)
  * libclamav/lzma_iface.c: shut up huge alloc warns for 7z/lzma
    (bb#2913)
  * libclamav/c++/bytecode2llvm.cpp: fix use of unaddressable data
    in bytecode_watchdog.
  * libclamav/phishcheck.c: fix safebrowsing detection on certain
    URLs</changelog>
<changelog author="max@suse.com" date="1318939200">- New version 0.97.3 (bnc#724856, CVE-2011-3627):
  * freshclam/manager.c: fix error when compiling without DNS
    support (bb#3056)
  * libclamav/pdf.c: flag and dump PDF objects with /Launch
    (bb #3514)
  * libclamav/bytecode.c,bytecode_api.c: fix recursion level crash
    (bb #3706).
  * docs: clarify behavior of --scan-*/Scan* options (bb#3134)
  * libclamav/bytecode_vm.c: fix opcode 20 error (bb #3100)
  * freshclam: fix pidfile removal (bb#3499)
  * libclamav/pdf.c:  fix incorrect blocking of some encrypted PDF
    with empty user passwords. (bb #3364)
  * sigtool/sigtool.c: fix calculation of max signature length</changelog>
<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>

</package>
<package pkgid="65922847aec85864a22654d7564c69861ee01d9c15b738509c62270518447b47" name="clamav" arch="src">
    <version epoch="0" ver="0.98.5" rel="22.3"/>

<changelog author="max@suse.com" date="1318939200">- New version 0.97.3 (bnc#724856, CVE-2011-3627):
  * freshclam/manager.c: fix error when compiling without DNS
    support (bb#3056)
  * libclamav/pdf.c: flag and dump PDF objects with /Launch
    (bb #3514)
  * libclamav/bytecode.c,bytecode_api.c: fix recursion level crash
    (bb #3706).
  * docs: clarify behavior of --scan-*/Scan* options (bb#3134)
  * libclamav/bytecode_vm.c: fix opcode 20 error (bb #3100)
  * freshclam: fix pidfile removal (bb#3499)
  * libclamav/pdf.c:  fix incorrect blocking of some encrypted PDF
    with empty user passwords. (bb #3364)
  * sigtool/sigtool.c: fix calculation of max signature length</changelog>
<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>

</package>
<package pkgid="0b3b013da31a4f12212a15c6b872ae58c42e1c92ff1a7808f5ddee1e696bf8d6" name="clamav" arch="src">
    <version epoch="0" ver="0.98.5" rel="26.2"/>

<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="max@suse.com" date="1421755200">- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193)
- Add clamav-soname.patch.</changelog>

</package>
<package pkgid="f91aac5ef7c2b5b96e693bdbb24c871af3ce9cecd6917b73cec42a7459de20b0" name="clamav" arch="src">
    <version epoch="0" ver="0.98.6" rel="30.1"/>

<changelog author="dimstar@opensuse.org" date="1331985600">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="max@suse.com" date="1421755200">- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193)
- Add clamav-soname.patch.</changelog>
<changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>

</package>
<package pkgid="ca6dfd2cf661e6b1f1356d8ba5ce86ccc4efa862a9a234dd998ebbad99607ec0" name="clamav" arch="src">
    <version epoch="0" ver="0.98.7" rel="33.1"/>

<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="max@suse.com" date="1421755200">- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193)
- Add clamav-soname.patch.</changelog>
<changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
<changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>

</package>
<package pkgid="becff18673cd4ebcf4ec5e7d992529aec4cbdb849583316ad6306a82d9a7994b" name="clamav" arch="src">
    <version epoch="0" ver="0.99" rel="36.1"/>

<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="uweigand@de.ibm.com" date="1387108800">- fix build failures on ppc64le:
  * fanotify is only supported on x86 platforms
  * building tomsfastmath on (non-x86) 64-bit platforms requires -DFP_64BIT</changelog>
<changelog author="max@suse.com" date="1390564800">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="max@suse.com" date="1391515200">- Improve handling of /var/run/clamav.</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify systemcalls for power, s390 and arm</changelog>
<changelog author="boris@steki.net" date="1394712000">- initial systemd support unit files</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in pre script</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
<changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.
- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193,
  clamav-soname.patch).</changelog>
<changelog author="max@suse.com" date="1422619200">- Don't need sendmail for building clamav-milter anymore,
  sendmail-devel is enough (bnc#915414).</changelog>
<changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
<changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
<changelog author="mpluskal@suse.com" date="1435752000">- Make clamd and clamav-milter services depend on freshclam as
  they need it</changelog>
<changelog author="p.drouand@gmail.com" date="1449057600">- Update to version 0.99
  * Processing of YARA rules(some limitations- see signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See signatures.pdf
    for full details.
  * New and improved on-access scanning for Linux. See the recent blog
    post and clamdoc.pdf for details on the new on-access capabilities.
  * A new ClamAV API callback function that is invoked when a virus
    is found. This is intended primarily for applications running in
    all-match mode. Any applications using all-match mode must use
    the new callback function to record and report detected viruses.
  * Configurable default password list to attempt zip file decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML files.
  * A new sigtool option(--ascii-normalize) allowing signature authors
    to more easily generate normalized versions of ascii files.
  * Windows installation directories changed from \Program Files\Sourcefire\
    ClamAV to \Program Files\ClamAV or \Program Files\ClamAV-x64.
- Refactor a little the specfile; remove some obsolete conditional
  macros, as clamav doesn't build for SLE11 anyway
- Remove clamav-sles9.patch; sles9 is not supported for a while</changelog>
<changelog author="max@suse.com" date="1449144000">- Version 0.99 fixes bsc#957728.</changelog>

</package>
<package pkgid="4a803c7d6be92bccde738ad8916c3719fc6a19c34b1714722ca2893d9c1f8307" name="clamav" arch="src">
    <version epoch="0" ver="0.99.2" rel="40.1"/>

<changelog author="max@suse.com" date="1391515200">- Improve handling of /var/run/clamav.</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify systemcalls for power, s390 and arm</changelog>
<changelog author="boris@steki.net" date="1394712000">- initial systemd support unit files</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in pre script</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
<changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.
- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193,
  clamav-soname.patch).</changelog>
<changelog author="max@suse.com" date="1422619200">- Don't need sendmail for building clamav-milter anymore,
  sendmail-devel is enough (bnc#915414).</changelog>
<changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
<changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
<changelog author="mpluskal@suse.com" date="1435752000">- Make clamd and clamav-milter services depend on freshclam as
  they need it</changelog>
<changelog author="p.drouand@gmail.com" date="1449057600">- Update to version 0.99
  * Processing of YARA rules(some limitations- see signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See signatures.pdf
    for full details.
  * New and improved on-access scanning for Linux. See the recent blog
    post and clamdoc.pdf for details on the new on-access capabilities.
  * A new ClamAV API callback function that is invoked when a virus
    is found. This is intended primarily for applications running in
    all-match mode. Any applications using all-match mode must use
    the new callback function to record and report detected viruses.
  * Configurable default password list to attempt zip file decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML files.
  * A new sigtool option(--ascii-normalize) allowing signature authors
    to more easily generate normalized versions of ascii files.
  * Windows installation directories changed from \Program Files\Sourcefire\
    ClamAV to \Program Files\ClamAV or \Program Files\ClamAV-x64.
- Refactor a little the specfile; remove some obsolete conditional
  macros, as clamav doesn't build for SLE11 anyway
- Remove clamav-sles9.patch; sles9 is not supported for a while</changelog>
<changelog author="max@suse.com" date="1449144000">- Version 0.99 fixes bsc#957728.</changelog>
<changelog author="max@suse.com" date="1455192000">- Buildrequire pcre-devel for the new regexp signatures
  (bsc#960237).</changelog>
<changelog author="max@suse.com" date="1458561600">- Update to version 0.99.1 (bsc#969814)
  * Add support for parsing Hancom Office files including
    extracting and scanning embedded objects.
  * Several bug fixes. For details, see
    http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html
    /usr/share/doc/packages/clamav/ChangeLog
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged maually, if
  a ClamAV update adds or removs options.</changelog>
<changelog author="fweiss@suse.com" date="1463054400">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names</changelog>

</package>
<package pkgid="0e87cda0c539beaa5faed41c8235d20f9364214d2477b887f5bd5df8ac25f24f" name="clamav" arch="x86_64">
    <version epoch="0" ver="0.98.1" rel="6.2"/>

<changelog author="max@novell.com" date="1297252800">- Security update 0.9.7 (bnc#673753):
  ClamAV 0.97 brings many improvements, including complete Windows
  support, support for signatures based on SHA1 and SHA256, better
  error detection, as well as speed and memory optimizations. The
  complete list of changes is available in the ChangeLog file. For
  upgrade notes and tips please see:
  https://wiki.clamav.net/Main/UpgradeNotes097</changelog>
<changelog author="max@novell.com" date="1307620800">- New version 0.97.1 (bnc#698999):
  * libclamav/mew.c: harden boundary check on e8/e9 fixup
  * libclamav/matcher-hash.c: in hm_sort don't swap an item with
    itself (bb#2818)
  * freshclam/manager.c: fix return code of Rfc2822DateTime()
    (bb#2809)
  * libclamav/pdf.c: better detection for encrypted PDFs
    (bb #2448)
  * libclamav/c++: add support for building with external LLVM 2.9,
    and drop external 2.8 support
  * clamd: log request ip address for instream scans #bb2592
  * libclamav/c++/llvm/lib/Target/X86/X86InstrInfo.td: bb #2763
    don't assert on AVX chips (Intel Core i5 and i7)
  * sigtool: properly normalize html files (bb#2764)
  * sigtool/sigtool.c: fix formatting of hash dbs (bb#2765)
  * freshclam: add mirror statistics mechanism
  * libclamav/pe_icons.c: don't sigbus on sparc (bb#2695)
  * libclamav/pe.c: reset corrupted status before bytecode
    hooks (bb#2544)
  * sigtool, freshclam: put .info on top of container to speed
    up loading
  * sigtool: fix --verify-cdiff
  * sigtool: allow arbitrary names for --build
  * clamdscan: fix file exclusion (bb#2579)
  * clamd: add new option ClamukoExcludeUID (bb#2260)
  * libclamav/elf.c: fix incorrect detection of Broken.Executable
    (bb#2580)
  * shared/output.c: fix empty lines in syslog (bb#2578)
  * clamd: update description of ReadTimeout (bb#2565)
  * clamd: add new config option BytecodeUnsigned (bb#2537);
    drop "None" from BytecodeSecurity
  * clamscan: add new switch --bytecode-unsigned and drop
  - -bytecode-trust-all
  * sigtool/sigtool.c: improve handling of bytecode.info (bb#2292)
  * libclamav/others.c: make sure TLS key is initializer
    (bb #2588).
  * configure: check for enable_extended_FILE_stdio (bb #2542)
  * sigtool/sigtool.c: handle all signature formats with
  - -(list|find)-sigs (bb#2534)</changelog>
<changelog author="max@novell.com" date="1311681600">- New version 0.97.2 (bnc#708263):
  * libclamav/matcher-hash.c: off by one read in cli_hm_scan
    (bb#2818, CVE-2011-2721).
  * libclamav/pdf.c: fix encrypted pdf detection (bb #2988)
  * clamav-milter/clamfi.c: fix typo in error message (bb#3040)
  * libclamav/lzma_iface.c: shut up huge alloc warns for 7z/lzma
    (bb#2913)
  * libclamav/c++/bytecode2llvm.cpp: fix use of unaddressable data
    in bytecode_watchdog.
  * libclamav/phishcheck.c: fix safebrowsing detection on certain
    URLs</changelog>
<changelog author="max@suse.com" date="1318939200">- New version 0.97.3 (bnc#724856, CVE-2011-3627):
  * freshclam/manager.c: fix error when compiling without DNS
    support (bb#3056)
  * libclamav/pdf.c: flag and dump PDF objects with /Launch
    (bb #3514)
  * libclamav/bytecode.c,bytecode_api.c: fix recursion level crash
    (bb #3706).
  * docs: clarify behavior of --scan-*/Scan* options (bb#3134)
  * libclamav/bytecode_vm.c: fix opcode 20 error (bb #3100)
  * freshclam: fix pidfile removal (bb#3499)
  * libclamav/pdf.c:  fix incorrect blocking of some encrypted PDF
    with empty user passwords. (bb #3364)
  * sigtool/sigtool.c: fix calculation of max signature length</changelog>
<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>

</package>
<package pkgid="e7a3f1af083611beeb0f4dc5a7b9db6eb3d3d5a08449eebe47a9659494dccdf7" name="clamav" arch="x86_64">
    <version epoch="0" ver="0.98.3" rel="10.2"/>

<changelog author="max@novell.com" date="1307620800">- New version 0.97.1 (bnc#698999):
  * libclamav/mew.c: harden boundary check on e8/e9 fixup
  * libclamav/matcher-hash.c: in hm_sort don't swap an item with
    itself (bb#2818)
  * freshclam/manager.c: fix return code of Rfc2822DateTime()
    (bb#2809)
  * libclamav/pdf.c: better detection for encrypted PDFs
    (bb #2448)
  * libclamav/c++: add support for building with external LLVM 2.9,
    and drop external 2.8 support
  * clamd: log request ip address for instream scans #bb2592
  * libclamav/c++/llvm/lib/Target/X86/X86InstrInfo.td: bb #2763
    don't assert on AVX chips (Intel Core i5 and i7)
  * sigtool: properly normalize html files (bb#2764)
  * sigtool/sigtool.c: fix formatting of hash dbs (bb#2765)
  * freshclam: add mirror statistics mechanism
  * libclamav/pe_icons.c: don't sigbus on sparc (bb#2695)
  * libclamav/pe.c: reset corrupted status before bytecode
    hooks (bb#2544)
  * sigtool, freshclam: put .info on top of container to speed
    up loading
  * sigtool: fix --verify-cdiff
  * sigtool: allow arbitrary names for --build
  * clamdscan: fix file exclusion (bb#2579)
  * clamd: add new option ClamukoExcludeUID (bb#2260)
  * libclamav/elf.c: fix incorrect detection of Broken.Executable
    (bb#2580)
  * shared/output.c: fix empty lines in syslog (bb#2578)
  * clamd: update description of ReadTimeout (bb#2565)
  * clamd: add new config option BytecodeUnsigned (bb#2537);
    drop "None" from BytecodeSecurity
  * clamscan: add new switch --bytecode-unsigned and drop
  - -bytecode-trust-all
  * sigtool/sigtool.c: improve handling of bytecode.info (bb#2292)
  * libclamav/others.c: make sure TLS key is initializer
    (bb #2588).
  * configure: check for enable_extended_FILE_stdio (bb #2542)
  * sigtool/sigtool.c: handle all signature formats with
  - -(list|find)-sigs (bb#2534)</changelog>
<changelog author="max@novell.com" date="1311681600">- New version 0.97.2 (bnc#708263):
  * libclamav/matcher-hash.c: off by one read in cli_hm_scan
    (bb#2818, CVE-2011-2721).
  * libclamav/pdf.c: fix encrypted pdf detection (bb #2988)
  * clamav-milter/clamfi.c: fix typo in error message (bb#3040)
  * libclamav/lzma_iface.c: shut up huge alloc warns for 7z/lzma
    (bb#2913)
  * libclamav/c++/bytecode2llvm.cpp: fix use of unaddressable data
    in bytecode_watchdog.
  * libclamav/phishcheck.c: fix safebrowsing detection on certain
    URLs</changelog>
<changelog author="max@suse.com" date="1318939200">- New version 0.97.3 (bnc#724856, CVE-2011-3627):
  * freshclam/manager.c: fix error when compiling without DNS
    support (bb#3056)
  * libclamav/pdf.c: flag and dump PDF objects with /Launch
    (bb #3514)
  * libclamav/bytecode.c,bytecode_api.c: fix recursion level crash
    (bb #3706).
  * docs: clarify behavior of --scan-*/Scan* options (bb#3134)
  * libclamav/bytecode_vm.c: fix opcode 20 error (bb #3100)
  * freshclam: fix pidfile removal (bb#3499)
  * libclamav/pdf.c:  fix incorrect blocking of some encrypted PDF
    with empty user passwords. (bb #3364)
  * sigtool/sigtool.c: fix calculation of max signature length</changelog>
<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>

</package>
<package pkgid="af248d6405491fb1accb61b3a56ce4a11d8ee5daaf1cfaca47ba5ce54b175399" name="clamav" arch="x86_64">
    <version epoch="0" ver="0.98.4" rel="14.1"/>

<changelog author="max@novell.com" date="1311681600">- New version 0.97.2 (bnc#708263):
  * libclamav/matcher-hash.c: off by one read in cli_hm_scan
    (bb#2818, CVE-2011-2721).
  * libclamav/pdf.c: fix encrypted pdf detection (bb #2988)
  * clamav-milter/clamfi.c: fix typo in error message (bb#3040)
  * libclamav/lzma_iface.c: shut up huge alloc warns for 7z/lzma
    (bb#2913)
  * libclamav/c++/bytecode2llvm.cpp: fix use of unaddressable data
    in bytecode_watchdog.
  * libclamav/phishcheck.c: fix safebrowsing detection on certain
    URLs</changelog>
<changelog author="max@suse.com" date="1318939200">- New version 0.97.3 (bnc#724856, CVE-2011-3627):
  * freshclam/manager.c: fix error when compiling without DNS
    support (bb#3056)
  * libclamav/pdf.c: flag and dump PDF objects with /Launch
    (bb #3514)
  * libclamav/bytecode.c,bytecode_api.c: fix recursion level crash
    (bb #3706).
  * docs: clarify behavior of --scan-*/Scan* options (bb#3134)
  * libclamav/bytecode_vm.c: fix opcode 20 error (bb #3100)
  * freshclam: fix pidfile removal (bb#3499)
  * libclamav/pdf.c:  fix incorrect blocking of some encrypted PDF
    with empty user passwords. (bb #3364)
  * sigtool/sigtool.c: fix calculation of max signature length</changelog>
<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>

</package>
<package pkgid="883891386a6b636da1bb91f8ae380d63e378f5c46be9b831fafc141bea5b76fc" name="clamav" arch="x86_64">
    <version epoch="0" ver="0.98.5" rel="22.3"/>

<changelog author="max@suse.com" date="1318939200">- New version 0.97.3 (bnc#724856, CVE-2011-3627):
  * freshclam/manager.c: fix error when compiling without DNS
    support (bb#3056)
  * libclamav/pdf.c: flag and dump PDF objects with /Launch
    (bb #3514)
  * libclamav/bytecode.c,bytecode_api.c: fix recursion level crash
    (bb #3706).
  * docs: clarify behavior of --scan-*/Scan* options (bb#3134)
  * libclamav/bytecode_vm.c: fix opcode 20 error (bb #3100)
  * freshclam: fix pidfile removal (bb#3499)
  * libclamav/pdf.c:  fix incorrect blocking of some encrypted PDF
    with empty user passwords. (bb #3364)
  * sigtool/sigtool.c: fix calculation of max signature length</changelog>
<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>

</package>
<package pkgid="8aa32c257f23c97a5af62cfa83939dce08e2826164b3327190066de31c5b357b" name="clamav" arch="x86_64">
    <version epoch="0" ver="0.98.5" rel="26.2"/>

<changelog author="toganm@opensuse.org" date="1331985600">- New version 0.97.4
  * libclamav/bytecode.c: reset to BYTECODE_AUTO mode at db reload
  so that we don't fail to re-enable or re-disable it again
  (bb#3789)
  * misc: performance improvement for HP-UX PA-RISC - patch from
  Michael Pelletier &lt;michael.v.pelletier*raytheon.com&gt;
  (bb#3926)
  * libclamav/pe.c: parse vinfo where varfileinfo occours before
  stringfileinfo (bb#3062)
  * clamd: add support for on-access scanning on OS X with ClamAuth
  (beta)
  * libclamav/bytecode_api*: Fix Sparc crash (bb #4324)
  * libclamav: fix bytecode whitelisting
  * libclamav: fix macro detection in OLE2BlockMacros (bb#4269)
  * libclamav/readdb.c: allow comments in all db files (bb#3930)
  * libclamav/scanners.c: use lsigs when scanning vba data (bb#3922)
  * libclamav/matcher-hash.c: Fix SIGBUS on PA-RISC (big-endian)
  architectures (bb #3894).</changelog>
<changelog author="dimstar@opensuse.org" date="1331985601">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="max@suse.com" date="1421755200">- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193)
- Add clamav-soname.patch.</changelog>

</package>
<package pkgid="8c1cbb5ee49ee246e5aec6a273c23b88400f11facd262789b6429461db2a3688" name="clamav" arch="x86_64">
    <version epoch="0" ver="0.98.6" rel="30.1"/>

<changelog author="dimstar@opensuse.org" date="1331985600">- Add clamav-gcc47.patch: Fix build with gcc 4.7.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="max@suse.com" date="1421755200">- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193)
- Add clamav-soname.patch.</changelog>
<changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>

</package>
<package pkgid="db0a57bdc48fbab6a4ae113136ac1c2f1663a8ae69ae141d4b9c119bfeec6ca7" name="clamav" arch="x86_64">
    <version epoch="0" ver="0.98.7" rel="33.1"/>

<changelog author="andreas.stieger@gmx.de" date="1340107200">- update to 0.95.5 [bnc#767574]
- addresses possible evasion cases in some archive formats
- CVE-2012-1457: allows to bypass malware detection via a TAR archive
  entry with a length field that exceeds the total TAR file size
- CVE-2012-1458: allows to bypass malware detection via a crafted
  reset interval in the LZXC header of a CHM file
- CVE-2012-1459: allows to bypass malware detection via a TAR archive
  entry with a length field corresponding to that entire entry, plus
  part of the header of the next entry
- also addresses stability issues in portions of the bytecode engine
- update clamav-conf.patch for moved lines
- add a definitions snapshot as {main,daily}.cvd no longer in tarball
- fix file-contains-date-and-time rpmlint warning</changelog>
<changelog author="max@suse.com" date="1340280000">- The CVEs below correspont to: bnc#753611, bnc#753613, bnc#753610.</changelog>
<changelog author="dmueller@suse.com" date="1343304000">- avoid make check on qemu build</changelog>
<changelog author="toganm@opensuse.org" date="1348056000">- update to 0.97.6
  * libclamav: bb#5751 - cl_scansis() may returan a file descriptor
    instead of a valid return code</changelog>
<changelog author="max@suse.com" date="1348833600">- 0.97.6 also fixes bnc#780181.</changelog>
<changelog author="andreas.stieger@gmx.de" date="1357387200">- update daily.cvd to ver. 16364
  released on 04 Jan 2013 20:37 :0500 (sig count: 492103)
- add cvd signature verification to %check section
- make Release field of clamav-db package contain cvd file versions</changelog>
<changelog author="max@suse.com" date="1357560000">- Remove the clamav-db subpackage. ClamAV installations should
  fetch current versions of the virus database directly from
  upstream. If there really is need for a packaged database, it
  should be in a separate package.
- Remove scripts do deal with very old (before 2008) config and
  database file formats.</changelog>
<changelog author="mmeister@suse.com" date="1358164800">- pids and sockets of clamd and freshclam now reside in /var/run
  instead of /var/lib (bnc#770395)
- modified pid path in clamd's, freshclam's and clamav-milter's
  init scripts</changelog>
<changelog author="max@suse.com" date="1363780800">- Version 0.97.7 (bnc#809945)
  * several hardening fixes.</changelog>
<changelog author="ecsos@schirra.net" date="1367150400">- Version 0.97.8 (bnc#816865)
  * libclamav: Bugs reported by Felix Groebert of the Google Security Team</changelog>
<changelog author="meissner@suse.com" date="1367236800">- mirror the amavisd-new change of /var/spool/amavis bnc#663726</changelog>
<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="max@suse.com" date="1391169600">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify enablement patc for ppc and arm</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3 (bnc#877475):
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4 (bnc#884589)
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="max@suse.com" date="1421755200">- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193)
- Add clamav-soname.patch.</changelog>
<changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
<changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>

</package>
<package pkgid="cd784b6f65c139ead62c49ad4c55c329dcc70ef4a5fa9fd836136d5bccb2b172" name="clamav" arch="x86_64">
    <version epoch="0" ver="0.99" rel="36.1"/>

<changelog author="meissner@suse.com" date="1380369600">- Version 0.98 (bnc#841815)
  * code quality fixes on libclamav, clamd, sigtool, clamav-milter, clamconf and clamdtop
  * code quality fixes on libclamav, libclamunrar and freshclam
  * valgrind suppression rules for dl_catch_error complaints
  * bb #8385: PDF ASCII85Decode zero-length fix
  * libclamav: SCAN_ALL mode fixes
  * bb #7436: elf64 header early exit
  * iso9660: iso_scan_file rewrite
- use source urls, add gpg signature retrieval.</changelog>
<changelog author="uweigand@de.ibm.com" date="1387108800">- fix build failures on ppc64le:
  * fanotify is only supported on x86 platforms
  * building tomsfastmath on (non-x86) 64-bit platforms requires -DFP_64BIT</changelog>
<changelog author="max@suse.com" date="1390564800">- Version 0.98.1 (bnc#841815):
  * remove copy of wxWidgets (halves the size of the tarball).
  * Decompression and scanning of files in "Xz" compression
    format.
  * Extraction, decompression, and scanning of files within Apple
    Disk Image (DMG) format.
  * Extraction, decompression, and scanning of files within
    Extensible Archive (XAR) format.  XAR format is commonly used
    for software packaging, such as PKG and RPM, as well as
    general archival.
  * Improvements and fixes to extraction and scanning of ole
    formats.
  * Option to force all scanned data to disk.
  * Various improvements to ClamAV configuration, support of third
    party libraries, and unit tests.
- Rediff clamav-conf.patch</changelog>
<changelog author="max@suse.com" date="1391515200">- Improve handling of /var/run/clamav.</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify systemcalls for power, s390 and arm</changelog>
<changelog author="boris@steki.net" date="1394712000">- initial systemd support unit files</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in pre script</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
<changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.
- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193,
  clamav-soname.patch).</changelog>
<changelog author="max@suse.com" date="1422619200">- Don't need sendmail for building clamav-milter anymore,
  sendmail-devel is enough (bnc#915414).</changelog>
<changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
<changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
<changelog author="mpluskal@suse.com" date="1435752000">- Make clamd and clamav-milter services depend on freshclam as
  they need it</changelog>
<changelog author="p.drouand@gmail.com" date="1449057600">- Update to version 0.99
  * Processing of YARA rules(some limitations- see signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See signatures.pdf
    for full details.
  * New and improved on-access scanning for Linux. See the recent blog
    post and clamdoc.pdf for details on the new on-access capabilities.
  * A new ClamAV API callback function that is invoked when a virus
    is found. This is intended primarily for applications running in
    all-match mode. Any applications using all-match mode must use
    the new callback function to record and report detected viruses.
  * Configurable default password list to attempt zip file decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML files.
  * A new sigtool option(--ascii-normalize) allowing signature authors
    to more easily generate normalized versions of ascii files.
  * Windows installation directories changed from \Program Files\Sourcefire\
    ClamAV to \Program Files\ClamAV or \Program Files\ClamAV-x64.
- Refactor a little the specfile; remove some obsolete conditional
  macros, as clamav doesn't build for SLE11 anyway
- Remove clamav-sles9.patch; sles9 is not supported for a while</changelog>
<changelog author="max@suse.com" date="1449144000">- Version 0.99 fixes bsc#957728.</changelog>

</package>
<package pkgid="44c0931a0334572635ad07e48a55401502ddd3dffe1d66f7070d44284fb33f24" name="clamav" arch="x86_64">
    <version epoch="0" ver="0.99.2" rel="40.1"/>

<changelog author="max@suse.com" date="1391515200">- Improve handling of /var/run/clamav.</changelog>
<changelog author="meissner@suse.com" date="1392811200">- add fanotify systemcalls for power, s390 and arm</changelog>
<changelog author="boris@steki.net" date="1394712000">- initial systemd support unit files</changelog>
<changelog author="dmueller@suse.com" date="1398254400">- do not disable security checks in configure. That would be
  insecure
- use DFP_64bit also for aarch64</changelog>
<changelog author="max@suse.com" date="1399550400">- Version 0.98.3:
  * Support for common raw disk image formats using 512 byte
    sectors, specifically GPT, APM, and MBR partitioning.
  * Experimental support of OpenIOC files. ClamAV will now extract
    file hashes from OpenIOC files residing in the signature
    database location, and generate ClamAV hash signatures. ClamAV
    uses no other OpenIOC features at this time. No OpenIOC files
    will be delivered through freshclam. See openioc.org and
    iocbucket.com for additional information about OpenIOC.
  * All ClamAV sockets (clamd, freshclam, clamav-milter, clamdscan,
    clamdtop) now support IPV6 addresses and configuration
    parameters.
  * Use OpenSSL file hash functions for improved performance.
    OpenSSL is now prerequisite software for ClamAV 0.98.3.
  * Improved detection of malware scripts within image files.
  * Change to circumvent possible denial of service when processing
    icons within specially crafted PE files. Icon limits are now in
    place with corresponding clamd and clamscan configuration
    parameters. This issue was reported by Joxean Koret.
  * Improvements to the fidelity of the ClamAV pattern matcher, an
    issue reported by Christian Blichmann.
  * Opt-in collection of statistics. Statistics collected are:
    sizes and MD5 hashes of files, PE file section counts and
    section MD5 hashes, and names and counts of detected
    viruses. Enable statistics collection with the --enable-stats
    clamscan flag or StatsEnabled clamd configuration parameter.
  * Improvements to ClamAV build process, unit tests, and platform
    support.
  * Improve error handling in freshclam.
  * ClamAV 0.98.3 also includes miscellaneous bug fixes and
    documentation improvements.
- clamav-fan-syscalls.patch isn't needed anymore because ClamAV
  now uses sys/fanotify.h .</changelog>
<changelog author="max@suse.com" date="1402574400">- Fix dangling symlink in documentation (bnc#872682).
- Remove init scripts and complete systemd integration.
- Remove %ghost entry for /var/run/clamav.</changelog>
<changelog author="max@suse.com" date="1403784000">- Version 0.98.4:
  * Fix infinite loop in clamdscan when clamd is not running.
  * Fix buffer underruns when handling multi-part MIME email
    attachments.
  * Fix onfiguration of OpenSSL on various platforms.
  * Fix linking issues with libclamunrar.</changelog>
<changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in pre script</changelog>
<changelog author="max@suse.com" date="1416398400">- Version 0.98.5:
  * Support for the XDP file format and extracting, decoding, and
    scanning PDF files within XDP files.
  * Addition of shared library support for LLVM versions 3.1 - 3.5
    for the purpose of just-in-time(JIT) compilation of ClamAV
    bytecode signatures.
  * Enhancements to the clambc command line utility to assist
    ClamAV bytecode signature authors by providing introspection
    into compiled bytecode programs.
  * Resolution of many of the warning messages from ClamAV
    compilation.
  * Improved detection of malicious PE files.
  * Security fix for ClamAV crash when using 'clamscan -a'.
  * Security fix for ClamAV crash when scanning maliciously
    crafted yoda's crypter files (bnc#906077, CVE-2013-6497).
  * ClamAV 0.98.5 now works with OpenSSL in FIPS compliant
    mode (bnc#904207).
  * Fix server socket setup code in clamd (bnc#903489).
- Change updateclamconf to prefer the state of the old config
  file even for commented-out options (bnc#903719).</changelog>
<changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
<changelog author="max@suse.com" date="1422014400">- bnc#914505: Config file merging and temp file creation got moved
  to %pre by mistake. Put them back to %post.
- Restore the updateclamconf script (bnc#908731).
- Fix a step backwards in the soname version from 0.98.4 to 0.98.5
  (https://bugzilla.clamav.net/show_bug.cgi?id=11193,
  clamav-soname.patch).</changelog>
<changelog author="max@suse.com" date="1422619200">- Don't need sendmail for building clamav-milter anymore,
  sendmail-devel is enough (bnc#915414).</changelog>
<changelog author="max@suse.com" date="1423137600">- Version 0.98.6 fixes several security issues:
  * bsc#916217, CVE-2015-1461: Remote attackers can have
    unspecified impact via Yoda's crypter or mew packer files.
  * bsc#916214, CVE-2015-1462: Unspecified impact via acrafted upx
    packer file.
  * bsc#916215, CVE-2015-1463: Remote attackers can cause a denial
    of service via a crafted petite packer file.
  * bsc#915512, CVE-2014-9328: heap out of bounds condition with
    crafted upack packer files.
- Obsoletes clamav-soname.patch</changelog>
<changelog author="max@suse.com" date="1430740800">- Version 0.98.7 fixes several security issues (bsc#929192) and
  other bug fixes/improvements:
  * Fix crash in upx decoder with crafted file. Discovered and
    patch supplied by Sebastian Andrzej Siewior. CVE-2015-2170.
  * Fix infinite loop condition on crafted y0da cryptor
    file. Identified and patch suggested by Sebastian Andrzej
    Siewior. CVE-2015-2221.
  * Fix crash on crafted petite packed file. Reported and patch
    supplied by Sebastian Andrzej Siewior. CVE-2015-2222.
  * Fix an infinite loop condition on a crafted "xz" archive file.
    This was reported by Dimitri Kirchner and Goulven Guiheux.
    CVE-2015-2668.
  * Apply upstream patch for possible heap overflow in Henry
    Spencer's regex library. CVE-2015-2305.
  * Fix false negatives on files within iso9660 containers. This
    issue was reported by Minzhuan Gong.
  * Fix a couple crashes on crafted upack packed file. Identified
    and patches supplied by Sebastian Andrzej Siewior.
  * Fix a crash during algorithmic detection on crafted PE file.
    Identified and patch supplied by Sebastian Andrzej Siewior.
  * Fix compilation error after ./configure --disable-pthreads.
    Reported and fix suggested by John E. Krokes.
  * Fix segfault scanning certain HTML files. Reported with sample
    by Kai Risku.
  * Improve detections within xar/pkg files.
  * Improvements to PDF processing: decryption, escape sequence
    handling, and file property collection.
  * Scanning/analysis of additional Microsoft Office 2003 XML
    format.</changelog>
<changelog author="mpluskal@suse.com" date="1435752000">- Make clamd and clamav-milter services depend on freshclam as
  they need it</changelog>
<changelog author="p.drouand@gmail.com" date="1449057600">- Update to version 0.99
  * Processing of YARA rules(some limitations- see signatures.pdf).
  * Support in ClamAV logical signatures for many of the features
    added for YARA, such as Perl Compatible Regular Expressions,
    alternate strings, and YARA string attributes. See signatures.pdf
    for full details.
  * New and improved on-access scanning for Linux. See the recent blog
    post and clamdoc.pdf for details on the new on-access capabilities.
  * A new ClamAV API callback function that is invoked when a virus
    is found. This is intended primarily for applications running in
    all-match mode. Any applications using all-match mode must use
    the new callback function to record and report detected viruses.
  * Configurable default password list to attempt zip file decryption.
  * TIFF file support.
  * Upgrade Windows pthread library to 2.9.1.
  * A new signature target type for designating signatures to run
    against files with unknown file types.
  * Improved fidelity of the "data loss prevention" heuristic
    algorithm. Code supplied by Bill Parker.
  * Support for LZMA decompression within Adobe Flash files.
  * Support for MSO attachments within Microsoft Office 2003 XML files.
  * A new sigtool option(--ascii-normalize) allowing signature authors
    to more easily generate normalized versions of ascii files.
  * Windows installation directories changed from \Program Files\Sourcefire\
    ClamAV to \Program Files\ClamAV or \Program Files\ClamAV-x64.
- Refactor a little the specfile; remove some obsolete conditional
  macros, as clamav doesn't build for SLE11 anyway
- Remove clamav-sles9.patch; sles9 is not supported for a while</changelog>
<changelog author="max@suse.com" date="1449144000">- Version 0.99 fixes bsc#957728.</changelog>
<changelog author="max@suse.com" date="1455192000">- Buildrequire pcre-devel for the new regexp signatures
  (bsc#960237).</changelog>
<changelog author="max@suse.com" date="1458561600">- Update to version 0.99.1 (bsc#969814)
  * Add support for parsing Hancom Office files including
    extracting and scanning embedded objects.
  * Several bug fixes. For details, see
    http://blog.clamav.net/2016/03/clamav-0991-has-been-released.html
    /usr/share/doc/packages/clamav/ChangeLog
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged maually, if
  a ClamAV update adds or removs options.</changelog>
<changelog author="fweiss@suse.com" date="1463054400">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names</changelog>

</package>
<package pkgid="eef41148d4b953af0ec1ed8f296aa908ae0da1d2838802cc5ef87657224c5799" name="claws-mail" arch="i586">
    <version epoch="0" ver="3.10.1" rel="3.4.1"/>

<changelog author="badshah400@gmail.com" date="1337601600">- Use pkgconfig(gnutls) BuildRequires instead of gnutls-devel. This
  is more correct and helps avoid the issue with gnutls-devel
  having been removed from Factory.</changelog>
<changelog author="dimstar@opensuse.org" date="1338984000">- Add claws-mail-gnutls318.patch: Fix build with gnutls 3.18+.</changelog>
<changelog author="dimstar@opensuse.org" date="1341489600">- Add claws-mail-bnc770014.patch: Fix crash when trying to view
  info about pgp/smime sign.</changelog>
<changelog author="dimstar@opensuse.org" date="1342872000">- Do not install ca-certificates.crt (bnc#761503).
- Add claws-mail-certbundle-path.patch: Add path to our
  ca-bundle.pem, so the file can be found by claws mail. This is
  an intermediate solution. Preferably we should be switching to
  the directory based storing of CA certificates.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1344168000">- Updated to version 3.8.1:
  + Replied and Forwarded message status flags are now non-
    exclusive. Introduced a new message state (and relevant icon
    in message list) where both the Replied and Forwarded flags
    are set.
  + 'Send to...' has been added to the context menu of a message's
    parts. This causes a new Compose window to open with the
    selected mime part attached.
  + 'Hide' and 'View Log' buttons have been added to the Send and
    Receive dialogues. The former will hide the dialogue, the
    latter will open the Network Log dialogue.
  + A short symbol has been added the QuickSearch Extended mode:
    'ha', an abbreviated form of 'has_attachment'.
  + Basic session statistics are now available, from the
    Statistics tab in About dialog and the command-line.
  + The display of attached patches, (text/x-patch or text/x-diff)
    is now colourised. The colours are controlled by 3 new hidden
    preferences: diff_added_color, diff_deleted_color, and
    diff_hunk_color.
  + Updated translations.
  + Bug fixes:
  - Bug 1090, 'Standard-folders appear again after rescanning
    tree'.
  - Bug 1924, 'Messages marked move to Trash appear identical to
    messages marked move to $FOLDER'.
  - Bug 2598, 'Actions can move locked messages'.
  - Bug 2501, 'opened message blanks when moved to other
    folder'.
  - Bug 2574, 'Statement might be overflowing a buffer in
    strncat'.
  - Bug 2577, 'Focus rectangle on folder list and message list
    headings doesn't get properly cleared when switching heading
    and horizontally scrolling list (underlines and vertical
    lines remain on screen)'.
  - Bug 2582, 'Expanded mimeview drag n drop no longer works'.
  - Bug 2595, 'Change expand behavior for message list / message
    view'.
  - Bug 2620, 'shift+tab from subject field not working'.
  - Bug 2624, 'dialog "Action Configuration" cannot be closed'.
  - Bug 2646, 'Compile fails with gnutls-3.0.18'.
  - Bug 2659, 'E-mail attachments are handled inconsistently'.
  - Bug 2662, '"ag" quicksearch adds "1" to value'.
  - Fix bug in search criteria when doing a complete directory
    search using '*'.
  - Fix sensitivity of toolbar's get_btn (retrieve mail from
    current account) and of mainwindows's relevant entry when
    current account is not able to retrieve (SMTP-only).
  - Don't do TLS if not requested by user. fixes connecting to
    servers which, for example, want SSL 3 only.
- Drop claws-mail-fix-bufferoverflowstrncat.patch as this has been
  upstreamed.
- Drop claws-mail-gnutls318.patch as this has been upstreamed.</changelog>
<changelog author="dimstar@opensuse.org" date="1344513600">- Add claws-mail-verify-hostname.patch: fix SSL negotiation and
  hostname verification.
- Drop claws-mail-certbundle-path.patch: integrated in the upstram
  patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2 (bnc#816881).
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0 - (CVE-2014-2576)
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1 (bnc#870858):
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>

</package>
<package pkgid="1b68b4b9ab8825a5387fac32764f55acb8028dc9aebb28e1cc1403139f4c2833" name="claws-mail" arch="i586">
    <version epoch="0" ver="3.10.1" rel="3.8.1"/>

<changelog author="dimstar@opensuse.org" date="1338984000">- Add claws-mail-gnutls318.patch: Fix build with gnutls 3.18+.</changelog>
<changelog author="dimstar@opensuse.org" date="1341489600">- Add claws-mail-bnc770014.patch: Fix crash when trying to view
  info about pgp/smime sign.</changelog>
<changelog author="dimstar@opensuse.org" date="1342872000">- Do not install ca-certificates.crt (bnc#761503).
- Add claws-mail-certbundle-path.patch: Add path to our
  ca-bundle.pem, so the file can be found by claws mail. This is
  an intermediate solution. Preferably we should be switching to
  the directory based storing of CA certificates.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1344168000">- Updated to version 3.8.1:
  + Replied and Forwarded message status flags are now non-
    exclusive. Introduced a new message state (and relevant icon
    in message list) where both the Replied and Forwarded flags
    are set.
  + 'Send to...' has been added to the context menu of a message's
    parts. This causes a new Compose window to open with the
    selected mime part attached.
  + 'Hide' and 'View Log' buttons have been added to the Send and
    Receive dialogues. The former will hide the dialogue, the
    latter will open the Network Log dialogue.
  + A short symbol has been added the QuickSearch Extended mode:
    'ha', an abbreviated form of 'has_attachment'.
  + Basic session statistics are now available, from the
    Statistics tab in About dialog and the command-line.
  + The display of attached patches, (text/x-patch or text/x-diff)
    is now colourised. The colours are controlled by 3 new hidden
    preferences: diff_added_color, diff_deleted_color, and
    diff_hunk_color.
  + Updated translations.
  + Bug fixes:
  - Bug 1090, 'Standard-folders appear again after rescanning
    tree'.
  - Bug 1924, 'Messages marked move to Trash appear identical to
    messages marked move to $FOLDER'.
  - Bug 2598, 'Actions can move locked messages'.
  - Bug 2501, 'opened message blanks when moved to other
    folder'.
  - Bug 2574, 'Statement might be overflowing a buffer in
    strncat'.
  - Bug 2577, 'Focus rectangle on folder list and message list
    headings doesn't get properly cleared when switching heading
    and horizontally scrolling list (underlines and vertical
    lines remain on screen)'.
  - Bug 2582, 'Expanded mimeview drag n drop no longer works'.
  - Bug 2595, 'Change expand behavior for message list / message
    view'.
  - Bug 2620, 'shift+tab from subject field not working'.
  - Bug 2624, 'dialog "Action Configuration" cannot be closed'.
  - Bug 2646, 'Compile fails with gnutls-3.0.18'.
  - Bug 2659, 'E-mail attachments are handled inconsistently'.
  - Bug 2662, '"ag" quicksearch adds "1" to value'.
  - Fix bug in search criteria when doing a complete directory
    search using '*'.
  - Fix sensitivity of toolbar's get_btn (retrieve mail from
    current account) and of mainwindows's relevant entry when
    current account is not able to retrieve (SMTP-only).
  - Don't do TLS if not requested by user. fixes connecting to
    servers which, for example, want SSL 3 only.
- Drop claws-mail-fix-bufferoverflowstrncat.patch as this has been
  upstreamed.
- Drop claws-mail-gnutls318.patch as this has been upstreamed.</changelog>
<changelog author="dimstar@opensuse.org" date="1344513600">- Add claws-mail-verify-hostname.patch: fix SSL negotiation and
  hostname verification.
- Drop claws-mail-certbundle-path.patch: integrated in the upstram
  patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2 (bnc#816881).
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0 - (CVE-2014-2576)
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1 (bnc#870858):
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>

</package>
<package pkgid="caedca589d6dd60706e20a64c7799ae8e0a3c3b96feb55c9cfd0d353bb313859" name="claws-mail" arch="i586">
    <version epoch="0" ver="3.11.0" rel="3.11.1"/>

<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2:
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1:
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979200">- Update to version 3.11.0 (boo#903276):
  + SSLv3 server connections are now disabled by default, in
    response to the POODLE vulnerability (CVE-2014-3566).
  + Several PGP/Core plugin improvements:
  - Indicate when a key has been revoked or has expired when
    displaying signature status.
  - When displaying the full information, show the Validity, and
    the Owner Trust level. Also indicate expired and revoked
    keys, and revoked UIDs.
  - The "Content-Disposition: attachment" flag in PGP/MIME signed
    messages has been removed. It was confusing for cetain MUAs.
  + A new version of the RSSyl plugin, completely redesigned and
    rewritten.
  + The results of TAB address completion in the Compose window
    have improved ordering.
  + Due to popular demand, use of the Up key in the message body in
    the Compose window stops at the top of the message body and
    does not continue up to the header fields. This reverts the
    behaviour introduced in version 3.10.0.
  + In the Compose window, when navigating with the arrow keys,
    selecting, and thus modifying, the Account selector is now
    prevented.
  + In the Compose window, a mnemonic (s) has been added to the
    Subject line.
  + The Queue folder is highlighted if there are messages in its
    sub-folders and the tree is collapsed.
  + When sorting messages by 'thread date', clicking the 'Date'
    column header will now toggle between ascending/descending and
    will not switch to 'date' sorting.
  + A new QuickSearch filter has been added that searches a
    header's content only.
  + A Reply-To field has been added to the main Template
    configuration.
  + The menubar can now be hidden, default hotkey: F12.
  + Fancy plugin: A user-controlled stylesheet can now be used.
  + Python plugin: Add flag attributes to MessageInfo object.
  + Python plugin: Make 'account' property of ComposeWindow
    read/write.
  + Libravatar plugin: a network timeout option has been added.
  + The tbird2claws.py script, for converting a Thunderbird mailbox
    to a Claws Mail mailbox, now handles sub-directory recursion.
  + Bugs fixed: claws#3173, claws#3211, claws#3212, claws#3221,
    claws#3235, claws#3236, claws#3246, claws#3265, claws#3300.
  + Updated translations:.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979201">- New build requirement: intltool.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979202">- Pass --enable-appdata to %configure.</changelog>
<changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="badshah400@gmail.com" date="1454500800">- Update claws-mail-dont-overshoot-output-buffer.patch with patch
  from upstream (rebased for current version) to finally fix
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>

</package>
<package pkgid="fa35c65ef6186aca8b073cf5d264dfc3a74460cab2bdafa2b2602fece23cbfba" name="claws-mail" arch="i586">
    <version epoch="0" ver="3.11.0" rel="3.14.2"/>

<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2:
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1:
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979200">- Update to version 3.11.0 (boo#903276):
  + SSLv3 server connections are now disabled by default, in
    response to the POODLE vulnerability (CVE-2014-3566).
  + Several PGP/Core plugin improvements:
  - Indicate when a key has been revoked or has expired when
    displaying signature status.
  - When displaying the full information, show the Validity, and
    the Owner Trust level. Also indicate expired and revoked
    keys, and revoked UIDs.
  - The "Content-Disposition: attachment" flag in PGP/MIME signed
    messages has been removed. It was confusing for cetain MUAs.
  + A new version of the RSSyl plugin, completely redesigned and
    rewritten.
  + The results of TAB address completion in the Compose window
    have improved ordering.
  + Due to popular demand, use of the Up key in the message body in
    the Compose window stops at the top of the message body and
    does not continue up to the header fields. This reverts the
    behaviour introduced in version 3.10.0.
  + In the Compose window, when navigating with the arrow keys,
    selecting, and thus modifying, the Account selector is now
    prevented.
  + In the Compose window, a mnemonic (s) has been added to the
    Subject line.
  + The Queue folder is highlighted if there are messages in its
    sub-folders and the tree is collapsed.
  + When sorting messages by 'thread date', clicking the 'Date'
    column header will now toggle between ascending/descending and
    will not switch to 'date' sorting.
  + A new QuickSearch filter has been added that searches a
    header's content only.
  + A Reply-To field has been added to the main Template
    configuration.
  + The menubar can now be hidden, default hotkey: F12.
  + Fancy plugin: A user-controlled stylesheet can now be used.
  + Python plugin: Add flag attributes to MessageInfo object.
  + Python plugin: Make 'account' property of ComposeWindow
    read/write.
  + Libravatar plugin: a network timeout option has been added.
  + The tbird2claws.py script, for converting a Thunderbird mailbox
    to a Claws Mail mailbox, now handles sub-directory recursion.
  + Bugs fixed: claws#3173, claws#3211, claws#3212, claws#3221,
    claws#3235, claws#3236, claws#3246, claws#3265, claws#3300.
  + Updated translations:.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979201">- New build requirement: intltool.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979202">- Pass --enable-appdata to %configure.</changelog>
<changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="badshah400@gmail.com" date="1454500800">- Update claws-mail-dont-overshoot-output-buffer.patch with patch
  from upstream (rebased for current version) to finally fix
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="3a5a0fab55443dd534623a6366f3bea573d7951cba3d9da7fa563a9dfbc53ea1" name="claws-mail" arch="src">
    <version epoch="0" ver="3.10.1" rel="3.4.1"/>

<changelog author="badshah400@gmail.com" date="1337601600">- Use pkgconfig(gnutls) BuildRequires instead of gnutls-devel. This
  is more correct and helps avoid the issue with gnutls-devel
  having been removed from Factory.</changelog>
<changelog author="dimstar@opensuse.org" date="1338984000">- Add claws-mail-gnutls318.patch: Fix build with gnutls 3.18+.</changelog>
<changelog author="dimstar@opensuse.org" date="1341489600">- Add claws-mail-bnc770014.patch: Fix crash when trying to view
  info about pgp/smime sign.</changelog>
<changelog author="dimstar@opensuse.org" date="1342872000">- Do not install ca-certificates.crt (bnc#761503).
- Add claws-mail-certbundle-path.patch: Add path to our
  ca-bundle.pem, so the file can be found by claws mail. This is
  an intermediate solution. Preferably we should be switching to
  the directory based storing of CA certificates.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1344168000">- Updated to version 3.8.1:
  + Replied and Forwarded message status flags are now non-
    exclusive. Introduced a new message state (and relevant icon
    in message list) where both the Replied and Forwarded flags
    are set.
  + 'Send to...' has been added to the context menu of a message's
    parts. This causes a new Compose window to open with the
    selected mime part attached.
  + 'Hide' and 'View Log' buttons have been added to the Send and
    Receive dialogues. The former will hide the dialogue, the
    latter will open the Network Log dialogue.
  + A short symbol has been added the QuickSearch Extended mode:
    'ha', an abbreviated form of 'has_attachment'.
  + Basic session statistics are now available, from the
    Statistics tab in About dialog and the command-line.
  + The display of attached patches, (text/x-patch or text/x-diff)
    is now colourised. The colours are controlled by 3 new hidden
    preferences: diff_added_color, diff_deleted_color, and
    diff_hunk_color.
  + Updated translations.
  + Bug fixes:
  - Bug 1090, 'Standard-folders appear again after rescanning
    tree'.
  - Bug 1924, 'Messages marked move to Trash appear identical to
    messages marked move to $FOLDER'.
  - Bug 2598, 'Actions can move locked messages'.
  - Bug 2501, 'opened message blanks when moved to other
    folder'.
  - Bug 2574, 'Statement might be overflowing a buffer in
    strncat'.
  - Bug 2577, 'Focus rectangle on folder list and message list
    headings doesn't get properly cleared when switching heading
    and horizontally scrolling list (underlines and vertical
    lines remain on screen)'.
  - Bug 2582, 'Expanded mimeview drag n drop no longer works'.
  - Bug 2595, 'Change expand behavior for message list / message
    view'.
  - Bug 2620, 'shift+tab from subject field not working'.
  - Bug 2624, 'dialog "Action Configuration" cannot be closed'.
  - Bug 2646, 'Compile fails with gnutls-3.0.18'.
  - Bug 2659, 'E-mail attachments are handled inconsistently'.
  - Bug 2662, '"ag" quicksearch adds "1" to value'.
  - Fix bug in search criteria when doing a complete directory
    search using '*'.
  - Fix sensitivity of toolbar's get_btn (retrieve mail from
    current account) and of mainwindows's relevant entry when
    current account is not able to retrieve (SMTP-only).
  - Don't do TLS if not requested by user. fixes connecting to
    servers which, for example, want SSL 3 only.
- Drop claws-mail-fix-bufferoverflowstrncat.patch as this has been
  upstreamed.
- Drop claws-mail-gnutls318.patch as this has been upstreamed.</changelog>
<changelog author="dimstar@opensuse.org" date="1344513600">- Add claws-mail-verify-hostname.patch: fix SSL negotiation and
  hostname verification.
- Drop claws-mail-certbundle-path.patch: integrated in the upstram
  patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2 (bnc#816881).
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0 - (CVE-2014-2576)
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1 (bnc#870858):
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>

</package>
<package pkgid="6683623ba17e7694645d717cb2c378947604cacb46b9574acd0f2e42f637fa1f" name="claws-mail" arch="src">
    <version epoch="0" ver="3.10.1" rel="3.8.1"/>

<changelog author="dimstar@opensuse.org" date="1338984000">- Add claws-mail-gnutls318.patch: Fix build with gnutls 3.18+.</changelog>
<changelog author="dimstar@opensuse.org" date="1341489600">- Add claws-mail-bnc770014.patch: Fix crash when trying to view
  info about pgp/smime sign.</changelog>
<changelog author="dimstar@opensuse.org" date="1342872000">- Do not install ca-certificates.crt (bnc#761503).
- Add claws-mail-certbundle-path.patch: Add path to our
  ca-bundle.pem, so the file can be found by claws mail. This is
  an intermediate solution. Preferably we should be switching to
  the directory based storing of CA certificates.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1344168000">- Updated to version 3.8.1:
  + Replied and Forwarded message status flags are now non-
    exclusive. Introduced a new message state (and relevant icon
    in message list) where both the Replied and Forwarded flags
    are set.
  + 'Send to...' has been added to the context menu of a message's
    parts. This causes a new Compose window to open with the
    selected mime part attached.
  + 'Hide' and 'View Log' buttons have been added to the Send and
    Receive dialogues. The former will hide the dialogue, the
    latter will open the Network Log dialogue.
  + A short symbol has been added the QuickSearch Extended mode:
    'ha', an abbreviated form of 'has_attachment'.
  + Basic session statistics are now available, from the
    Statistics tab in About dialog and the command-line.
  + The display of attached patches, (text/x-patch or text/x-diff)
    is now colourised. The colours are controlled by 3 new hidden
    preferences: diff_added_color, diff_deleted_color, and
    diff_hunk_color.
  + Updated translations.
  + Bug fixes:
  - Bug 1090, 'Standard-folders appear again after rescanning
    tree'.
  - Bug 1924, 'Messages marked move to Trash appear identical to
    messages marked move to $FOLDER'.
  - Bug 2598, 'Actions can move locked messages'.
  - Bug 2501, 'opened message blanks when moved to other
    folder'.
  - Bug 2574, 'Statement might be overflowing a buffer in
    strncat'.
  - Bug 2577, 'Focus rectangle on folder list and message list
    headings doesn't get properly cleared when switching heading
    and horizontally scrolling list (underlines and vertical
    lines remain on screen)'.
  - Bug 2582, 'Expanded mimeview drag n drop no longer works'.
  - Bug 2595, 'Change expand behavior for message list / message
    view'.
  - Bug 2620, 'shift+tab from subject field not working'.
  - Bug 2624, 'dialog "Action Configuration" cannot be closed'.
  - Bug 2646, 'Compile fails with gnutls-3.0.18'.
  - Bug 2659, 'E-mail attachments are handled inconsistently'.
  - Bug 2662, '"ag" quicksearch adds "1" to value'.
  - Fix bug in search criteria when doing a complete directory
    search using '*'.
  - Fix sensitivity of toolbar's get_btn (retrieve mail from
    current account) and of mainwindows's relevant entry when
    current account is not able to retrieve (SMTP-only).
  - Don't do TLS if not requested by user. fixes connecting to
    servers which, for example, want SSL 3 only.
- Drop claws-mail-fix-bufferoverflowstrncat.patch as this has been
  upstreamed.
- Drop claws-mail-gnutls318.patch as this has been upstreamed.</changelog>
<changelog author="dimstar@opensuse.org" date="1344513600">- Add claws-mail-verify-hostname.patch: fix SSL negotiation and
  hostname verification.
- Drop claws-mail-certbundle-path.patch: integrated in the upstram
  patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2 (bnc#816881).
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0 - (CVE-2014-2576)
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1 (bnc#870858):
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>

</package>
<package pkgid="9e22524b6e1ce3561adb7c4c8998f7df462eca2cf5ff0fe3f6acb18a85b3ef9e" name="claws-mail" arch="src">
    <version epoch="0" ver="3.11.0" rel="3.11.1"/>

<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2:
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1:
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979200">- Update to version 3.11.0 (boo#903276):
  + SSLv3 server connections are now disabled by default, in
    response to the POODLE vulnerability (CVE-2014-3566).
  + Several PGP/Core plugin improvements:
  - Indicate when a key has been revoked or has expired when
    displaying signature status.
  - When displaying the full information, show the Validity, and
    the Owner Trust level. Also indicate expired and revoked
    keys, and revoked UIDs.
  - The "Content-Disposition: attachment" flag in PGP/MIME signed
    messages has been removed. It was confusing for cetain MUAs.
  + A new version of the RSSyl plugin, completely redesigned and
    rewritten.
  + The results of TAB address completion in the Compose window
    have improved ordering.
  + Due to popular demand, use of the Up key in the message body in
    the Compose window stops at the top of the message body and
    does not continue up to the header fields. This reverts the
    behaviour introduced in version 3.10.0.
  + In the Compose window, when navigating with the arrow keys,
    selecting, and thus modifying, the Account selector is now
    prevented.
  + In the Compose window, a mnemonic (s) has been added to the
    Subject line.
  + The Queue folder is highlighted if there are messages in its
    sub-folders and the tree is collapsed.
  + When sorting messages by 'thread date', clicking the 'Date'
    column header will now toggle between ascending/descending and
    will not switch to 'date' sorting.
  + A new QuickSearch filter has been added that searches a
    header's content only.
  + A Reply-To field has been added to the main Template
    configuration.
  + The menubar can now be hidden, default hotkey: F12.
  + Fancy plugin: A user-controlled stylesheet can now be used.
  + Python plugin: Add flag attributes to MessageInfo object.
  + Python plugin: Make 'account' property of ComposeWindow
    read/write.
  + Libravatar plugin: a network timeout option has been added.
  + The tbird2claws.py script, for converting a Thunderbird mailbox
    to a Claws Mail mailbox, now handles sub-directory recursion.
  + Bugs fixed: claws#3173, claws#3211, claws#3212, claws#3221,
    claws#3235, claws#3236, claws#3246, claws#3265, claws#3300.
  + Updated translations:.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979201">- New build requirement: intltool.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979202">- Pass --enable-appdata to %configure.</changelog>
<changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="badshah400@gmail.com" date="1454500800">- Update claws-mail-dont-overshoot-output-buffer.patch with patch
  from upstream (rebased for current version) to finally fix
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>

</package>
<package pkgid="d9d5424011b674f37cf91c904467c55837d29d9461c8f3918f9b646b9ffb0235" name="claws-mail" arch="src">
    <version epoch="0" ver="3.11.0" rel="3.14.2"/>

<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2:
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1:
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979200">- Update to version 3.11.0 (boo#903276):
  + SSLv3 server connections are now disabled by default, in
    response to the POODLE vulnerability (CVE-2014-3566).
  + Several PGP/Core plugin improvements:
  - Indicate when a key has been revoked or has expired when
    displaying signature status.
  - When displaying the full information, show the Validity, and
    the Owner Trust level. Also indicate expired and revoked
    keys, and revoked UIDs.
  - The "Content-Disposition: attachment" flag in PGP/MIME signed
    messages has been removed. It was confusing for cetain MUAs.
  + A new version of the RSSyl plugin, completely redesigned and
    rewritten.
  + The results of TAB address completion in the Compose window
    have improved ordering.
  + Due to popular demand, use of the Up key in the message body in
    the Compose window stops at the top of the message body and
    does not continue up to the header fields. This reverts the
    behaviour introduced in version 3.10.0.
  + In the Compose window, when navigating with the arrow keys,
    selecting, and thus modifying, the Account selector is now
    prevented.
  + In the Compose window, a mnemonic (s) has been added to the
    Subject line.
  + The Queue folder is highlighted if there are messages in its
    sub-folders and the tree is collapsed.
  + When sorting messages by 'thread date', clicking the 'Date'
    column header will now toggle between ascending/descending and
    will not switch to 'date' sorting.
  + A new QuickSearch filter has been added that searches a
    header's content only.
  + A Reply-To field has been added to the main Template
    configuration.
  + The menubar can now be hidden, default hotkey: F12.
  + Fancy plugin: A user-controlled stylesheet can now be used.
  + Python plugin: Add flag attributes to MessageInfo object.
  + Python plugin: Make 'account' property of ComposeWindow
    read/write.
  + Libravatar plugin: a network timeout option has been added.
  + The tbird2claws.py script, for converting a Thunderbird mailbox
    to a Claws Mail mailbox, now handles sub-directory recursion.
  + Bugs fixed: claws#3173, claws#3211, claws#3212, claws#3221,
    claws#3235, claws#3236, claws#3246, claws#3265, claws#3300.
  + Updated translations:.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979201">- New build requirement: intltool.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979202">- Pass --enable-appdata to %configure.</changelog>
<changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="badshah400@gmail.com" date="1454500800">- Update claws-mail-dont-overshoot-output-buffer.patch with patch
  from upstream (rebased for current version) to finally fix
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="a30ba81a3da2a2d46988425a988e0a46fc23cc0077bf40e50f46195f7366497d" name="claws-mail" arch="x86_64">
    <version epoch="0" ver="3.10.1" rel="3.4.1"/>

<changelog author="badshah400@gmail.com" date="1337601600">- Use pkgconfig(gnutls) BuildRequires instead of gnutls-devel. This
  is more correct and helps avoid the issue with gnutls-devel
  having been removed from Factory.</changelog>
<changelog author="dimstar@opensuse.org" date="1338984000">- Add claws-mail-gnutls318.patch: Fix build with gnutls 3.18+.</changelog>
<changelog author="dimstar@opensuse.org" date="1341489600">- Add claws-mail-bnc770014.patch: Fix crash when trying to view
  info about pgp/smime sign.</changelog>
<changelog author="dimstar@opensuse.org" date="1342872000">- Do not install ca-certificates.crt (bnc#761503).
- Add claws-mail-certbundle-path.patch: Add path to our
  ca-bundle.pem, so the file can be found by claws mail. This is
  an intermediate solution. Preferably we should be switching to
  the directory based storing of CA certificates.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1344168000">- Updated to version 3.8.1:
  + Replied and Forwarded message status flags are now non-
    exclusive. Introduced a new message state (and relevant icon
    in message list) where both the Replied and Forwarded flags
    are set.
  + 'Send to...' has been added to the context menu of a message's
    parts. This causes a new Compose window to open with the
    selected mime part attached.
  + 'Hide' and 'View Log' buttons have been added to the Send and
    Receive dialogues. The former will hide the dialogue, the
    latter will open the Network Log dialogue.
  + A short symbol has been added the QuickSearch Extended mode:
    'ha', an abbreviated form of 'has_attachment'.
  + Basic session statistics are now available, from the
    Statistics tab in About dialog and the command-line.
  + The display of attached patches, (text/x-patch or text/x-diff)
    is now colourised. The colours are controlled by 3 new hidden
    preferences: diff_added_color, diff_deleted_color, and
    diff_hunk_color.
  + Updated translations.
  + Bug fixes:
  - Bug 1090, 'Standard-folders appear again after rescanning
    tree'.
  - Bug 1924, 'Messages marked move to Trash appear identical to
    messages marked move to $FOLDER'.
  - Bug 2598, 'Actions can move locked messages'.
  - Bug 2501, 'opened message blanks when moved to other
    folder'.
  - Bug 2574, 'Statement might be overflowing a buffer in
    strncat'.
  - Bug 2577, 'Focus rectangle on folder list and message list
    headings doesn't get properly cleared when switching heading
    and horizontally scrolling list (underlines and vertical
    lines remain on screen)'.
  - Bug 2582, 'Expanded mimeview drag n drop no longer works'.
  - Bug 2595, 'Change expand behavior for message list / message
    view'.
  - Bug 2620, 'shift+tab from subject field not working'.
  - Bug 2624, 'dialog "Action Configuration" cannot be closed'.
  - Bug 2646, 'Compile fails with gnutls-3.0.18'.
  - Bug 2659, 'E-mail attachments are handled inconsistently'.
  - Bug 2662, '"ag" quicksearch adds "1" to value'.
  - Fix bug in search criteria when doing a complete directory
    search using '*'.
  - Fix sensitivity of toolbar's get_btn (retrieve mail from
    current account) and of mainwindows's relevant entry when
    current account is not able to retrieve (SMTP-only).
  - Don't do TLS if not requested by user. fixes connecting to
    servers which, for example, want SSL 3 only.
- Drop claws-mail-fix-bufferoverflowstrncat.patch as this has been
  upstreamed.
- Drop claws-mail-gnutls318.patch as this has been upstreamed.</changelog>
<changelog author="dimstar@opensuse.org" date="1344513600">- Add claws-mail-verify-hostname.patch: fix SSL negotiation and
  hostname verification.
- Drop claws-mail-certbundle-path.patch: integrated in the upstram
  patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2 (bnc#816881).
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0 - (CVE-2014-2576)
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1 (bnc#870858):
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>

</package>
<package pkgid="8f51763aaf20f28eeacde761aa5a441cc4af3ad8e9926181d1039f55cf1bcfc7" name="claws-mail" arch="x86_64">
    <version epoch="0" ver="3.10.1" rel="3.8.1"/>

<changelog author="dimstar@opensuse.org" date="1338984000">- Add claws-mail-gnutls318.patch: Fix build with gnutls 3.18+.</changelog>
<changelog author="dimstar@opensuse.org" date="1341489600">- Add claws-mail-bnc770014.patch: Fix crash when trying to view
  info about pgp/smime sign.</changelog>
<changelog author="dimstar@opensuse.org" date="1342872000">- Do not install ca-certificates.crt (bnc#761503).
- Add claws-mail-certbundle-path.patch: Add path to our
  ca-bundle.pem, so the file can be found by claws mail. This is
  an intermediate solution. Preferably we should be switching to
  the directory based storing of CA certificates.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1344168000">- Updated to version 3.8.1:
  + Replied and Forwarded message status flags are now non-
    exclusive. Introduced a new message state (and relevant icon
    in message list) where both the Replied and Forwarded flags
    are set.
  + 'Send to...' has been added to the context menu of a message's
    parts. This causes a new Compose window to open with the
    selected mime part attached.
  + 'Hide' and 'View Log' buttons have been added to the Send and
    Receive dialogues. The former will hide the dialogue, the
    latter will open the Network Log dialogue.
  + A short symbol has been added the QuickSearch Extended mode:
    'ha', an abbreviated form of 'has_attachment'.
  + Basic session statistics are now available, from the
    Statistics tab in About dialog and the command-line.
  + The display of attached patches, (text/x-patch or text/x-diff)
    is now colourised. The colours are controlled by 3 new hidden
    preferences: diff_added_color, diff_deleted_color, and
    diff_hunk_color.
  + Updated translations.
  + Bug fixes:
  - Bug 1090, 'Standard-folders appear again after rescanning
    tree'.
  - Bug 1924, 'Messages marked move to Trash appear identical to
    messages marked move to $FOLDER'.
  - Bug 2598, 'Actions can move locked messages'.
  - Bug 2501, 'opened message blanks when moved to other
    folder'.
  - Bug 2574, 'Statement might be overflowing a buffer in
    strncat'.
  - Bug 2577, 'Focus rectangle on folder list and message list
    headings doesn't get properly cleared when switching heading
    and horizontally scrolling list (underlines and vertical
    lines remain on screen)'.
  - Bug 2582, 'Expanded mimeview drag n drop no longer works'.
  - Bug 2595, 'Change expand behavior for message list / message
    view'.
  - Bug 2620, 'shift+tab from subject field not working'.
  - Bug 2624, 'dialog "Action Configuration" cannot be closed'.
  - Bug 2646, 'Compile fails with gnutls-3.0.18'.
  - Bug 2659, 'E-mail attachments are handled inconsistently'.
  - Bug 2662, '"ag" quicksearch adds "1" to value'.
  - Fix bug in search criteria when doing a complete directory
    search using '*'.
  - Fix sensitivity of toolbar's get_btn (retrieve mail from
    current account) and of mainwindows's relevant entry when
    current account is not able to retrieve (SMTP-only).
  - Don't do TLS if not requested by user. fixes connecting to
    servers which, for example, want SSL 3 only.
- Drop claws-mail-fix-bufferoverflowstrncat.patch as this has been
  upstreamed.
- Drop claws-mail-gnutls318.patch as this has been upstreamed.</changelog>
<changelog author="dimstar@opensuse.org" date="1344513600">- Add claws-mail-verify-hostname.patch: fix SSL negotiation and
  hostname verification.
- Drop claws-mail-certbundle-path.patch: integrated in the upstram
  patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2 (bnc#816881).
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0 - (CVE-2014-2576)
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1 (bnc#870858):
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>

</package>
<package pkgid="b8b0c83e0ed421a28ad6783ce2222cfdffa044b161499d77a274631967422c5e" name="claws-mail" arch="x86_64">
    <version epoch="0" ver="3.11.0" rel="3.11.1"/>

<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2:
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1:
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979200">- Update to version 3.11.0 (boo#903276):
  + SSLv3 server connections are now disabled by default, in
    response to the POODLE vulnerability (CVE-2014-3566).
  + Several PGP/Core plugin improvements:
  - Indicate when a key has been revoked or has expired when
    displaying signature status.
  - When displaying the full information, show the Validity, and
    the Owner Trust level. Also indicate expired and revoked
    keys, and revoked UIDs.
  - The "Content-Disposition: attachment" flag in PGP/MIME signed
    messages has been removed. It was confusing for cetain MUAs.
  + A new version of the RSSyl plugin, completely redesigned and
    rewritten.
  + The results of TAB address completion in the Compose window
    have improved ordering.
  + Due to popular demand, use of the Up key in the message body in
    the Compose window stops at the top of the message body and
    does not continue up to the header fields. This reverts the
    behaviour introduced in version 3.10.0.
  + In the Compose window, when navigating with the arrow keys,
    selecting, and thus modifying, the Account selector is now
    prevented.
  + In the Compose window, a mnemonic (s) has been added to the
    Subject line.
  + The Queue folder is highlighted if there are messages in its
    sub-folders and the tree is collapsed.
  + When sorting messages by 'thread date', clicking the 'Date'
    column header will now toggle between ascending/descending and
    will not switch to 'date' sorting.
  + A new QuickSearch filter has been added that searches a
    header's content only.
  + A Reply-To field has been added to the main Template
    configuration.
  + The menubar can now be hidden, default hotkey: F12.
  + Fancy plugin: A user-controlled stylesheet can now be used.
  + Python plugin: Add flag attributes to MessageInfo object.
  + Python plugin: Make 'account' property of ComposeWindow
    read/write.
  + Libravatar plugin: a network timeout option has been added.
  + The tbird2claws.py script, for converting a Thunderbird mailbox
    to a Claws Mail mailbox, now handles sub-directory recursion.
  + Bugs fixed: claws#3173, claws#3211, claws#3212, claws#3221,
    claws#3235, claws#3236, claws#3246, claws#3265, claws#3300.
  + Updated translations:.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979201">- New build requirement: intltool.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979202">- Pass --enable-appdata to %configure.</changelog>
<changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="badshah400@gmail.com" date="1454500800">- Update claws-mail-dont-overshoot-output-buffer.patch with patch
  from upstream (rebased for current version) to finally fix
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>

</package>
<package pkgid="291e13d92bf80831d08cfca3704cfa9429cb07c8822823ebb23b8a8cbe57357f" name="claws-mail" arch="x86_64">
    <version epoch="0" ver="3.11.0" rel="3.14.2"/>

<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2:
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1:
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979200">- Update to version 3.11.0 (boo#903276):
  + SSLv3 server connections are now disabled by default, in
    response to the POODLE vulnerability (CVE-2014-3566).
  + Several PGP/Core plugin improvements:
  - Indicate when a key has been revoked or has expired when
    displaying signature status.
  - When displaying the full information, show the Validity, and
    the Owner Trust level. Also indicate expired and revoked
    keys, and revoked UIDs.
  - The "Content-Disposition: attachment" flag in PGP/MIME signed
    messages has been removed. It was confusing for cetain MUAs.
  + A new version of the RSSyl plugin, completely redesigned and
    rewritten.
  + The results of TAB address completion in the Compose window
    have improved ordering.
  + Due to popular demand, use of the Up key in the message body in
    the Compose window stops at the top of the message body and
    does not continue up to the header fields. This reverts the
    behaviour introduced in version 3.10.0.
  + In the Compose window, when navigating with the arrow keys,
    selecting, and thus modifying, the Account selector is now
    prevented.
  + In the Compose window, a mnemonic (s) has been added to the
    Subject line.
  + The Queue folder is highlighted if there are messages in its
    sub-folders and the tree is collapsed.
  + When sorting messages by 'thread date', clicking the 'Date'
    column header will now toggle between ascending/descending and
    will not switch to 'date' sorting.
  + A new QuickSearch filter has been added that searches a
    header's content only.
  + A Reply-To field has been added to the main Template
    configuration.
  + The menubar can now be hidden, default hotkey: F12.
  + Fancy plugin: A user-controlled stylesheet can now be used.
  + Python plugin: Add flag attributes to MessageInfo object.
  + Python plugin: Make 'account' property of ComposeWindow
    read/write.
  + Libravatar plugin: a network timeout option has been added.
  + The tbird2claws.py script, for converting a Thunderbird mailbox
    to a Claws Mail mailbox, now handles sub-directory recursion.
  + Bugs fixed: claws#3173, claws#3211, claws#3212, claws#3221,
    claws#3235, claws#3236, claws#3246, claws#3265, claws#3300.
  + Updated translations:.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979201">- New build requirement: intltool.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979202">- Pass --enable-appdata to %configure.</changelog>
<changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="badshah400@gmail.com" date="1454500800">- Update claws-mail-dont-overshoot-output-buffer.patch with patch
  from upstream (rebased for current version) to finally fix
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="85ca8979ffd6825310af50cd9e7d069de646b33e5ec89207141fb288dcbb8586" name="claws-mail-devel" arch="i586">
    <version epoch="0" ver="3.10.1" rel="3.4.1"/>

<changelog author="badshah400@gmail.com" date="1337601600">- Use pkgconfig(gnutls) BuildRequires instead of gnutls-devel. This
  is more correct and helps avoid the issue with gnutls-devel
  having been removed from Factory.</changelog>
<changelog author="dimstar@opensuse.org" date="1338984000">- Add claws-mail-gnutls318.patch: Fix build with gnutls 3.18+.</changelog>
<changelog author="dimstar@opensuse.org" date="1341489600">- Add claws-mail-bnc770014.patch: Fix crash when trying to view
  info about pgp/smime sign.</changelog>
<changelog author="dimstar@opensuse.org" date="1342872000">- Do not install ca-certificates.crt (bnc#761503).
- Add claws-mail-certbundle-path.patch: Add path to our
  ca-bundle.pem, so the file can be found by claws mail. This is
  an intermediate solution. Preferably we should be switching to
  the directory based storing of CA certificates.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1344168000">- Updated to version 3.8.1:
  + Replied and Forwarded message status flags are now non-
    exclusive. Introduced a new message state (and relevant icon
    in message list) where both the Replied and Forwarded flags
    are set.
  + 'Send to...' has been added to the context menu of a message's
    parts. This causes a new Compose window to open with the
    selected mime part attached.
  + 'Hide' and 'View Log' buttons have been added to the Send and
    Receive dialogues. The former will hide the dialogue, the
    latter will open the Network Log dialogue.
  + A short symbol has been added the QuickSearch Extended mode:
    'ha', an abbreviated form of 'has_attachment'.
  + Basic session statistics are now available, from the
    Statistics tab in About dialog and the command-line.
  + The display of attached patches, (text/x-patch or text/x-diff)
    is now colourised. The colours are controlled by 3 new hidden
    preferences: diff_added_color, diff_deleted_color, and
    diff_hunk_color.
  + Updated translations.
  + Bug fixes:
  - Bug 1090, 'Standard-folders appear again after rescanning
    tree'.
  - Bug 1924, 'Messages marked move to Trash appear identical to
    messages marked move to $FOLDER'.
  - Bug 2598, 'Actions can move locked messages'.
  - Bug 2501, 'opened message blanks when moved to other
    folder'.
  - Bug 2574, 'Statement might be overflowing a buffer in
    strncat'.
  - Bug 2577, 'Focus rectangle on folder list and message list
    headings doesn't get properly cleared when switching heading
    and horizontally scrolling list (underlines and vertical
    lines remain on screen)'.
  - Bug 2582, 'Expanded mimeview drag n drop no longer works'.
  - Bug 2595, 'Change expand behavior for message list / message
    view'.
  - Bug 2620, 'shift+tab from subject field not working'.
  - Bug 2624, 'dialog "Action Configuration" cannot be closed'.
  - Bug 2646, 'Compile fails with gnutls-3.0.18'.
  - Bug 2659, 'E-mail attachments are handled inconsistently'.
  - Bug 2662, '"ag" quicksearch adds "1" to value'.
  - Fix bug in search criteria when doing a complete directory
    search using '*'.
  - Fix sensitivity of toolbar's get_btn (retrieve mail from
    current account) and of mainwindows's relevant entry when
    current account is not able to retrieve (SMTP-only).
  - Don't do TLS if not requested by user. fixes connecting to
    servers which, for example, want SSL 3 only.
- Drop claws-mail-fix-bufferoverflowstrncat.patch as this has been
  upstreamed.
- Drop claws-mail-gnutls318.patch as this has been upstreamed.</changelog>
<changelog author="dimstar@opensuse.org" date="1344513600">- Add claws-mail-verify-hostname.patch: fix SSL negotiation and
  hostname verification.
- Drop claws-mail-certbundle-path.patch: integrated in the upstram
  patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2 (bnc#816881).
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0 - (CVE-2014-2576)
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1 (bnc#870858):
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>

</package>
<package pkgid="b7cc877b5e9bfa2d570c017b6a08de4fa911a15a45438680d12d9e6e9b6e654e" name="claws-mail-devel" arch="i586">
    <version epoch="0" ver="3.10.1" rel="3.8.1"/>

<changelog author="dimstar@opensuse.org" date="1338984000">- Add claws-mail-gnutls318.patch: Fix build with gnutls 3.18+.</changelog>
<changelog author="dimstar@opensuse.org" date="1341489600">- Add claws-mail-bnc770014.patch: Fix crash when trying to view
  info about pgp/smime sign.</changelog>
<changelog author="dimstar@opensuse.org" date="1342872000">- Do not install ca-certificates.crt (bnc#761503).
- Add claws-mail-certbundle-path.patch: Add path to our
  ca-bundle.pem, so the file can be found by claws mail. This is
  an intermediate solution. Preferably we should be switching to
  the directory based storing of CA certificates.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1344168000">- Updated to version 3.8.1:
  + Replied and Forwarded message status flags are now non-
    exclusive. Introduced a new message state (and relevant icon
    in message list) where both the Replied and Forwarded flags
    are set.
  + 'Send to...' has been added to the context menu of a message's
    parts. This causes a new Compose window to open with the
    selected mime part attached.
  + 'Hide' and 'View Log' buttons have been added to the Send and
    Receive dialogues. The former will hide the dialogue, the
    latter will open the Network Log dialogue.
  + A short symbol has been added the QuickSearch Extended mode:
    'ha', an abbreviated form of 'has_attachment'.
  + Basic session statistics are now available, from the
    Statistics tab in About dialog and the command-line.
  + The display of attached patches, (text/x-patch or text/x-diff)
    is now colourised. The colours are controlled by 3 new hidden
    preferences: diff_added_color, diff_deleted_color, and
    diff_hunk_color.
  + Updated translations.
  + Bug fixes:
  - Bug 1090, 'Standard-folders appear again after rescanning
    tree'.
  - Bug 1924, 'Messages marked move to Trash appear identical to
    messages marked move to $FOLDER'.
  - Bug 2598, 'Actions can move locked messages'.
  - Bug 2501, 'opened message blanks when moved to other
    folder'.
  - Bug 2574, 'Statement might be overflowing a buffer in
    strncat'.
  - Bug 2577, 'Focus rectangle on folder list and message list
    headings doesn't get properly cleared when switching heading
    and horizontally scrolling list (underlines and vertical
    lines remain on screen)'.
  - Bug 2582, 'Expanded mimeview drag n drop no longer works'.
  - Bug 2595, 'Change expand behavior for message list / message
    view'.
  - Bug 2620, 'shift+tab from subject field not working'.
  - Bug 2624, 'dialog "Action Configuration" cannot be closed'.
  - Bug 2646, 'Compile fails with gnutls-3.0.18'.
  - Bug 2659, 'E-mail attachments are handled inconsistently'.
  - Bug 2662, '"ag" quicksearch adds "1" to value'.
  - Fix bug in search criteria when doing a complete directory
    search using '*'.
  - Fix sensitivity of toolbar's get_btn (retrieve mail from
    current account) and of mainwindows's relevant entry when
    current account is not able to retrieve (SMTP-only).
  - Don't do TLS if not requested by user. fixes connecting to
    servers which, for example, want SSL 3 only.
- Drop claws-mail-fix-bufferoverflowstrncat.patch as this has been
  upstreamed.
- Drop claws-mail-gnutls318.patch as this has been upstreamed.</changelog>
<changelog author="dimstar@opensuse.org" date="1344513600">- Add claws-mail-verify-hostname.patch: fix SSL negotiation and
  hostname verification.
- Drop claws-mail-certbundle-path.patch: integrated in the upstram
  patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2 (bnc#816881).
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0 - (CVE-2014-2576)
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1 (bnc#870858):
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>

</package>
<package pkgid="baa31dd6a23b03d92ae4da855e4b9d95af3a8487c3a2c13d033fb4fe87f96b37" name="claws-mail-devel" arch="i586">
    <version epoch="0" ver="3.11.0" rel="3.11.1"/>

<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2:
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1:
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979200">- Update to version 3.11.0 (boo#903276):
  + SSLv3 server connections are now disabled by default, in
    response to the POODLE vulnerability (CVE-2014-3566).
  + Several PGP/Core plugin improvements:
  - Indicate when a key has been revoked or has expired when
    displaying signature status.
  - When displaying the full information, show the Validity, and
    the Owner Trust level. Also indicate expired and revoked
    keys, and revoked UIDs.
  - The "Content-Disposition: attachment" flag in PGP/MIME signed
    messages has been removed. It was confusing for cetain MUAs.
  + A new version of the RSSyl plugin, completely redesigned and
    rewritten.
  + The results of TAB address completion in the Compose window
    have improved ordering.
  + Due to popular demand, use of the Up key in the message body in
    the Compose window stops at the top of the message body and
    does not continue up to the header fields. This reverts the
    behaviour introduced in version 3.10.0.
  + In the Compose window, when navigating with the arrow keys,
    selecting, and thus modifying, the Account selector is now
    prevented.
  + In the Compose window, a mnemonic (s) has been added to the
    Subject line.
  + The Queue folder is highlighted if there are messages in its
    sub-folders and the tree is collapsed.
  + When sorting messages by 'thread date', clicking the 'Date'
    column header will now toggle between ascending/descending and
    will not switch to 'date' sorting.
  + A new QuickSearch filter has been added that searches a
    header's content only.
  + A Reply-To field has been added to the main Template
    configuration.
  + The menubar can now be hidden, default hotkey: F12.
  + Fancy plugin: A user-controlled stylesheet can now be used.
  + Python plugin: Add flag attributes to MessageInfo object.
  + Python plugin: Make 'account' property of ComposeWindow
    read/write.
  + Libravatar plugin: a network timeout option has been added.
  + The tbird2claws.py script, for converting a Thunderbird mailbox
    to a Claws Mail mailbox, now handles sub-directory recursion.
  + Bugs fixed: claws#3173, claws#3211, claws#3212, claws#3221,
    claws#3235, claws#3236, claws#3246, claws#3265, claws#3300.
  + Updated translations:.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979201">- New build requirement: intltool.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979202">- Pass --enable-appdata to %configure.</changelog>
<changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="badshah400@gmail.com" date="1454500800">- Update claws-mail-dont-overshoot-output-buffer.patch with patch
  from upstream (rebased for current version) to finally fix
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>

</package>
<package pkgid="05aca438b7305a4c99abd6fbc4b5f7e36ef35a9ac4cfc9fbe3a67505de16e97f" name="claws-mail-devel" arch="i586">
    <version epoch="0" ver="3.11.0" rel="3.14.2"/>

<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2:
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1:
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979200">- Update to version 3.11.0 (boo#903276):
  + SSLv3 server connections are now disabled by default, in
    response to the POODLE vulnerability (CVE-2014-3566).
  + Several PGP/Core plugin improvements:
  - Indicate when a key has been revoked or has expired when
    displaying signature status.
  - When displaying the full information, show the Validity, and
    the Owner Trust level. Also indicate expired and revoked
    keys, and revoked UIDs.
  - The "Content-Disposition: attachment" flag in PGP/MIME signed
    messages has been removed. It was confusing for cetain MUAs.
  + A new version of the RSSyl plugin, completely redesigned and
    rewritten.
  + The results of TAB address completion in the Compose window
    have improved ordering.
  + Due to popular demand, use of the Up key in the message body in
    the Compose window stops at the top of the message body and
    does not continue up to the header fields. This reverts the
    behaviour introduced in version 3.10.0.
  + In the Compose window, when navigating with the arrow keys,
    selecting, and thus modifying, the Account selector is now
    prevented.
  + In the Compose window, a mnemonic (s) has been added to the
    Subject line.
  + The Queue folder is highlighted if there are messages in its
    sub-folders and the tree is collapsed.
  + When sorting messages by 'thread date', clicking the 'Date'
    column header will now toggle between ascending/descending and
    will not switch to 'date' sorting.
  + A new QuickSearch filter has been added that searches a
    header's content only.
  + A Reply-To field has been added to the main Template
    configuration.
  + The menubar can now be hidden, default hotkey: F12.
  + Fancy plugin: A user-controlled stylesheet can now be used.
  + Python plugin: Add flag attributes to MessageInfo object.
  + Python plugin: Make 'account' property of ComposeWindow
    read/write.
  + Libravatar plugin: a network timeout option has been added.
  + The tbird2claws.py script, for converting a Thunderbird mailbox
    to a Claws Mail mailbox, now handles sub-directory recursion.
  + Bugs fixed: claws#3173, claws#3211, claws#3212, claws#3221,
    claws#3235, claws#3236, claws#3246, claws#3265, claws#3300.
  + Updated translations:.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979201">- New build requirement: intltool.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979202">- Pass --enable-appdata to %configure.</changelog>
<changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="badshah400@gmail.com" date="1454500800">- Update claws-mail-dont-overshoot-output-buffer.patch with patch
  from upstream (rebased for current version) to finally fix
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="98c842a342298c204227fb10b75f9804b7927428027369ead388c9d7cd4bac1a" name="claws-mail-devel" arch="x86_64">
    <version epoch="0" ver="3.10.1" rel="3.4.1"/>

<changelog author="badshah400@gmail.com" date="1337601600">- Use pkgconfig(gnutls) BuildRequires instead of gnutls-devel. This
  is more correct and helps avoid the issue with gnutls-devel
  having been removed from Factory.</changelog>
<changelog author="dimstar@opensuse.org" date="1338984000">- Add claws-mail-gnutls318.patch: Fix build with gnutls 3.18+.</changelog>
<changelog author="dimstar@opensuse.org" date="1341489600">- Add claws-mail-bnc770014.patch: Fix crash when trying to view
  info about pgp/smime sign.</changelog>
<changelog author="dimstar@opensuse.org" date="1342872000">- Do not install ca-certificates.crt (bnc#761503).
- Add claws-mail-certbundle-path.patch: Add path to our
  ca-bundle.pem, so the file can be found by claws mail. This is
  an intermediate solution. Preferably we should be switching to
  the directory based storing of CA certificates.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1344168000">- Updated to version 3.8.1:
  + Replied and Forwarded message status flags are now non-
    exclusive. Introduced a new message state (and relevant icon
    in message list) where both the Replied and Forwarded flags
    are set.
  + 'Send to...' has been added to the context menu of a message's
    parts. This causes a new Compose window to open with the
    selected mime part attached.
  + 'Hide' and 'View Log' buttons have been added to the Send and
    Receive dialogues. The former will hide the dialogue, the
    latter will open the Network Log dialogue.
  + A short symbol has been added the QuickSearch Extended mode:
    'ha', an abbreviated form of 'has_attachment'.
  + Basic session statistics are now available, from the
    Statistics tab in About dialog and the command-line.
  + The display of attached patches, (text/x-patch or text/x-diff)
    is now colourised. The colours are controlled by 3 new hidden
    preferences: diff_added_color, diff_deleted_color, and
    diff_hunk_color.
  + Updated translations.
  + Bug fixes:
  - Bug 1090, 'Standard-folders appear again after rescanning
    tree'.
  - Bug 1924, 'Messages marked move to Trash appear identical to
    messages marked move to $FOLDER'.
  - Bug 2598, 'Actions can move locked messages'.
  - Bug 2501, 'opened message blanks when moved to other
    folder'.
  - Bug 2574, 'Statement might be overflowing a buffer in
    strncat'.
  - Bug 2577, 'Focus rectangle on folder list and message list
    headings doesn't get properly cleared when switching heading
    and horizontally scrolling list (underlines and vertical
    lines remain on screen)'.
  - Bug 2582, 'Expanded mimeview drag n drop no longer works'.
  - Bug 2595, 'Change expand behavior for message list / message
    view'.
  - Bug 2620, 'shift+tab from subject field not working'.
  - Bug 2624, 'dialog "Action Configuration" cannot be closed'.
  - Bug 2646, 'Compile fails with gnutls-3.0.18'.
  - Bug 2659, 'E-mail attachments are handled inconsistently'.
  - Bug 2662, '"ag" quicksearch adds "1" to value'.
  - Fix bug in search criteria when doing a complete directory
    search using '*'.
  - Fix sensitivity of toolbar's get_btn (retrieve mail from
    current account) and of mainwindows's relevant entry when
    current account is not able to retrieve (SMTP-only).
  - Don't do TLS if not requested by user. fixes connecting to
    servers which, for example, want SSL 3 only.
- Drop claws-mail-fix-bufferoverflowstrncat.patch as this has been
  upstreamed.
- Drop claws-mail-gnutls318.patch as this has been upstreamed.</changelog>
<changelog author="dimstar@opensuse.org" date="1344513600">- Add claws-mail-verify-hostname.patch: fix SSL negotiation and
  hostname verification.
- Drop claws-mail-certbundle-path.patch: integrated in the upstram
  patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2 (bnc#816881).
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0 - (CVE-2014-2576)
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1 (bnc#870858):
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>

</package>
<package pkgid="eb93c9c9eba0b4a0433164c4acb7a81c8474b69296b6c21b4fd24b9daa769a6e" name="claws-mail-devel" arch="x86_64">
    <version epoch="0" ver="3.10.1" rel="3.8.1"/>

<changelog author="dimstar@opensuse.org" date="1338984000">- Add claws-mail-gnutls318.patch: Fix build with gnutls 3.18+.</changelog>
<changelog author="dimstar@opensuse.org" date="1341489600">- Add claws-mail-bnc770014.patch: Fix crash when trying to view
  info about pgp/smime sign.</changelog>
<changelog author="dimstar@opensuse.org" date="1342872000">- Do not install ca-certificates.crt (bnc#761503).
- Add claws-mail-certbundle-path.patch: Add path to our
  ca-bundle.pem, so the file can be found by claws mail. This is
  an intermediate solution. Preferably we should be switching to
  the directory based storing of CA certificates.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1344168000">- Updated to version 3.8.1:
  + Replied and Forwarded message status flags are now non-
    exclusive. Introduced a new message state (and relevant icon
    in message list) where both the Replied and Forwarded flags
    are set.
  + 'Send to...' has been added to the context menu of a message's
    parts. This causes a new Compose window to open with the
    selected mime part attached.
  + 'Hide' and 'View Log' buttons have been added to the Send and
    Receive dialogues. The former will hide the dialogue, the
    latter will open the Network Log dialogue.
  + A short symbol has been added the QuickSearch Extended mode:
    'ha', an abbreviated form of 'has_attachment'.
  + Basic session statistics are now available, from the
    Statistics tab in About dialog and the command-line.
  + The display of attached patches, (text/x-patch or text/x-diff)
    is now colourised. The colours are controlled by 3 new hidden
    preferences: diff_added_color, diff_deleted_color, and
    diff_hunk_color.
  + Updated translations.
  + Bug fixes:
  - Bug 1090, 'Standard-folders appear again after rescanning
    tree'.
  - Bug 1924, 'Messages marked move to Trash appear identical to
    messages marked move to $FOLDER'.
  - Bug 2598, 'Actions can move locked messages'.
  - Bug 2501, 'opened message blanks when moved to other
    folder'.
  - Bug 2574, 'Statement might be overflowing a buffer in
    strncat'.
  - Bug 2577, 'Focus rectangle on folder list and message list
    headings doesn't get properly cleared when switching heading
    and horizontally scrolling list (underlines and vertical
    lines remain on screen)'.
  - Bug 2582, 'Expanded mimeview drag n drop no longer works'.
  - Bug 2595, 'Change expand behavior for message list / message
    view'.
  - Bug 2620, 'shift+tab from subject field not working'.
  - Bug 2624, 'dialog "Action Configuration" cannot be closed'.
  - Bug 2646, 'Compile fails with gnutls-3.0.18'.
  - Bug 2659, 'E-mail attachments are handled inconsistently'.
  - Bug 2662, '"ag" quicksearch adds "1" to value'.
  - Fix bug in search criteria when doing a complete directory
    search using '*'.
  - Fix sensitivity of toolbar's get_btn (retrieve mail from
    current account) and of mainwindows's relevant entry when
    current account is not able to retrieve (SMTP-only).
  - Don't do TLS if not requested by user. fixes connecting to
    servers which, for example, want SSL 3 only.
- Drop claws-mail-fix-bufferoverflowstrncat.patch as this has been
  upstreamed.
- Drop claws-mail-gnutls318.patch as this has been upstreamed.</changelog>
<changelog author="dimstar@opensuse.org" date="1344513600">- Add claws-mail-verify-hostname.patch: fix SSL negotiation and
  hostname verification.
- Drop claws-mail-certbundle-path.patch: integrated in the upstram
  patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2 (bnc#816881).
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0 - (CVE-2014-2576)
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1 (bnc#870858):
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>

</package>
<package pkgid="efa0ecefc51e188e1f89d62e2943f8ac89a2c3e4fe7169cd8d6e6722edf84ef1" name="claws-mail-devel" arch="x86_64">
    <version epoch="0" ver="3.11.0" rel="3.11.1"/>

<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2:
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1:
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979200">- Update to version 3.11.0 (boo#903276):
  + SSLv3 server connections are now disabled by default, in
    response to the POODLE vulnerability (CVE-2014-3566).
  + Several PGP/Core plugin improvements:
  - Indicate when a key has been revoked or has expired when
    displaying signature status.
  - When displaying the full information, show the Validity, and
    the Owner Trust level. Also indicate expired and revoked
    keys, and revoked UIDs.
  - The "Content-Disposition: attachment" flag in PGP/MIME signed
    messages has been removed. It was confusing for cetain MUAs.
  + A new version of the RSSyl plugin, completely redesigned and
    rewritten.
  + The results of TAB address completion in the Compose window
    have improved ordering.
  + Due to popular demand, use of the Up key in the message body in
    the Compose window stops at the top of the message body and
    does not continue up to the header fields. This reverts the
    behaviour introduced in version 3.10.0.
  + In the Compose window, when navigating with the arrow keys,
    selecting, and thus modifying, the Account selector is now
    prevented.
  + In the Compose window, a mnemonic (s) has been added to the
    Subject line.
  + The Queue folder is highlighted if there are messages in its
    sub-folders and the tree is collapsed.
  + When sorting messages by 'thread date', clicking the 'Date'
    column header will now toggle between ascending/descending and
    will not switch to 'date' sorting.
  + A new QuickSearch filter has been added that searches a
    header's content only.
  + A Reply-To field has been added to the main Template
    configuration.
  + The menubar can now be hidden, default hotkey: F12.
  + Fancy plugin: A user-controlled stylesheet can now be used.
  + Python plugin: Add flag attributes to MessageInfo object.
  + Python plugin: Make 'account' property of ComposeWindow
    read/write.
  + Libravatar plugin: a network timeout option has been added.
  + The tbird2claws.py script, for converting a Thunderbird mailbox
    to a Claws Mail mailbox, now handles sub-directory recursion.
  + Bugs fixed: claws#3173, claws#3211, claws#3212, claws#3221,
    claws#3235, claws#3236, claws#3246, claws#3265, claws#3300.
  + Updated translations:.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979201">- New build requirement: intltool.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979202">- Pass --enable-appdata to %configure.</changelog>
<changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="badshah400@gmail.com" date="1454500800">- Update claws-mail-dont-overshoot-output-buffer.patch with patch
  from upstream (rebased for current version) to finally fix
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>

</package>
<package pkgid="b6645c1d08be42fc3ca6f16d900e6dd25a2a5798b66c155b5af38c0082115e02" name="claws-mail-devel" arch="x86_64">
    <version epoch="0" ver="3.11.0" rel="3.14.2"/>

<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2:
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1:
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979200">- Update to version 3.11.0 (boo#903276):
  + SSLv3 server connections are now disabled by default, in
    response to the POODLE vulnerability (CVE-2014-3566).
  + Several PGP/Core plugin improvements:
  - Indicate when a key has been revoked or has expired when
    displaying signature status.
  - When displaying the full information, show the Validity, and
    the Owner Trust level. Also indicate expired and revoked
    keys, and revoked UIDs.
  - The "Content-Disposition: attachment" flag in PGP/MIME signed
    messages has been removed. It was confusing for cetain MUAs.
  + A new version of the RSSyl plugin, completely redesigned and
    rewritten.
  + The results of TAB address completion in the Compose window
    have improved ordering.
  + Due to popular demand, use of the Up key in the message body in
    the Compose window stops at the top of the message body and
    does not continue up to the header fields. This reverts the
    behaviour introduced in version 3.10.0.
  + In the Compose window, when navigating with the arrow keys,
    selecting, and thus modifying, the Account selector is now
    prevented.
  + In the Compose window, a mnemonic (s) has been added to the
    Subject line.
  + The Queue folder is highlighted if there are messages in its
    sub-folders and the tree is collapsed.
  + When sorting messages by 'thread date', clicking the 'Date'
    column header will now toggle between ascending/descending and
    will not switch to 'date' sorting.
  + A new QuickSearch filter has been added that searches a
    header's content only.
  + A Reply-To field has been added to the main Template
    configuration.
  + The menubar can now be hidden, default hotkey: F12.
  + Fancy plugin: A user-controlled stylesheet can now be used.
  + Python plugin: Add flag attributes to MessageInfo object.
  + Python plugin: Make 'account' property of ComposeWindow
    read/write.
  + Libravatar plugin: a network timeout option has been added.
  + The tbird2claws.py script, for converting a Thunderbird mailbox
    to a Claws Mail mailbox, now handles sub-directory recursion.
  + Bugs fixed: claws#3173, claws#3211, claws#3212, claws#3221,
    claws#3235, claws#3236, claws#3246, claws#3265, claws#3300.
  + Updated translations:.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979201">- New build requirement: intltool.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979202">- Pass --enable-appdata to %configure.</changelog>
<changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="badshah400@gmail.com" date="1454500800">- Update claws-mail-dont-overshoot-output-buffer.patch with patch
  from upstream (rebased for current version) to finally fix
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="4d99b7ab0baee72c2170a6379407e09300870bc7a3ad282618d4ace9a25f9d06" name="claws-mail-lang" arch="noarch">
    <version epoch="0" ver="3.10.1" rel="3.4.1"/>

<changelog author="badshah400@gmail.com" date="1337601600">- Use pkgconfig(gnutls) BuildRequires instead of gnutls-devel. This
  is more correct and helps avoid the issue with gnutls-devel
  having been removed from Factory.</changelog>
<changelog author="dimstar@opensuse.org" date="1338984000">- Add claws-mail-gnutls318.patch: Fix build with gnutls 3.18+.</changelog>
<changelog author="dimstar@opensuse.org" date="1341489600">- Add claws-mail-bnc770014.patch: Fix crash when trying to view
  info about pgp/smime sign.</changelog>
<changelog author="dimstar@opensuse.org" date="1342872000">- Do not install ca-certificates.crt (bnc#761503).
- Add claws-mail-certbundle-path.patch: Add path to our
  ca-bundle.pem, so the file can be found by claws mail. This is
  an intermediate solution. Preferably we should be switching to
  the directory based storing of CA certificates.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1344168000">- Updated to version 3.8.1:
  + Replied and Forwarded message status flags are now non-
    exclusive. Introduced a new message state (and relevant icon
    in message list) where both the Replied and Forwarded flags
    are set.
  + 'Send to...' has been added to the context menu of a message's
    parts. This causes a new Compose window to open with the
    selected mime part attached.
  + 'Hide' and 'View Log' buttons have been added to the Send and
    Receive dialogues. The former will hide the dialogue, the
    latter will open the Network Log dialogue.
  + A short symbol has been added the QuickSearch Extended mode:
    'ha', an abbreviated form of 'has_attachment'.
  + Basic session statistics are now available, from the
    Statistics tab in About dialog and the command-line.
  + The display of attached patches, (text/x-patch or text/x-diff)
    is now colourised. The colours are controlled by 3 new hidden
    preferences: diff_added_color, diff_deleted_color, and
    diff_hunk_color.
  + Updated translations.
  + Bug fixes:
  - Bug 1090, 'Standard-folders appear again after rescanning
    tree'.
  - Bug 1924, 'Messages marked move to Trash appear identical to
    messages marked move to $FOLDER'.
  - Bug 2598, 'Actions can move locked messages'.
  - Bug 2501, 'opened message blanks when moved to other
    folder'.
  - Bug 2574, 'Statement might be overflowing a buffer in
    strncat'.
  - Bug 2577, 'Focus rectangle on folder list and message list
    headings doesn't get properly cleared when switching heading
    and horizontally scrolling list (underlines and vertical
    lines remain on screen)'.
  - Bug 2582, 'Expanded mimeview drag n drop no longer works'.
  - Bug 2595, 'Change expand behavior for message list / message
    view'.
  - Bug 2620, 'shift+tab from subject field not working'.
  - Bug 2624, 'dialog "Action Configuration" cannot be closed'.
  - Bug 2646, 'Compile fails with gnutls-3.0.18'.
  - Bug 2659, 'E-mail attachments are handled inconsistently'.
  - Bug 2662, '"ag" quicksearch adds "1" to value'.
  - Fix bug in search criteria when doing a complete directory
    search using '*'.
  - Fix sensitivity of toolbar's get_btn (retrieve mail from
    current account) and of mainwindows's relevant entry when
    current account is not able to retrieve (SMTP-only).
  - Don't do TLS if not requested by user. fixes connecting to
    servers which, for example, want SSL 3 only.
- Drop claws-mail-fix-bufferoverflowstrncat.patch as this has been
  upstreamed.
- Drop claws-mail-gnutls318.patch as this has been upstreamed.</changelog>
<changelog author="dimstar@opensuse.org" date="1344513600">- Add claws-mail-verify-hostname.patch: fix SSL negotiation and
  hostname verification.
- Drop claws-mail-certbundle-path.patch: integrated in the upstram
  patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2 (bnc#816881).
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0 - (CVE-2014-2576)
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1 (bnc#870858):
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>

</package>
<package pkgid="99c22e8f3b46e7c790cc40ae86dc8045fe716e3489ee411ea087b42f288cadb0" name="claws-mail-lang" arch="noarch">
    <version epoch="0" ver="3.10.1" rel="3.8.1"/>

<changelog author="dimstar@opensuse.org" date="1338984000">- Add claws-mail-gnutls318.patch: Fix build with gnutls 3.18+.</changelog>
<changelog author="dimstar@opensuse.org" date="1341489600">- Add claws-mail-bnc770014.patch: Fix crash when trying to view
  info about pgp/smime sign.</changelog>
<changelog author="dimstar@opensuse.org" date="1342872000">- Do not install ca-certificates.crt (bnc#761503).
- Add claws-mail-certbundle-path.patch: Add path to our
  ca-bundle.pem, so the file can be found by claws mail. This is
  an intermediate solution. Preferably we should be switching to
  the directory based storing of CA certificates.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1344168000">- Updated to version 3.8.1:
  + Replied and Forwarded message status flags are now non-
    exclusive. Introduced a new message state (and relevant icon
    in message list) where both the Replied and Forwarded flags
    are set.
  + 'Send to...' has been added to the context menu of a message's
    parts. This causes a new Compose window to open with the
    selected mime part attached.
  + 'Hide' and 'View Log' buttons have been added to the Send and
    Receive dialogues. The former will hide the dialogue, the
    latter will open the Network Log dialogue.
  + A short symbol has been added the QuickSearch Extended mode:
    'ha', an abbreviated form of 'has_attachment'.
  + Basic session statistics are now available, from the
    Statistics tab in About dialog and the command-line.
  + The display of attached patches, (text/x-patch or text/x-diff)
    is now colourised. The colours are controlled by 3 new hidden
    preferences: diff_added_color, diff_deleted_color, and
    diff_hunk_color.
  + Updated translations.
  + Bug fixes:
  - Bug 1090, 'Standard-folders appear again after rescanning
    tree'.
  - Bug 1924, 'Messages marked move to Trash appear identical to
    messages marked move to $FOLDER'.
  - Bug 2598, 'Actions can move locked messages'.
  - Bug 2501, 'opened message blanks when moved to other
    folder'.
  - Bug 2574, 'Statement might be overflowing a buffer in
    strncat'.
  - Bug 2577, 'Focus rectangle on folder list and message list
    headings doesn't get properly cleared when switching heading
    and horizontally scrolling list (underlines and vertical
    lines remain on screen)'.
  - Bug 2582, 'Expanded mimeview drag n drop no longer works'.
  - Bug 2595, 'Change expand behavior for message list / message
    view'.
  - Bug 2620, 'shift+tab from subject field not working'.
  - Bug 2624, 'dialog "Action Configuration" cannot be closed'.
  - Bug 2646, 'Compile fails with gnutls-3.0.18'.
  - Bug 2659, 'E-mail attachments are handled inconsistently'.
  - Bug 2662, '"ag" quicksearch adds "1" to value'.
  - Fix bug in search criteria when doing a complete directory
    search using '*'.
  - Fix sensitivity of toolbar's get_btn (retrieve mail from
    current account) and of mainwindows's relevant entry when
    current account is not able to retrieve (SMTP-only).
  - Don't do TLS if not requested by user. fixes connecting to
    servers which, for example, want SSL 3 only.
- Drop claws-mail-fix-bufferoverflowstrncat.patch as this has been
  upstreamed.
- Drop claws-mail-gnutls318.patch as this has been upstreamed.</changelog>
<changelog author="dimstar@opensuse.org" date="1344513600">- Add claws-mail-verify-hostname.patch: fix SSL negotiation and
  hostname verification.
- Drop claws-mail-certbundle-path.patch: integrated in the upstram
  patch.</changelog>
<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2 (bnc#816881).
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0 - (CVE-2014-2576)
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1 (bnc#870858):
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>

</package>
<package pkgid="6e9ad2b2ed51fb7e7809df354d6df5ef600577b65352fc1663c38b526dbbde5e" name="claws-mail-lang" arch="noarch">
    <version epoch="0" ver="3.11.0" rel="3.11.1"/>

<changelog author="zaitor@opensuse.org" date="1350043200">- Add claws-mail-3.8.1-procmime-vuln.patch: Fixes NULL pointer
  derefence while processing email content. (bnc#784463),
  (CVE-2012-4507).</changelog>
<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2:
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1:
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979200">- Update to version 3.11.0 (boo#903276):
  + SSLv3 server connections are now disabled by default, in
    response to the POODLE vulnerability (CVE-2014-3566).
  + Several PGP/Core plugin improvements:
  - Indicate when a key has been revoked or has expired when
    displaying signature status.
  - When displaying the full information, show the Validity, and
    the Owner Trust level. Also indicate expired and revoked
    keys, and revoked UIDs.
  - The "Content-Disposition: attachment" flag in PGP/MIME signed
    messages has been removed. It was confusing for cetain MUAs.
  + A new version of the RSSyl plugin, completely redesigned and
    rewritten.
  + The results of TAB address completion in the Compose window
    have improved ordering.
  + Due to popular demand, use of the Up key in the message body in
    the Compose window stops at the top of the message body and
    does not continue up to the header fields. This reverts the
    behaviour introduced in version 3.10.0.
  + In the Compose window, when navigating with the arrow keys,
    selecting, and thus modifying, the Account selector is now
    prevented.
  + In the Compose window, a mnemonic (s) has been added to the
    Subject line.
  + The Queue folder is highlighted if there are messages in its
    sub-folders and the tree is collapsed.
  + When sorting messages by 'thread date', clicking the 'Date'
    column header will now toggle between ascending/descending and
    will not switch to 'date' sorting.
  + A new QuickSearch filter has been added that searches a
    header's content only.
  + A Reply-To field has been added to the main Template
    configuration.
  + The menubar can now be hidden, default hotkey: F12.
  + Fancy plugin: A user-controlled stylesheet can now be used.
  + Python plugin: Add flag attributes to MessageInfo object.
  + Python plugin: Make 'account' property of ComposeWindow
    read/write.
  + Libravatar plugin: a network timeout option has been added.
  + The tbird2claws.py script, for converting a Thunderbird mailbox
    to a Claws Mail mailbox, now handles sub-directory recursion.
  + Bugs fixed: claws#3173, claws#3211, claws#3212, claws#3221,
    claws#3235, claws#3236, claws#3246, claws#3265, claws#3300.
  + Updated translations:.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979201">- New build requirement: intltool.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979202">- Pass --enable-appdata to %configure.</changelog>
<changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="badshah400@gmail.com" date="1454500800">- Update claws-mail-dont-overshoot-output-buffer.patch with patch
  from upstream (rebased for current version) to finally fix
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>

</package>
<package pkgid="7c65df1ae8ec3deb9433a341b59e1b8426053053116732d44980dac30045d5b7" name="claws-mail-lang" arch="noarch">
    <version epoch="0" ver="3.11.0" rel="3.14.2"/>

<changelog author="mrueckert@suse.de" date="1353499200">- Update to version 3.9.0:
  + Added IMAP server side search
  + Added the file .claws-mail/extraheaderrc which holds editable
    extra
  + Added 'Select html part of multipart messages' to the Folder
    Properties
  + GnuPG: Consider marginal signature validity as untrusted
  + The mimeview shortcuts are now user configurable
  + Spell checker: Always show 'change dictionary' menu
  + Filtering dialogue: TreeView type-ahead is now case
    insensitive
  + Separated 'Mark all read' from 'Mark as read' and
    'Ignore thread'
  + Made 'Mark all read' confirmation button more clear
  + Made the clickable area of the expander arrows in the folder
    list larger
  + Made SSL client certificate error messages more meaningful
  + The type of units required in the Extended Search information
    dialogue are now indicated
  + Several speed-ups and optimisations
  + Updated manual
  + Updated translations
  + Bug fixes:
  - bug 1137: 'loading plugins with same profile on different
    archs'
  - bug 1961: 'patches for a couple of clang warnings'
  - bug 1975: 'preference mutt key bindings do not take effect'
  - bug 2096: 'MEMORY-ERROR w/ Claws-Mail/IMAP and Lotus
    Domino'
  - bug 2203: 'Problems in forwarding multipart/alternative
    messages with HTML part'
  - bug 2390: 'Non-fully-trusted-key-warning appears based on
    primary UID rather than recipient e-mail'
  - bug 2579: 'Installed headers redefine autotools-specific
    constants'
  - bug 2596: 'Spell checker does not work properly'
  - bug 2638: 'Respect $LEX environment variable in autogen.sh'
  - bug 2639: 'The MSGBUFSIZE definition collides with a
    definition of OpenBSD'
  - bug 2650: 'segfault in pgp when gpgme_strerror() returns
    a non utf-8 string'
  - bug 2689: 'segfault when trying to view info about
    pgp/smime sign'
  - bug 2697: 'segfault in parse_parameters()'
  - bug 2718: 'Failure to check peer hostname when checking
    certificate'
  - bug 2723: 'Missing encoding in generated html manual'
  - bug 2743: 'null pointer crash in procmime strchr'
  - bug 2744: 'Quick search throws bad command argument error
    since recent change'
  - bug 2751: 'g_mutex_new/g_mutex_free removed from GLib 2.32'
  - bug 2760: 'display correct libc version in crash dialog
    when uclibc is used'
  - bug 2761: 'Desktop file does not pass validation'
  - bug 2776: 'Make all menu shortcuts work properly in the
    message window'
  - bug 2777: 'Installing latest cvs116 package 14 Windows
    version results in wrong paths in clawsrc'
  - Fix some modal windows
  - Only show HTML parts by default (if the pref is set so) if
    the part disposition-type is inline or unknown, but not
    attachment.
  - IMAP: Always clear the tags list when fetching a folder, or
    Claws will never untag an untagged email.
  - Fix double mainwindow presentation that confuses GNOME3
    when some plugins fail to load (subsequent Claws windows
    got no focus in that case)
  - Fix build on Fink/OS X
  - Fix build with gnutls 3.1.3
  - Fix Windows build
  - Fix Windows runtime crash
  - Fix socket communication
- Removed patches taken from upstream:
  + claws-mail-bnc770014.patch
  + claws-mail-verify-hostname.patch
  + claws-mail-3.8.1-procmime-vuln.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366804800">- pulled 2 patches from upstream to fix crash with unknown
  encodings: (bnc#816881)
  claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch</changelog>
<changelog author="dimstar@opensuse.org" date="1367928000">- Update to version 3.9.1:
  + All plugins previously packaged as 'Extra Plugins' are now
    contained within the Claws Mail package. In addition to that,
    the following plugins have been dropped: TrayIcon, Dillo
    Viewer, and Gtkhtml2 Viewer.
  + 3 command-line switches have been added:
  - -cancel-receiving which cancels the currently running message
    retrieval operation.
  - -cancel-sending which cancels the currently running message
    sending operation.
  - -debug which toggles debug output.
  + '/Message/Cancel sending' has been added to the main menu.
  + In the filtering and processing condition configuration for
    Age, it is now possible to match based on number of hours.
  + The GnuPG signature timestamp is now displayed in the full
    signature information.
  + Support for GnuTLS priority string has been added.
  + Keep-alive pings are now performed on IMAP and NNTP
    connections.
  + In the Compose window, the focus is now moved to the message
    body when focus is in the Subject entry and the Enter key is
    pressed.
  + The Delete key can now be used to remove Colour Label hotkeys.
  + PDF Viewer: The printed PDF quality has been improved.
  + Fancy HTML viewer: The options dialogue has been completely
    reworked, and disabling remote content is now totally strict.
  + Python plugin: Added Cc field to messageinfo objects.
  + Python plugin: Added examples.
  + Python plugin: Added a function to get an arbitrary header from
    a MessageInfo object.
  + Perl plugin: The documentation for insert_perl.pl has been
    improved.
  + Basic handling of vcard 3.0 has been added to vcard2xml.py.
  + The man page has been updated.
  + Bugs fixed: claws#1137, claws#1684, claws#1963, claws#2340,
    claws#2617, claws#2624, claws#2702, claws#2774, claws#2785,
    claws#2801, claws#2826, claws#2828, claws#2832, claws#2835,
    claws#2859, claws#2862, claws#2863, claws#2878, claws#2879,
    claws#2882, claws#2885, claws#2890, claws#2893, claws#2903,
    claws#2909.
  + Updated translations.
- Drop upstream fixed patches:
  + claws-mail-3.9.0_205b490083a141586c390bd985a3e22e99ea137d.patch
  + claws-mail-3.9.0_06e09c818f9455537e82e8395d658e0be336f873.patch
  + claws-mail-python.diff.
- Add claws-mail-missing-include.patch: Fix brp check failure due
  to some missing include headers.
- Explicitly pass all --enable-*-plugins to configure, to ensure
  we will not lose any at any time.
- Add BuildRequires to build all the plugins:
  + libarchive-devel
  + libcurl-devel
  + libpoppler-glib-devel
  + libwebkit-devel
  + python-gtk-devel
  + pkgconfig(libgdata)
  + pkgconfig(libsoup-2.4)
- Drop --enable-openssl configure parameter: no longer supported.
- Provide and obsolete claws-mail-extra-plugins and
  claws-mail-extra-plugins-lang: the plugins are no longer shipped
  as separate tarballs.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Also obsolete claws-mail-extra-plugins-devel, as the plugins
  package was merged upstream.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1371729600">- Update to version 3.9.2:
  + New big icon for compose windows.
  + Never decode multipart/ or message/ parts, as RFC states.
  + Add missing check for libperl.
  + Fix check for libsoup - it is not obligatory.
  + Do not try to destroy a NULL session after an unsuccesful NNTP
    connect attempt.
  + The extraheaderrc format doesn't allow data after the header
    colon. Other OSes may insert extra characters other than \n,
    so, remove them all.
  + Fix undoing file insertion.
  + Fix check for python.
  + Fix detection of account in --compose and --compose-from-file
    where the From value contains a name + email.
  + Bugs fixed: claws#2923, claws#2927.</changelog>
<changelog author="mls@suse.de" date="1378382400">- Add libperl_requires, as we link against libperl and thus
  need a specific version of perl.</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1383739200">- Add claws-mail-fix-address-quotes.patch: Fix quotes all
  addresses which need quoting just before writting the
  message to the queue folder, claws#2210.</changelog>
<changelog author="dimstar@opensuse.org" date="1384084800">- Drop claws-mail-fix-address-quotes.patch: This patch on its own
  has negative side-effects.</changelog>
<changelog author="zaitor@opensuse.org" date="1387195200">- Update to version 3.9.3:
  + The TAB address completion in the Compose window now matches
    any part of the address and not just the beginning.
  + When copying or moving a message, the type-ahead search now
    matches any part of a folder name and not just the beginning.
  + It is now possible to replace the current signature in the
    Compose window by using the '/Message/Replace signature' menu
    item.
  + It is now possible to disable the 'Subject is empty' warning
    dialogue. See the option 'Warn when Subject is empty' option on
    the '/Configuration/Preferences/Mail handling/Sending' page.
  + When sending messages, if the hostname cannot be determined,
    fallback to 'localhost' rather than 'unknown', as the latter is
    rejected by some servers.
  + Added better handling of messages from broken mailers, such as
    yahoo groups.
  + PDF plugin: the minimum required version of poppler is 0.12.0.
  + PGP/* plugin: long key IDs are now displayed in the dialogues
    instead of short IDs.
  + PGP/* plugin: The automatic signature check is now
    non-blocking.
  + Python plugin: can now access accounts, mailboxes, folder
    properties.
  + vCalendar plugin: webcals:// URLs are now treated as https://
  + Support for Maemo has been removed.
  + Bugs fixed: claws#2132, claws#2210, claws#2794, claws#2923,
    claws#2940, claws#2954, claws#2957, claws#2960, claws#2961,
    claws#2964, claws#2979, claws#2982, claws#2986, claws#2989,
    claws#2994, claws#2995, claws#3002, claws#3004, claws#3009,
    claws#3011, claws#3021, deb#711864.
  + Quote all specials in name as defined on RFC, see
    http://tools.ietf.org/html/rfc5322#section-3.2.3.
  + Fix sensitivity and state of 'hide read threads'.
  + Fancy plugin: disable DNS Prefetching when 'Enable loading of
    remote content' is switched off.
  + Bogofilter plugin: insert X-Bogosity header like the option
    says, not X-Claws-Bogosity header.
  + Updated translations.
- Drop claws-mail-missing-include.patch, fixed upstream.</changelog>
<changelog author="mrueckert@suse.de" date="1401105600">- update to 3.10.0
  - Complete SSL certificate chains are now saved, and if built with
    Libetpan 1.4.1, the IMAP SSL connection's certificate chain is made
    available. Both of these allow correct certificate verification
    instead of a bogus 'No certificate issuer found' status.
  - Auto-configuration of account email servers, based on SRV records,
    is now possible. (GLib &gt;= 2.22 is required.)
  - Added a preference to avoid automatically drafting emails that are
    to be sent encrypted, (Configuration/Preferences/Compose/Writing).
  - Messages saved as Drafts are now saved as New, highlighting the
    Drafts folder, in order to draw the attention to unfinished mails
    there.
  - It is now possible to add a 'Replace signature' button to the
    Compose window toolbar.
  - Quotation wrapping and undo/redo in the Compose window has been
    improved.
  - 'Reply to all' now excludes your own address.
  - The 'Generate X-Mailer header' option has been renamed 'Add user
    agent header' and applies to both X-Mailer and X-Newsreader headers.
  - Added hidden preferences, 'address_search_wildcard' and
    'folder_search_wildcard', to choose between matching from start of
    the folder name/address or any part of the name. (Activating these
    options restores the previous behaviour.)
  - Added hidden preference 'enable_avatars' to control the internal
    capture/render process, and which allows disabling it by external
    plugins for example.
  - 'Check for new folders' now only updates the folder list, not
    updating the contents of folders. If needed, it can be followed by
    'Check for new messages'
  - When using Redirect, the redirecting account's address is used in
    the SMTP MAIL FROM instead of the original sender's address.
  - NEW: Libravatar plugin, which displays avatars from
    https://www.libravatar.org/
  - Added support for an arbitrary number and sources of 'avatars' and
    images for email senders, and migrated Face and X-Face headers.
  - Avatars are now included when printing mails.
  - The GPG keyring can now be used as the source for address auto-
    completion.
  - The vCalendar and RSSyl plugins now have an option to disable SSL
    certificate verification (and check them by default).
  - The ClamAV plugin now pops up an error message only once instead of
    repeatedly
  - Updated the man page and the manual.
  - Updated Brazilian Portuguese, British English, Czech, Dutch,
    Finnish, French, Hebrew, Hungarian, Indonesian, Lithuanian, Slovak,
    Spanish, and Swedish translations.
  - Added Esperanto translation.
  - Bug fixes:
    claws#1644, claws#2119, claws#2145, claws#2179, claws#2238,
    claws#2389, claws#2398, claws#2447, claws#2643, claws#2875,
    claws#2991, claws#3020, claws#3055, claws#3038, claws#3039,
    claws#3040, claws#3050, claws#3094, claws#3100, claws#3105,
    claws#3106, claws#3107, claws#3116, claws#3117, claws#3120,
    claws#3131, claws#3138, claws#3139, claws#3145, claws#3146,
    claws#3147, claws#3148, claws#3150, claws#3155, claws#3169,
    claws#3964
- package the provided appdate xml file
- enabled more features in the notification plugin:
  new buildRequires:  pkgconfig(libnotify) libcanberra-devel &gt;= 0.6</changelog>
<changelog author="mrueckert@suse.de" date="1401105601">- added claws-mail-3.10.0_uninitialized_variable_git51af19b.patch:
  Patch taken from upstream. Fixes an uninitialized variable use.</changelog>
<changelog author="mrueckert@suse.de" date="1401105602">- fix tarball url:
  - not all occurences of the version were using the macro
  - wrong SF project name</changelog>
<changelog author="malcolmlewis@opensuse.org" date="1407153600">- Update to version 3.10.1:
  + Add an account preference to allow automatically accepting
    unknown and changed SSL certificates, if they're valid (that
    is, if the root CA is trusted by the distro).
  + RFE 3196, 'When changing quicksearch Search Type, set focus to
    search input box'.
  + PGP/Core plugin: Generate 2048 bit RSA keys.
  + Major code cleanup.
  + Extended claws-mail.desktop with Compose and Receive actions.
  + Fix GConf use with newer Glib.
  + Fix the race fix, now preventing the compose window to be
    closed.
  + Fix "File (null) doesn't exist" error dialog, when attaching a
    non-existing file via --attach
  + Fix spacing in Folderview if the font is far from the system
    font.
  + RSSyl:
  - When parsing RSS 2.0, ignore  tags with a namespace prefix.
  - Check for existence of xmlNode namespace, to prevent NULL
    pointer crashes.
  + Bugs fixed: claws#2728, claws#2981, claws#3170, claws#3179,
    claws#3201, deb#730050.
  + Updated translations.
- Drop claws-mail-3.10.0_uninitialized_variable_git51af19b.patch as
  fixed upstream.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979200">- Update to version 3.11.0 (boo#903276):
  + SSLv3 server connections are now disabled by default, in
    response to the POODLE vulnerability (CVE-2014-3566).
  + Several PGP/Core plugin improvements:
  - Indicate when a key has been revoked or has expired when
    displaying signature status.
  - When displaying the full information, show the Validity, and
    the Owner Trust level. Also indicate expired and revoked
    keys, and revoked UIDs.
  - The "Content-Disposition: attachment" flag in PGP/MIME signed
    messages has been removed. It was confusing for cetain MUAs.
  + A new version of the RSSyl plugin, completely redesigned and
    rewritten.
  + The results of TAB address completion in the Compose window
    have improved ordering.
  + Due to popular demand, use of the Up key in the message body in
    the Compose window stops at the top of the message body and
    does not continue up to the header fields. This reverts the
    behaviour introduced in version 3.10.0.
  + In the Compose window, when navigating with the arrow keys,
    selecting, and thus modifying, the Account selector is now
    prevented.
  + In the Compose window, a mnemonic (s) has been added to the
    Subject line.
  + The Queue folder is highlighted if there are messages in its
    sub-folders and the tree is collapsed.
  + When sorting messages by 'thread date', clicking the 'Date'
    column header will now toggle between ascending/descending and
    will not switch to 'date' sorting.
  + A new QuickSearch filter has been added that searches a
    header's content only.
  + A Reply-To field has been added to the main Template
    configuration.
  + The menubar can now be hidden, default hotkey: F12.
  + Fancy plugin: A user-controlled stylesheet can now be used.
  + Python plugin: Add flag attributes to MessageInfo object.
  + Python plugin: Make 'account' property of ComposeWindow
    read/write.
  + Libravatar plugin: a network timeout option has been added.
  + The tbird2claws.py script, for converting a Thunderbird mailbox
    to a Claws Mail mailbox, now handles sub-directory recursion.
  + Bugs fixed: claws#3173, claws#3211, claws#3212, claws#3221,
    claws#3235, claws#3236, claws#3246, claws#3265, claws#3300.
  + Updated translations:.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979201">- New build requirement: intltool.</changelog>
<changelog author="lchiquitto@suse.com" date="1413979202">- Pass --enable-appdata to %configure.</changelog>
<changelog author="kieltux@gmail.com" date="1414584000">- Add libexpat-devel BuildRequires: new dependency for the RSSyl
  plugin, which was completely rewritten in 3.11.0.</changelog>
<changelog author="badshah400@gmail.com" date="1450958400">- Add claws-mail-dont-overshoot-output-buffer.patch to prevent
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="badshah400@gmail.com" date="1454500800">- Update claws-mail-dont-overshoot-output-buffer.patch with patch
  from upstream (rebased for current version) to finally fix
  buffer overrun issues (boo#959993, CVE-2015-8614, claws#3557).</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="688a39132edfaf2fa86ebccecfa85a11789c6efaffaeded0fe56d5dae4b3cf2a" name="cloop" arch="i586">
    <version epoch="0" ver="2.639" rel="11.10.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="e389e61f24a8e60022e792f840469d2f43ee6efb9841f8b59520724bea64df4f" name="cloop" arch="i586">
    <version epoch="0" ver="2.639" rel="11.13.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="c768796fd351c545f7eab4e542475f5ecd1a02e02dbfa30467da838bad32cb3d" name="cloop" arch="i586">
    <version epoch="0" ver="2.639" rel="11.16.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="78128055e9d35dd59b4205131bc2966fe79e2caa63a8321e0b26727a5c1b9577" name="cloop" arch="i586">
    <version epoch="0" ver="2.639" rel="11.19.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="0a015b8b4ea748ff9bd73c0e7496d8cc2729455c32893959d066bf5bb19fac3f" name="cloop" arch="i586">
    <version epoch="0" ver="2.639" rel="11.23.2"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="db2f1728d39b657c8dbbcd91a99b37ea9c912f8abbef2cb1d13a0229dd6f7ca1" name="cloop" arch="i586">
    <version epoch="0" ver="2.639" rel="11.28.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="623282f1f1685b82e88e4aab2ab94f4af79ff96aeebf4d9a244f52e692a8ab49" name="cloop" arch="i586">
    <version epoch="0" ver="2.639" rel="11.30.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="8bab89b8ee41508651b5a45f17ad0b2dfdf8fabeec5528927136779c27347c06" name="cloop" arch="i586">
    <version epoch="0" ver="2.639" rel="11.4.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="e8c05d996552edca8e02365da1c29b14406d42d2a020370a2776f5791be77c33" name="cloop" arch="i586">
    <version epoch="0" ver="2.639" rel="11.7.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="60849056956f65db0b423117559a76646cdef20c7ec72881139bd55f32d5f890" name="cloop" arch="src">
    <version epoch="0" ver="2.639" rel="11.10.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="849fa7856d1c02b7988c8a271ca365dde941ae7df47972113a30bf4daa596a10" name="cloop" arch="src">
    <version epoch="0" ver="2.639" rel="11.13.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="02eac43d27742f7c967d5fc9ebe58f0b8b85473b9a938775efd3d95e5e8ed36c" name="cloop" arch="src">
    <version epoch="0" ver="2.639" rel="11.16.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="9d95d387dd06c5da9113aa4b096749a00b654fb5e222c769a319b0c71ab00de8" name="cloop" arch="src">
    <version epoch="0" ver="2.639" rel="11.19.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="0f6f94f176384559ca56ccab96dfae83cfea25751835de816f0cb75eb9f9d675" name="cloop" arch="src">
    <version epoch="0" ver="2.639" rel="11.23.2"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="1199f360fb0c07112b2511d4e4a038aa40d8ff738958461c69f586a5d941bd36" name="cloop" arch="src">
    <version epoch="0" ver="2.639" rel="11.28.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="9377b3d6f064d7ff5bd0b9fa80ae8584262f84eaed478dbee8c3e63cf4bd21b9" name="cloop" arch="src">
    <version epoch="0" ver="2.639" rel="11.30.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="bd99e29302bb8c8c054d73c70dddd0f76d74af345face272bd2fbdefc823073c" name="cloop" arch="src">
    <version epoch="0" ver="2.639" rel="11.4.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="bb3e4772203e10d9088e22bfbc1cbe3ffcf452d9f64475f8aa5495479c0da4a2" name="cloop" arch="src">
    <version epoch="0" ver="2.639" rel="11.7.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="5f3b38f27cd24e71c32754fa00d690bfa1fd2bdbdb3d29c59fbb541c8bd02073" name="cloop" arch="x86_64">
    <version epoch="0" ver="2.639" rel="11.10.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="dde57ee859271f3592aec687a7a673f134246ac51c8b9827660493c480d8e68c" name="cloop" arch="x86_64">
    <version epoch="0" ver="2.639" rel="11.13.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="c8a0c2273258a8dbbbd999b3cddaf83853c50347d4a7545e4db2540beb9f10d0" name="cloop" arch="x86_64">
    <version epoch="0" ver="2.639" rel="11.16.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="84d7abb35d010d24acea9c0112f25960b87cfd1a794c227533f5bc50b55514bf" name="cloop" arch="x86_64">
    <version epoch="0" ver="2.639" rel="11.19.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="886b5e0467dc8cc4cbae15f224b22540463335787847a32490fe421be7e7624a" name="cloop" arch="x86_64">
    <version epoch="0" ver="2.639" rel="11.23.2"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="983234d718a2a7c7af0734d3435006a2b5fb36ff1707bb0797e5076ea1ea7904" name="cloop" arch="x86_64">
    <version epoch="0" ver="2.639" rel="11.28.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="c2fd1e1739820ec745b242c4bdbc636505c6a66334e584c78cad28edd86b4ae1" name="cloop" arch="x86_64">
    <version epoch="0" ver="2.639" rel="11.30.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="c911811d13dc44e2d703a1cd0f2ebf76832f35c7072e19039a44464e03d9a382" name="cloop" arch="x86_64">
    <version epoch="0" ver="2.639" rel="11.4.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="93c31ada22580e5902c5ac177892fd7fc64d12222c886dbbad3f97e0bb50e46a" name="cloop" arch="x86_64">
    <version epoch="0" ver="2.639" rel="11.7.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="dc3400ab4d2cadaa8621e4da8b15be117ae278a726b11e972bc7202e8fd5c355" name="cloop-kmp-default" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_11" rel="11.7.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="823bfbb975b721e7dc185191b8b7797f4ebaa1d342075918e52b6c7c187148ad" name="cloop-kmp-default" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_17" rel="11.10.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="557274281b36c64483d6978bf2324dd19c73dbcbda5ded1b59ec7d398ed0dc27" name="cloop-kmp-default" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_21" rel="11.13.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="c071713f0b56666347ac2599ff3700d546732ead930420dc2213b21bc63ffd4b" name="cloop-kmp-default" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_25" rel="11.16.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="209d86b83390d763c67228bf3d6ec148f601530a2bc4870512d92b2152f25424" name="cloop-kmp-default" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_29" rel="11.19.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="06ed2feda551453a0e9d5f32b47a297426c3c7c2cbbac12aa02d7188e54467c8" name="cloop-kmp-default" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_34" rel="11.23.2"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="c81fd1a0030b62f506d0b155237ece9f21661ff535a955b25b3a44e90f6fc046" name="cloop-kmp-default" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_7" rel="11.4.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="690783eba381cee13df82a428e4b0e5de764d5b0fd7951c4c07796abfae4a7cc" name="cloop-kmp-default" arch="i586">
    <version epoch="0" ver="2.639_k3.12.57_44" rel="11.28.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="d8e402acb9a72381e8577855f9eb16726f593de87adc9b0910677f3ac3346699" name="cloop-kmp-default" arch="i586">
    <version epoch="0" ver="2.639_k3.12.59_47" rel="11.30.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="24a44e0ae6bbfae24ff7e06fe4885282725fe32138053b5640789daa752a367b" name="cloop-kmp-default" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_11" rel="11.7.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="807bc24fe288db8b9a2c85c2ae3566852b3a51e3e286006a292f6c32038bfdc4" name="cloop-kmp-default" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_17" rel="11.10.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="e7e59e14612bbfee2e9cd99c4ebe3d25cede84a40e6d2d61bbfc424fdf10fbe5" name="cloop-kmp-default" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_21" rel="11.13.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="c97fcd79fc59ee3b6639d041eb2d3e11c7c98ead51c3a9f6aa33de9fb3797cc0" name="cloop-kmp-default" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_25" rel="11.16.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="a840d39674f06bcaf9a1b01ecba2ff15106dc3e19282447893984f72769bd099" name="cloop-kmp-default" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_29" rel="11.19.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="98173376f18bbb765cec8c86146619048031ed81576a07feb13df09277dc96c3" name="cloop-kmp-default" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_34" rel="11.23.2"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="df72934b52f9c3d1e1769cac3ab081c9ff95e39a62948a818b671bb957524144" name="cloop-kmp-default" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_7" rel="11.4.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="29bb85e2c4c9f7f0e4e21c6aba4310931250de165d609a28aee9e5386a48bb77" name="cloop-kmp-default" arch="x86_64">
    <version epoch="0" ver="2.639_k3.12.57_44" rel="11.28.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="4e0c30901de7b02501b63fb573031c9ce986f22731e28752aa9de6034e25f410" name="cloop-kmp-default" arch="x86_64">
    <version epoch="0" ver="2.639_k3.12.59_47" rel="11.30.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="2cf30544e33eb8a615526cbead64b1e9596b89192629635935aba09611db4b02" name="cloop-kmp-desktop" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_11" rel="11.7.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="66ef3c002927e97811338185e265f2ba10524a95ceeed00d50bfdaeaaa493bb6" name="cloop-kmp-desktop" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_17" rel="11.10.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="080a9a14f2083850649ab34ba2025d14ce501e02fc0d1ee9b7cd48a3632bde06" name="cloop-kmp-desktop" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_21" rel="11.13.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="1304ad6ebbae01c805c8c4914c72dc6141a799e08f24e77474797847bde2d10e" name="cloop-kmp-desktop" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_25" rel="11.16.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="3607ba6f084b910f0d6c705cf4ad02f867215065cbdcbc9eabbecd8b97dab937" name="cloop-kmp-desktop" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_29" rel="11.19.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="d99532096b8275d9b166d83b57fffd4f81bca7fb701a93c9bc23fd7b93f5c3f7" name="cloop-kmp-desktop" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_34" rel="11.23.2"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="b1d01125ab24570e88ecf54947e43d2d2c94270162969188627c1bb5729f30cd" name="cloop-kmp-desktop" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_7" rel="11.4.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="88ba482ffe8cb60db42d7a56f3e2dc450fd833e86ff45e7a32c6d00f722bdd07" name="cloop-kmp-desktop" arch="i586">
    <version epoch="0" ver="2.639_k3.12.57_44" rel="11.28.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="1b75659fb547f912bd09a0d18637a9fe7d5a169b35560245356f0d143feb8e0a" name="cloop-kmp-desktop" arch="i586">
    <version epoch="0" ver="2.639_k3.12.59_47" rel="11.30.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="7835c1e387e4c3404f5742d2ddac33e8b52a2d2bfe528ab0bdd9c2f6d4d80066" name="cloop-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_11" rel="11.7.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="470fce6d078df5969654e198209840b2937448fe09f2a56da3d3a1a5885a78ba" name="cloop-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_17" rel="11.10.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="f7a11b811933a339803fe5b47261d9a71957d228e8fdd370d6df67db51d63ad8" name="cloop-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_21" rel="11.13.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="17c9638d029c166607c31db79c33bcfc219899a3c26de8872b82cc7a212ce47c" name="cloop-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_25" rel="11.16.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="42ea57b11fa50a2dfa4e56e03ab7eb5382967768219b45d04f6a1915b5d68ad8" name="cloop-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_29" rel="11.19.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="097c49cea156163a09f8a22879007793930ac5b1bc2da551ebfae7b6dfdf8160" name="cloop-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_34" rel="11.23.2"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="c6fe3bb589da92d80a4553237e907953dcef790b83e8fb865651be3d21e6129b" name="cloop-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_7" rel="11.4.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="f1081877ccfc395e2e04e2cbb037a51bb10392f3aca95646d8435cb2f7df51f9" name="cloop-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="2.639_k3.12.57_44" rel="11.28.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="f75cda6f78a1c931f8d7142f45f47ed9716aadc3eab9f1983af808b190157577" name="cloop-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="2.639_k3.12.59_47" rel="11.30.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="062499fba6a32bd137b655b4a952df32470fb6e7f01f814269689a73adaa539f" name="cloop-kmp-pae" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_11" rel="11.7.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="6aabe0f54636bcfe791d14a5b55ee50ed5f470802ba27f98ed6f18d0b1658a96" name="cloop-kmp-pae" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_17" rel="11.10.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="61c197f02c39680accfa909e07978ceb29d723785661bd328764dd1f1a9f43fc" name="cloop-kmp-pae" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_21" rel="11.13.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="73619e3d3d3a17ad9785ee2877f1d7105d855d7616e17da6e9956d9e7bf2d185" name="cloop-kmp-pae" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_25" rel="11.16.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="24f62f08ded7ce1fc5faaaa165cf4250abc693280dadab620cfe4dfeada4c946" name="cloop-kmp-pae" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_29" rel="11.19.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="1a8fac96f2b4a30b622e6050ebb5c6d797f0e7554a027671aca8cd5a9f322106" name="cloop-kmp-pae" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_34" rel="11.23.2"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="83a16659d0c531b1a98d66b696c4b3e9dee81797e516243a45459cd9903b142d" name="cloop-kmp-pae" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_7" rel="11.4.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="fcbbb5c8f895cc6d9a686dbb3a9899949af739c94e6a7085251d0bea6c11adaf" name="cloop-kmp-pae" arch="i586">
    <version epoch="0" ver="2.639_k3.12.57_44" rel="11.28.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="3c0b6a16c354c02896aa7aea0a5f3122923037eb7031b2d5491db7febbc19e95" name="cloop-kmp-pae" arch="i586">
    <version epoch="0" ver="2.639_k3.12.59_47" rel="11.30.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="95140df56165aa67b44b176f494697bf06eed1c7dab70b5b4db7d1ffa4f1f968" name="cloop-kmp-xen" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_11" rel="11.7.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="e32373a30ef19b18b440618d97e37c164c0b94c8f0f7406ce24125b3b04718ef" name="cloop-kmp-xen" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_17" rel="11.10.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="20b463eafb07aa853ef267c17b853491cc6f0a1c058191fccf571b6c77f9a2ee" name="cloop-kmp-xen" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_21" rel="11.13.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="e7c9c9f453d59fc90dea6a63a98faff8a4e381dbe3e34950bb4bd69705604830" name="cloop-kmp-xen" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_25" rel="11.16.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="8b960c766f7fe99c614874b845582db49acf5cfccb1ddf26f96aea026769e2e7" name="cloop-kmp-xen" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_29" rel="11.19.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="8767721456d5a46de6c063ca4996976bcdf6f85f7a724230c07bd9e70fb87f92" name="cloop-kmp-xen" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_34" rel="11.23.2"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="5d704f077ae000e38c4d972f864651a5b60826b38d7891e01534fc1a49f1fbea" name="cloop-kmp-xen" arch="i586">
    <version epoch="0" ver="2.639_k3.11.10_7" rel="11.4.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="b780bfe099bb2ab07fa7f44dcc0b5101607158a2de77cbbeb16f625ad6ab7d3b" name="cloop-kmp-xen" arch="i586">
    <version epoch="0" ver="2.639_k3.12.57_44" rel="11.28.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="1bd3b180c3abf9a35019af94ff14e8f038a484fcbba4e37dffacc243a2199493" name="cloop-kmp-xen" arch="i586">
    <version epoch="0" ver="2.639_k3.12.59_47" rel="11.30.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="fb22a7fb28dae26d01c7ca7e930865d530fc92b09d2667dafe8f641e5ed2f426" name="cloop-kmp-xen" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_11" rel="11.7.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="4d7cde7481156ed01870cad40661f3dbaeea404452e0feeb114f535869cbca7c" name="cloop-kmp-xen" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_17" rel="11.10.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="c15f4956eb155256ae5cd0bd4721906e2b8cfe1a13238f8d5b0bed7b56befaa3" name="cloop-kmp-xen" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_21" rel="11.13.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="53c937876f17c273fa710866a76e8b8996de93dd6ab9b00a7369e7a6e160a7dd" name="cloop-kmp-xen" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_25" rel="11.16.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="bada66038dae8f48e83567379047b5f0353a7542f1a8e88acda17f6f0d4d5a12" name="cloop-kmp-xen" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_29" rel="11.19.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="eb2f5585c6f683318221cdb48ffbdf58dd68704a2041d5ba19e554d473bd6179" name="cloop-kmp-xen" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_34" rel="11.23.2"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="5667e5de90ad39e7d4410b8e4b2bfe76ae7fb095074603f3c960aff0e1aa840e" name="cloop-kmp-xen" arch="x86_64">
    <version epoch="0" ver="2.639_k3.11.10_7" rel="11.4.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="a06968e05719f5c997db3c810972402c35fac7e7b02cc94c1818386610e7d583" name="cloop-kmp-xen" arch="x86_64">
    <version epoch="0" ver="2.639_k3.12.57_44" rel="11.28.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="024c909ec1ad0d85714a6e054f81a1bb6546dfece0719f100596f1064d168079" name="cloop-kmp-xen" arch="x86_64">
    <version epoch="0" ver="2.639_k3.12.59_47" rel="11.30.1"/>

<changelog author="jengelh@medozas.de" date="1283601600">- Fix group name - rpmlint complaint
- Add module-init-tools as BuildRequires to calculate Supplements
- Update to new upstream release 2.634</changelog>
<changelog author="jengelh@medozas.de" date="1294833600">- Forward port to 2.6.37</changelog>
<changelog author="jengelh@medozas.de" date="1302955200">- Update to cloop-2.637
- obsolete fp37.diff, warnings.diff, remove bp33.diff</changelog>
<changelog author="jengelh@medozas.de" date="1311076800">- Update to cloop-2.6.39 to fix compile error in openSUSE:Factory
  * support for Linux 2.6.39/3.0</changelog>
<changelog author="coolo@suse.com" date="1323950400">- fix license to be in spdx.org format</changelog>
<changelog author="jengelh@inai.de" date="1368619200">- Add cloop-3.9.diff to make cloop compile with Linux 3.9</changelog>

</package>
<package pkgid="dcfad38e4f30a3f65399d14c05409f04e5c4ab418049fce13b254d9981148d9d" name="clutter" arch="src">
    <version epoch="0" ver="1.16.0" rel="3.2"/>

<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 1.11.10:
  + Add support for multiple touch points in GestureAction
  + Add a RotateAction
  + Generate crossing events for touch devices
  + Respect ClutterStage.set_motion_events_enabled() for touch
    events
  + Fix a regression in discrete scroll events emission
  + Add progress functions defined in CSS3-Transitions
  + Add ClutterActor::transition-stopped
  + Add ClutterActor.transform
  + Documentation and build fixes
  + Bugs fixed: bgo#678586, bgo#680088, bgo#678587, bgo#679797,
    bgo#680174, bgo#680751, bgo#680752
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464000">- Update to version 1.11.12:
  + ClutterBinLayout honours the fixed-position of actors
  + Soft-deprecation of ClutterGeometry
  + Deprecate the ClutterActor::paint signal
  + Ensure we associate input devices to the stage on touch events
  + Allow constraining a DragAction to an area
  + Do not handle events on ClutterText if :selectable is FALSE
  + Add ClutterActor:child-transform
  + Fix height-for-width policy in ClutterBinLayout
  + Add ClutterZoomAction
  + Documentation fixes
  + Bugs fixed: bgo#678427, bgo#679483, bgo#681074, bgo#681168,
    bgo#681584, bgo#681814, bgo#682070, bgo#682265
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 1.11.14:
  + Fixes for the touch sequence handling
  + Add interpolation for matrices
  + Add ClutterPanAction
  + Add more accessors to GestureAction for its subclasses
  + Fix ClutterTableLayout.pack() with negative row/column
  + Fix press coordinates when using ClutterDragAction with a drag
    handle
  + Documentation and annotation fixes
  + Deprecate the ClutterActor::pick signal
  + Bugs fixed: bgo#682795, bgo#682754, bgo#681746, bgo#679990,
    bgo#681648, bgo#683219, bgo#683066, bgo#683090, bgo#683126,
    bgo#682362, bgo#683113, bgo#680255
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 1.11.16:
  + Fixes for gesture-based actions
  + Ensure modified Enter keys do not end up in the Text buffer for
    single-line ClutterText actors.
  + Add touch event support to ClutterClickAction
  + Bugs fixed: bgo#683301, bgo#683431, bgo#683471, bgo#682161,
    bgo#623344, bgo#683869, bgo#683870, bgo#683936, bgo#683937.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 1.12.0:
  + Fix the device tracking for core X11 pointers
  + Respect text direction in BinLayout
  + Bugs fixed: bgo#684214, bgo#684552, bgo#684530, bgo#684509.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 1.12.2:
  + Updates for the Wayland backend.
  + Build environment fixes for Visual Studio.
  + Ensure that the Clutter lock is acquired before releasing it.
  + Bugs fixed: bgo#679439, bgo#685554.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 1.13.4:
  + Fix for the fullscreen support of the ClutterStage on Windows.
  + Documentation fixes.
  + Use XFixes to show and hide the cursor on X11 backends.
  + Allow setting Pango attributes on editable ClutterText actors.
  + Bugs fixed: bgo#690735, bgo#691651, bgo#686477, bgo#690836,
    bgo#690835, bgo#690833, bgo#691114, bgo#690664, bgo#690497.
- Changes from version 1.13.2:
  + Add ClutterTapAction, a gesture recogniser for single touch
    taps.
  + Add ClutterSwipeAction::swipe.
  + Enable XInput 2.x support by default.
  + Documentation fixes.
  + Bugs fixed: bgo#685589, bgo#685028, bgo#685221, bgo#683948,
    bgo#685737, bgo#686776, bgo#689073, bgo#685186, bgo#689258,
    bgo#689061, bgo#689316, bgo#689399, bgo#689496, bgo#690214,
    bgo#673838, bgo#686692, bgo#685982, bgo#688457, bgo#689392.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361448000">- Update to version 1.13.6:
  + Perform the picking in a separate buffer.
  + Add experimental API for changing the draw timing.
  + Always request XInput 2.3 on the X11 backend.
  + Bugs fixed: bgo#692466, bgo#692971, bgo#669122, bgo#693348,
    bgo#692901, bgo#693696, bgo#693767, bgo#694187, bgo#693741,
    bgo#694229, bgo#687652, bgo#694237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 1.13.8:
  + Use ClutterActor:child-transform with ClutterScrollActor.
  + Add progress-based marker API to ClutterTimeline.
  + Allow building Wayland compositor and client support together.
  + Documentation fixes.
  + Bugs fixed: bgo#686225, bgo#692851, bgo#694267, bgo#694319,
    bgo#695119, bgo#695158.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 1.13.10:
  + Fix a typo in the ClutterTimeline::stopped signal declaration
  + Use the XKB groups state when computing key modifiers on X11
  + Fixes for the Visual Studio build
  + Documentation and introspection fixes
  + Add a function to disable accessibility
  + Performance improvements
  + Bugs fixed: bgo#695158, bgo#695260, bgo#695188, bgo#691468,
    bgo#695838, bgo#695870, bgo#695982.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 1.14.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1364472000">- Add build_wayland_backend define and set it to 0, as we do not
  want to build wayland support yet. Pass conditional
  - -enable-wayland-backend to configure.
- Add conditional pkgconfig(wayland-client, wayland-cursor and
  xkbcommon) BuildRequires, needed for wayland backend building.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 1.14.2:
  + Ensure a redraw when making the stage visible under Wayland.
  + Fix build with debug messages enabled.
  + Documentation fixes.
  + Bugs fixed: bgo#696791.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 1.14.4:
  + Fix GestureAction handling of multi-touch gestures.
  + Add a paint callback for Stage updates.
  + Improve scaling behaviour in ZoomAction.
  + Documentation fixes.
  + Bugs fixed: bgo#698668, bgo#698671, bgo#698674, bgo#698783.</changelog>
<changelog author="dimstar@opensuse.org" date="1373457600">- Update to version 1.15.2:
  + Improve state tracking and short circuiting.
  + Wayland backend improvements and updates.
  + Documentation updates.
  + Allow installation of conformance tests.
  + Add ClutterFlowLayout:snap-to-grid.
  + Improve gesture recognizers.
  + Various deprecations.
  + Bugs fixed: bgo#682789, bgo#698669, bgo#698766, bgo#648873,
    bgo#699675, bgo#692706, bgo#701974, bgo#696813, bgo#701208,
    bgo#700980, bgo#702016, bgo#702610, bgo#702941, bgo#702202,
    bgo#703188, bgo#703476, bgo#703566, bgo#697285, bgo#703882,
    rh#975171.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 1.15.90:
  + Update the Wayland backend.
  + Drop support for XInput 1.x.
  + Fix event and device handling when using evdev.
  + Allow using ClutterContent on a ClutterStage.
  + Fixes for the Windows backend.
  + Documentation fixes.
  + Bugs fixed: bgo#703809, bgo#704625, bgo#698836, bgo#705739,
    bgo#705710, bgo#704269, bgo#704457, bgo#699578, bgo#704279,
    bgo#703336, bgo#701356, bgo#703969, bgo#703878, bgo#703608,
    bgo#703877.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 1.15.92:
  + Fix regression in BoxLayout for RTL text direction.
  + Update Visual Studio build files.
  + Bugs fixed: bgo#706450.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 1.15.94:
  + Improve the evdev input backend.
  + Allow scaling windowing surfaces.
  + Bugs fixed: bgo#706652, bgo#706543, bgo#706494, bgo#707377,
    bgo#707808, bgo#707774, bgo#707869, bgo#708079, bgo#708383.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678401">- Update to version 1.15.96:
  + Fix a crasher bug happening on X11.
  + bgo#708439: clutter-xi2: don't access the stage if we don't
    have one.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 1.16.0:
  + Fix a division by zero in the X11 backend.
  + Bugs fixed: bgo#707033.
  + Updated translations.</changelog>

</package>
<package pkgid="efa737fcba2497e917ce5e26aea82a90f1b784fec8346ce1be8d699ab386a33a" name="clutter" arch="src">
    <version epoch="0" ver="1.16.4" rel="13.1"/>

<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 1.11.14:
  + Fixes for the touch sequence handling
  + Add interpolation for matrices
  + Add ClutterPanAction
  + Add more accessors to GestureAction for its subclasses
  + Fix ClutterTableLayout.pack() with negative row/column
  + Fix press coordinates when using ClutterDragAction with a drag
    handle
  + Documentation and annotation fixes
  + Deprecate the ClutterActor::pick signal
  + Bugs fixed: bgo#682795, bgo#682754, bgo#681746, bgo#679990,
    bgo#681648, bgo#683219, bgo#683066, bgo#683090, bgo#683126,
    bgo#682362, bgo#683113, bgo#680255
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 1.11.16:
  + Fixes for gesture-based actions
  + Ensure modified Enter keys do not end up in the Text buffer for
    single-line ClutterText actors.
  + Add touch event support to ClutterClickAction
  + Bugs fixed: bgo#683301, bgo#683431, bgo#683471, bgo#682161,
    bgo#623344, bgo#683869, bgo#683870, bgo#683936, bgo#683937.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 1.12.0:
  + Fix the device tracking for core X11 pointers
  + Respect text direction in BinLayout
  + Bugs fixed: bgo#684214, bgo#684552, bgo#684530, bgo#684509.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 1.12.2:
  + Updates for the Wayland backend.
  + Build environment fixes for Visual Studio.
  + Ensure that the Clutter lock is acquired before releasing it.
  + Bugs fixed: bgo#679439, bgo#685554.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 1.13.4:
  + Fix for the fullscreen support of the ClutterStage on Windows.
  + Documentation fixes.
  + Use XFixes to show and hide the cursor on X11 backends.
  + Allow setting Pango attributes on editable ClutterText actors.
  + Bugs fixed: bgo#690735, bgo#691651, bgo#686477, bgo#690836,
    bgo#690835, bgo#690833, bgo#691114, bgo#690664, bgo#690497.
- Changes from version 1.13.2:
  + Add ClutterTapAction, a gesture recogniser for single touch
    taps.
  + Add ClutterSwipeAction::swipe.
  + Enable XInput 2.x support by default.
  + Documentation fixes.
  + Bugs fixed: bgo#685589, bgo#685028, bgo#685221, bgo#683948,
    bgo#685737, bgo#686776, bgo#689073, bgo#685186, bgo#689258,
    bgo#689061, bgo#689316, bgo#689399, bgo#689496, bgo#690214,
    bgo#673838, bgo#686692, bgo#685982, bgo#688457, bgo#689392.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361448000">- Update to version 1.13.6:
  + Perform the picking in a separate buffer.
  + Add experimental API for changing the draw timing.
  + Always request XInput 2.3 on the X11 backend.
  + Bugs fixed: bgo#692466, bgo#692971, bgo#669122, bgo#693348,
    bgo#692901, bgo#693696, bgo#693767, bgo#694187, bgo#693741,
    bgo#694229, bgo#687652, bgo#694237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 1.13.8:
  + Use ClutterActor:child-transform with ClutterScrollActor.
  + Add progress-based marker API to ClutterTimeline.
  + Allow building Wayland compositor and client support together.
  + Documentation fixes.
  + Bugs fixed: bgo#686225, bgo#692851, bgo#694267, bgo#694319,
    bgo#695119, bgo#695158.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 1.13.10:
  + Fix a typo in the ClutterTimeline::stopped signal declaration
  + Use the XKB groups state when computing key modifiers on X11
  + Fixes for the Visual Studio build
  + Documentation and introspection fixes
  + Add a function to disable accessibility
  + Performance improvements
  + Bugs fixed: bgo#695158, bgo#695260, bgo#695188, bgo#691468,
    bgo#695838, bgo#695870, bgo#695982.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 1.14.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1364472000">- Add build_wayland_backend define and set it to 0, as we do not
  want to build wayland support yet. Pass conditional
  - -enable-wayland-backend to configure.
- Add conditional pkgconfig(wayland-client, wayland-cursor and
  xkbcommon) BuildRequires, needed for wayland backend building.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 1.14.2:
  + Ensure a redraw when making the stage visible under Wayland.
  + Fix build with debug messages enabled.
  + Documentation fixes.
  + Bugs fixed: bgo#696791.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 1.14.4:
  + Fix GestureAction handling of multi-touch gestures.
  + Add a paint callback for Stage updates.
  + Improve scaling behaviour in ZoomAction.
  + Documentation fixes.
  + Bugs fixed: bgo#698668, bgo#698671, bgo#698674, bgo#698783.</changelog>
<changelog author="dimstar@opensuse.org" date="1373457600">- Update to version 1.15.2:
  + Improve state tracking and short circuiting.
  + Wayland backend improvements and updates.
  + Documentation updates.
  + Allow installation of conformance tests.
  + Add ClutterFlowLayout:snap-to-grid.
  + Improve gesture recognizers.
  + Various deprecations.
  + Bugs fixed: bgo#682789, bgo#698669, bgo#698766, bgo#648873,
    bgo#699675, bgo#692706, bgo#701974, bgo#696813, bgo#701208,
    bgo#700980, bgo#702016, bgo#702610, bgo#702941, bgo#702202,
    bgo#703188, bgo#703476, bgo#703566, bgo#697285, bgo#703882,
    rh#975171.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 1.15.90:
  + Update the Wayland backend.
  + Drop support for XInput 1.x.
  + Fix event and device handling when using evdev.
  + Allow using ClutterContent on a ClutterStage.
  + Fixes for the Windows backend.
  + Documentation fixes.
  + Bugs fixed: bgo#703809, bgo#704625, bgo#698836, bgo#705739,
    bgo#705710, bgo#704269, bgo#704457, bgo#699578, bgo#704279,
    bgo#703336, bgo#701356, bgo#703969, bgo#703878, bgo#703608,
    bgo#703877.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 1.15.92:
  + Fix regression in BoxLayout for RTL text direction.
  + Update Visual Studio build files.
  + Bugs fixed: bgo#706450.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 1.15.94:
  + Improve the evdev input backend.
  + Allow scaling windowing surfaces.
  + Bugs fixed: bgo#706652, bgo#706543, bgo#706494, bgo#707377,
    bgo#707808, bgo#707774, bgo#707869, bgo#708079, bgo#708383.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678401">- Update to version 1.15.96:
  + Fix a crasher bug happening on X11.
  + bgo#708439: clutter-xi2: don't access the stage if we don't
    have one.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 1.16.0:
  + Fix a division by zero in the X11 backend.
  + Bugs fixed: bgo#707033.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384862400">- Update to version 1.16.2:
  + Allow creating intervals and transitions from ClutterScript
    ClutterInterval now implements ClutterScriptable.
  + X11 backend improvements: Update the device coordinate
    handling; remove the dependency on the XFixes extension.
  + Wayland backend improvements: Implement the
    ClutterStage:cursor-visible property.
  + Apply the correct opacity when painting ClutterImage.
  + Throttle touch update events.
  + Fix preferred size of TableLayout: Take account of the
    visibility of the children when computing the preferred size of
    a ClutterActor using a ClutterTableLayout as its layout
    manager.
  + Documentation fixes.
  + Bugs fixed: bgo#707071, bgo#709762, bgo#709590, bgo#709761,
    bgo#709620, bgo#708922, bgo#709434, bgo#708850.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1390910400">- Update to version 1.16.4 (bnc#860916):
  + Performance improvements, avoid using hardware picking as much
    as possible; do not queue redraws when not needed, and rely on
    clipped redraws more.
  + Accessibility fixes.
  + Bugs fixed: bgo#710227, bgo#719747, bgo#712563, bgo#722220,
    bgo#722188, bgo#719901, bgo#719563, bgo#719367, bgo#719368.</changelog>

</package>
<package pkgid="7c798213576b1131577fbf52a571d4d0ac8bdeacfa2b1e527c2124494281635c" name="clutter-devel" arch="i586">
    <version epoch="0" ver="1.16.0" rel="3.2"/>

<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 1.11.10:
  + Add support for multiple touch points in GestureAction
  + Add a RotateAction
  + Generate crossing events for touch devices
  + Respect ClutterStage.set_motion_events_enabled() for touch
    events
  + Fix a regression in discrete scroll events emission
  + Add progress functions defined in CSS3-Transitions
  + Add ClutterActor::transition-stopped
  + Add ClutterActor.transform
  + Documentation and build fixes
  + Bugs fixed: bgo#678586, bgo#680088, bgo#678587, bgo#679797,
    bgo#680174, bgo#680751, bgo#680752
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464000">- Update to version 1.11.12:
  + ClutterBinLayout honours the fixed-position of actors
  + Soft-deprecation of ClutterGeometry
  + Deprecate the ClutterActor::paint signal
  + Ensure we associate input devices to the stage on touch events
  + Allow constraining a DragAction to an area
  + Do not handle events on ClutterText if :selectable is FALSE
  + Add ClutterActor:child-transform
  + Fix height-for-width policy in ClutterBinLayout
  + Add ClutterZoomAction
  + Documentation fixes
  + Bugs fixed: bgo#678427, bgo#679483, bgo#681074, bgo#681168,
    bgo#681584, bgo#681814, bgo#682070, bgo#682265
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 1.11.14:
  + Fixes for the touch sequence handling
  + Add interpolation for matrices
  + Add ClutterPanAction
  + Add more accessors to GestureAction for its subclasses
  + Fix ClutterTableLayout.pack() with negative row/column
  + Fix press coordinates when using ClutterDragAction with a drag
    handle
  + Documentation and annotation fixes
  + Deprecate the ClutterActor::pick signal
  + Bugs fixed: bgo#682795, bgo#682754, bgo#681746, bgo#679990,
    bgo#681648, bgo#683219, bgo#683066, bgo#683090, bgo#683126,
    bgo#682362, bgo#683113, bgo#680255
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 1.11.16:
  + Fixes for gesture-based actions
  + Ensure modified Enter keys do not end up in the Text buffer for
    single-line ClutterText actors.
  + Add touch event support to ClutterClickAction
  + Bugs fixed: bgo#683301, bgo#683431, bgo#683471, bgo#682161,
    bgo#623344, bgo#683869, bgo#683870, bgo#683936, bgo#683937.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 1.12.0:
  + Fix the device tracking for core X11 pointers
  + Respect text direction in BinLayout
  + Bugs fixed: bgo#684214, bgo#684552, bgo#684530, bgo#684509.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 1.12.2:
  + Updates for the Wayland backend.
  + Build environment fixes for Visual Studio.
  + Ensure that the Clutter lock is acquired before releasing it.
  + Bugs fixed: bgo#679439, bgo#685554.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 1.13.4:
  + Fix for the fullscreen support of the ClutterStage on Windows.
  + Documentation fixes.
  + Use XFixes to show and hide the cursor on X11 backends.
  + Allow setting Pango attributes on editable ClutterText actors.
  + Bugs fixed: bgo#690735, bgo#691651, bgo#686477, bgo#690836,
    bgo#690835, bgo#690833, bgo#691114, bgo#690664, bgo#690497.
- Changes from version 1.13.2:
  + Add ClutterTapAction, a gesture recogniser for single touch
    taps.
  + Add ClutterSwipeAction::swipe.
  + Enable XInput 2.x support by default.
  + Documentation fixes.
  + Bugs fixed: bgo#685589, bgo#685028, bgo#685221, bgo#683948,
    bgo#685737, bgo#686776, bgo#689073, bgo#685186, bgo#689258,
    bgo#689061, bgo#689316, bgo#689399, bgo#689496, bgo#690214,
    bgo#673838, bgo#686692, bgo#685982, bgo#688457, bgo#689392.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361448000">- Update to version 1.13.6:
  + Perform the picking in a separate buffer.
  + Add experimental API for changing the draw timing.
  + Always request XInput 2.3 on the X11 backend.
  + Bugs fixed: bgo#692466, bgo#692971, bgo#669122, bgo#693348,
    bgo#692901, bgo#693696, bgo#693767, bgo#694187, bgo#693741,
    bgo#694229, bgo#687652, bgo#694237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 1.13.8:
  + Use ClutterActor:child-transform with ClutterScrollActor.
  + Add progress-based marker API to ClutterTimeline.
  + Allow building Wayland compositor and client support together.
  + Documentation fixes.
  + Bugs fixed: bgo#686225, bgo#692851, bgo#694267, bgo#694319,
    bgo#695119, bgo#695158.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 1.13.10:
  + Fix a typo in the ClutterTimeline::stopped signal declaration
  + Use the XKB groups state when computing key modifiers on X11
  + Fixes for the Visual Studio build
  + Documentation and introspection fixes
  + Add a function to disable accessibility
  + Performance improvements
  + Bugs fixed: bgo#695158, bgo#695260, bgo#695188, bgo#691468,
    bgo#695838, bgo#695870, bgo#695982.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 1.14.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1364472000">- Add build_wayland_backend define and set it to 0, as we do not
  want to build wayland support yet. Pass conditional
  - -enable-wayland-backend to configure.
- Add conditional pkgconfig(wayland-client, wayland-cursor and
  xkbcommon) BuildRequires, needed for wayland backend building.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 1.14.2:
  + Ensure a redraw when making the stage visible under Wayland.
  + Fix build with debug messages enabled.
  + Documentation fixes.
  + Bugs fixed: bgo#696791.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 1.14.4:
  + Fix GestureAction handling of multi-touch gestures.
  + Add a paint callback for Stage updates.
  + Improve scaling behaviour in ZoomAction.
  + Documentation fixes.
  + Bugs fixed: bgo#698668, bgo#698671, bgo#698674, bgo#698783.</changelog>
<changelog author="dimstar@opensuse.org" date="1373457600">- Update to version 1.15.2:
  + Improve state tracking and short circuiting.
  + Wayland backend improvements and updates.
  + Documentation updates.
  + Allow installation of conformance tests.
  + Add ClutterFlowLayout:snap-to-grid.
  + Improve gesture recognizers.
  + Various deprecations.
  + Bugs fixed: bgo#682789, bgo#698669, bgo#698766, bgo#648873,
    bgo#699675, bgo#692706, bgo#701974, bgo#696813, bgo#701208,
    bgo#700980, bgo#702016, bgo#702610, bgo#702941, bgo#702202,
    bgo#703188, bgo#703476, bgo#703566, bgo#697285, bgo#703882,
    rh#975171.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 1.15.90:
  + Update the Wayland backend.
  + Drop support for XInput 1.x.
  + Fix event and device handling when using evdev.
  + Allow using ClutterContent on a ClutterStage.
  + Fixes for the Windows backend.
  + Documentation fixes.
  + Bugs fixed: bgo#703809, bgo#704625, bgo#698836, bgo#705739,
    bgo#705710, bgo#704269, bgo#704457, bgo#699578, bgo#704279,
    bgo#703336, bgo#701356, bgo#703969, bgo#703878, bgo#703608,
    bgo#703877.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 1.15.92:
  + Fix regression in BoxLayout for RTL text direction.
  + Update Visual Studio build files.
  + Bugs fixed: bgo#706450.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 1.15.94:
  + Improve the evdev input backend.
  + Allow scaling windowing surfaces.
  + Bugs fixed: bgo#706652, bgo#706543, bgo#706494, bgo#707377,
    bgo#707808, bgo#707774, bgo#707869, bgo#708079, bgo#708383.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678401">- Update to version 1.15.96:
  + Fix a crasher bug happening on X11.
  + bgo#708439: clutter-xi2: don't access the stage if we don't
    have one.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 1.16.0:
  + Fix a division by zero in the X11 backend.
  + Bugs fixed: bgo#707033.
  + Updated translations.</changelog>

</package>
<package pkgid="bfe83ecc14f4b3387fe82d20778b25f777f3e1f2ee647564c913035002602497" name="clutter-devel" arch="i586">
    <version epoch="0" ver="1.16.4" rel="13.1"/>

<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 1.11.14:
  + Fixes for the touch sequence handling
  + Add interpolation for matrices
  + Add ClutterPanAction
  + Add more accessors to GestureAction for its subclasses
  + Fix ClutterTableLayout.pack() with negative row/column
  + Fix press coordinates when using ClutterDragAction with a drag
    handle
  + Documentation and annotation fixes
  + Deprecate the ClutterActor::pick signal
  + Bugs fixed: bgo#682795, bgo#682754, bgo#681746, bgo#679990,
    bgo#681648, bgo#683219, bgo#683066, bgo#683090, bgo#683126,
    bgo#682362, bgo#683113, bgo#680255
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 1.11.16:
  + Fixes for gesture-based actions
  + Ensure modified Enter keys do not end up in the Text buffer for
    single-line ClutterText actors.
  + Add touch event support to ClutterClickAction
  + Bugs fixed: bgo#683301, bgo#683431, bgo#683471, bgo#682161,
    bgo#623344, bgo#683869, bgo#683870, bgo#683936, bgo#683937.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 1.12.0:
  + Fix the device tracking for core X11 pointers
  + Respect text direction in BinLayout
  + Bugs fixed: bgo#684214, bgo#684552, bgo#684530, bgo#684509.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 1.12.2:
  + Updates for the Wayland backend.
  + Build environment fixes for Visual Studio.
  + Ensure that the Clutter lock is acquired before releasing it.
  + Bugs fixed: bgo#679439, bgo#685554.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 1.13.4:
  + Fix for the fullscreen support of the ClutterStage on Windows.
  + Documentation fixes.
  + Use XFixes to show and hide the cursor on X11 backends.
  + Allow setting Pango attributes on editable ClutterText actors.
  + Bugs fixed: bgo#690735, bgo#691651, bgo#686477, bgo#690836,
    bgo#690835, bgo#690833, bgo#691114, bgo#690664, bgo#690497.
- Changes from version 1.13.2:
  + Add ClutterTapAction, a gesture recogniser for single touch
    taps.
  + Add ClutterSwipeAction::swipe.
  + Enable XInput 2.x support by default.
  + Documentation fixes.
  + Bugs fixed: bgo#685589, bgo#685028, bgo#685221, bgo#683948,
    bgo#685737, bgo#686776, bgo#689073, bgo#685186, bgo#689258,
    bgo#689061, bgo#689316, bgo#689399, bgo#689496, bgo#690214,
    bgo#673838, bgo#686692, bgo#685982, bgo#688457, bgo#689392.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361448000">- Update to version 1.13.6:
  + Perform the picking in a separate buffer.
  + Add experimental API for changing the draw timing.
  + Always request XInput 2.3 on the X11 backend.
  + Bugs fixed: bgo#692466, bgo#692971, bgo#669122, bgo#693348,
    bgo#692901, bgo#693696, bgo#693767, bgo#694187, bgo#693741,
    bgo#694229, bgo#687652, bgo#694237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 1.13.8:
  + Use ClutterActor:child-transform with ClutterScrollActor.
  + Add progress-based marker API to ClutterTimeline.
  + Allow building Wayland compositor and client support together.
  + Documentation fixes.
  + Bugs fixed: bgo#686225, bgo#692851, bgo#694267, bgo#694319,
    bgo#695119, bgo#695158.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 1.13.10:
  + Fix a typo in the ClutterTimeline::stopped signal declaration
  + Use the XKB groups state when computing key modifiers on X11
  + Fixes for the Visual Studio build
  + Documentation and introspection fixes
  + Add a function to disable accessibility
  + Performance improvements
  + Bugs fixed: bgo#695158, bgo#695260, bgo#695188, bgo#691468,
    bgo#695838, bgo#695870, bgo#695982.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 1.14.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1364472000">- Add build_wayland_backend define and set it to 0, as we do not
  want to build wayland support yet. Pass conditional
  - -enable-wayland-backend to configure.
- Add conditional pkgconfig(wayland-client, wayland-cursor and
  xkbcommon) BuildRequires, needed for wayland backend building.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 1.14.2:
  + Ensure a redraw when making the stage visible under Wayland.
  + Fix build with debug messages enabled.
  + Documentation fixes.
  + Bugs fixed: bgo#696791.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 1.14.4:
  + Fix GestureAction handling of multi-touch gestures.
  + Add a paint callback for Stage updates.
  + Improve scaling behaviour in ZoomAction.
  + Documentation fixes.
  + Bugs fixed: bgo#698668, bgo#698671, bgo#698674, bgo#698783.</changelog>
<changelog author="dimstar@opensuse.org" date="1373457600">- Update to version 1.15.2:
  + Improve state tracking and short circuiting.
  + Wayland backend improvements and updates.
  + Documentation updates.
  + Allow installation of conformance tests.
  + Add ClutterFlowLayout:snap-to-grid.
  + Improve gesture recognizers.
  + Various deprecations.
  + Bugs fixed: bgo#682789, bgo#698669, bgo#698766, bgo#648873,
    bgo#699675, bgo#692706, bgo#701974, bgo#696813, bgo#701208,
    bgo#700980, bgo#702016, bgo#702610, bgo#702941, bgo#702202,
    bgo#703188, bgo#703476, bgo#703566, bgo#697285, bgo#703882,
    rh#975171.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 1.15.90:
  + Update the Wayland backend.
  + Drop support for XInput 1.x.
  + Fix event and device handling when using evdev.
  + Allow using ClutterContent on a ClutterStage.
  + Fixes for the Windows backend.
  + Documentation fixes.
  + Bugs fixed: bgo#703809, bgo#704625, bgo#698836, bgo#705739,
    bgo#705710, bgo#704269, bgo#704457, bgo#699578, bgo#704279,
    bgo#703336, bgo#701356, bgo#703969, bgo#703878, bgo#703608,
    bgo#703877.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 1.15.92:
  + Fix regression in BoxLayout for RTL text direction.
  + Update Visual Studio build files.
  + Bugs fixed: bgo#706450.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 1.15.94:
  + Improve the evdev input backend.
  + Allow scaling windowing surfaces.
  + Bugs fixed: bgo#706652, bgo#706543, bgo#706494, bgo#707377,
    bgo#707808, bgo#707774, bgo#707869, bgo#708079, bgo#708383.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678401">- Update to version 1.15.96:
  + Fix a crasher bug happening on X11.
  + bgo#708439: clutter-xi2: don't access the stage if we don't
    have one.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 1.16.0:
  + Fix a division by zero in the X11 backend.
  + Bugs fixed: bgo#707033.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384862400">- Update to version 1.16.2:
  + Allow creating intervals and transitions from ClutterScript
    ClutterInterval now implements ClutterScriptable.
  + X11 backend improvements: Update the device coordinate
    handling; remove the dependency on the XFixes extension.
  + Wayland backend improvements: Implement the
    ClutterStage:cursor-visible property.
  + Apply the correct opacity when painting ClutterImage.
  + Throttle touch update events.
  + Fix preferred size of TableLayout: Take account of the
    visibility of the children when computing the preferred size of
    a ClutterActor using a ClutterTableLayout as its layout
    manager.
  + Documentation fixes.
  + Bugs fixed: bgo#707071, bgo#709762, bgo#709590, bgo#709761,
    bgo#709620, bgo#708922, bgo#709434, bgo#708850.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1390910400">- Update to version 1.16.4 (bnc#860916):
  + Performance improvements, avoid using hardware picking as much
    as possible; do not queue redraws when not needed, and rely on
    clipped redraws more.
  + Accessibility fixes.
  + Bugs fixed: bgo#710227, bgo#719747, bgo#712563, bgo#722220,
    bgo#722188, bgo#719901, bgo#719563, bgo#719367, bgo#719368.</changelog>

</package>
<package pkgid="85ea533b04360b41f980b2d58b65b38acdf67ce9567555729e801b8c476a6044" name="clutter-devel" arch="x86_64">
    <version epoch="0" ver="1.16.0" rel="3.2"/>

<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 1.11.10:
  + Add support for multiple touch points in GestureAction
  + Add a RotateAction
  + Generate crossing events for touch devices
  + Respect ClutterStage.set_motion_events_enabled() for touch
    events
  + Fix a regression in discrete scroll events emission
  + Add progress functions defined in CSS3-Transitions
  + Add ClutterActor::transition-stopped
  + Add ClutterActor.transform
  + Documentation and build fixes
  + Bugs fixed: bgo#678586, bgo#680088, bgo#678587, bgo#679797,
    bgo#680174, bgo#680751, bgo#680752
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464000">- Update to version 1.11.12:
  + ClutterBinLayout honours the fixed-position of actors
  + Soft-deprecation of ClutterGeometry
  + Deprecate the ClutterActor::paint signal
  + Ensure we associate input devices to the stage on touch events
  + Allow constraining a DragAction to an area
  + Do not handle events on ClutterText if :selectable is FALSE
  + Add ClutterActor:child-transform
  + Fix height-for-width policy in ClutterBinLayout
  + Add ClutterZoomAction
  + Documentation fixes
  + Bugs fixed: bgo#678427, bgo#679483, bgo#681074, bgo#681168,
    bgo#681584, bgo#681814, bgo#682070, bgo#682265
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 1.11.14:
  + Fixes for the touch sequence handling
  + Add interpolation for matrices
  + Add ClutterPanAction
  + Add more accessors to GestureAction for its subclasses
  + Fix ClutterTableLayout.pack() with negative row/column
  + Fix press coordinates when using ClutterDragAction with a drag
    handle
  + Documentation and annotation fixes
  + Deprecate the ClutterActor::pick signal
  + Bugs fixed: bgo#682795, bgo#682754, bgo#681746, bgo#679990,
    bgo#681648, bgo#683219, bgo#683066, bgo#683090, bgo#683126,
    bgo#682362, bgo#683113, bgo#680255
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 1.11.16:
  + Fixes for gesture-based actions
  + Ensure modified Enter keys do not end up in the Text buffer for
    single-line ClutterText actors.
  + Add touch event support to ClutterClickAction
  + Bugs fixed: bgo#683301, bgo#683431, bgo#683471, bgo#682161,
    bgo#623344, bgo#683869, bgo#683870, bgo#683936, bgo#683937.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 1.12.0:
  + Fix the device tracking for core X11 pointers
  + Respect text direction in BinLayout
  + Bugs fixed: bgo#684214, bgo#684552, bgo#684530, bgo#684509.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 1.12.2:
  + Updates for the Wayland backend.
  + Build environment fixes for Visual Studio.
  + Ensure that the Clutter lock is acquired before releasing it.
  + Bugs fixed: bgo#679439, bgo#685554.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 1.13.4:
  + Fix for the fullscreen support of the ClutterStage on Windows.
  + Documentation fixes.
  + Use XFixes to show and hide the cursor on X11 backends.
  + Allow setting Pango attributes on editable ClutterText actors.
  + Bugs fixed: bgo#690735, bgo#691651, bgo#686477, bgo#690836,
    bgo#690835, bgo#690833, bgo#691114, bgo#690664, bgo#690497.
- Changes from version 1.13.2:
  + Add ClutterTapAction, a gesture recogniser for single touch
    taps.
  + Add ClutterSwipeAction::swipe.
  + Enable XInput 2.x support by default.
  + Documentation fixes.
  + Bugs fixed: bgo#685589, bgo#685028, bgo#685221, bgo#683948,
    bgo#685737, bgo#686776, bgo#689073, bgo#685186, bgo#689258,
    bgo#689061, bgo#689316, bgo#689399, bgo#689496, bgo#690214,
    bgo#673838, bgo#686692, bgo#685982, bgo#688457, bgo#689392.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361448000">- Update to version 1.13.6:
  + Perform the picking in a separate buffer.
  + Add experimental API for changing the draw timing.
  + Always request XInput 2.3 on the X11 backend.
  + Bugs fixed: bgo#692466, bgo#692971, bgo#669122, bgo#693348,
    bgo#692901, bgo#693696, bgo#693767, bgo#694187, bgo#693741,
    bgo#694229, bgo#687652, bgo#694237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 1.13.8:
  + Use ClutterActor:child-transform with ClutterScrollActor.
  + Add progress-based marker API to ClutterTimeline.
  + Allow building Wayland compositor and client support together.
  + Documentation fixes.
  + Bugs fixed: bgo#686225, bgo#692851, bgo#694267, bgo#694319,
    bgo#695119, bgo#695158.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 1.13.10:
  + Fix a typo in the ClutterTimeline::stopped signal declaration
  + Use the XKB groups state when computing key modifiers on X11
  + Fixes for the Visual Studio build
  + Documentation and introspection fixes
  + Add a function to disable accessibility
  + Performance improvements
  + Bugs fixed: bgo#695158, bgo#695260, bgo#695188, bgo#691468,
    bgo#695838, bgo#695870, bgo#695982.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 1.14.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1364472000">- Add build_wayland_backend define and set it to 0, as we do not
  want to build wayland support yet. Pass conditional
  - -enable-wayland-backend to configure.
- Add conditional pkgconfig(wayland-client, wayland-cursor and
  xkbcommon) BuildRequires, needed for wayland backend building.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 1.14.2:
  + Ensure a redraw when making the stage visible under Wayland.
  + Fix build with debug messages enabled.
  + Documentation fixes.
  + Bugs fixed: bgo#696791.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 1.14.4:
  + Fix GestureAction handling of multi-touch gestures.
  + Add a paint callback for Stage updates.
  + Improve scaling behaviour in ZoomAction.
  + Documentation fixes.
  + Bugs fixed: bgo#698668, bgo#698671, bgo#698674, bgo#698783.</changelog>
<changelog author="dimstar@opensuse.org" date="1373457600">- Update to version 1.15.2:
  + Improve state tracking and short circuiting.
  + Wayland backend improvements and updates.
  + Documentation updates.
  + Allow installation of conformance tests.
  + Add ClutterFlowLayout:snap-to-grid.
  + Improve gesture recognizers.
  + Various deprecations.
  + Bugs fixed: bgo#682789, bgo#698669, bgo#698766, bgo#648873,
    bgo#699675, bgo#692706, bgo#701974, bgo#696813, bgo#701208,
    bgo#700980, bgo#702016, bgo#702610, bgo#702941, bgo#702202,
    bgo#703188, bgo#703476, bgo#703566, bgo#697285, bgo#703882,
    rh#975171.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 1.15.90:
  + Update the Wayland backend.
  + Drop support for XInput 1.x.
  + Fix event and device handling when using evdev.
  + Allow using ClutterContent on a ClutterStage.
  + Fixes for the Windows backend.
  + Documentation fixes.
  + Bugs fixed: bgo#703809, bgo#704625, bgo#698836, bgo#705739,
    bgo#705710, bgo#704269, bgo#704457, bgo#699578, bgo#704279,
    bgo#703336, bgo#701356, bgo#703969, bgo#703878, bgo#703608,
    bgo#703877.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 1.15.92:
  + Fix regression in BoxLayout for RTL text direction.
  + Update Visual Studio build files.
  + Bugs fixed: bgo#706450.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 1.15.94:
  + Improve the evdev input backend.
  + Allow scaling windowing surfaces.
  + Bugs fixed: bgo#706652, bgo#706543, bgo#706494, bgo#707377,
    bgo#707808, bgo#707774, bgo#707869, bgo#708079, bgo#708383.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678401">- Update to version 1.15.96:
  + Fix a crasher bug happening on X11.
  + bgo#708439: clutter-xi2: don't access the stage if we don't
    have one.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 1.16.0:
  + Fix a division by zero in the X11 backend.
  + Bugs fixed: bgo#707033.
  + Updated translations.</changelog>

</package>
<package pkgid="7d6e115219ffde5c80d0f96d47e2d0d1690d3aab47c14e63baed109c5ba18d2f" name="clutter-devel" arch="x86_64">
    <version epoch="0" ver="1.16.4" rel="13.1"/>

<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 1.11.14:
  + Fixes for the touch sequence handling
  + Add interpolation for matrices
  + Add ClutterPanAction
  + Add more accessors to GestureAction for its subclasses
  + Fix ClutterTableLayout.pack() with negative row/column
  + Fix press coordinates when using ClutterDragAction with a drag
    handle
  + Documentation and annotation fixes
  + Deprecate the ClutterActor::pick signal
  + Bugs fixed: bgo#682795, bgo#682754, bgo#681746, bgo#679990,
    bgo#681648, bgo#683219, bgo#683066, bgo#683090, bgo#683126,
    bgo#682362, bgo#683113, bgo#680255
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 1.11.16:
  + Fixes for gesture-based actions
  + Ensure modified Enter keys do not end up in the Text buffer for
    single-line ClutterText actors.
  + Add touch event support to ClutterClickAction
  + Bugs fixed: bgo#683301, bgo#683431, bgo#683471, bgo#682161,
    bgo#623344, bgo#683869, bgo#683870, bgo#683936, bgo#683937.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 1.12.0:
  + Fix the device tracking for core X11 pointers
  + Respect text direction in BinLayout
  + Bugs fixed: bgo#684214, bgo#684552, bgo#684530, bgo#684509.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 1.12.2:
  + Updates for the Wayland backend.
  + Build environment fixes for Visual Studio.
  + Ensure that the Clutter lock is acquired before releasing it.
  + Bugs fixed: bgo#679439, bgo#685554.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 1.13.4:
  + Fix for the fullscreen support of the ClutterStage on Windows.
  + Documentation fixes.
  + Use XFixes to show and hide the cursor on X11 backends.
  + Allow setting Pango attributes on editable ClutterText actors.
  + Bugs fixed: bgo#690735, bgo#691651, bgo#686477, bgo#690836,
    bgo#690835, bgo#690833, bgo#691114, bgo#690664, bgo#690497.
- Changes from version 1.13.2:
  + Add ClutterTapAction, a gesture recogniser for single touch
    taps.
  + Add ClutterSwipeAction::swipe.
  + Enable XInput 2.x support by default.
  + Documentation fixes.
  + Bugs fixed: bgo#685589, bgo#685028, bgo#685221, bgo#683948,
    bgo#685737, bgo#686776, bgo#689073, bgo#685186, bgo#689258,
    bgo#689061, bgo#689316, bgo#689399, bgo#689496, bgo#690214,
    bgo#673838, bgo#686692, bgo#685982, bgo#688457, bgo#689392.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361448000">- Update to version 1.13.6:
  + Perform the picking in a separate buffer.
  + Add experimental API for changing the draw timing.
  + Always request XInput 2.3 on the X11 backend.
  + Bugs fixed: bgo#692466, bgo#692971, bgo#669122, bgo#693348,
    bgo#692901, bgo#693696, bgo#693767, bgo#694187, bgo#693741,
    bgo#694229, bgo#687652, bgo#694237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 1.13.8:
  + Use ClutterActor:child-transform with ClutterScrollActor.
  + Add progress-based marker API to ClutterTimeline.
  + Allow building Wayland compositor and client support together.
  + Documentation fixes.
  + Bugs fixed: bgo#686225, bgo#692851, bgo#694267, bgo#694319,
    bgo#695119, bgo#695158.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 1.13.10:
  + Fix a typo in the ClutterTimeline::stopped signal declaration
  + Use the XKB groups state when computing key modifiers on X11
  + Fixes for the Visual Studio build
  + Documentation and introspection fixes
  + Add a function to disable accessibility
  + Performance improvements
  + Bugs fixed: bgo#695158, bgo#695260, bgo#695188, bgo#691468,
    bgo#695838, bgo#695870, bgo#695982.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 1.14.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1364472000">- Add build_wayland_backend define and set it to 0, as we do not
  want to build wayland support yet. Pass conditional
  - -enable-wayland-backend to configure.
- Add conditional pkgconfig(wayland-client, wayland-cursor and
  xkbcommon) BuildRequires, needed for wayland backend building.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 1.14.2:
  + Ensure a redraw when making the stage visible under Wayland.
  + Fix build with debug messages enabled.
  + Documentation fixes.
  + Bugs fixed: bgo#696791.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 1.14.4:
  + Fix GestureAction handling of multi-touch gestures.
  + Add a paint callback for Stage updates.
  + Improve scaling behaviour in ZoomAction.
  + Documentation fixes.
  + Bugs fixed: bgo#698668, bgo#698671, bgo#698674, bgo#698783.</changelog>
<changelog author="dimstar@opensuse.org" date="1373457600">- Update to version 1.15.2:
  + Improve state tracking and short circuiting.
  + Wayland backend improvements and updates.
  + Documentation updates.
  + Allow installation of conformance tests.
  + Add ClutterFlowLayout:snap-to-grid.
  + Improve gesture recognizers.
  + Various deprecations.
  + Bugs fixed: bgo#682789, bgo#698669, bgo#698766, bgo#648873,
    bgo#699675, bgo#692706, bgo#701974, bgo#696813, bgo#701208,
    bgo#700980, bgo#702016, bgo#702610, bgo#702941, bgo#702202,
    bgo#703188, bgo#703476, bgo#703566, bgo#697285, bgo#703882,
    rh#975171.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 1.15.90:
  + Update the Wayland backend.
  + Drop support for XInput 1.x.
  + Fix event and device handling when using evdev.
  + Allow using ClutterContent on a ClutterStage.
  + Fixes for the Windows backend.
  + Documentation fixes.
  + Bugs fixed: bgo#703809, bgo#704625, bgo#698836, bgo#705739,
    bgo#705710, bgo#704269, bgo#704457, bgo#699578, bgo#704279,
    bgo#703336, bgo#701356, bgo#703969, bgo#703878, bgo#703608,
    bgo#703877.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 1.15.92:
  + Fix regression in BoxLayout for RTL text direction.
  + Update Visual Studio build files.
  + Bugs fixed: bgo#706450.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 1.15.94:
  + Improve the evdev input backend.
  + Allow scaling windowing surfaces.
  + Bugs fixed: bgo#706652, bgo#706543, bgo#706494, bgo#707377,
    bgo#707808, bgo#707774, bgo#707869, bgo#708079, bgo#708383.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678401">- Update to version 1.15.96:
  + Fix a crasher bug happening on X11.
  + bgo#708439: clutter-xi2: don't access the stage if we don't
    have one.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 1.16.0:
  + Fix a division by zero in the X11 backend.
  + Bugs fixed: bgo#707033.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384862400">- Update to version 1.16.2:
  + Allow creating intervals and transitions from ClutterScript
    ClutterInterval now implements ClutterScriptable.
  + X11 backend improvements: Update the device coordinate
    handling; remove the dependency on the XFixes extension.
  + Wayland backend improvements: Implement the
    ClutterStage:cursor-visible property.
  + Apply the correct opacity when painting ClutterImage.
  + Throttle touch update events.
  + Fix preferred size of TableLayout: Take account of the
    visibility of the children when computing the preferred size of
    a ClutterActor using a ClutterTableLayout as its layout
    manager.
  + Documentation fixes.
  + Bugs fixed: bgo#707071, bgo#709762, bgo#709590, bgo#709761,
    bgo#709620, bgo#708922, bgo#709434, bgo#708850.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1390910400">- Update to version 1.16.4 (bnc#860916):
  + Performance improvements, avoid using hardware picking as much
    as possible; do not queue redraws when not needed, and rely on
    clipped redraws more.
  + Accessibility fixes.
  + Bugs fixed: bgo#710227, bgo#719747, bgo#712563, bgo#722220,
    bgo#722188, bgo#719901, bgo#719563, bgo#719367, bgo#719368.</changelog>

</package>
<package pkgid="4f9ec5a98773c2ee4236cad52a35fb159fb2f5df68477e9bd5c3d47f39023135" name="clutter-gst" arch="src">
    <version epoch="0" ver="2.0.8" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 1.3.12:
  + Fix the GstNavigation interface of the sink
  + Some warning fixes with newer versions of Clutter.</changelog>
<changelog author="vuntz@opensuse.org" date="1311768000">- Add baselibs.conf.</changelog>
<changelog author="vuntz@opensuse.org" date="1314878400">- Update to version 1.3.14:
  + Big split between the logic around playbin2 and the
    clutter-specific part to be able to reuse the GStreamer logic
    to implement new ClutterMedia objects.
  + Add new API to get the list of audio and subtitles tracks
  + Fix the leak of GstBus in VideoTexture
  + Fix the key navigation events in the sink</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="dimstar@opensuse.org" date="1317384000">- Update to version 1.4.0:
  + Refinement of the subtitles and audio tracks API. clutter-gst
    now gives the full GstTagList to the application.
  + Made the internal test player a bit more usable.
  + A number of fixes around automatic loading of external
    subtitles files.
- Replace clutter-devel BuildRequires with pkgconfig(clutter-1.0)
- Add pkgconfig(cogl-1.0) BuildRequires to have full capabilities.</changelog>
<changelog author="dimstar@opensuse.org" date="1317643200">- Update to version 1.4.2:
  + bgo#660732: Fix crashes when uploading RGB textures
  + Don't try to free NULL GstTagLists
- Move make check to %check section.</changelog>
<changelog author="dimstar@opensuse.org" date="1319803200">- Update to version 1.4.4:
  + Build fixes, including compiling with glib 2.31.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Split typefile file in typelib-1_0-ClutterGst-1_0 subpackage.
- Add typelib-1_0-ClutterGst-1_0 Requires to devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1326888000">- Update to version 1.4.6:
  + Fix reffing/unreffing behaviour of ClutterGstVideoTexture
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="dimstar@opensuse.org" date="1328961600">- Update to version 1.5.2:
  + Add a standalone gstreamer plugin. Clutter-gst gstreamer
    elements are now available just like any other GStreamer
    element, that includes working with gst-launch.
  + Add support for video/x-surface ("hardware" surfaces) that can
    be converted to opengl textures. (Requires -bad 0.10.22.1)
  + Addition of a new element, autocluttersink, a bin that picks up
    clutter-compatible sinks automatically. This allows an
    eco-system of 3rd party decoders and (clutter) sinks to be
    autoplugged.
  + Various small fixes.
- Split new subpackage gstreamer-0_10-plugin-gstclutter:
  + it contains the new gstreamer plugin.
  + add to it a Supplements for gstreamer-0_10 and
    libclutter-gst-1_0-0, so users of both those packages will get
    it installed automatically.
  + add it as Requires to the devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 1.5.4:
  + Fix compilation with cogl 1.9.x</changelog>
<changelog author="zaitor@opensuse.org" date="1337947200">- Update to version 1.5.6:
  + Fix play/pause of autocluttersink.
  + Add a "in-seek" property to the player to be notified when the
    pipeline is seeking.
  + Various build and smaller fixes.
- Add BuildRequires: pkgconfig(gstreamer-basevideo-0.10), support
  for video/x-surface, (HW support).
- Replace explicit BuildRequires with pkgconfig equivalents:
  + gobject-introspection-devel -&gt; gobject-introspection-1.0.
  + gstreamer-0_10-devel &gt; gstreamer-0.10.
  + gstreamer-0_10-plugins-base-devel -&gt; gstreamer-basevideo-0.10.
- Drop xz buildrequires, as this comes for free now in the
  buildsystem.</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Update to version 1.6.0:
  + None. This stable release is the same as 1.5.6.</changelog>
<changelog author="dimstar@opensuse.org" date="1345636800">- Update to version 1.9.90:
  + Port to GStreamer 1.0
  + Fix navigation support in the standalone plugin
- Update pkgoconfig() BuildRequires for the GStreamer 1.0 port:
  + Removed: gstreamer-0.10, gstreamer-basevideo-0.10,
    gstreamer-plugins-base-0.10
  + Added: gstreamer-1.0, gstreamer-plugins-base-1.0,
    gstreamer-base-1.0, gstreamer-video-1.0, gstreamer-audio-1.0,
    gstreamer-tag-1.0.
- Rename subpackages, following upstreams ABI / API changes:
  + Old: libclutter-gst-1_0-0, typelib-1_0-ClutterGst-1_0
  + New: libclutter-gst-2_0-0, typelib-1_0-ClutterGst-2_0
- Rename gstreamer-0_10-plugin-gstclutter subpackage to
  gstreamer-plugin-gstclutter, following the gstreamer 1.0 package
  naming convention.
- Update baselibs.conf.</changelog>
<changelog author="dimstar@opensuse.org" date="1348660800">- Update to version 1.9.92:
  + Updated Gstreamer 1.0 port to work with the released
    GStreamer 1.0.0.
  + Fix uploading of some videos with odd widths.
  + Disable HW decoder support until it is stabilized in GStreamer
    1.0.
  + autocluttersink now exposes the ts-offset property of the
    underlying sink.</changelog>
<changelog author="dimstar@opensuse.org" date="1359028800">- Update to version 2.0.0:
  + Fix a bug a autocluttersink that would lead to playbin not
    considering it as a sink any more when removing the actual sink
    from the bin.
  + Small build and deprecation fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1361880000">- Update to version 2.0.2:
  + Remove usage of ClutterStage/ClutterContainer deprecated APIs.
  + Depend on Cogl 1.10 for shaders boilerplate.
  + Improve video-player player example on enter/leave event
    handling.</changelog>
<changelog author="dimstar@opensuse.org" date="1369396800">- Update to version 2.0.4:
  + Reenabled HW decoder support.
- Add pkgconfig(gstreamer-basevideo-1.0) BuildRequires: dependency
  for the HW decoder support.</changelog>
<changelog author="zaitor@opensuse.org" date="1374667200">- Update to version 2.0.6:
  + Fix a bug when subclassing ClutterGstPlayer class.
  + Add support of X11 pixmap as video texture when decoding with
    Gstreamer-vaapi.</changelog>
<changelog author="dimstar@opensuse.org" date="1379505600">- Update to version 2.0.8:
  + Fix a crash in ClutterGstPlayer when disposing instances too
    fast.
  + Fix a crash in ClutterGstVideoSink.
  + Fix a crash in ClutterGstVideoSink when running on Wayland with
    X11 backend compiled.</changelog>

</package>
<package pkgid="9be7ef2b9cfac5e82d2103bb3b9c8fde81102bab54db6b352b6157eb0d31b4e5" name="clutter-gst-devel" arch="i586">
    <version epoch="0" ver="2.0.8" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 1.3.12:
  + Fix the GstNavigation interface of the sink
  + Some warning fixes with newer versions of Clutter.</changelog>
<changelog author="vuntz@opensuse.org" date="1311768000">- Add baselibs.conf.</changelog>
<changelog author="vuntz@opensuse.org" date="1314878400">- Update to version 1.3.14:
  + Big split between the logic around playbin2 and the
    clutter-specific part to be able to reuse the GStreamer logic
    to implement new ClutterMedia objects.
  + Add new API to get the list of audio and subtitles tracks
  + Fix the leak of GstBus in VideoTexture
  + Fix the key navigation events in the sink</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="dimstar@opensuse.org" date="1317384000">- Update to version 1.4.0:
  + Refinement of the subtitles and audio tracks API. clutter-gst
    now gives the full GstTagList to the application.
  + Made the internal test player a bit more usable.
  + A number of fixes around automatic loading of external
    subtitles files.
- Replace clutter-devel BuildRequires with pkgconfig(clutter-1.0)
- Add pkgconfig(cogl-1.0) BuildRequires to have full capabilities.</changelog>
<changelog author="dimstar@opensuse.org" date="1317643200">- Update to version 1.4.2:
  + bgo#660732: Fix crashes when uploading RGB textures
  + Don't try to free NULL GstTagLists
- Move make check to %check section.</changelog>
<changelog author="dimstar@opensuse.org" date="1319803200">- Update to version 1.4.4:
  + Build fixes, including compiling with glib 2.31.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Split typefile file in typelib-1_0-ClutterGst-1_0 subpackage.
- Add typelib-1_0-ClutterGst-1_0 Requires to devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1326888000">- Update to version 1.4.6:
  + Fix reffing/unreffing behaviour of ClutterGstVideoTexture
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="dimstar@opensuse.org" date="1328961600">- Update to version 1.5.2:
  + Add a standalone gstreamer plugin. Clutter-gst gstreamer
    elements are now available just like any other GStreamer
    element, that includes working with gst-launch.
  + Add support for video/x-surface ("hardware" surfaces) that can
    be converted to opengl textures. (Requires -bad 0.10.22.1)
  + Addition of a new element, autocluttersink, a bin that picks up
    clutter-compatible sinks automatically. This allows an
    eco-system of 3rd party decoders and (clutter) sinks to be
    autoplugged.
  + Various small fixes.
- Split new subpackage gstreamer-0_10-plugin-gstclutter:
  + it contains the new gstreamer plugin.
  + add to it a Supplements for gstreamer-0_10 and
    libclutter-gst-1_0-0, so users of both those packages will get
    it installed automatically.
  + add it as Requires to the devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 1.5.4:
  + Fix compilation with cogl 1.9.x</changelog>
<changelog author="zaitor@opensuse.org" date="1337947200">- Update to version 1.5.6:
  + Fix play/pause of autocluttersink.
  + Add a "in-seek" property to the player to be notified when the
    pipeline is seeking.
  + Various build and smaller fixes.
- Add BuildRequires: pkgconfig(gstreamer-basevideo-0.10), support
  for video/x-surface, (HW support).
- Replace explicit BuildRequires with pkgconfig equivalents:
  + gobject-introspection-devel -&gt; gobject-introspection-1.0.
  + gstreamer-0_10-devel &gt; gstreamer-0.10.
  + gstreamer-0_10-plugins-base-devel -&gt; gstreamer-basevideo-0.10.
- Drop xz buildrequires, as this comes for free now in the
  buildsystem.</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Update to version 1.6.0:
  + None. This stable release is the same as 1.5.6.</changelog>
<changelog author="dimstar@opensuse.org" date="1345636800">- Update to version 1.9.90:
  + Port to GStreamer 1.0
  + Fix navigation support in the standalone plugin
- Update pkgoconfig() BuildRequires for the GStreamer 1.0 port:
  + Removed: gstreamer-0.10, gstreamer-basevideo-0.10,
    gstreamer-plugins-base-0.10
  + Added: gstreamer-1.0, gstreamer-plugins-base-1.0,
    gstreamer-base-1.0, gstreamer-video-1.0, gstreamer-audio-1.0,
    gstreamer-tag-1.0.
- Rename subpackages, following upstreams ABI / API changes:
  + Old: libclutter-gst-1_0-0, typelib-1_0-ClutterGst-1_0
  + New: libclutter-gst-2_0-0, typelib-1_0-ClutterGst-2_0
- Rename gstreamer-0_10-plugin-gstclutter subpackage to
  gstreamer-plugin-gstclutter, following the gstreamer 1.0 package
  naming convention.
- Update baselibs.conf.</changelog>
<changelog author="dimstar@opensuse.org" date="1348660800">- Update to version 1.9.92:
  + Updated Gstreamer 1.0 port to work with the released
    GStreamer 1.0.0.
  + Fix uploading of some videos with odd widths.
  + Disable HW decoder support until it is stabilized in GStreamer
    1.0.
  + autocluttersink now exposes the ts-offset property of the
    underlying sink.</changelog>
<changelog author="dimstar@opensuse.org" date="1359028800">- Update to version 2.0.0:
  + Fix a bug a autocluttersink that would lead to playbin not
    considering it as a sink any more when removing the actual sink
    from the bin.
  + Small build and deprecation fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1361880000">- Update to version 2.0.2:
  + Remove usage of ClutterStage/ClutterContainer deprecated APIs.
  + Depend on Cogl 1.10 for shaders boilerplate.
  + Improve video-player player example on enter/leave event
    handling.</changelog>
<changelog author="dimstar@opensuse.org" date="1369396800">- Update to version 2.0.4:
  + Reenabled HW decoder support.
- Add pkgconfig(gstreamer-basevideo-1.0) BuildRequires: dependency
  for the HW decoder support.</changelog>
<changelog author="zaitor@opensuse.org" date="1374667200">- Update to version 2.0.6:
  + Fix a bug when subclassing ClutterGstPlayer class.
  + Add support of X11 pixmap as video texture when decoding with
    Gstreamer-vaapi.</changelog>
<changelog author="dimstar@opensuse.org" date="1379505600">- Update to version 2.0.8:
  + Fix a crash in ClutterGstPlayer when disposing instances too
    fast.
  + Fix a crash in ClutterGstVideoSink.
  + Fix a crash in ClutterGstVideoSink when running on Wayland with
    X11 backend compiled.</changelog>

</package>
<package pkgid="4acfac4dbb2c75cd5f961f833cf8c1a80bc22939fe13e3bddf744ceac05c06a6" name="clutter-gst-devel" arch="x86_64">
    <version epoch="0" ver="2.0.8" rel="3.1"/>

<changelog author="dimstar@opensuse.org" date="1307448000">- Update to version 1.3.12:
  + Fix the GstNavigation interface of the sink
  + Some warning fixes with newer versions of Clutter.</changelog>
<changelog author="vuntz@opensuse.org" date="1311768000">- Add baselibs.conf.</changelog>
<changelog author="vuntz@opensuse.org" date="1314878400">- Update to version 1.3.14:
  + Big split between the logic around playbin2 and the
    clutter-specific part to be able to reuse the GStreamer logic
    to implement new ClutterMedia objects.
  + Add new API to get the list of audio and subtitles tracks
  + Fix the leak of GstBus in VideoTexture
  + Fix the key navigation events in the sink</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="dimstar@opensuse.org" date="1317384000">- Update to version 1.4.0:
  + Refinement of the subtitles and audio tracks API. clutter-gst
    now gives the full GstTagList to the application.
  + Made the internal test player a bit more usable.
  + A number of fixes around automatic loading of external
    subtitles files.
- Replace clutter-devel BuildRequires with pkgconfig(clutter-1.0)
- Add pkgconfig(cogl-1.0) BuildRequires to have full capabilities.</changelog>
<changelog author="dimstar@opensuse.org" date="1317643200">- Update to version 1.4.2:
  + bgo#660732: Fix crashes when uploading RGB textures
  + Don't try to free NULL GstTagLists
- Move make check to %check section.</changelog>
<changelog author="dimstar@opensuse.org" date="1319803200">- Update to version 1.4.4:
  + Build fixes, including compiling with glib 2.31.</changelog>
<changelog author="dimstar@opensuse.org" date="1323345600">- Split typefile file in typelib-1_0-ClutterGst-1_0 subpackage.
- Add typelib-1_0-ClutterGst-1_0 Requires to devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1326888000">- Update to version 1.4.6:
  + Fix reffing/unreffing behaviour of ClutterGstVideoTexture
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.</changelog>
<changelog author="dimstar@opensuse.org" date="1328961600">- Update to version 1.5.2:
  + Add a standalone gstreamer plugin. Clutter-gst gstreamer
    elements are now available just like any other GStreamer
    element, that includes working with gst-launch.
  + Add support for video/x-surface ("hardware" surfaces) that can
    be converted to opengl textures. (Requires -bad 0.10.22.1)
  + Addition of a new element, autocluttersink, a bin that picks up
    clutter-compatible sinks automatically. This allows an
    eco-system of 3rd party decoders and (clutter) sinks to be
    autoplugged.
  + Various small fixes.
- Split new subpackage gstreamer-0_10-plugin-gstclutter:
  + it contains the new gstreamer plugin.
  + add to it a Supplements for gstreamer-0_10 and
    libclutter-gst-1_0-0, so users of both those packages will get
    it installed automatically.
  + add it as Requires to the devel subpackage.</changelog>
<changelog author="vuntz@opensuse.org" date="1329998400">- Update to version 1.5.4:
  + Fix compilation with cogl 1.9.x</changelog>
<changelog author="zaitor@opensuse.org" date="1337947200">- Update to version 1.5.6:
  + Fix play/pause of autocluttersink.
  + Add a "in-seek" property to the player to be notified when the
    pipeline is seeking.
  + Various build and smaller fixes.
- Add BuildRequires: pkgconfig(gstreamer-basevideo-0.10), support
  for video/x-surface, (HW support).
- Replace explicit BuildRequires with pkgconfig equivalents:
  + gobject-introspection-devel -&gt; gobject-introspection-1.0.
  + gstreamer-0_10-devel &gt; gstreamer-0.10.
  + gstreamer-0_10-plugins-base-devel -&gt; gstreamer-basevideo-0.10.
- Drop xz buildrequires, as this comes for free now in the
  buildsystem.</changelog>
<changelog author="dimstar@opensuse.org" date="1340712000">- Update to version 1.6.0:
  + None. This stable release is the same as 1.5.6.</changelog>
<changelog author="dimstar@opensuse.org" date="1345636800">- Update to version 1.9.90:
  + Port to GStreamer 1.0
  + Fix navigation support in the standalone plugin
- Update pkgoconfig() BuildRequires for the GStreamer 1.0 port:
  + Removed: gstreamer-0.10, gstreamer-basevideo-0.10,
    gstreamer-plugins-base-0.10
  + Added: gstreamer-1.0, gstreamer-plugins-base-1.0,
    gstreamer-base-1.0, gstreamer-video-1.0, gstreamer-audio-1.0,
    gstreamer-tag-1.0.
- Rename subpackages, following upstreams ABI / API changes:
  + Old: libclutter-gst-1_0-0, typelib-1_0-ClutterGst-1_0
  + New: libclutter-gst-2_0-0, typelib-1_0-ClutterGst-2_0
- Rename gstreamer-0_10-plugin-gstclutter subpackage to
  gstreamer-plugin-gstclutter, following the gstreamer 1.0 package
  naming convention.
- Update baselibs.conf.</changelog>
<changelog author="dimstar@opensuse.org" date="1348660800">- Update to version 1.9.92:
  + Updated Gstreamer 1.0 port to work with the released
    GStreamer 1.0.0.
  + Fix uploading of some videos with odd widths.
  + Disable HW decoder support until it is stabilized in GStreamer
    1.0.
  + autocluttersink now exposes the ts-offset property of the
    underlying sink.</changelog>
<changelog author="dimstar@opensuse.org" date="1359028800">- Update to version 2.0.0:
  + Fix a bug a autocluttersink that would lead to playbin not
    considering it as a sink any more when removing the actual sink
    from the bin.
  + Small build and deprecation fixes.</changelog>
<changelog author="zaitor@opensuse.org" date="1361880000">- Update to version 2.0.2:
  + Remove usage of ClutterStage/ClutterContainer deprecated APIs.
  + Depend on Cogl 1.10 for shaders boilerplate.
  + Improve video-player player example on enter/leave event
    handling.</changelog>
<changelog author="dimstar@opensuse.org" date="1369396800">- Update to version 2.0.4:
  + Reenabled HW decoder support.
- Add pkgconfig(gstreamer-basevideo-1.0) BuildRequires: dependency
  for the HW decoder support.</changelog>
<changelog author="zaitor@opensuse.org" date="1374667200">- Update to version 2.0.6:
  + Fix a bug when subclassing ClutterGstPlayer class.
  + Add support of X11 pixmap as video texture when decoding with
    Gstreamer-vaapi.</changelog>
<changelog author="dimstar@opensuse.org" date="1379505600">- Update to version 2.0.8:
  + Fix a crash in ClutterGstPlayer when disposing instances too
    fast.
  + Fix a crash in ClutterGstVideoSink.
  + Fix a crash in ClutterGstVideoSink when running on Wayland with
    X11 backend compiled.</changelog>

</package>
<package pkgid="c1f5e36ad2e3e1aa6241ac7b2cf7a1f9f981f7e33b246abbdc1eaf6e0d62a3fc" name="clutter-lang" arch="noarch">
    <version epoch="0" ver="1.16.0" rel="3.2"/>

<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 1.11.10:
  + Add support for multiple touch points in GestureAction
  + Add a RotateAction
  + Generate crossing events for touch devices
  + Respect ClutterStage.set_motion_events_enabled() for touch
    events
  + Fix a regression in discrete scroll events emission
  + Add progress functions defined in CSS3-Transitions
  + Add ClutterActor::transition-stopped
  + Add ClutterActor.transform
  + Documentation and build fixes
  + Bugs fixed: bgo#678586, bgo#680088, bgo#678587, bgo#679797,
    bgo#680174, bgo#680751, bgo#680752
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1345464000">- Update to version 1.11.12:
  + ClutterBinLayout honours the fixed-position of actors
  + Soft-deprecation of ClutterGeometry
  + Deprecate the ClutterActor::paint signal
  + Ensure we associate input devices to the stage on touch events
  + Allow constraining a DragAction to an area
  + Do not handle events on ClutterText if :selectable is FALSE
  + Add ClutterActor:child-transform
  + Fix height-for-width policy in ClutterBinLayout
  + Add ClutterZoomAction
  + Documentation fixes
  + Bugs fixed: bgo#678427, bgo#679483, bgo#681074, bgo#681168,
    bgo#681584, bgo#681814, bgo#682070, bgo#682265
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 1.11.14:
  + Fixes for the touch sequence handling
  + Add interpolation for matrices
  + Add ClutterPanAction
  + Add more accessors to GestureAction for its subclasses
  + Fix ClutterTableLayout.pack() with negative row/column
  + Fix press coordinates when using ClutterDragAction with a drag
    handle
  + Documentation and annotation fixes
  + Deprecate the ClutterActor::pick signal
  + Bugs fixed: bgo#682795, bgo#682754, bgo#681746, bgo#679990,
    bgo#681648, bgo#683219, bgo#683066, bgo#683090, bgo#683126,
    bgo#682362, bgo#683113, bgo#680255
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 1.11.16:
  + Fixes for gesture-based actions
  + Ensure modified Enter keys do not end up in the Text buffer for
    single-line ClutterText actors.
  + Add touch event support to ClutterClickAction
  + Bugs fixed: bgo#683301, bgo#683431, bgo#683471, bgo#682161,
    bgo#623344, bgo#683869, bgo#683870, bgo#683936, bgo#683937.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 1.12.0:
  + Fix the device tracking for core X11 pointers
  + Respect text direction in BinLayout
  + Bugs fixed: bgo#684214, bgo#684552, bgo#684530, bgo#684509.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 1.12.2:
  + Updates for the Wayland backend.
  + Build environment fixes for Visual Studio.
  + Ensure that the Clutter lock is acquired before releasing it.
  + Bugs fixed: bgo#679439, bgo#685554.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 1.13.4:
  + Fix for the fullscreen support of the ClutterStage on Windows.
  + Documentation fixes.
  + Use XFixes to show and hide the cursor on X11 backends.
  + Allow setting Pango attributes on editable ClutterText actors.
  + Bugs fixed: bgo#690735, bgo#691651, bgo#686477, bgo#690836,
    bgo#690835, bgo#690833, bgo#691114, bgo#690664, bgo#690497.
- Changes from version 1.13.2:
  + Add ClutterTapAction, a gesture recogniser for single touch
    taps.
  + Add ClutterSwipeAction::swipe.
  + Enable XInput 2.x support by default.
  + Documentation fixes.
  + Bugs fixed: bgo#685589, bgo#685028, bgo#685221, bgo#683948,
    bgo#685737, bgo#686776, bgo#689073, bgo#685186, bgo#689258,
    bgo#689061, bgo#689316, bgo#689399, bgo#689496, bgo#690214,
    bgo#673838, bgo#686692, bgo#685982, bgo#688457, bgo#689392.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361448000">- Update to version 1.13.6:
  + Perform the picking in a separate buffer.
  + Add experimental API for changing the draw timing.
  + Always request XInput 2.3 on the X11 backend.
  + Bugs fixed: bgo#692466, bgo#692971, bgo#669122, bgo#693348,
    bgo#692901, bgo#693696, bgo#693767, bgo#694187, bgo#693741,
    bgo#694229, bgo#687652, bgo#694237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 1.13.8:
  + Use ClutterActor:child-transform with ClutterScrollActor.
  + Add progress-based marker API to ClutterTimeline.
  + Allow building Wayland compositor and client support together.
  + Documentation fixes.
  + Bugs fixed: bgo#686225, bgo#692851, bgo#694267, bgo#694319,
    bgo#695119, bgo#695158.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 1.13.10:
  + Fix a typo in the ClutterTimeline::stopped signal declaration
  + Use the XKB groups state when computing key modifiers on X11
  + Fixes for the Visual Studio build
  + Documentation and introspection fixes
  + Add a function to disable accessibility
  + Performance improvements
  + Bugs fixed: bgo#695158, bgo#695260, bgo#695188, bgo#691468,
    bgo#695838, bgo#695870, bgo#695982.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 1.14.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1364472000">- Add build_wayland_backend define and set it to 0, as we do not
  want to build wayland support yet. Pass conditional
  - -enable-wayland-backend to configure.
- Add conditional pkgconfig(wayland-client, wayland-cursor and
  xkbcommon) BuildRequires, needed for wayland backend building.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 1.14.2:
  + Ensure a redraw when making the stage visible under Wayland.
  + Fix build with debug messages enabled.
  + Documentation fixes.
  + Bugs fixed: bgo#696791.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 1.14.4:
  + Fix GestureAction handling of multi-touch gestures.
  + Add a paint callback for Stage updates.
  + Improve scaling behaviour in ZoomAction.
  + Documentation fixes.
  + Bugs fixed: bgo#698668, bgo#698671, bgo#698674, bgo#698783.</changelog>
<changelog author="dimstar@opensuse.org" date="1373457600">- Update to version 1.15.2:
  + Improve state tracking and short circuiting.
  + Wayland backend improvements and updates.
  + Documentation updates.
  + Allow installation of conformance tests.
  + Add ClutterFlowLayout:snap-to-grid.
  + Improve gesture recognizers.
  + Various deprecations.
  + Bugs fixed: bgo#682789, bgo#698669, bgo#698766, bgo#648873,
    bgo#699675, bgo#692706, bgo#701974, bgo#696813, bgo#701208,
    bgo#700980, bgo#702016, bgo#702610, bgo#702941, bgo#702202,
    bgo#703188, bgo#703476, bgo#703566, bgo#697285, bgo#703882,
    rh#975171.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 1.15.90:
  + Update the Wayland backend.
  + Drop support for XInput 1.x.
  + Fix event and device handling when using evdev.
  + Allow using ClutterContent on a ClutterStage.
  + Fixes for the Windows backend.
  + Documentation fixes.
  + Bugs fixed: bgo#703809, bgo#704625, bgo#698836, bgo#705739,
    bgo#705710, bgo#704269, bgo#704457, bgo#699578, bgo#704279,
    bgo#703336, bgo#701356, bgo#703969, bgo#703878, bgo#703608,
    bgo#703877.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 1.15.92:
  + Fix regression in BoxLayout for RTL text direction.
  + Update Visual Studio build files.
  + Bugs fixed: bgo#706450.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 1.15.94:
  + Improve the evdev input backend.
  + Allow scaling windowing surfaces.
  + Bugs fixed: bgo#706652, bgo#706543, bgo#706494, bgo#707377,
    bgo#707808, bgo#707774, bgo#707869, bgo#708079, bgo#708383.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678401">- Update to version 1.15.96:
  + Fix a crasher bug happening on X11.
  + bgo#708439: clutter-xi2: don't access the stage if we don't
    have one.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 1.16.0:
  + Fix a division by zero in the X11 backend.
  + Bugs fixed: bgo#707033.
  + Updated translations.</changelog>

</package>
<package pkgid="85e111835644add8c37df386e94f934f6d8929a8afab84f44567b5a2fb58d245" name="clutter-lang" arch="noarch">
    <version epoch="0" ver="1.16.4" rel="13.1"/>

<changelog author="dimstar@opensuse.org" date="1346760000">- Update to version 1.11.14:
  + Fixes for the touch sequence handling
  + Add interpolation for matrices
  + Add ClutterPanAction
  + Add more accessors to GestureAction for its subclasses
  + Fix ClutterTableLayout.pack() with negative row/column
  + Fix press coordinates when using ClutterDragAction with a drag
    handle
  + Documentation and annotation fixes
  + Deprecate the ClutterActor::pick signal
  + Bugs fixed: bgo#682795, bgo#682754, bgo#681746, bgo#679990,
    bgo#681648, bgo#683219, bgo#683066, bgo#683090, bgo#683126,
    bgo#682362, bgo#683113, bgo#680255
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1347883200">- Update to version 1.11.16:
  + Fixes for gesture-based actions
  + Ensure modified Enter keys do not end up in the Text buffer for
    single-line ClutterText actors.
  + Add touch event support to ClutterClickAction
  + Bugs fixed: bgo#683301, bgo#683431, bgo#683471, bgo#682161,
    bgo#623344, bgo#683869, bgo#683870, bgo#683936, bgo#683937.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 1.12.0:
  + Fix the device tracking for core X11 pointers
  + Respect text direction in BinLayout
  + Bugs fixed: bgo#684214, bgo#684552, bgo#684530, bgo#684509.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1350475200">- Update to version 1.12.2:
  + Updates for the Wayland backend.
  + Build environment fixes for Visual Studio.
  + Ensure that the Clutter lock is acquired before releasing it.
  + Bugs fixed: bgo#679439, bgo#685554.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 1.13.4:
  + Fix for the fullscreen support of the ClutterStage on Windows.
  + Documentation fixes.
  + Use XFixes to show and hide the cursor on X11 backends.
  + Allow setting Pango attributes on editable ClutterText actors.
  + Bugs fixed: bgo#690735, bgo#691651, bgo#686477, bgo#690836,
    bgo#690835, bgo#690833, bgo#691114, bgo#690664, bgo#690497.
- Changes from version 1.13.2:
  + Add ClutterTapAction, a gesture recogniser for single touch
    taps.
  + Add ClutterSwipeAction::swipe.
  + Enable XInput 2.x support by default.
  + Documentation fixes.
  + Bugs fixed: bgo#685589, bgo#685028, bgo#685221, bgo#683948,
    bgo#685737, bgo#686776, bgo#689073, bgo#685186, bgo#689258,
    bgo#689061, bgo#689316, bgo#689399, bgo#689496, bgo#690214,
    bgo#673838, bgo#686692, bgo#685982, bgo#688457, bgo#689392.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1361448000">- Update to version 1.13.6:
  + Perform the picking in a separate buffer.
  + Add experimental API for changing the draw timing.
  + Always request XInput 2.3 on the X11 backend.
  + Bugs fixed: bgo#692466, bgo#692971, bgo#669122, bgo#693348,
    bgo#692901, bgo#693696, bgo#693767, bgo#694187, bgo#693741,
    bgo#694229, bgo#687652, bgo#694237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 1.13.8:
  + Use ClutterActor:child-transform with ClutterScrollActor.
  + Add progress-based marker API to ClutterTimeline.
  + Allow building Wayland compositor and client support together.
  + Documentation fixes.
  + Bugs fixed: bgo#686225, bgo#692851, bgo#694267, bgo#694319,
    bgo#695119, bgo#695158.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1363694400">- Update to version 1.13.10:
  + Fix a typo in the ClutterTimeline::stopped signal declaration
  + Use the XKB groups state when computing key modifiers on X11
  + Fixes for the Visual Studio build
  + Documentation and introspection fixes
  + Add a function to disable accessibility
  + Performance improvements
  + Bugs fixed: bgo#695158, bgo#695260, bgo#695188, bgo#691468,
    bgo#695838, bgo#695870, bgo#695982.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 1.14.0:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1364472000">- Add build_wayland_backend define and set it to 0, as we do not
  want to build wayland support yet. Pass conditional
  - -enable-wayland-backend to configure.
- Add conditional pkgconfig(wayland-client, wayland-cursor and
  xkbcommon) BuildRequires, needed for wayland backend building.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 1.14.2:
  + Ensure a redraw when making the stage visible under Wayland.
  + Fix build with debug messages enabled.
  + Documentation fixes.
  + Bugs fixed: bgo#696791.</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 1.14.4:
  + Fix GestureAction handling of multi-touch gestures.
  + Add a paint callback for Stage updates.
  + Improve scaling behaviour in ZoomAction.
  + Documentation fixes.
  + Bugs fixed: bgo#698668, bgo#698671, bgo#698674, bgo#698783.</changelog>
<changelog author="dimstar@opensuse.org" date="1373457600">- Update to version 1.15.2:
  + Improve state tracking and short circuiting.
  + Wayland backend improvements and updates.
  + Documentation updates.
  + Allow installation of conformance tests.
  + Add ClutterFlowLayout:snap-to-grid.
  + Improve gesture recognizers.
  + Various deprecations.
  + Bugs fixed: bgo#682789, bgo#698669, bgo#698766, bgo#648873,
    bgo#699675, bgo#692706, bgo#701974, bgo#696813, bgo#701208,
    bgo#700980, bgo#702016, bgo#702610, bgo#702941, bgo#702202,
    bgo#703188, bgo#703476, bgo#703566, bgo#697285, bgo#703882,
    rh#975171.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 1.15.90:
  + Update the Wayland backend.
  + Drop support for XInput 1.x.
  + Fix event and device handling when using evdev.
  + Allow using ClutterContent on a ClutterStage.
  + Fixes for the Windows backend.
  + Documentation fixes.
  + Bugs fixed: bgo#703809, bgo#704625, bgo#698836, bgo#705739,
    bgo#705710, bgo#704269, bgo#704457, bgo#699578, bgo#704279,
    bgo#703336, bgo#701356, bgo#703969, bgo#703878, bgo#703608,
    bgo#703877.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1378209600">- Update to version 1.15.92:
  + Fix regression in BoxLayout for RTL text direction.
  + Update Visual Studio build files.
  + Bugs fixed: bgo#706450.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 1.15.94:
  + Improve the evdev input backend.
  + Allow scaling windowing surfaces.
  + Bugs fixed: bgo#706652, bgo#706543, bgo#706494, bgo#707377,
    bgo#707808, bgo#707774, bgo#707869, bgo#708079, bgo#708383.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379678401">- Update to version 1.15.96:
  + Fix a crasher bug happening on X11.
  + bgo#708439: clutter-xi2: don't access the stage if we don't
    have one.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 1.16.0:
  + Fix a division by zero in the X11 backend.
  + Bugs fixed: bgo#707033.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384862400">- Update to version 1.16.2:
  + Allow creating intervals and transitions from ClutterScript
    ClutterInterval now implements ClutterScriptable.
  + X11 backend improvements: Update the device coordinate
    handling; remove the dependency on the XFixes extension.
  + Wayland backend improvements: Implement the
    ClutterStage:cursor-visible property.
  + Apply the correct opacity when painting ClutterImage.
  + Throttle touch update events.
  + Fix preferred size of TableLayout: Take account of the
    visibility of the children when computing the preferred size of
    a ClutterActor using a ClutterTableLayout as its layout
    manager.
  + Documentation fixes.
  + Bugs fixed: bgo#707071, bgo#709762, bgo#709590, bgo#709761,
    bgo#709620, bgo#708922, bgo#709434, bgo#708850.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1390910400">- Update to version 1.16.4 (bnc#860916):
  + Performance improvements, avoid using hardware picking as much
    as possible; do not queue redraws when not needed, and rely on
    clipped redraws more.
  + Accessibility fixes.
  + Bugs fixed: bgo#710227, bgo#719747, bgo#712563, bgo#722220,
    bgo#722188, bgo#719901, bgo#719563, bgo#719367, bgo#719368.</changelog>

</package>
<package pkgid="7af928be59e814c7f9b8cea333964fe0cac40559fb5c3dde028e26dd8ab2cd2e" name="codelite" arch="i586">
    <version epoch="0" ver="5.2" rel="3.4.1"/>

<changelog author="fisiu@opensuse.org" date="1265112000">- upstream update to 2.2.0.3681
  + Introducing the environment variables set - define environment variable set per workspace
  + Subversion plugin - many bug fixes + improvements
  + Incremental search: Now with Replace options!
  + Improved function calltip</changelog>
<changelog author="fisiu@opensuse.org" date="1267617600">- upstream update to 2.3.0.3833
  + Major improvements in the Code Completion
  + SymbolView plugin
  + Simplified search methods
  + Many bugs were fixed</changelog>
<changelog author="fisiu@opensuse.org" date="1271073600">- upstream update to 2.5.2.4031
  + Introducing wxAUI docking system + notebooks
  + Improvements to the debugger
  + code completion enhancements
  + Many UI changes
  + Many bugs were fixed</changelog>
<changelog author="fisiu@opensuse.org" date="1276084800">- upstream update to 2.5.3.4075
  + code completion enhancements
  + many bugs were fixed</changelog>
<changelog author="fisiu@opensuse.org" date="1286971200">- upstream update to 2.7.0.4375:
  + Many bug fixes
  + New look
  + Code completion enhancements ( Macros improvement, More complex templates handling and much more )
  + New refactoring: Rename Local Variable</changelog>
<changelog author="fisiu@opensuse.org" date="1288612800">- upstream update to 2.8.0.4537:
  + Many bug fixes
  + Debugger interface revamp
  + Find In Files improvements:
  - New options: ignore matches founds in comments or string
  - Color matches in comments using the editor's comment color
  + New: 'Find References'</changelog>
<changelog author="fisiu@opensuse.org" date="1294056000">- upstream update to 2.9.0.4684:
  + Many bug fixes
  + Subversion plugin enhancements
  + Improved debugging</changelog>
<changelog author="fisiu@opensuse.org" date="1295870400">- build against wxWidgets-wxcontainer-devel instead wxGTK-devel for
  openSUSE &gt; 11.3</changelog>
<changelog author="fisiu@opensuse.org" date="1333800000">- Update to 3.5.5375:
  + Code completion speed improvements.
  + An improved clang code completion (with libclang).
  + New perspective management.
  + Many bug fixes.
  + Infrastructure improvements.
- Add codelite-date-time-usage-fix.patch.</changelog>
<changelog author="fisiu@opensuse.org" date="1340107200">- Update to 4.0.5589:
  + Enhanced support for svn, works with svn 1.7.
  + Items in debugger tooltip are editable.
  + Support for clang up to 3.2.
  + C++11 completion can be turned ON/OFF.
  + New icon set added.
  + Added CallGraph plugin.</changelog>
<changelog author="svalx@svalx.net" date="1348574400">- Update to 4.1.5770:
  + "Symbol View" is now deprecated infavor of the "Outline" plugin
  + Clang code completion improvements:
  + Codelite's Makefiles are more standard (they are now using the
    standard CXX, CC, AR, CFLAGS and CXXFLAGS variables).
- Add codelite-no-return-fix.patch for fix
  no-return-in-nonvoid-function error
- Build on SLE11-SP2 whith wxGTK 2.8.8
- Add codelite-4.1.5770-disable-autoupdate-by-default.patch.
- Add some fields to desktop file.
- Changes in spec file:
  + Add MIME types for workspace and project;
  + Remove URL path from source0;
  + Use %{__make} macros;
  + Remove duplicate GPL file from %{_datadir};
  + Add some configure options;
  + Add %clean section.
  + Manual strip binaries for SLE11-SP2</changelog>
<changelog author="fisiu@opensuse.org" date="1359720000">- Update to 5.0.6213:
  + Support for GUI RAD wxCrafter: http://wxcrafter.codelite.org
  + New plugin Zoom Navigato
  + New "New Project" dialog
  + Quick code navigation with Shift-Click (configurable)
  + Various updates to code completion
  + More bugs fixed
- Drop codelite-no-return-fix.patch: fixed upstream
- Codelite needs wxWidgets &gt;= 2.9.4</changelog>
<changelog author="fisiu@opensuse.org" date="1365595200">- Update to 5.1:
  + Build with CMake
  + Czech translation
  + New highlight theme "Zmrok-like"
  + Improved git support
  + Code completion enhancements
  + Many bug fixes
- Patch codelite-4.1.5770-disable-autoupdate-by-default.patch was
  updated and renamed to codelite-disable-new-version-check.patch</changelog>
<changelog author="fisiu@opensuse.org" date="1368619200">- Fix missing license's text in About dialog.</changelog>
<changelog author="fisiu@opensuse.org" date="1368705600">- Enable manual stripping for SLE.</changelog>
<changelog author="fisiu@opensuse.org" date="1369656000">- Change license to GPL-3.0+, fix bnc#821637.</changelog>
<changelog author="dvaleev@suse.com" date="1371038400">- Add llvm-clang-devel to buildrequires, so the archs other than
  x86 would find -lclang</changelog>
<changelog author="fisiu@opensuse.org" date="1373976000">- Update to 5.2:
  + Added disassemble window to the debugger
  + Better dark theme visualization
  + Improved tab appearance
  + Debugger pretty printing improvements
  + Various dialogs were re-designed (setters/getters)
  + Improved code completion
  + and much more
- Enable db explorer plugin with mariadb/mysql support.</changelog>
<changelog author="toganm@opensuse.org" date="1378987200">- add -DCMAKE_SKIP_INSTALL_RPATH=ON to cmake options</changelog>
<changelog author="fisiu@opensuse.org" date="1383912000">- Change previous cmake parameter to -DCMAKE_SKIP_RPATH=ON. Fix bnc#848791.</changelog>

</package>
<package pkgid="06eea6e6b7f88eb00febbf597fbe4a1b69183de1633022b6cdde7b2408cd677f" name="codelite" arch="src">
    <version epoch="0" ver="5.2" rel="3.4.1"/>

<changelog author="fisiu@opensuse.org" date="1265112000">- upstream update to 2.2.0.3681
  + Introducing the environment variables set - define environment variable set per workspace
  + Subversion plugin - many bug fixes + improvements
  + Incremental search: Now with Replace options!
  + Improved function calltip</changelog>
<changelog author="fisiu@opensuse.org" date="1267617600">- upstream update to 2.3.0.3833
  + Major improvements in the Code Completion
  + SymbolView plugin
  + Simplified search methods
  + Many bugs were fixed</changelog>
<changelog author="fisiu@opensuse.org" date="1271073600">- upstream update to 2.5.2.4031
  + Introducing wxAUI docking system + notebooks
  + Improvements to the debugger
  + code completion enhancements
  + Many UI changes
  + Many bugs were fixed</changelog>
<changelog author="fisiu@opensuse.org" date="1276084800">- upstream update to 2.5.3.4075
  + code completion enhancements
  + many bugs were fixed</changelog>
<changelog author="fisiu@opensuse.org" date="1286971200">- upstream update to 2.7.0.4375:
  + Many bug fixes
  + New look
  + Code completion enhancements ( Macros improvement, More complex templates handling and much more )
  + New refactoring: Rename Local Variable</changelog>
<changelog author="fisiu@opensuse.org" date="1288612800">- upstream update to 2.8.0.4537:
  + Many bug fixes
  + Debugger interface revamp
  + Find In Files improvements:
  - New options: ignore matches founds in comments or string
  - Color matches in comments using the editor's comment color
  + New: 'Find References'</changelog>
<changelog author="fisiu@opensuse.org" date="1294056000">- upstream update to 2.9.0.4684:
  + Many bug fixes
  + Subversion plugin enhancements
  + Improved debugging</changelog>
<changelog author="fisiu@opensuse.org" date="1295870400">- build against wxWidgets-wxcontainer-devel instead wxGTK-devel for
  openSUSE &gt; 11.3</changelog>
<changelog author="fisiu@opensuse.org" date="1333800000">- Update to 3.5.5375:
  + Code completion speed improvements.
  + An improved clang code completion (with libclang).
  + New perspective management.
  + Many bug fixes.
  + Infrastructure improvements.
- Add codelite-date-time-usage-fix.patch.</changelog>
<changelog author="fisiu@opensuse.org" date="1340107200">- Update to 4.0.5589:
  + Enhanced support for svn, works with svn 1.7.
  + Items in debugger tooltip are editable.
  + Support for clang up to 3.2.
  + C++11 completion can be turned ON/OFF.
  + New icon set added.
  + Added CallGraph plugin.</changelog>
<changelog author="svalx@svalx.net" date="1348574400">- Update to 4.1.5770:
  + "Symbol View" is now deprecated infavor of the "Outline" plugin
  + Clang code completion improvements:
  + Codelite's Makefiles are more standard (they are now using the
    standard CXX, CC, AR, CFLAGS and CXXFLAGS variables).
- Add codelite-no-return-fix.patch for fix
  no-return-in-nonvoid-function error
- Build on SLE11-SP2 whith wxGTK 2.8.8
- Add codelite-4.1.5770-disable-autoupdate-by-default.patch.
- Add some fields to desktop file.
- Changes in spec file:
  + Add MIME types for workspace and project;
  + Remove URL path from source0;
  + Use %{__make} macros;
  + Remove duplicate GPL file from %{_datadir};
  + Add some configure options;
  + Add %clean section.
  + Manual strip binaries for SLE11-SP2</changelog>
<changelog author="fisiu@opensuse.org" date="1359720000">- Update to 5.0.6213:
  + Support for GUI RAD wxCrafter: http://wxcrafter.codelite.org
  + New plugin Zoom Navigato
  + New "New Project" dialog
  + Quick code navigation with Shift-Click (configurable)
  + Various updates to code completion
  + More bugs fixed
- Drop codelite-no-return-fix.patch: fixed upstream
- Codelite needs wxWidgets &gt;= 2.9.4</changelog>
<changelog author="fisiu@opensuse.org" date="1365595200">- Update to 5.1:
  + Build with CMake
  + Czech translation
  + New highlight theme "Zmrok-like"
  + Improved git support
  + Code completion enhancements
  + Many bug fixes
- Patch codelite-4.1.5770-disable-autoupdate-by-default.patch was
  updated and renamed to codelite-disable-new-version-check.patch</changelog>
<changelog author="fisiu@opensuse.org" date="1368619200">- Fix missing license's text in About dialog.</changelog>
<changelog author="fisiu@opensuse.org" date="1368705600">- Enable manual stripping for SLE.</changelog>
<changelog author="fisiu@opensuse.org" date="1369656000">- Change license to GPL-3.0+, fix bnc#821637.</changelog>
<changelog author="dvaleev@suse.com" date="1371038400">- Add llvm-clang-devel to buildrequires, so the archs other than
  x86 would find -lclang</changelog>
<changelog author="fisiu@opensuse.org" date="1373976000">- Update to 5.2:
  + Added disassemble window to the debugger
  + Better dark theme visualization
  + Improved tab appearance
  + Debugger pretty printing improvements
  + Various dialogs were re-designed (setters/getters)
  + Improved code completion
  + and much more
- Enable db explorer plugin with mariadb/mysql support.</changelog>
<changelog author="toganm@opensuse.org" date="1378987200">- add -DCMAKE_SKIP_INSTALL_RPATH=ON to cmake options</changelog>
<changelog author="fisiu@opensuse.org" date="1383912000">- Change previous cmake parameter to -DCMAKE_SKIP_RPATH=ON. Fix bnc#848791.</changelog>

</package>
<package pkgid="55ec8ee14b34805994a6fff0697d8dde97731d2a45226af037ef115534e995e7" name="codelite" arch="x86_64">
    <version epoch="0" ver="5.2" rel="3.4.1"/>

<changelog author="fisiu@opensuse.org" date="1265112000">- upstream update to 2.2.0.3681
  + Introducing the environment variables set - define environment variable set per workspace
  + Subversion plugin - many bug fixes + improvements
  + Incremental search: Now with Replace options!
  + Improved function calltip</changelog>
<changelog author="fisiu@opensuse.org" date="1267617600">- upstream update to 2.3.0.3833
  + Major improvements in the Code Completion
  + SymbolView plugin
  + Simplified search methods
  + Many bugs were fixed</changelog>
<changelog author="fisiu@opensuse.org" date="1271073600">- upstream update to 2.5.2.4031
  + Introducing wxAUI docking system + notebooks
  + Improvements to the debugger
  + code completion enhancements
  + Many UI changes
  + Many bugs were fixed</changelog>
<changelog author="fisiu@opensuse.org" date="1276084800">- upstream update to 2.5.3.4075
  + code completion enhancements
  + many bugs were fixed</changelog>
<changelog author="fisiu@opensuse.org" date="1286971200">- upstream update to 2.7.0.4375:
  + Many bug fixes
  + New look
  + Code completion enhancements ( Macros improvement, More complex templates handling and much more )
  + New refactoring: Rename Local Variable</changelog>
<changelog author="fisiu@opensuse.org" date="1288612800">- upstream update to 2.8.0.4537:
  + Many bug fixes
  + Debugger interface revamp
  + Find In Files improvements:
  - New options: ignore matches founds in comments or string
  - Color matches in comments using the editor's comment color
  + New: 'Find References'</changelog>
<changelog author="fisiu@opensuse.org" date="1294056000">- upstream update to 2.9.0.4684:
  + Many bug fixes
  + Subversion plugin enhancements
  + Improved debugging</changelog>
<changelog author="fisiu@opensuse.org" date="1295870400">- build against wxWidgets-wxcontainer-devel instead wxGTK-devel for
  openSUSE &gt; 11.3</changelog>
<changelog author="fisiu@opensuse.org" date="1333800000">- Update to 3.5.5375:
  + Code completion speed improvements.
  + An improved clang code completion (with libclang).
  + New perspective management.
  + Many bug fixes.
  + Infrastructure improvements.
- Add codelite-date-time-usage-fix.patch.</changelog>
<changelog author="fisiu@opensuse.org" date="1340107200">- Update to 4.0.5589:
  + Enhanced support for svn, works with svn 1.7.
  + Items in debugger tooltip are editable.
  + Support for clang up to 3.2.
  + C++11 completion can be turned ON/OFF.
  + New icon set added.
  + Added CallGraph plugin.</changelog>
<changelog author="svalx@svalx.net" date="1348574400">- Update to 4.1.5770:
  + "Symbol View" is now deprecated infavor of the "Outline" plugin
  + Clang code completion improvements:
  + Codelite's Makefiles are more standard (they are now using the
    standard CXX, CC, AR, CFLAGS and CXXFLAGS variables).
- Add codelite-no-return-fix.patch for fix
  no-return-in-nonvoid-function error
- Build on SLE11-SP2 whith wxGTK 2.8.8
- Add codelite-4.1.5770-disable-autoupdate-by-default.patch.
- Add some fields to desktop file.
- Changes in spec file:
  + Add MIME types for workspace and project;
  + Remove URL path from source0;
  + Use %{__make} macros;
  + Remove duplicate GPL file from %{_datadir};
  + Add some configure options;
  + Add %clean section.
  + Manual strip binaries for SLE11-SP2</changelog>
<changelog author="fisiu@opensuse.org" date="1359720000">- Update to 5.0.6213:
  + Support for GUI RAD wxCrafter: http://wxcrafter.codelite.org
  + New plugin Zoom Navigato
  + New "New Project" dialog
  + Quick code navigation with Shift-Click (configurable)
  + Various updates to code completion
  + More bugs fixed
- Drop codelite-no-return-fix.patch: fixed upstream
- Codelite needs wxWidgets &gt;= 2.9.4</changelog>
<changelog author="fisiu@opensuse.org" date="1365595200">- Update to 5.1:
  + Build with CMake
  + Czech translation
  + New highlight theme "Zmrok-like"
  + Improved git support
  + Code completion enhancements
  + Many bug fixes
- Patch codelite-4.1.5770-disable-autoupdate-by-default.patch was
  updated and renamed to codelite-disable-new-version-check.patch</changelog>
<changelog author="fisiu@opensuse.org" date="1368619200">- Fix missing license's text in About dialog.</changelog>
<changelog author="fisiu@opensuse.org" date="1368705600">- Enable manual stripping for SLE.</changelog>
<changelog author="fisiu@opensuse.org" date="1369656000">- Change license to GPL-3.0+, fix bnc#821637.</changelog>
<changelog author="dvaleev@suse.com" date="1371038400">- Add llvm-clang-devel to buildrequires, so the archs other than
  x86 would find -lclang</changelog>
<changelog author="fisiu@opensuse.org" date="1373976000">- Update to 5.2:
  + Added disassemble window to the debugger
  + Better dark theme visualization
  + Improved tab appearance
  + Debugger pretty printing improvements
  + Various dialogs were re-designed (setters/getters)
  + Improved code completion
  + and much more
- Enable db explorer plugin with mariadb/mysql support.</changelog>
<changelog author="toganm@opensuse.org" date="1378987200">- add -DCMAKE_SKIP_INSTALL_RPATH=ON to cmake options</changelog>
<changelog author="fisiu@opensuse.org" date="1383912000">- Change previous cmake parameter to -DCMAKE_SKIP_RPATH=ON. Fix bnc#848791.</changelog>

</package>
<package pkgid="9f8fa30fd5302e124585216c5bddec181c59ae6e212ec7dbf986647ec78835c6" name="colord" arch="i586">
    <version epoch="0" ver="1.1.2" rel="5.2"/>

<changelog author="dimstar@opensuse.org" date="1351684800">- Update to version 0.1.24:
  + New Features:
  - Add a extract-vcgt subcommand to cd-fix-profile.
  - Add a general plugin interface for adding and removing
    devices.
  - Add defines for the 'ColorHug Spectro' hardware.
  - Add a 'seat' property to each device.
  - Add FindProfileByProperty() to the main interface.
  - Allow the user to specify a custom udev rules directory.
  + Bugfixes:
  - Append usernames to dbus object paths before sanitising the
    object path.
  - colorhug:
    . Add support for firmware &gt;= 1.2.0 by accepting a full HID
    buffer.
    . Update the private files to the latest libcolorhug code.
  - Fix a critical warning when user tries to dump a non-icc
    file.
  - Fix automatic dep on libusb and vala.
  - Fix a warning in the daemon if a device property is NULL at
    setup.
  - Initialise global connection variable earlier.
  - More paranoia in construction of object paths.
  - Never use Werror by default in configure.
  - Remove libsane support and rely only on udev for scanner
    device information.
  - Set FILE_checksum on discovered system profiles.
  - Set the seat for devices created in the session and from
    udev.
- Drop sane-backends-devel BuildRequires: no longer needed.
- Add pkgconfig(libsystemd-login) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1354190400">- Update to version 0.1.25:
  + New Features:
  - Add a create-standard-space sub-command to cd-create-profile.
  - Add a FAQ entry describing application support of color
    management.
  - Add a 'make coverity' helper to scan the project for errors.
  - Add a profile metadata key of 'License'.
  - Add a profile warning if any of the primaries are outside of
    ROMM RGB.
  - Add a set-version command to the cd-fix-profile command line
    tool.
  - Add a warning if the profile calibration data is
    non-monotonic.
  - Add a warning if the profile copyright is missing.
  - Add a warning if the profile description is missing.
  - Add a warning if the profile gray axis is invalid.
  - Move the named color examples to shared-color-profiles.
  - Print if the profile is system-wide when doing 'colormgr
    get-profiles'.
  - Show the primaries when dumping the profile using
    cd-fix-profile.
  - Use syslog to be able to debug what the daemon is doing
    without restarting it.
  + Bugfixes:
  - Check the return value of mbstowcs before using the buffer.
  - Convert cd-create-profile to using sub-commands to make it
    more modular.
  - Create linear vcgt tables when using create-x11-gamma to
    match the xserver behaviour.
  - Create version 2.2 ICC files when creating named color
    profiles.
  - Do not ever manually set a ICC profile version when creating
    profiles.
  - Do not try to connect to colord in cd-fix-profile until
    actually needed.
  - Don't optimize the profile check transforms to speed up
    daemon startup.
  - Don't set the StandardSpaces override, the generated profiles
    have the correct metadata now.
  - Fix a crash in the example code if the device has a
    non-standard qualifier format.
  - Fix GetStandardSpace so it can actually work.
  - huey: Ensure we return an error if we ran out of retries.
  - If the copyright string is not set when creating a profile
    use a good default.
  - Improve the formatting of 'get-profiles' and 'get-devices'.
  - libcolord: Fix up a warning if GetStandardSpace fails to find
    a profile.
  - Return an error if the client does not set a profile or
    device id.
  - Return an error if the client uses an unsupported scope
    value.
  - Set a default copyright string when creating profiles without
    using --copyright.</changelog>
<changelog author="dimstar@opensuse.org" date="1356004800">- Update to version 0.1.26:
  + New Features:
  - Add 4 more defined sensor types.
  - Add a create-temperature subcommand to colormgr to test VCGT
    generation.
  - Add a 'SensorId' property to the sensor interface.
  - Add a session helper that can be used to calibrate the screen
  - Add cd_it8_save_to_data() to save the data to some allocated
    memory.
  - Add FindSensorById() to the main interface.
  - Add some defines for the Spyder4 display colorimeter.
  - Add some device figures from gnome-color-manager used in KDE
    and GNOME.
  - Add some example calibration ti1 files from
    gnome-color-manager.
  - Add support for reading and writing .cal files to CdIt8.
  - Add the ability to 'disable' a device so that color
    management can be turned off.
  - Export cd_color_rgb_interpolate() as it's useful to
    applications.
  - Recognise the internal sensor on W700 laptops and set a
    property for the calibration tools.
  - Use spotread when there is no native sensor driver.
  + Bugfixes:
  - Add some missing entries in cd_sensor_kind_from_string.
  - Create ICCv2 profiles when using cd-create-profile.
  - Do 3 reads in quick succession for colormgr
    get-sensor-reading.
  - Fix a crash when saving a ti3 file where white is not the
    last sample.
  - Fix a critical warning when writing using cd_it8_add_data()
    with no XYZ value.
  - If ti1 values are &gt; 1.0 then assume they are normalized.
  - Return class specific error codes if authentication fails.
  - Scale the ti3 RGB values to 100 when writing with
    NORMALIZED_TO_Y_100.
  - Set DEVICE_CLASS when saving a cal IT8 file.
  - Support doing sensor user actions when using 'colormgr
    get-sensor-reading'.
  - Update the device scope if it changes at runtime.
  - Use enumerated error values in the client library.</changelog>
<changelog author="meissner@suse.com" date="1357905600">- allow /usr/share/mime/** readable in AA profile (bnc#797907)</changelog>
<changelog author="meissner@suse.com" date="1361188800">- Additions to the AA profile (bnc#803281)
  + allow /proc/*/cgroup r (unkown why).
  + allow reading all /sys/class/video4linux/** r (video4linux
    devices).
  + allow user local ICC files:
  - @{HOME}/.local/share/icc/*.icc r
  - @{HOME}/.local/share/color/*.icc r</changelog>
<changelog author="abergmann@novell.com" date="1361188801">- Adjusted last editions to AppAmor profile (bnc#803281):
  + Replaced
  - @{HOME}/.local/share/color/*.icc r
    with
  - @{HOME}/.local/share/color/icc/*.icc r
  + Added
  - allow reading all /sys/class/video4linux/ r</changelog>
<changelog author="dimstar@opensuse.org" date="1361966400">- Update to version 0.1.30:
  + New features:
  - Load the instrospection to the colord binary as a GResource
  - Save the common ICC profiles as GResources in the colord
    binary to reduce I/O
  - Support setting the blue LED in the ColorHug Spectro
  + Bugfixes:
  - Append -private to the driver libraries as they have no
    headers installed
  - cd_sensor_get_caps() returns a bitfield, so make it
    explicitly 64 bits wide
  - Do not expect a system proxy when checking if the daemon
    exists
  - Do not remove the database files when upgrading the package
  - Do not show duplicate profiles when icc-profiles-openicc is
    installed
  - Fix Colord-1.0.gir build with --no-add-needed
  - Fix linking of ch-self-test
  - Fix symbol-prefix passed to g-ir-scanner
  - Fix up the model name for the ColorMunki
  - Skip more self tests if the daemon could not be started
- Changes from version 0.1.29:
  + New Features:
  - Add an interface for plugins to decline to load
  - Add a --verbose and --version argument to colormgr
  - Add DTP94 native sensor support
  - Add the 'Plasma' sensor capability
  - Allow profiles to have a 'score' which affects the standard
    space
  - Detect profiles from adobe.com and color.org and add metadata
  - Install libdtp94 for access to the DTP94 colorimeter
  - Install libhuey for access to the Huey colorimeter
  - Install libmunki for access to the ColorMunki Photo hardware
  - Move libcolorhug from colorhug-client for access to the
    ColorHug colorimeter
  - Reintroduce SANE support
  - session-helper:
    . Return extra data from the calibration in the Finished
    signal
    . Return the correct sensor images when calibrating
  + Bugfixes:
  - Allow the user to specify the device type when using
    'colormgr create-device'
  - Change the Adobe RGB description to be 'Compatible with Adobe
    RGB (1998)'
  - Do not auto-add profiles due to device-id metadata if they
    have been manually removed
  - Do not include the size of the NULL byte when writing data
    from CCMX files
  - Do not log a critical warning if the daemon is replaced at
    runtime
  - Do not make the libsystemd-login dep automatic
  - Do not return an error if a user manually adds a profile that
    has already been automatically added
  - Don't emit a warning if the profile warnings or owner changes
  - Ensure profiles with MAPPING_device_id get auto-added to
    devices
  - Fix timezone problem in colord_client_random_func test
  - Include cd-buffer.c in libcolordprivate for future use
  - Make libcolord/device_async test pass everywhere
  - Return an error if a client tries to create a device of an
    unknown type
  - Set the additional 'OwnerCmdline' metadata on each device
  - Show all the possible capabilities on one line when doing
    'colormgr get-sensors'
  - Specify the sensor caps in the code for native sensors
  - Split the libcolord.so into libcolordprivate.so so it can be
    used without a GObject dep
  - Write the CdIt8 'CREATED' date string in all files
- Changes from version 0.1.28:
  + New Features:
  - Add some default GSetting schema values for the calibration
    helper
  - Add a Sensor.Metadata property
  - - Add the sensor images as metadata on the D-Bus interface
  + Bugfixes:
  - Quit the session helper if the device or sensor was not found
  - Never build more than one print profile at a time
  - Don't use the deprecated INCLUDES in Makefile.am
- Changes from version 0.1.27:
  + New Features:
  - Add ColorMunki Smile defines and calibration attach image
  - Add Spyder4 calibration attach image
  - Add the ability to generate Rec. 709 gamma curves
  - Export a Device.Embedded property that is set for fixed
    hardware
  - Import shared-color-profiles into colord
  - Install a header with all the session helper defines
  - Support L* gamma encoding in cd-create-profile
  - Write the profile quality into to the .icc file as metadata
  + Bugfixes:
  - Allow passing no value as properties to CreateDevice
  - Do not return zero profiles when the device is being
    calibrated or disabled
  - Ensure the color types are methods in GObject Introspection
    rather than functions
  - Fix build when srcdir != builddir
  - Fix floating point number parsing in non C locale
    environments
  - Remove 'Monitor' suffix from display devices model string.
- Add colord-privlib.patch: Move private libraries out of
  %{_libdir}.
- Add gnome-common BuildRequires and call to autogen.sh, as above
  patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.1.31:
  + New Features:
  - Add more sensor capabilities to support the latest ArgyllCMS
    release.
  - Calculate the display calibration based on the Lab and target
    display gamma.
  - Emulate a perfect sRGB screen when returning XYZ values from
    the dummy sensor.
  - Interpolate the gamma data to the VCGT size using Akima.
  - libcolord: Add Akima and Linear 2D interpolation classes.
  - libcolord: Switch CdColor to using the GSlice allocator.
  - libcolorhug: Add commands to get the ADC Vref+ and Vref-.
  - libcolorhug: Add extensions to the take_reading_x() commands
    to set the sensor type.
  - libcolorhug: Add the ability to get and set the CCD
    calibration values.
  - libcolorhug: Add the ability to get a spectral reading from
    the device.
  - Run the self test programs in 'make check' under valgrind.
  + Bugfixes:
  - Add a warning if compiling with --with-daemon-user=root.
  - Add some more display vendor names to the display fixup
    table.
  - Deprecate both the cd_profile_set_$foo_sync() functions.
  - Do not show a critical warning if an unmatched sensor is
    connected.
  - Fix build on OpenBSD.
  - Fix compile with --disable-gusb.
  - Fix the argyll sensor driver when using the ColorMunki Smile.
  - Fix the gamut warning to check primaries wider than CIERGB
    and ProPhoto.
  - Fix unusual crash in cd_main_get_cmdline_for_pid.
  - Guess the option type when using 'colormgr
    sensor-set-options'.
  - libcolord: ArgyllCMS uses 'YES' for IT8 options.
  - libcolord: Fix two small memory leaks when getting details
    about a sensor.
  - Move the private sensor libraries out of the pure lib space.
  - Rename the colormgr 'profile-set-$foo' commands to
    'profile-set-property'.
  - Return an error if the client tries to change the profile
    filename after creation.
  - Set the target gamma when using the session-helper.
  - Setup the devices for another embedded Huey colorimeter and
    the original Spyder.
- Drop colord-privlib.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh,
  as we don't carry any patch touching the build system anymore.
- Add post/postun scriptlets to libcolorhug1 subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1364558400">- Update to version 0.1.32:
  + New Features:
  - Add a new tool 'cd-iccdump' that can dump V4 and V2 profiles.
  - Add translated descriptions to the ICC profiles.
  - libcolord:
    . Add an object which is a named colord.
    . Add an object to factor out the profile load and save.
    . Add a really simple XML DOM extractor.
    . Add some helpers for dealing with CdColorLab objects.
  - Translate some of the profile source XML file descriptions
    and licences.
  - Use an XML source format for the generated profiles.
  + Bugfixes:
  - libcolord: Correctly copy CdColorYxy-&gt;Y when used as a
    property.
  - lib: Fix the licence boilerplate in the sensor libs.
  - Set the default profile locale to be en_US, not EN_us.
  - Use gtkdocize --copy in autogen.sh</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 0.1.33:
  + New Features:
  - Add some profile descriptions for the CMYK profiles.
  - Add the FOGRA45L and FOGRA47L CMYK profiles.
  - Include the eciRGBv1 gamma 1.8 profile.
  - libcolord: Add cd_it8_set_enable_created.
  - libcolord: Add helpers for int and double values from the
    DOM.
  + Bugfixes:
  - Add ifdef for cmsGetToneCurveEstimatedTableEntries.
  - Build the print profiles from XML descriptions.
  - Check the generated CCMX matrix for invalid data.
  - Do not print a warning if the DBus property does not exist.
  - Ensure mbstowcs() has an LC_CTYPE of 'en_US.UTF-8'.
  - libcolord: Always write C-locale floating point values in IT8
    files.
  - libcolord: Initialize the value of the CCMX matrix.
  - libcolord: Return the correct result from
    cd_mat33_matrix_multiply.
  - Never promote localized v2 ICC profiles to v4.
  - Rename ISOnewspaper26 to IFRA26S_2004_newsprint.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 0.1.34:
  + New Features:
  - Add a ICC transform object for simple RGB conversions.
  - Add an example for using CdIcc in applications.
  - Add an internal program to scan a directory of ICC profiles
    for warnings.
  - Add a warning for RGB profiles with unlikely whitepoint
    values.
  - Add a webservice URI example that can upload a profile to the
    Internet.
  - Add device metadata OutputEdidMd5 so we can build a UCMM shim
    layer.
  - Add functionality to return the response of the CdIcc profile
    object.
  - Add getting and setting the VCGT table in CdIcc.
  - Add new systemd macros to the example spec file.
  - Add Qt DBus annotations.
  + Bugfixes:
  - Allow clients to call org.freedesktop.DBus.Peer.
  - Correct a lot more company names when creating devices.
  - Do not automatically add EDID profiles with warnings to
    devices.
  - Fix building RGB working space profiles when using
    OpenBSD/sparc64.
  - Fix standard-space property name into a compilable name.
  - Increase the delay between patches in the session-helper.
  - Install the bash completion support into /usr.
- Add pkgconfig(bash-completion) BuildRequires: allow configure to
  detect where to install the bash completion.</changelog>
<changelog author="dimstar@opensuse.org" date="1368446400">- Update to version 1.0.0:
  + New Features:
  - Add a config option for monitors with identical EDID values.
  - Add API to control the use of BPC in CdTransform.
  - Add a simple BGRA32 pixel format.
  - Add a simple CMYK32 pixel format.
  - Add a simple colord.conf manpage.
  - Allow a different input and output format in CdTransform.
  - Show all the translations when dumping an ICC profile.
  + Bugfixes:
  - Add some missing G_BEGIN_DECLS/G_END_DECLS in header files.
  - Always return an error if cd_main_device_add() failed.
  - Build all installed binaries with PIE.
  - Build the colord binary with full RELRO.
  - Do not show a warning when using 'colormgr
    device-get-profile-for-qualifier'.
  - Ensure the parent directories exist when calling
    cd_icc_save_file.
  - Fix crash in cd-iccdump by working around an lcms2 bug.
  - Fix using the ColorHug color sensor on ARM hardware.
  - Fix using the Huey color sensor on ARM hardware.
  - Set the STANDARD_space metadata for the print profiles.
  - Use G_GNUC_WARN_UNUSED_RESULT in public and private headers.
  - Use the same pixel format names as Cairo and the same
    in-memory value as lcms2.</changelog>
<changelog author="dimstar@opensuse.org" date="1369224000">- Move %glib2_gsettings_schema_post from %pre to %post: if we
  execute this prior to installation, the schema will not be
  registered, as the files are not yet in place.</changelog>
<changelog author="zaitor@opensuse.org" date="1371384000">- Update to version 1.0.1:
  + Add 0.1.34 to 1.0.0 deprecated methods to preserve ABI.
  + Do not unconditionally enable BPC on the color transform.
  + Fix profile created time for non-UTC timezones.
  + Record the gamma table in the session helper error message.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 1.0.2:
  + New Features:
  - Add cd_icc_save_data() so that we can easily set
    _ICC_PROFILE.
  - Add CdIccStore to monitor directories of ICC profiles.
  - Add SystemVendor and SystemModel properties to the main
    interface.
  + Bugfixes:
  - Allow to specify a non-qualified path when using
    FindProfileByFilename.
  - Allow using the key 'Filename' when using
    FindProfileByProperty.
  - Always return the error if any sync method failed.
  - Fix GObject introspection when getting lists.
  - Fix GObject introspection when getting metadata.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 1.1.1:
  + Notes:
  - This release bumps the soname of libcolord as long deprecated
    methods have finally been removed.
  - This unstable branch is full of new features and experimental
    code.
  - The colord.conf file has been removed and features are now
    autodetected at runtime where possible or specified in
    configure.
  + New Features:
  - Add a shim libcolordcompat library with some helpers for
    ArgyllCMS.
  - Add SystemVendor and SystemModel string properties to the
    main interface.
  - Add the sub-command import-profile to colormgr.
  - libcolord:
    . Add cd_icc_save_data() so that we can set _ICC_PROFILE.
    . Add cd_icc_save_default() to save a profile to the default
    location.
    . Add functionality to set and get the profile
    characterization data.
    . Add methods to create a profile using CdClient with a CdIcc
    object.
  - List the required parameters in the 'colormgr --help' output.
  - Remove the AlwaysUseXrandrName config option and auto-detect
    it at runtime.
  - Show the viewing conditions when dumping the ICC profile.
  + Bugs fixed:
  - Add a quirk for ThinkPads so that we show 'ThinkPad T510'
    rather than '4384BR2'.
  - Add optional installed tests.
  - Allow colormgr to take an object path or an ID as input.
  - Allow the user to specify a non-qualified path when using
    FindProfileByFilename.</changelog>
<changelog author="fcrozat@suse.com" date="1375272000">- Add colord-udev-hwdb.patch: call udev hwdb to fill appropriately
  usb device informations (backport from upstream GIT).</changelog>
<changelog author="zaitor@opensuse.org" date="1379073600">- Update to version 1.1.2:
  + New Features:
  - Add a 'dump' colormgr command to aid debugging.
  - libcolord: Add ability to create a CdIcc object from an EDID
    blob.
  - libcolord: Add cd_icc_create_default() to use the default
    sRGB profile.
  - libcolord: Export cd_icc_utils_get_coverage() for comparing
    two profiles.
  - Set 'GAMUT_coverage(srgb)' when generating standard space
    profiles.
  + Bugs fixed:
  - Allow profiles to be added or removed when the device is not
    enabled.
  - Always return soft-add calibration profiles before soft-add
    EDID profiles.
  - Do not add fake metadata to avoid creating an empty
    dictionary.
  - Do not mix up device paths and device IDs in the
    documentation.
  - Fix an error when building the print profiles.
  - Fix creation of the dummy sensor device.
  - Fix the AdobeRGB and WideGamutRGB gamma values.
  - Fix transposed bits for EDID red y.
  - Fix up various vendor quirks.
  - Fix warning when any test profile has an EDID source and no
    ICC file.
  - libcolord: Always calculate the fallback checksum when using
    CdIccStore.
  - libcolord: Do not assert on finalize if connecting to the
    profile failed.
  - Migrate from usb_id and usb_db to udev builtins usb_id and
    hwdb.
  - Show a warning for incorrect or extra command line arguments.
  - Use %ghost in the example spec file to avoid removing
    databases on upgrades.
  - Use the exact D50 whitepoint values.
- Drop colord-udev-hwdb.patch, fixed upstream.</changelog>
<changelog author="opensuse@cboltz.de" date="1382011200">- Update apparmor profile (bnc#846301).</changelog>
<changelog author="opensuse@cboltz.de" date="1382529600">- Another update for the apparmor profile (bnc#846301#c9).</changelog>

</package>
<package pkgid="5bb2ebdf94fa0cb27492ee16c7f317a5bab66fbdddb42cf13884e47b240c8652" name="colord" arch="src">
    <version epoch="0" ver="1.1.2" rel="5.2"/>

<changelog author="dimstar@opensuse.org" date="1351684800">- Update to version 0.1.24:
  + New Features:
  - Add a extract-vcgt subcommand to cd-fix-profile.
  - Add a general plugin interface for adding and removing
    devices.
  - Add defines for the 'ColorHug Spectro' hardware.
  - Add a 'seat' property to each device.
  - Add FindProfileByProperty() to the main interface.
  - Allow the user to specify a custom udev rules directory.
  + Bugfixes:
  - Append usernames to dbus object paths before sanitising the
    object path.
  - colorhug:
    . Add support for firmware &gt;= 1.2.0 by accepting a full HID
    buffer.
    . Update the private files to the latest libcolorhug code.
  - Fix a critical warning when user tries to dump a non-icc
    file.
  - Fix automatic dep on libusb and vala.
  - Fix a warning in the daemon if a device property is NULL at
    setup.
  - Initialise global connection variable earlier.
  - More paranoia in construction of object paths.
  - Never use Werror by default in configure.
  - Remove libsane support and rely only on udev for scanner
    device information.
  - Set FILE_checksum on discovered system profiles.
  - Set the seat for devices created in the session and from
    udev.
- Drop sane-backends-devel BuildRequires: no longer needed.
- Add pkgconfig(libsystemd-login) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1354190400">- Update to version 0.1.25:
  + New Features:
  - Add a create-standard-space sub-command to cd-create-profile.
  - Add a FAQ entry describing application support of color
    management.
  - Add a 'make coverity' helper to scan the project for errors.
  - Add a profile metadata key of 'License'.
  - Add a profile warning if any of the primaries are outside of
    ROMM RGB.
  - Add a set-version command to the cd-fix-profile command line
    tool.
  - Add a warning if the profile calibration data is
    non-monotonic.
  - Add a warning if the profile copyright is missing.
  - Add a warning if the profile description is missing.
  - Add a warning if the profile gray axis is invalid.
  - Move the named color examples to shared-color-profiles.
  - Print if the profile is system-wide when doing 'colormgr
    get-profiles'.
  - Show the primaries when dumping the profile using
    cd-fix-profile.
  - Use syslog to be able to debug what the daemon is doing
    without restarting it.
  + Bugfixes:
  - Check the return value of mbstowcs before using the buffer.
  - Convert cd-create-profile to using sub-commands to make it
    more modular.
  - Create linear vcgt tables when using create-x11-gamma to
    match the xserver behaviour.
  - Create version 2.2 ICC files when creating named color
    profiles.
  - Do not ever manually set a ICC profile version when creating
    profiles.
  - Do not try to connect to colord in cd-fix-profile until
    actually needed.
  - Don't optimize the profile check transforms to speed up
    daemon startup.
  - Don't set the StandardSpaces override, the generated profiles
    have the correct metadata now.
  - Fix a crash in the example code if the device has a
    non-standard qualifier format.
  - Fix GetStandardSpace so it can actually work.
  - huey: Ensure we return an error if we ran out of retries.
  - If the copyright string is not set when creating a profile
    use a good default.
  - Improve the formatting of 'get-profiles' and 'get-devices'.
  - libcolord: Fix up a warning if GetStandardSpace fails to find
    a profile.
  - Return an error if the client does not set a profile or
    device id.
  - Return an error if the client uses an unsupported scope
    value.
  - Set a default copyright string when creating profiles without
    using --copyright.</changelog>
<changelog author="dimstar@opensuse.org" date="1356004800">- Update to version 0.1.26:
  + New Features:
  - Add 4 more defined sensor types.
  - Add a create-temperature subcommand to colormgr to test VCGT
    generation.
  - Add a 'SensorId' property to the sensor interface.
  - Add a session helper that can be used to calibrate the screen
  - Add cd_it8_save_to_data() to save the data to some allocated
    memory.
  - Add FindSensorById() to the main interface.
  - Add some defines for the Spyder4 display colorimeter.
  - Add some device figures from gnome-color-manager used in KDE
    and GNOME.
  - Add some example calibration ti1 files from
    gnome-color-manager.
  - Add support for reading and writing .cal files to CdIt8.
  - Add the ability to 'disable' a device so that color
    management can be turned off.
  - Export cd_color_rgb_interpolate() as it's useful to
    applications.
  - Recognise the internal sensor on W700 laptops and set a
    property for the calibration tools.
  - Use spotread when there is no native sensor driver.
  + Bugfixes:
  - Add some missing entries in cd_sensor_kind_from_string.
  - Create ICCv2 profiles when using cd-create-profile.
  - Do 3 reads in quick succession for colormgr
    get-sensor-reading.
  - Fix a crash when saving a ti3 file where white is not the
    last sample.
  - Fix a critical warning when writing using cd_it8_add_data()
    with no XYZ value.
  - If ti1 values are &gt; 1.0 then assume they are normalized.
  - Return class specific error codes if authentication fails.
  - Scale the ti3 RGB values to 100 when writing with
    NORMALIZED_TO_Y_100.
  - Set DEVICE_CLASS when saving a cal IT8 file.
  - Support doing sensor user actions when using 'colormgr
    get-sensor-reading'.
  - Update the device scope if it changes at runtime.
  - Use enumerated error values in the client library.</changelog>
<changelog author="meissner@suse.com" date="1357905600">- allow /usr/share/mime/** readable in AA profile (bnc#797907)</changelog>
<changelog author="meissner@suse.com" date="1361188800">- Additions to the AA profile (bnc#803281)
  + allow /proc/*/cgroup r (unkown why).
  + allow reading all /sys/class/video4linux/** r (video4linux
    devices).
  + allow user local ICC files:
  - @{HOME}/.local/share/icc/*.icc r
  - @{HOME}/.local/share/color/*.icc r</changelog>
<changelog author="abergmann@novell.com" date="1361188801">- Adjusted last editions to AppAmor profile (bnc#803281):
  + Replaced
  - @{HOME}/.local/share/color/*.icc r
    with
  - @{HOME}/.local/share/color/icc/*.icc r
  + Added
  - allow reading all /sys/class/video4linux/ r</changelog>
<changelog author="dimstar@opensuse.org" date="1361966400">- Update to version 0.1.30:
  + New features:
  - Load the instrospection to the colord binary as a GResource
  - Save the common ICC profiles as GResources in the colord
    binary to reduce I/O
  - Support setting the blue LED in the ColorHug Spectro
  + Bugfixes:
  - Append -private to the driver libraries as they have no
    headers installed
  - cd_sensor_get_caps() returns a bitfield, so make it
    explicitly 64 bits wide
  - Do not expect a system proxy when checking if the daemon
    exists
  - Do not remove the database files when upgrading the package
  - Do not show duplicate profiles when icc-profiles-openicc is
    installed
  - Fix Colord-1.0.gir build with --no-add-needed
  - Fix linking of ch-self-test
  - Fix symbol-prefix passed to g-ir-scanner
  - Fix up the model name for the ColorMunki
  - Skip more self tests if the daemon could not be started
- Changes from version 0.1.29:
  + New Features:
  - Add an interface for plugins to decline to load
  - Add a --verbose and --version argument to colormgr
  - Add DTP94 native sensor support
  - Add the 'Plasma' sensor capability
  - Allow profiles to have a 'score' which affects the standard
    space
  - Detect profiles from adobe.com and color.org and add metadata
  - Install libdtp94 for access to the DTP94 colorimeter
  - Install libhuey for access to the Huey colorimeter
  - Install libmunki for access to the ColorMunki Photo hardware
  - Move libcolorhug from colorhug-client for access to the
    ColorHug colorimeter
  - Reintroduce SANE support
  - session-helper:
    . Return extra data from the calibration in the Finished
    signal
    . Return the correct sensor images when calibrating
  + Bugfixes:
  - Allow the user to specify the device type when using
    'colormgr create-device'
  - Change the Adobe RGB description to be 'Compatible with Adobe
    RGB (1998)'
  - Do not auto-add profiles due to device-id metadata if they
    have been manually removed
  - Do not include the size of the NULL byte when writing data
    from CCMX files
  - Do not log a critical warning if the daemon is replaced at
    runtime
  - Do not make the libsystemd-login dep automatic
  - Do not return an error if a user manually adds a profile that
    has already been automatically added
  - Don't emit a warning if the profile warnings or owner changes
  - Ensure profiles with MAPPING_device_id get auto-added to
    devices
  - Fix timezone problem in colord_client_random_func test
  - Include cd-buffer.c in libcolordprivate for future use
  - Make libcolord/device_async test pass everywhere
  - Return an error if a client tries to create a device of an
    unknown type
  - Set the additional 'OwnerCmdline' metadata on each device
  - Show all the possible capabilities on one line when doing
    'colormgr get-sensors'
  - Specify the sensor caps in the code for native sensors
  - Split the libcolord.so into libcolordprivate.so so it can be
    used without a GObject dep
  - Write the CdIt8 'CREATED' date string in all files
- Changes from version 0.1.28:
  + New Features:
  - Add some default GSetting schema values for the calibration
    helper
  - Add a Sensor.Metadata property
  - - Add the sensor images as metadata on the D-Bus interface
  + Bugfixes:
  - Quit the session helper if the device or sensor was not found
  - Never build more than one print profile at a time
  - Don't use the deprecated INCLUDES in Makefile.am
- Changes from version 0.1.27:
  + New Features:
  - Add ColorMunki Smile defines and calibration attach image
  - Add Spyder4 calibration attach image
  - Add the ability to generate Rec. 709 gamma curves
  - Export a Device.Embedded property that is set for fixed
    hardware
  - Import shared-color-profiles into colord
  - Install a header with all the session helper defines
  - Support L* gamma encoding in cd-create-profile
  - Write the profile quality into to the .icc file as metadata
  + Bugfixes:
  - Allow passing no value as properties to CreateDevice
  - Do not return zero profiles when the device is being
    calibrated or disabled
  - Ensure the color types are methods in GObject Introspection
    rather than functions
  - Fix build when srcdir != builddir
  - Fix floating point number parsing in non C locale
    environments
  - Remove 'Monitor' suffix from display devices model string.
- Add colord-privlib.patch: Move private libraries out of
  %{_libdir}.
- Add gnome-common BuildRequires and call to autogen.sh, as above
  patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.1.31:
  + New Features:
  - Add more sensor capabilities to support the latest ArgyllCMS
    release.
  - Calculate the display calibration based on the Lab and target
    display gamma.
  - Emulate a perfect sRGB screen when returning XYZ values from
    the dummy sensor.
  - Interpolate the gamma data to the VCGT size using Akima.
  - libcolord: Add Akima and Linear 2D interpolation classes.
  - libcolord: Switch CdColor to using the GSlice allocator.
  - libcolorhug: Add commands to get the ADC Vref+ and Vref-.
  - libcolorhug: Add extensions to the take_reading_x() commands
    to set the sensor type.
  - libcolorhug: Add the ability to get and set the CCD
    calibration values.
  - libcolorhug: Add the ability to get a spectral reading from
    the device.
  - Run the self test programs in 'make check' under valgrind.
  + Bugfixes:
  - Add a warning if compiling with --with-daemon-user=root.
  - Add some more display vendor names to the display fixup
    table.
  - Deprecate both the cd_profile_set_$foo_sync() functions.
  - Do not show a critical warning if an unmatched sensor is
    connected.
  - Fix build on OpenBSD.
  - Fix compile with --disable-gusb.
  - Fix the argyll sensor driver when using the ColorMunki Smile.
  - Fix the gamut warning to check primaries wider than CIERGB
    and ProPhoto.
  - Fix unusual crash in cd_main_get_cmdline_for_pid.
  - Guess the option type when using 'colormgr
    sensor-set-options'.
  - libcolord: ArgyllCMS uses 'YES' for IT8 options.
  - libcolord: Fix two small memory leaks when getting details
    about a sensor.
  - Move the private sensor libraries out of the pure lib space.
  - Rename the colormgr 'profile-set-$foo' commands to
    'profile-set-property'.
  - Return an error if the client tries to change the profile
    filename after creation.
  - Set the target gamma when using the session-helper.
  - Setup the devices for another embedded Huey colorimeter and
    the original Spyder.
- Drop colord-privlib.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh,
  as we don't carry any patch touching the build system anymore.
- Add post/postun scriptlets to libcolorhug1 subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1364558400">- Update to version 0.1.32:
  + New Features:
  - Add a new tool 'cd-iccdump' that can dump V4 and V2 profiles.
  - Add translated descriptions to the ICC profiles.
  - libcolord:
    . Add an object which is a named colord.
    . Add an object to factor out the profile load and save.
    . Add a really simple XML DOM extractor.
    . Add some helpers for dealing with CdColorLab objects.
  - Translate some of the profile source XML file descriptions
    and licences.
  - Use an XML source format for the generated profiles.
  + Bugfixes:
  - libcolord: Correctly copy CdColorYxy-&gt;Y when used as a
    property.
  - lib: Fix the licence boilerplate in the sensor libs.
  - Set the default profile locale to be en_US, not EN_us.
  - Use gtkdocize --copy in autogen.sh</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 0.1.33:
  + New Features:
  - Add some profile descriptions for the CMYK profiles.
  - Add the FOGRA45L and FOGRA47L CMYK profiles.
  - Include the eciRGBv1 gamma 1.8 profile.
  - libcolord: Add cd_it8_set_enable_created.
  - libcolord: Add helpers for int and double values from the
    DOM.
  + Bugfixes:
  - Add ifdef for cmsGetToneCurveEstimatedTableEntries.
  - Build the print profiles from XML descriptions.
  - Check the generated CCMX matrix for invalid data.
  - Do not print a warning if the DBus property does not exist.
  - Ensure mbstowcs() has an LC_CTYPE of 'en_US.UTF-8'.
  - libcolord: Always write C-locale floating point values in IT8
    files.
  - libcolord: Initialize the value of the CCMX matrix.
  - libcolord: Return the correct result from
    cd_mat33_matrix_multiply.
  - Never promote localized v2 ICC profiles to v4.
  - Rename ISOnewspaper26 to IFRA26S_2004_newsprint.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 0.1.34:
  + New Features:
  - Add a ICC transform object for simple RGB conversions.
  - Add an example for using CdIcc in applications.
  - Add an internal program to scan a directory of ICC profiles
    for warnings.
  - Add a warning for RGB profiles with unlikely whitepoint
    values.
  - Add a webservice URI example that can upload a profile to the
    Internet.
  - Add device metadata OutputEdidMd5 so we can build a UCMM shim
    layer.
  - Add functionality to return the response of the CdIcc profile
    object.
  - Add getting and setting the VCGT table in CdIcc.
  - Add new systemd macros to the example spec file.
  - Add Qt DBus annotations.
  + Bugfixes:
  - Allow clients to call org.freedesktop.DBus.Peer.
  - Correct a lot more company names when creating devices.
  - Do not automatically add EDID profiles with warnings to
    devices.
  - Fix building RGB working space profiles when using
    OpenBSD/sparc64.
  - Fix standard-space property name into a compilable name.
  - Increase the delay between patches in the session-helper.
  - Install the bash completion support into /usr.
- Add pkgconfig(bash-completion) BuildRequires: allow configure to
  detect where to install the bash completion.</changelog>
<changelog author="dimstar@opensuse.org" date="1368446400">- Update to version 1.0.0:
  + New Features:
  - Add a config option for monitors with identical EDID values.
  - Add API to control the use of BPC in CdTransform.
  - Add a simple BGRA32 pixel format.
  - Add a simple CMYK32 pixel format.
  - Add a simple colord.conf manpage.
  - Allow a different input and output format in CdTransform.
  - Show all the translations when dumping an ICC profile.
  + Bugfixes:
  - Add some missing G_BEGIN_DECLS/G_END_DECLS in header files.
  - Always return an error if cd_main_device_add() failed.
  - Build all installed binaries with PIE.
  - Build the colord binary with full RELRO.
  - Do not show a warning when using 'colormgr
    device-get-profile-for-qualifier'.
  - Ensure the parent directories exist when calling
    cd_icc_save_file.
  - Fix crash in cd-iccdump by working around an lcms2 bug.
  - Fix using the ColorHug color sensor on ARM hardware.
  - Fix using the Huey color sensor on ARM hardware.
  - Set the STANDARD_space metadata for the print profiles.
  - Use G_GNUC_WARN_UNUSED_RESULT in public and private headers.
  - Use the same pixel format names as Cairo and the same
    in-memory value as lcms2.</changelog>
<changelog author="dimstar@opensuse.org" date="1369224000">- Move %glib2_gsettings_schema_post from %pre to %post: if we
  execute this prior to installation, the schema will not be
  registered, as the files are not yet in place.</changelog>
<changelog author="zaitor@opensuse.org" date="1371384000">- Update to version 1.0.1:
  + Add 0.1.34 to 1.0.0 deprecated methods to preserve ABI.
  + Do not unconditionally enable BPC on the color transform.
  + Fix profile created time for non-UTC timezones.
  + Record the gamma table in the session helper error message.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 1.0.2:
  + New Features:
  - Add cd_icc_save_data() so that we can easily set
    _ICC_PROFILE.
  - Add CdIccStore to monitor directories of ICC profiles.
  - Add SystemVendor and SystemModel properties to the main
    interface.
  + Bugfixes:
  - Allow to specify a non-qualified path when using
    FindProfileByFilename.
  - Allow using the key 'Filename' when using
    FindProfileByProperty.
  - Always return the error if any sync method failed.
  - Fix GObject introspection when getting lists.
  - Fix GObject introspection when getting metadata.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 1.1.1:
  + Notes:
  - This release bumps the soname of libcolord as long deprecated
    methods have finally been removed.
  - This unstable branch is full of new features and experimental
    code.
  - The colord.conf file has been removed and features are now
    autodetected at runtime where possible or specified in
    configure.
  + New Features:
  - Add a shim libcolordcompat library with some helpers for
    ArgyllCMS.
  - Add SystemVendor and SystemModel string properties to the
    main interface.
  - Add the sub-command import-profile to colormgr.
  - libcolord:
    . Add cd_icc_save_data() so that we can set _ICC_PROFILE.
    . Add cd_icc_save_default() to save a profile to the default
    location.
    . Add functionality to set and get the profile
    characterization data.
    . Add methods to create a profile using CdClient with a CdIcc
    object.
  - List the required parameters in the 'colormgr --help' output.
  - Remove the AlwaysUseXrandrName config option and auto-detect
    it at runtime.
  - Show the viewing conditions when dumping the ICC profile.
  + Bugs fixed:
  - Add a quirk for ThinkPads so that we show 'ThinkPad T510'
    rather than '4384BR2'.
  - Add optional installed tests.
  - Allow colormgr to take an object path or an ID as input.
  - Allow the user to specify a non-qualified path when using
    FindProfileByFilename.</changelog>
<changelog author="fcrozat@suse.com" date="1375272000">- Add colord-udev-hwdb.patch: call udev hwdb to fill appropriately
  usb device informations (backport from upstream GIT).</changelog>
<changelog author="zaitor@opensuse.org" date="1379073600">- Update to version 1.1.2:
  + New Features:
  - Add a 'dump' colormgr command to aid debugging.
  - libcolord: Add ability to create a CdIcc object from an EDID
    blob.
  - libcolord: Add cd_icc_create_default() to use the default
    sRGB profile.
  - libcolord: Export cd_icc_utils_get_coverage() for comparing
    two profiles.
  - Set 'GAMUT_coverage(srgb)' when generating standard space
    profiles.
  + Bugs fixed:
  - Allow profiles to be added or removed when the device is not
    enabled.
  - Always return soft-add calibration profiles before soft-add
    EDID profiles.
  - Do not add fake metadata to avoid creating an empty
    dictionary.
  - Do not mix up device paths and device IDs in the
    documentation.
  - Fix an error when building the print profiles.
  - Fix creation of the dummy sensor device.
  - Fix the AdobeRGB and WideGamutRGB gamma values.
  - Fix transposed bits for EDID red y.
  - Fix up various vendor quirks.
  - Fix warning when any test profile has an EDID source and no
    ICC file.
  - libcolord: Always calculate the fallback checksum when using
    CdIccStore.
  - libcolord: Do not assert on finalize if connecting to the
    profile failed.
  - Migrate from usb_id and usb_db to udev builtins usb_id and
    hwdb.
  - Show a warning for incorrect or extra command line arguments.
  - Use %ghost in the example spec file to avoid removing
    databases on upgrades.
  - Use the exact D50 whitepoint values.
- Drop colord-udev-hwdb.patch, fixed upstream.</changelog>
<changelog author="opensuse@cboltz.de" date="1382011200">- Update apparmor profile (bnc#846301).</changelog>
<changelog author="opensuse@cboltz.de" date="1382529600">- Another update for the apparmor profile (bnc#846301#c9).</changelog>

</package>
<package pkgid="e68b144100fd01c12768bf3b7f4ca9c76b0b05df931d9c2370438c03b5558d86" name="colord" arch="x86_64">
    <version epoch="0" ver="1.1.2" rel="5.2"/>

<changelog author="dimstar@opensuse.org" date="1351684800">- Update to version 0.1.24:
  + New Features:
  - Add a extract-vcgt subcommand to cd-fix-profile.
  - Add a general plugin interface for adding and removing
    devices.
  - Add defines for the 'ColorHug Spectro' hardware.
  - Add a 'seat' property to each device.
  - Add FindProfileByProperty() to the main interface.
  - Allow the user to specify a custom udev rules directory.
  + Bugfixes:
  - Append usernames to dbus object paths before sanitising the
    object path.
  - colorhug:
    . Add support for firmware &gt;= 1.2.0 by accepting a full HID
    buffer.
    . Update the private files to the latest libcolorhug code.
  - Fix a critical warning when user tries to dump a non-icc
    file.
  - Fix automatic dep on libusb and vala.
  - Fix a warning in the daemon if a device property is NULL at
    setup.
  - Initialise global connection variable earlier.
  - More paranoia in construction of object paths.
  - Never use Werror by default in configure.
  - Remove libsane support and rely only on udev for scanner
    device information.
  - Set FILE_checksum on discovered system profiles.
  - Set the seat for devices created in the session and from
    udev.
- Drop sane-backends-devel BuildRequires: no longer needed.
- Add pkgconfig(libsystemd-login) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1354190400">- Update to version 0.1.25:
  + New Features:
  - Add a create-standard-space sub-command to cd-create-profile.
  - Add a FAQ entry describing application support of color
    management.
  - Add a 'make coverity' helper to scan the project for errors.
  - Add a profile metadata key of 'License'.
  - Add a profile warning if any of the primaries are outside of
    ROMM RGB.
  - Add a set-version command to the cd-fix-profile command line
    tool.
  - Add a warning if the profile calibration data is
    non-monotonic.
  - Add a warning if the profile copyright is missing.
  - Add a warning if the profile description is missing.
  - Add a warning if the profile gray axis is invalid.
  - Move the named color examples to shared-color-profiles.
  - Print if the profile is system-wide when doing 'colormgr
    get-profiles'.
  - Show the primaries when dumping the profile using
    cd-fix-profile.
  - Use syslog to be able to debug what the daemon is doing
    without restarting it.
  + Bugfixes:
  - Check the return value of mbstowcs before using the buffer.
  - Convert cd-create-profile to using sub-commands to make it
    more modular.
  - Create linear vcgt tables when using create-x11-gamma to
    match the xserver behaviour.
  - Create version 2.2 ICC files when creating named color
    profiles.
  - Do not ever manually set a ICC profile version when creating
    profiles.
  - Do not try to connect to colord in cd-fix-profile until
    actually needed.
  - Don't optimize the profile check transforms to speed up
    daemon startup.
  - Don't set the StandardSpaces override, the generated profiles
    have the correct metadata now.
  - Fix a crash in the example code if the device has a
    non-standard qualifier format.
  - Fix GetStandardSpace so it can actually work.
  - huey: Ensure we return an error if we ran out of retries.
  - If the copyright string is not set when creating a profile
    use a good default.
  - Improve the formatting of 'get-profiles' and 'get-devices'.
  - libcolord: Fix up a warning if GetStandardSpace fails to find
    a profile.
  - Return an error if the client does not set a profile or
    device id.
  - Return an error if the client uses an unsupported scope
    value.
  - Set a default copyright string when creating profiles without
    using --copyright.</changelog>
<changelog author="dimstar@opensuse.org" date="1356004800">- Update to version 0.1.26:
  + New Features:
  - Add 4 more defined sensor types.
  - Add a create-temperature subcommand to colormgr to test VCGT
    generation.
  - Add a 'SensorId' property to the sensor interface.
  - Add a session helper that can be used to calibrate the screen
  - Add cd_it8_save_to_data() to save the data to some allocated
    memory.
  - Add FindSensorById() to the main interface.
  - Add some defines for the Spyder4 display colorimeter.
  - Add some device figures from gnome-color-manager used in KDE
    and GNOME.
  - Add some example calibration ti1 files from
    gnome-color-manager.
  - Add support for reading and writing .cal files to CdIt8.
  - Add the ability to 'disable' a device so that color
    management can be turned off.
  - Export cd_color_rgb_interpolate() as it's useful to
    applications.
  - Recognise the internal sensor on W700 laptops and set a
    property for the calibration tools.
  - Use spotread when there is no native sensor driver.
  + Bugfixes:
  - Add some missing entries in cd_sensor_kind_from_string.
  - Create ICCv2 profiles when using cd-create-profile.
  - Do 3 reads in quick succession for colormgr
    get-sensor-reading.
  - Fix a crash when saving a ti3 file where white is not the
    last sample.
  - Fix a critical warning when writing using cd_it8_add_data()
    with no XYZ value.
  - If ti1 values are &gt; 1.0 then assume they are normalized.
  - Return class specific error codes if authentication fails.
  - Scale the ti3 RGB values to 100 when writing with
    NORMALIZED_TO_Y_100.
  - Set DEVICE_CLASS when saving a cal IT8 file.
  - Support doing sensor user actions when using 'colormgr
    get-sensor-reading'.
  - Update the device scope if it changes at runtime.
  - Use enumerated error values in the client library.</changelog>
<changelog author="meissner@suse.com" date="1357905600">- allow /usr/share/mime/** readable in AA profile (bnc#797907)</changelog>
<changelog author="meissner@suse.com" date="1361188800">- Additions to the AA profile (bnc#803281)
  + allow /proc/*/cgroup r (unkown why).
  + allow reading all /sys/class/video4linux/** r (video4linux
    devices).
  + allow user local ICC files:
  - @{HOME}/.local/share/icc/*.icc r
  - @{HOME}/.local/share/color/*.icc r</changelog>
<changelog author="abergmann@novell.com" date="1361188801">- Adjusted last editions to AppAmor profile (bnc#803281):
  + Replaced
  - @{HOME}/.local/share/color/*.icc r
    with
  - @{HOME}/.local/share/color/icc/*.icc r
  + Added
  - allow reading all /sys/class/video4linux/ r</changelog>
<changelog author="dimstar@opensuse.org" date="1361966400">- Update to version 0.1.30:
  + New features:
  - Load the instrospection to the colord binary as a GResource
  - Save the common ICC profiles as GResources in the colord
    binary to reduce I/O
  - Support setting the blue LED in the ColorHug Spectro
  + Bugfixes:
  - Append -private to the driver libraries as they have no
    headers installed
  - cd_sensor_get_caps() returns a bitfield, so make it
    explicitly 64 bits wide
  - Do not expect a system proxy when checking if the daemon
    exists
  - Do not remove the database files when upgrading the package
  - Do not show duplicate profiles when icc-profiles-openicc is
    installed
  - Fix Colord-1.0.gir build with --no-add-needed
  - Fix linking of ch-self-test
  - Fix symbol-prefix passed to g-ir-scanner
  - Fix up the model name for the ColorMunki
  - Skip more self tests if the daemon could not be started
- Changes from version 0.1.29:
  + New Features:
  - Add an interface for plugins to decline to load
  - Add a --verbose and --version argument to colormgr
  - Add DTP94 native sensor support
  - Add the 'Plasma' sensor capability
  - Allow profiles to have a 'score' which affects the standard
    space
  - Detect profiles from adobe.com and color.org and add metadata
  - Install libdtp94 for access to the DTP94 colorimeter
  - Install libhuey for access to the Huey colorimeter
  - Install libmunki for access to the ColorMunki Photo hardware
  - Move libcolorhug from colorhug-client for access to the
    ColorHug colorimeter
  - Reintroduce SANE support
  - session-helper:
    . Return extra data from the calibration in the Finished
    signal
    . Return the correct sensor images when calibrating
  + Bugfixes:
  - Allow the user to specify the device type when using
    'colormgr create-device'
  - Change the Adobe RGB description to be 'Compatible with Adobe
    RGB (1998)'
  - Do not auto-add profiles due to device-id metadata if they
    have been manually removed
  - Do not include the size of the NULL byte when writing data
    from CCMX files
  - Do not log a critical warning if the daemon is replaced at
    runtime
  - Do not make the libsystemd-login dep automatic
  - Do not return an error if a user manually adds a profile that
    has already been automatically added
  - Don't emit a warning if the profile warnings or owner changes
  - Ensure profiles with MAPPING_device_id get auto-added to
    devices
  - Fix timezone problem in colord_client_random_func test
  - Include cd-buffer.c in libcolordprivate for future use
  - Make libcolord/device_async test pass everywhere
  - Return an error if a client tries to create a device of an
    unknown type
  - Set the additional 'OwnerCmdline' metadata on each device
  - Show all the possible capabilities on one line when doing
    'colormgr get-sensors'
  - Specify the sensor caps in the code for native sensors
  - Split the libcolord.so into libcolordprivate.so so it can be
    used without a GObject dep
  - Write the CdIt8 'CREATED' date string in all files
- Changes from version 0.1.28:
  + New Features:
  - Add some default GSetting schema values for the calibration
    helper
  - Add a Sensor.Metadata property
  - - Add the sensor images as metadata on the D-Bus interface
  + Bugfixes:
  - Quit the session helper if the device or sensor was not found
  - Never build more than one print profile at a time
  - Don't use the deprecated INCLUDES in Makefile.am
- Changes from version 0.1.27:
  + New Features:
  - Add ColorMunki Smile defines and calibration attach image
  - Add Spyder4 calibration attach image
  - Add the ability to generate Rec. 709 gamma curves
  - Export a Device.Embedded property that is set for fixed
    hardware
  - Import shared-color-profiles into colord
  - Install a header with all the session helper defines
  - Support L* gamma encoding in cd-create-profile
  - Write the profile quality into to the .icc file as metadata
  + Bugfixes:
  - Allow passing no value as properties to CreateDevice
  - Do not return zero profiles when the device is being
    calibrated or disabled
  - Ensure the color types are methods in GObject Introspection
    rather than functions
  - Fix build when srcdir != builddir
  - Fix floating point number parsing in non C locale
    environments
  - Remove 'Monitor' suffix from display devices model string.
- Add colord-privlib.patch: Move private libraries out of
  %{_libdir}.
- Add gnome-common BuildRequires and call to autogen.sh, as above
  patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.1.31:
  + New Features:
  - Add more sensor capabilities to support the latest ArgyllCMS
    release.
  - Calculate the display calibration based on the Lab and target
    display gamma.
  - Emulate a perfect sRGB screen when returning XYZ values from
    the dummy sensor.
  - Interpolate the gamma data to the VCGT size using Akima.
  - libcolord: Add Akima and Linear 2D interpolation classes.
  - libcolord: Switch CdColor to using the GSlice allocator.
  - libcolorhug: Add commands to get the ADC Vref+ and Vref-.
  - libcolorhug: Add extensions to the take_reading_x() commands
    to set the sensor type.
  - libcolorhug: Add the ability to get and set the CCD
    calibration values.
  - libcolorhug: Add the ability to get a spectral reading from
    the device.
  - Run the self test programs in 'make check' under valgrind.
  + Bugfixes:
  - Add a warning if compiling with --with-daemon-user=root.
  - Add some more display vendor names to the display fixup
    table.
  - Deprecate both the cd_profile_set_$foo_sync() functions.
  - Do not show a critical warning if an unmatched sensor is
    connected.
  - Fix build on OpenBSD.
  - Fix compile with --disable-gusb.
  - Fix the argyll sensor driver when using the ColorMunki Smile.
  - Fix the gamut warning to check primaries wider than CIERGB
    and ProPhoto.
  - Fix unusual crash in cd_main_get_cmdline_for_pid.
  - Guess the option type when using 'colormgr
    sensor-set-options'.
  - libcolord: ArgyllCMS uses 'YES' for IT8 options.
  - libcolord: Fix two small memory leaks when getting details
    about a sensor.
  - Move the private sensor libraries out of the pure lib space.
  - Rename the colormgr 'profile-set-$foo' commands to
    'profile-set-property'.
  - Return an error if the client tries to change the profile
    filename after creation.
  - Set the target gamma when using the session-helper.
  - Setup the devices for another embedded Huey colorimeter and
    the original Spyder.
- Drop colord-privlib.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh,
  as we don't carry any patch touching the build system anymore.
- Add post/postun scriptlets to libcolorhug1 subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1364558400">- Update to version 0.1.32:
  + New Features:
  - Add a new tool 'cd-iccdump' that can dump V4 and V2 profiles.
  - Add translated descriptions to the ICC profiles.
  - libcolord:
    . Add an object which is a named colord.
    . Add an object to factor out the profile load and save.
    . Add a really simple XML DOM extractor.
    . Add some helpers for dealing with CdColorLab objects.
  - Translate some of the profile source XML file descriptions
    and licences.
  - Use an XML source format for the generated profiles.
  + Bugfixes:
  - libcolord: Correctly copy CdColorYxy-&gt;Y when used as a
    property.
  - lib: Fix the licence boilerplate in the sensor libs.
  - Set the default profile locale to be en_US, not EN_us.
  - Use gtkdocize --copy in autogen.sh</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 0.1.33:
  + New Features:
  - Add some profile descriptions for the CMYK profiles.
  - Add the FOGRA45L and FOGRA47L CMYK profiles.
  - Include the eciRGBv1 gamma 1.8 profile.
  - libcolord: Add cd_it8_set_enable_created.
  - libcolord: Add helpers for int and double values from the
    DOM.
  + Bugfixes:
  - Add ifdef for cmsGetToneCurveEstimatedTableEntries.
  - Build the print profiles from XML descriptions.
  - Check the generated CCMX matrix for invalid data.
  - Do not print a warning if the DBus property does not exist.
  - Ensure mbstowcs() has an LC_CTYPE of 'en_US.UTF-8'.
  - libcolord: Always write C-locale floating point values in IT8
    files.
  - libcolord: Initialize the value of the CCMX matrix.
  - libcolord: Return the correct result from
    cd_mat33_matrix_multiply.
  - Never promote localized v2 ICC profiles to v4.
  - Rename ISOnewspaper26 to IFRA26S_2004_newsprint.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 0.1.34:
  + New Features:
  - Add a ICC transform object for simple RGB conversions.
  - Add an example for using CdIcc in applications.
  - Add an internal program to scan a directory of ICC profiles
    for warnings.
  - Add a warning for RGB profiles with unlikely whitepoint
    values.
  - Add a webservice URI example that can upload a profile to the
    Internet.
  - Add device metadata OutputEdidMd5 so we can build a UCMM shim
    layer.
  - Add functionality to return the response of the CdIcc profile
    object.
  - Add getting and setting the VCGT table in CdIcc.
  - Add new systemd macros to the example spec file.
  - Add Qt DBus annotations.
  + Bugfixes:
  - Allow clients to call org.freedesktop.DBus.Peer.
  - Correct a lot more company names when creating devices.
  - Do not automatically add EDID profiles with warnings to
    devices.
  - Fix building RGB working space profiles when using
    OpenBSD/sparc64.
  - Fix standard-space property name into a compilable name.
  - Increase the delay between patches in the session-helper.
  - Install the bash completion support into /usr.
- Add pkgconfig(bash-completion) BuildRequires: allow configure to
  detect where to install the bash completion.</changelog>
<changelog author="dimstar@opensuse.org" date="1368446400">- Update to version 1.0.0:
  + New Features:
  - Add a config option for monitors with identical EDID values.
  - Add API to control the use of BPC in CdTransform.
  - Add a simple BGRA32 pixel format.
  - Add a simple CMYK32 pixel format.
  - Add a simple colord.conf manpage.
  - Allow a different input and output format in CdTransform.
  - Show all the translations when dumping an ICC profile.
  + Bugfixes:
  - Add some missing G_BEGIN_DECLS/G_END_DECLS in header files.
  - Always return an error if cd_main_device_add() failed.
  - Build all installed binaries with PIE.
  - Build the colord binary with full RELRO.
  - Do not show a warning when using 'colormgr
    device-get-profile-for-qualifier'.
  - Ensure the parent directories exist when calling
    cd_icc_save_file.
  - Fix crash in cd-iccdump by working around an lcms2 bug.
  - Fix using the ColorHug color sensor on ARM hardware.
  - Fix using the Huey color sensor on ARM hardware.
  - Set the STANDARD_space metadata for the print profiles.
  - Use G_GNUC_WARN_UNUSED_RESULT in public and private headers.
  - Use the same pixel format names as Cairo and the same
    in-memory value as lcms2.</changelog>
<changelog author="dimstar@opensuse.org" date="1369224000">- Move %glib2_gsettings_schema_post from %pre to %post: if we
  execute this prior to installation, the schema will not be
  registered, as the files are not yet in place.</changelog>
<changelog author="zaitor@opensuse.org" date="1371384000">- Update to version 1.0.1:
  + Add 0.1.34 to 1.0.0 deprecated methods to preserve ABI.
  + Do not unconditionally enable BPC on the color transform.
  + Fix profile created time for non-UTC timezones.
  + Record the gamma table in the session helper error message.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 1.0.2:
  + New Features:
  - Add cd_icc_save_data() so that we can easily set
    _ICC_PROFILE.
  - Add CdIccStore to monitor directories of ICC profiles.
  - Add SystemVendor and SystemModel properties to the main
    interface.
  + Bugfixes:
  - Allow to specify a non-qualified path when using
    FindProfileByFilename.
  - Allow using the key 'Filename' when using
    FindProfileByProperty.
  - Always return the error if any sync method failed.
  - Fix GObject introspection when getting lists.
  - Fix GObject introspection when getting metadata.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 1.1.1:
  + Notes:
  - This release bumps the soname of libcolord as long deprecated
    methods have finally been removed.
  - This unstable branch is full of new features and experimental
    code.
  - The colord.conf file has been removed and features are now
    autodetected at runtime where possible or specified in
    configure.
  + New Features:
  - Add a shim libcolordcompat library with some helpers for
    ArgyllCMS.
  - Add SystemVendor and SystemModel string properties to the
    main interface.
  - Add the sub-command import-profile to colormgr.
  - libcolord:
    . Add cd_icc_save_data() so that we can set _ICC_PROFILE.
    . Add cd_icc_save_default() to save a profile to the default
    location.
    . Add functionality to set and get the profile
    characterization data.
    . Add methods to create a profile using CdClient with a CdIcc
    object.
  - List the required parameters in the 'colormgr --help' output.
  - Remove the AlwaysUseXrandrName config option and auto-detect
    it at runtime.
  - Show the viewing conditions when dumping the ICC profile.
  + Bugs fixed:
  - Add a quirk for ThinkPads so that we show 'ThinkPad T510'
    rather than '4384BR2'.
  - Add optional installed tests.
  - Allow colormgr to take an object path or an ID as input.
  - Allow the user to specify a non-qualified path when using
    FindProfileByFilename.</changelog>
<changelog author="fcrozat@suse.com" date="1375272000">- Add colord-udev-hwdb.patch: call udev hwdb to fill appropriately
  usb device informations (backport from upstream GIT).</changelog>
<changelog author="zaitor@opensuse.org" date="1379073600">- Update to version 1.1.2:
  + New Features:
  - Add a 'dump' colormgr command to aid debugging.
  - libcolord: Add ability to create a CdIcc object from an EDID
    blob.
  - libcolord: Add cd_icc_create_default() to use the default
    sRGB profile.
  - libcolord: Export cd_icc_utils_get_coverage() for comparing
    two profiles.
  - Set 'GAMUT_coverage(srgb)' when generating standard space
    profiles.
  + Bugs fixed:
  - Allow profiles to be added or removed when the device is not
    enabled.
  - Always return soft-add calibration profiles before soft-add
    EDID profiles.
  - Do not add fake metadata to avoid creating an empty
    dictionary.
  - Do not mix up device paths and device IDs in the
    documentation.
  - Fix an error when building the print profiles.
  - Fix creation of the dummy sensor device.
  - Fix the AdobeRGB and WideGamutRGB gamma values.
  - Fix transposed bits for EDID red y.
  - Fix up various vendor quirks.
  - Fix warning when any test profile has an EDID source and no
    ICC file.
  - libcolord: Always calculate the fallback checksum when using
    CdIccStore.
  - libcolord: Do not assert on finalize if connecting to the
    profile failed.
  - Migrate from usb_id and usb_db to udev builtins usb_id and
    hwdb.
  - Show a warning for incorrect or extra command line arguments.
  - Use %ghost in the example spec file to avoid removing
    databases on upgrades.
  - Use the exact D50 whitepoint values.
- Drop colord-udev-hwdb.patch, fixed upstream.</changelog>
<changelog author="opensuse@cboltz.de" date="1382011200">- Update apparmor profile (bnc#846301).</changelog>
<changelog author="opensuse@cboltz.de" date="1382529600">- Another update for the apparmor profile (bnc#846301#c9).</changelog>

</package>
<package pkgid="4728d6d64a26611459e41770cd45263f166381c857cbaf18c06fd69132ae8e14" name="colord-lang" arch="noarch">
    <version epoch="0" ver="1.1.2" rel="5.2"/>

<changelog author="dimstar@opensuse.org" date="1351684800">- Update to version 0.1.24:
  + New Features:
  - Add a extract-vcgt subcommand to cd-fix-profile.
  - Add a general plugin interface for adding and removing
    devices.
  - Add defines for the 'ColorHug Spectro' hardware.
  - Add a 'seat' property to each device.
  - Add FindProfileByProperty() to the main interface.
  - Allow the user to specify a custom udev rules directory.
  + Bugfixes:
  - Append usernames to dbus object paths before sanitising the
    object path.
  - colorhug:
    . Add support for firmware &gt;= 1.2.0 by accepting a full HID
    buffer.
    . Update the private files to the latest libcolorhug code.
  - Fix a critical warning when user tries to dump a non-icc
    file.
  - Fix automatic dep on libusb and vala.
  - Fix a warning in the daemon if a device property is NULL at
    setup.
  - Initialise global connection variable earlier.
  - More paranoia in construction of object paths.
  - Never use Werror by default in configure.
  - Remove libsane support and rely only on udev for scanner
    device information.
  - Set FILE_checksum on discovered system profiles.
  - Set the seat for devices created in the session and from
    udev.
- Drop sane-backends-devel BuildRequires: no longer needed.
- Add pkgconfig(libsystemd-login) BuildRequires: new dependency.</changelog>
<changelog author="dimstar@opensuse.org" date="1354190400">- Update to version 0.1.25:
  + New Features:
  - Add a create-standard-space sub-command to cd-create-profile.
  - Add a FAQ entry describing application support of color
    management.
  - Add a 'make coverity' helper to scan the project for errors.
  - Add a profile metadata key of 'License'.
  - Add a profile warning if any of the primaries are outside of
    ROMM RGB.
  - Add a set-version command to the cd-fix-profile command line
    tool.
  - Add a warning if the profile calibration data is
    non-monotonic.
  - Add a warning if the profile copyright is missing.
  - Add a warning if the profile description is missing.
  - Add a warning if the profile gray axis is invalid.
  - Move the named color examples to shared-color-profiles.
  - Print if the profile is system-wide when doing 'colormgr
    get-profiles'.
  - Show the primaries when dumping the profile using
    cd-fix-profile.
  - Use syslog to be able to debug what the daemon is doing
    without restarting it.
  + Bugfixes:
  - Check the return value of mbstowcs before using the buffer.
  - Convert cd-create-profile to using sub-commands to make it
    more modular.
  - Create linear vcgt tables when using create-x11-gamma to
    match the xserver behaviour.
  - Create version 2.2 ICC files when creating named color
    profiles.
  - Do not ever manually set a ICC profile version when creating
    profiles.
  - Do not try to connect to colord in cd-fix-profile until
    actually needed.
  - Don't optimize the profile check transforms to speed up
    daemon startup.
  - Don't set the StandardSpaces override, the generated profiles
    have the correct metadata now.
  - Fix a crash in the example code if the device has a
    non-standard qualifier format.
  - Fix GetStandardSpace so it can actually work.
  - huey: Ensure we return an error if we ran out of retries.
  - If the copyright string is not set when creating a profile
    use a good default.
  - Improve the formatting of 'get-profiles' and 'get-devices'.
  - libcolord: Fix up a warning if GetStandardSpace fails to find
    a profile.
  - Return an error if the client does not set a profile or
    device id.
  - Return an error if the client uses an unsupported scope
    value.
  - Set a default copyright string when creating profiles without
    using --copyright.</changelog>
<changelog author="dimstar@opensuse.org" date="1356004800">- Update to version 0.1.26:
  + New Features:
  - Add 4 more defined sensor types.
  - Add a create-temperature subcommand to colormgr to test VCGT
    generation.
  - Add a 'SensorId' property to the sensor interface.
  - Add a session helper that can be used to calibrate the screen
  - Add cd_it8_save_to_data() to save the data to some allocated
    memory.
  - Add FindSensorById() to the main interface.
  - Add some defines for the Spyder4 display colorimeter.
  - Add some device figures from gnome-color-manager used in KDE
    and GNOME.
  - Add some example calibration ti1 files from
    gnome-color-manager.
  - Add support for reading and writing .cal files to CdIt8.
  - Add the ability to 'disable' a device so that color
    management can be turned off.
  - Export cd_color_rgb_interpolate() as it's useful to
    applications.
  - Recognise the internal sensor on W700 laptops and set a
    property for the calibration tools.
  - Use spotread when there is no native sensor driver.
  + Bugfixes:
  - Add some missing entries in cd_sensor_kind_from_string.
  - Create ICCv2 profiles when using cd-create-profile.
  - Do 3 reads in quick succession for colormgr
    get-sensor-reading.
  - Fix a crash when saving a ti3 file where white is not the
    last sample.
  - Fix a critical warning when writing using cd_it8_add_data()
    with no XYZ value.
  - If ti1 values are &gt; 1.0 then assume they are normalized.
  - Return class specific error codes if authentication fails.
  - Scale the ti3 RGB values to 100 when writing with
    NORMALIZED_TO_Y_100.
  - Set DEVICE_CLASS when saving a cal IT8 file.
  - Support doing sensor user actions when using 'colormgr
    get-sensor-reading'.
  - Update the device scope if it changes at runtime.
  - Use enumerated error values in the client library.</changelog>
<changelog author="meissner@suse.com" date="1357905600">- allow /usr/share/mime/** readable in AA profile (bnc#797907)</changelog>
<changelog author="meissner@suse.com" date="1361188800">- Additions to the AA profile (bnc#803281)
  + allow /proc/*/cgroup r (unkown why).
  + allow reading all /sys/class/video4linux/** r (video4linux
    devices).
  + allow user local ICC files:
  - @{HOME}/.local/share/icc/*.icc r
  - @{HOME}/.local/share/color/*.icc r</changelog>
<changelog author="abergmann@novell.com" date="1361188801">- Adjusted last editions to AppAmor profile (bnc#803281):
  + Replaced
  - @{HOME}/.local/share/color/*.icc r
    with
  - @{HOME}/.local/share/color/icc/*.icc r
  + Added
  - allow reading all /sys/class/video4linux/ r</changelog>
<changelog author="dimstar@opensuse.org" date="1361966400">- Update to version 0.1.30:
  + New features:
  - Load the instrospection to the colord binary as a GResource
  - Save the common ICC profiles as GResources in the colord
    binary to reduce I/O
  - Support setting the blue LED in the ColorHug Spectro
  + Bugfixes:
  - Append -private to the driver libraries as they have no
    headers installed
  - cd_sensor_get_caps() returns a bitfield, so make it
    explicitly 64 bits wide
  - Do not expect a system proxy when checking if the daemon
    exists
  - Do not remove the database files when upgrading the package
  - Do not show duplicate profiles when icc-profiles-openicc is
    installed
  - Fix Colord-1.0.gir build with --no-add-needed
  - Fix linking of ch-self-test
  - Fix symbol-prefix passed to g-ir-scanner
  - Fix up the model name for the ColorMunki
  - Skip more self tests if the daemon could not be started
- Changes from version 0.1.29:
  + New Features:
  - Add an interface for plugins to decline to load
  - Add a --verbose and --version argument to colormgr
  - Add DTP94 native sensor support
  - Add the 'Plasma' sensor capability
  - Allow profiles to have a 'score' which affects the standard
    space
  - Detect profiles from adobe.com and color.org and add metadata
  - Install libdtp94 for access to the DTP94 colorimeter
  - Install libhuey for access to the Huey colorimeter
  - Install libmunki for access to the ColorMunki Photo hardware
  - Move libcolorhug from colorhug-client for access to the
    ColorHug colorimeter
  - Reintroduce SANE support
  - session-helper:
    . Return extra data from the calibration in the Finished
    signal
    . Return the correct sensor images when calibrating
  + Bugfixes:
  - Allow the user to specify the device type when using
    'colormgr create-device'
  - Change the Adobe RGB description to be 'Compatible with Adobe
    RGB (1998)'
  - Do not auto-add profiles due to device-id metadata if they
    have been manually removed
  - Do not include the size of the NULL byte when writing data
    from CCMX files
  - Do not log a critical warning if the daemon is replaced at
    runtime
  - Do not make the libsystemd-login dep automatic
  - Do not return an error if a user manually adds a profile that
    has already been automatically added
  - Don't emit a warning if the profile warnings or owner changes
  - Ensure profiles with MAPPING_device_id get auto-added to
    devices
  - Fix timezone problem in colord_client_random_func test
  - Include cd-buffer.c in libcolordprivate for future use
  - Make libcolord/device_async test pass everywhere
  - Return an error if a client tries to create a device of an
    unknown type
  - Set the additional 'OwnerCmdline' metadata on each device
  - Show all the possible capabilities on one line when doing
    'colormgr get-sensors'
  - Specify the sensor caps in the code for native sensors
  - Split the libcolord.so into libcolordprivate.so so it can be
    used without a GObject dep
  - Write the CdIt8 'CREATED' date string in all files
- Changes from version 0.1.28:
  + New Features:
  - Add some default GSetting schema values for the calibration
    helper
  - Add a Sensor.Metadata property
  - - Add the sensor images as metadata on the D-Bus interface
  + Bugfixes:
  - Quit the session helper if the device or sensor was not found
  - Never build more than one print profile at a time
  - Don't use the deprecated INCLUDES in Makefile.am
- Changes from version 0.1.27:
  + New Features:
  - Add ColorMunki Smile defines and calibration attach image
  - Add Spyder4 calibration attach image
  - Add the ability to generate Rec. 709 gamma curves
  - Export a Device.Embedded property that is set for fixed
    hardware
  - Import shared-color-profiles into colord
  - Install a header with all the session helper defines
  - Support L* gamma encoding in cd-create-profile
  - Write the profile quality into to the .icc file as metadata
  + Bugfixes:
  - Allow passing no value as properties to CreateDevice
  - Do not return zero profiles when the device is being
    calibrated or disabled
  - Ensure the color types are methods in GObject Introspection
    rather than functions
  - Fix build when srcdir != builddir
  - Fix floating point number parsing in non C locale
    environments
  - Remove 'Monitor' suffix from display devices model string.
- Add colord-privlib.patch: Move private libraries out of
  %{_libdir}.
- Add gnome-common BuildRequires and call to autogen.sh, as above
  patch touches the build system.</changelog>
<changelog author="dimstar@opensuse.org" date="1363608000">- Update to version 0.1.31:
  + New Features:
  - Add more sensor capabilities to support the latest ArgyllCMS
    release.
  - Calculate the display calibration based on the Lab and target
    display gamma.
  - Emulate a perfect sRGB screen when returning XYZ values from
    the dummy sensor.
  - Interpolate the gamma data to the VCGT size using Akima.
  - libcolord: Add Akima and Linear 2D interpolation classes.
  - libcolord: Switch CdColor to using the GSlice allocator.
  - libcolorhug: Add commands to get the ADC Vref+ and Vref-.
  - libcolorhug: Add extensions to the take_reading_x() commands
    to set the sensor type.
  - libcolorhug: Add the ability to get and set the CCD
    calibration values.
  - libcolorhug: Add the ability to get a spectral reading from
    the device.
  - Run the self test programs in 'make check' under valgrind.
  + Bugfixes:
  - Add a warning if compiling with --with-daemon-user=root.
  - Add some more display vendor names to the display fixup
    table.
  - Deprecate both the cd_profile_set_$foo_sync() functions.
  - Do not show a critical warning if an unmatched sensor is
    connected.
  - Fix build on OpenBSD.
  - Fix compile with --disable-gusb.
  - Fix the argyll sensor driver when using the ColorMunki Smile.
  - Fix the gamut warning to check primaries wider than CIERGB
    and ProPhoto.
  - Fix unusual crash in cd_main_get_cmdline_for_pid.
  - Guess the option type when using 'colormgr
    sensor-set-options'.
  - libcolord: ArgyllCMS uses 'YES' for IT8 options.
  - libcolord: Fix two small memory leaks when getting details
    about a sensor.
  - Move the private sensor libraries out of the pure lib space.
  - Rename the colormgr 'profile-set-$foo' commands to
    'profile-set-property'.
  - Return an error if the client tries to change the profile
    filename after creation.
  - Set the target gamma when using the session-helper.
  - Setup the devices for another embedded Huey colorimeter and
    the original Spyder.
- Drop colord-privlib.patch: fixed upstream.
- Remove gnome-common BuildRequires and call to gnome-autogen.sh,
  as we don't carry any patch touching the build system anymore.
- Add post/postun scriptlets to libcolorhug1 subpackage.</changelog>
<changelog author="dimstar@opensuse.org" date="1364558400">- Update to version 0.1.32:
  + New Features:
  - Add a new tool 'cd-iccdump' that can dump V4 and V2 profiles.
  - Add translated descriptions to the ICC profiles.
  - libcolord:
    . Add an object which is a named colord.
    . Add an object to factor out the profile load and save.
    . Add a really simple XML DOM extractor.
    . Add some helpers for dealing with CdColorLab objects.
  - Translate some of the profile source XML file descriptions
    and licences.
  - Use an XML source format for the generated profiles.
  + Bugfixes:
  - libcolord: Correctly copy CdColorYxy-&gt;Y when used as a
    property.
  - lib: Fix the licence boilerplate in the sensor libs.
  - Set the default profile locale to be en_US, not EN_us.
  - Use gtkdocize --copy in autogen.sh</changelog>
<changelog author="dimstar@opensuse.org" date="1366113600">- Update to version 0.1.33:
  + New Features:
  - Add some profile descriptions for the CMYK profiles.
  - Add the FOGRA45L and FOGRA47L CMYK profiles.
  - Include the eciRGBv1 gamma 1.8 profile.
  - libcolord: Add cd_it8_set_enable_created.
  - libcolord: Add helpers for int and double values from the
    DOM.
  + Bugfixes:
  - Add ifdef for cmsGetToneCurveEstimatedTableEntries.
  - Build the print profiles from XML descriptions.
  - Check the generated CCMX matrix for invalid data.
  - Do not print a warning if the DBus property does not exist.
  - Ensure mbstowcs() has an LC_CTYPE of 'en_US.UTF-8'.
  - libcolord: Always write C-locale floating point values in IT8
    files.
  - libcolord: Initialize the value of the CCMX matrix.
  - libcolord: Return the correct result from
    cd_mat33_matrix_multiply.
  - Never promote localized v2 ICC profiles to v4.
  - Rename ISOnewspaper26 to IFRA26S_2004_newsprint.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1367409600">- Update to version 0.1.34:
  + New Features:
  - Add a ICC transform object for simple RGB conversions.
  - Add an example for using CdIcc in applications.
  - Add an internal program to scan a directory of ICC profiles
    for warnings.
  - Add a warning for RGB profiles with unlikely whitepoint
    values.
  - Add a webservice URI example that can upload a profile to the
    Internet.
  - Add device metadata OutputEdidMd5 so we can build a UCMM shim
    layer.
  - Add functionality to return the response of the CdIcc profile
    object.
  - Add getting and setting the VCGT table in CdIcc.
  - Add new systemd macros to the example spec file.
  - Add Qt DBus annotations.
  + Bugfixes:
  - Allow clients to call org.freedesktop.DBus.Peer.
  - Correct a lot more company names when creating devices.
  - Do not automatically add EDID profiles with warnings to
    devices.
  - Fix building RGB working space profiles when using
    OpenBSD/sparc64.
  - Fix standard-space property name into a compilable name.
  - Increase the delay between patches in the session-helper.
  - Install the bash completion support into /usr.
- Add pkgconfig(bash-completion) BuildRequires: allow configure to
  detect where to install the bash completion.</changelog>
<changelog author="dimstar@opensuse.org" date="1368446400">- Update to version 1.0.0:
  + New Features:
  - Add a config option for monitors with identical EDID values.
  - Add API to control the use of BPC in CdTransform.
  - Add a simple BGRA32 pixel format.
  - Add a simple CMYK32 pixel format.
  - Add a simple colord.conf manpage.
  - Allow a different input and output format in CdTransform.
  - Show all the translations when dumping an ICC profile.
  + Bugfixes:
  - Add some missing G_BEGIN_DECLS/G_END_DECLS in header files.
  - Always return an error if cd_main_device_add() failed.
  - Build all installed binaries with PIE.
  - Build the colord binary with full RELRO.
  - Do not show a warning when using 'colormgr
    device-get-profile-for-qualifier'.
  - Ensure the parent directories exist when calling
    cd_icc_save_file.
  - Fix crash in cd-iccdump by working around an lcms2 bug.
  - Fix using the ColorHug color sensor on ARM hardware.
  - Fix using the Huey color sensor on ARM hardware.
  - Set the STANDARD_space metadata for the print profiles.
  - Use G_GNUC_WARN_UNUSED_RESULT in public and private headers.
  - Use the same pixel format names as Cairo and the same
    in-memory value as lcms2.</changelog>
<changelog author="dimstar@opensuse.org" date="1369224000">- Move %glib2_gsettings_schema_post from %pre to %post: if we
  execute this prior to installation, the schema will not be
  registered, as the files are not yet in place.</changelog>
<changelog author="zaitor@opensuse.org" date="1371384000">- Update to version 1.0.1:
  + Add 0.1.34 to 1.0.0 deprecated methods to preserve ABI.
  + Do not unconditionally enable BPC on the color transform.
  + Fix profile created time for non-UTC timezones.
  + Record the gamma table in the session helper error message.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 1.0.2:
  + New Features:
  - Add cd_icc_save_data() so that we can easily set
    _ICC_PROFILE.
  - Add CdIccStore to monitor directories of ICC profiles.
  - Add SystemVendor and SystemModel properties to the main
    interface.
  + Bugfixes:
  - Allow to specify a non-qualified path when using
    FindProfileByFilename.
  - Allow using the key 'Filename' when using
    FindProfileByProperty.
  - Always return the error if any sync method failed.
  - Fix GObject introspection when getting lists.
  - Fix GObject introspection when getting metadata.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 1.1.1:
  + Notes:
  - This release bumps the soname of libcolord as long deprecated
    methods have finally been removed.
  - This unstable branch is full of new features and experimental
    code.
  - The colord.conf file has been removed and features are now
    autodetected at runtime where possible or specified in
    configure.
  + New Features:
  - Add a shim libcolordcompat library with some helpers for
    ArgyllCMS.
  - Add SystemVendor and SystemModel string properties to the
    main interface.
  - Add the sub-command import-profile to colormgr.
  - libcolord:
    . Add cd_icc_save_data() so that we can set _ICC_PROFILE.
    . Add cd_icc_save_default() to save a profile to the default
    location.
    . Add functionality to set and get the profile
    characterization data.
    . Add methods to create a profile using CdClient with a CdIcc
    object.
  - List the required parameters in the 'colormgr --help' output.
  - Remove the AlwaysUseXrandrName config option and auto-detect
    it at runtime.
  - Show the viewing conditions when dumping the ICC profile.
  + Bugs fixed:
  - Add a quirk for ThinkPads so that we show 'ThinkPad T510'
    rather than '4384BR2'.
  - Add optional installed tests.
  - Allow colormgr to take an object path or an ID as input.
  - Allow the user to specify a non-qualified path when using
    FindProfileByFilename.</changelog>
<changelog author="fcrozat@suse.com" date="1375272000">- Add colord-udev-hwdb.patch: call udev hwdb to fill appropriately
  usb device informations (backport from upstream GIT).</changelog>
<changelog author="zaitor@opensuse.org" date="1379073600">- Update to version 1.1.2:
  + New Features:
  - Add a 'dump' colormgr command to aid debugging.
  - libcolord: Add ability to create a CdIcc object from an EDID
    blob.
  - libcolord: Add cd_icc_create_default() to use the default
    sRGB profile.
  - libcolord: Export cd_icc_utils_get_coverage() for comparing
    two profiles.
  - Set 'GAMUT_coverage(srgb)' when generating standard space
    profiles.
  + Bugs fixed:
  - Allow profiles to be added or removed when the device is not
    enabled.
  - Always return soft-add calibration profiles before soft-add
    EDID profiles.
  - Do not add fake metadata to avoid creating an empty
    dictionary.
  - Do not mix up device paths and device IDs in the
    documentation.
  - Fix an error when building the print profiles.
  - Fix creation of the dummy sensor device.
  - Fix the AdobeRGB and WideGamutRGB gamma values.
  - Fix transposed bits for EDID red y.
  - Fix up various vendor quirks.
  - Fix warning when any test profile has an EDID source and no
    ICC file.
  - libcolord: Always calculate the fallback checksum when using
    CdIccStore.
  - libcolord: Do not assert on finalize if connecting to the
    profile failed.
  - Migrate from usb_id and usb_db to udev builtins usb_id and
    hwdb.
  - Show a warning for incorrect or extra command line arguments.
  - Use %ghost in the example spec file to avoid removing
    databases on upgrades.
  - Use the exact D50 whitepoint values.
- Drop colord-udev-hwdb.patch, fixed upstream.</changelog>
<changelog author="opensuse@cboltz.de" date="1382011200">- Update apparmor profile (bnc#846301).</changelog>
<changelog author="opensuse@cboltz.de" date="1382529600">- Another update for the apparmor profile (bnc#846301#c9).</changelog>

</package>
<package pkgid="3c69fa466e47f8f0433ea6734f372ff8d4e601f742668fad464b42099b973b92" name="compiz-branding-basedonopensuse" arch="i586">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="99f5e4d5c12f88be254dbb6b0ef4da7054f3bf17d078d2fb77028ba445f998d0" name="compiz-branding-basedonopensuse" arch="x86_64">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="a48610c85b37e6983337c0502d81149e04d5f0129d7360951a21d96e1d4df6a0" name="conntrack-tools" arch="i586">
    <version epoch="0" ver="1.4.2" rel="2.3.1"/>

<changelog author="bitshuffler #suse@irc.freenode.org" date="1253448000">- Updated to 0.9.13</changelog>
<changelog author="jengelh@medozas.de" date="1266926400">- new upstream release: 0.9.14
- use %_smp_mflags
- wrap description at col 70</changelog>
<changelog author="jengelh@medozas.de" date="1279195200">- new upstream release 0.9.15
  * support for conntrack zones
  * support for TCP window scale synchronization
  * fixes to option parsing and printouts</changelog>
<changelog author="jengelh@medozas.de" date="1298808000">- new upstream release 1.0.0
  * SYN_SENT2 support for the command line tool conntrack (which was
  added in Linux kernel &gt;= 2.6.31).
  * allow to listen to update and destroy expectation events (it
  requires a Linux kernel &gt;= 2.6.37).
  * conntrack timestamping support with -o ktimestamp (this support
  requires the upcoming Linux 2.6.38).
  * one fix for conntrackd: two very consecutive commit invocations
  with option -c may result in the hang of the second commit
  invocation if the first commit did not finish yet. As a result the
  second commit invocation required a manual SIGTERM.
- Remove redundant %clean section</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="jengelh@medozas.de" date="1325678400">- Update to new upstream release 1.0.1
  * add support for mark masks</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.2.1
  * Add support for NAT expectations, synchronization of expectation
  class, helper names and expect functions. Filtering by mark is
  now allowed.</changelog>
<changelog author="jengelh@inai.de" date="1338465600">- Resolve compilation failure due to missing #include</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.2.2
  * conntrackd: commit operation has to be synchronous
  * conntrackd: implement selective flushing for -t and -F commands</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.0
  * This release adds the user-space helper infrastructure which
  includes the RPC portmapper (to support NFSv3) and Oracle*TNS
  helpers.</changelog>
<changelog author="sbrabec@suse.cz" date="1353412800">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.1
  * conntrack: add support to dump the dying and unconfirmed list via
  ctnetlink
  * conntrackd: fix deadlock due to wrong nested signal blocking</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.2
  * This release includes bugfixes and the connlabel support.</changelog>
<changelog author="astieger@suse.com" date="1444046400">- Fix a possible crash if conntrackd sees DCCP, SCTP and ICMPv6
  traffic and the corresponding kernel modules that track this
  traffic are not available. (bsc#942149, CVE-2015-6496)
  adding CVE-2015-6496.patch</changelog>

</package>
<package pkgid="27f8cfecf149daf8d44f0cc8715a683a5df6cbd549a95b8be4a8ca9e52389f3b" name="conntrack-tools" arch="src">
    <version epoch="0" ver="1.4.2" rel="2.3.1"/>

<changelog author="bitshuffler #suse@irc.freenode.org" date="1253448000">- Updated to 0.9.13</changelog>
<changelog author="jengelh@medozas.de" date="1266926400">- new upstream release: 0.9.14
- use %_smp_mflags
- wrap description at col 70</changelog>
<changelog author="jengelh@medozas.de" date="1279195200">- new upstream release 0.9.15
  * support for conntrack zones
  * support for TCP window scale synchronization
  * fixes to option parsing and printouts</changelog>
<changelog author="jengelh@medozas.de" date="1298808000">- new upstream release 1.0.0
  * SYN_SENT2 support for the command line tool conntrack (which was
  added in Linux kernel &gt;= 2.6.31).
  * allow to listen to update and destroy expectation events (it
  requires a Linux kernel &gt;= 2.6.37).
  * conntrack timestamping support with -o ktimestamp (this support
  requires the upcoming Linux 2.6.38).
  * one fix for conntrackd: two very consecutive commit invocations
  with option -c may result in the hang of the second commit
  invocation if the first commit did not finish yet. As a result the
  second commit invocation required a manual SIGTERM.
- Remove redundant %clean section</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="jengelh@medozas.de" date="1325678400">- Update to new upstream release 1.0.1
  * add support for mark masks</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.2.1
  * Add support for NAT expectations, synchronization of expectation
  class, helper names and expect functions. Filtering by mark is
  now allowed.</changelog>
<changelog author="jengelh@inai.de" date="1338465600">- Resolve compilation failure due to missing #include</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.2.2
  * conntrackd: commit operation has to be synchronous
  * conntrackd: implement selective flushing for -t and -F commands</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.0
  * This release adds the user-space helper infrastructure which
  includes the RPC portmapper (to support NFSv3) and Oracle*TNS
  helpers.</changelog>
<changelog author="sbrabec@suse.cz" date="1353412800">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.1
  * conntrack: add support to dump the dying and unconfirmed list via
  ctnetlink
  * conntrackd: fix deadlock due to wrong nested signal blocking</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.2
  * This release includes bugfixes and the connlabel support.</changelog>
<changelog author="astieger@suse.com" date="1444046400">- Fix a possible crash if conntrackd sees DCCP, SCTP and ICMPv6
  traffic and the corresponding kernel modules that track this
  traffic are not available. (bsc#942149, CVE-2015-6496)
  adding CVE-2015-6496.patch</changelog>

</package>
<package pkgid="b0e191a6fd07d9bc46f9e4749fa68aac09bf774c5f4b97320c58c18407c3d197" name="conntrack-tools" arch="x86_64">
    <version epoch="0" ver="1.4.2" rel="2.3.1"/>

<changelog author="bitshuffler #suse@irc.freenode.org" date="1253448000">- Updated to 0.9.13</changelog>
<changelog author="jengelh@medozas.de" date="1266926400">- new upstream release: 0.9.14
- use %_smp_mflags
- wrap description at col 70</changelog>
<changelog author="jengelh@medozas.de" date="1279195200">- new upstream release 0.9.15
  * support for conntrack zones
  * support for TCP window scale synchronization
  * fixes to option parsing and printouts</changelog>
<changelog author="jengelh@medozas.de" date="1298808000">- new upstream release 1.0.0
  * SYN_SENT2 support for the command line tool conntrack (which was
  added in Linux kernel &gt;= 2.6.31).
  * allow to listen to update and destroy expectation events (it
  requires a Linux kernel &gt;= 2.6.37).
  * conntrack timestamping support with -o ktimestamp (this support
  requires the upcoming Linux 2.6.38).
  * one fix for conntrackd: two very consecutive commit invocations
  with option -c may result in the hang of the second commit
  invocation if the first commit did not finish yet. As a result the
  second commit invocation required a manual SIGTERM.
- Remove redundant %clean section</changelog>
<changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
<changelog author="jengelh@medozas.de" date="1325678400">- Update to new upstream release 1.0.1
  * add support for mark masks</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Update to new upstream release 1.2.1
  * Add support for NAT expectations, synchronization of expectation
  class, helper names and expect functions. Filtering by mark is
  now allowed.</changelog>
<changelog author="jengelh@inai.de" date="1338465600">- Resolve compilation failure due to missing #include</changelog>
<changelog author="jengelh@inai.de" date="1343736000">- Update to new upstream release 1.2.2
  * conntrackd: commit operation has to be synchronous
  * conntrackd: implement selective flushing for -t and -F commands</changelog>
<changelog author="jengelh@inai.de" date="1349697600">- Update to new upstream release 1.4.0
  * This release adds the user-space helper infrastructure which
  includes the RPC portmapper (to support NFSv3) and Oracle*TNS
  helpers.</changelog>
<changelog author="sbrabec@suse.cz" date="1353412800">- Verify GPG signature</changelog>
<changelog author="jengelh@inai.de" date="1362398400">- Update to new upstream release 1.4.1
  * conntrack: add support to dump the dying and unconfirmed list via
  ctnetlink
  * conntrackd: fix deadlock due to wrong nested signal blocking</changelog>
<changelog author="jengelh@inai.de" date="1375876800">- Update to new upstream release 1.4.2
  * This release includes bugfixes and the connlabel support.</changelog>
<changelog author="astieger@suse.com" date="1444046400">- Fix a possible crash if conntrackd sees DCCP, SCTP and ICMPv6
  traffic and the corresponding kernel modules that track this
  traffic are not available. (bsc#942149, CVE-2015-6496)
  adding CVE-2015-6496.patch</changelog>

</package>
<package pkgid="2cd1916b8d466843e5fc0249d7525f9746418ad950c195c8d0cb59113ad3ce46" name="coreutils" arch="i586">
    <version epoch="0" ver="8.21" rel="7.12.1"/>

<changelog author="mail@bernhard-voelker.de" date="1358683200">- Avoid segmentation fault in "join -i" with long line input
  (bnc#798541, VUL-1, CVE-2013-0223)
  * src/join.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "sort -d" and "sort -M" with long line input
  (bnc#798538, VUL-1, CVE-2013-0221)
  * src/sort.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "uniq" with long line input
  (bnc#796243, VUL-1, CVE-2013-0222)
  * src/cut.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch)
- Fix test-suite errors (bnc#798261).
  * tests/cp/fiemap-FMR: Fix path to src directory and declare
    require_valgrind_ function.
    (coreutils-cp-corrupt-fragmented-sparse.patch)
  * tests/misc/cut:
    Fix src/cut.c to properly pass output-delimiter tests.
    Synchronize cut.c related part of the i18n patch with Fedora's.
    Merge coreutils-i18n-infloop.patch into coreutils-i18n.patch.
    Merge coreutils-i18n-uninit.patch into coreutils-i18n.patch.
    In tests/misc/cut, do not replace the non-i18n error messages.
    (coreutils-i18n.patch)
  * tests/rm/ext3-perf:
    This test failed due to heavy parallel CPU and/or disk load because it
    is based on timeouts. Do not run the test-suite with 'make -jN.
    (coreutils.spec, coreutils-testsuite.spec)
  * tests/du/slink:
    This test fails on OBS infrastructure and will be removed upstreams
    in coreutils-8.21 anyway. Skip the test until we upgrade.
    Upstream discussion:
    http://lists.gnu.org/archive/html/coreutils/2013-01/msg00053.html
    (coreutils-skip-du-slink-test.patch)
  * Further spec changes:
    Run more tests: also run "very expensive" tests; add acl, python-pyinotify,
    strace and valgrind to the build requirements.
    Remove patch5 and patch6 as they are now merged into coreutils-i18n.patch
    (see above).
    (coreutils.spec, coreutils-testsuite.spec)
- Maintenance changes:
  (coreutils.spec, coreutils-testsuite.spec)
  * Add perl and texinfo to the build requirements as they are needed to
    re-generate the man pages and the texinfo documentation.
  * Remove already-active "-Wall" compiler option from CFLAGS variable.
  * Install the compressed test-suite.log into the documentation directory
    of the coreutils-testsuite package (section %check and %files).
  * Properly guard the spec sections for the coreutils and the
    coreutils-testsuite package.
  * Update patches to reflect new line numbers.</changelog>
<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>
<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392000">- stat,tail: support new file system types (bnc#856644)
  (coreutils-stat-tail-new-filesystems.patch): Add patch
  squashing three commits from upstream.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392001">- Fix 2 major regressions in sort.
  (coreutils-i18n.patch)
  Both introduced by the "fix multibyte incompabilities" merge.
  * Fix sorting by non-first field (rh#1003544)
    Before, sort would have sorted the input by the 1st field
    instead of the second as requested:
    printf "%s\n" 'x  A 1' 'x  B 1' 'xx A 2' 'xx B 2' | sort -k2
  * Fix "sort always sorts in C locale" (bnc#857262, rh#1046735,
    rh#1001775)
    Before, the non-collated input would have output first:
    printf "%s\n" ą a b c ć ł z ż ź | LC_ALL=pl_PL.UTF-8 sort
- Refresh later patches:
  (coreutils-invalid-ids.patch): Refresh patch.
  (coreutils-remove_hostname_documentation.patch): Likewise.
  (coreutils-remove_kill_documentation.patch): Likewise.
  (coreutils-stat-tail-new-filesystems.patch): Likewise.
  (coreutils-sysinfo.patch): Likewise.
  (longlong-aarch64.patch): Likewise, with -p0.
  (coreutils.spec,coreutils-testsuite.spec): Remove the -p1 option
  for applying the above aarch64 %patch17.</changelog>

</package>
<package pkgid="889afc089504fcc50746911612cccd7115387a50e43390f4294576733e82caa0" name="coreutils" arch="i586">
    <version epoch="0" ver="8.21" rel="7.16.1"/>

<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>
<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392000">- stat,tail: support new file system types (bnc#856644)
  (coreutils-stat-tail-new-filesystems.patch): Add patch
  squashing three commits from upstream.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392001">- Fix 2 major regressions in sort.
  (coreutils-i18n.patch)
  Both introduced by the "fix multibyte incompabilities" merge.
  * Fix sorting by non-first field (rh#1003544)
    Before, sort would have sorted the input by the 1st field
    instead of the second as requested:
    printf "%s\n" 'x  A 1' 'x  B 1' 'xx A 2' 'xx B 2' | sort -k2
  * Fix "sort always sorts in C locale" (bnc#857262, rh#1046735,
    rh#1001775)
    Before, the non-collated input would have output first:
    printf "%s\n" ą a b c ć ł z ż ź | LC_ALL=pl_PL.UTF-8 sort
- Refresh later patches:
  (coreutils-invalid-ids.patch): Refresh patch.
  (coreutils-remove_hostname_documentation.patch): Likewise.
  (coreutils-remove_kill_documentation.patch): Likewise.
  (coreutils-stat-tail-new-filesystems.patch): Likewise.
  (coreutils-sysinfo.patch): Likewise.
  (longlong-aarch64.patch): Likewise, with -p0.
  (coreutils.spec,coreutils-testsuite.spec): Remove the -p1 option
  for applying the above aarch64 %patch17.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1394971200">- Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
  date: fix crash or infinite loop when parsing a malformed TZ="".
- Add upstream patch (gnu#17010, gnu#14116):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
  to avoid that ln(1) segfaults for an empty, relative target.
  Also fixes updating of existing symlinks with --relative.
- Avoid another false sort test failure (coreutils-i18n.patch):
  tests/misc/sort.pl: skip some multi-byte test cases (20a,21a).</changelog>

</package>
<package pkgid="c4c3a13849bf3b73b0664b7f8f70da328475fbb0cab869d5248eb892796e6014" name="coreutils" arch="i586">
    <version epoch="0" ver="8.21" rel="7.4.1"/>

<changelog author="pth@suse.de" date="1352376000">- Add the missing parts in coreutil.spec so that the testsuite is
  only run when coreutils-testsuite is built. Also add additional
  BuildRequires for the testsuite.</changelog>
<changelog author="idonmez@suse.com" date="1353326400">- Statically link to gmp otherwise expr depends on gmp and gmp
  configure script depends on expr which creates a build cycle.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1354622400">- Update default posix version to 200112 (bnc#783352).
- Add coreutils-df-always-hide-rootfs.patch:
  Hide rootfs in df (df not using yet /proc/self/mountinfo).</changelog>
<changelog author="pth@suse.de" date="1357819200">- Don't call autoreconf on distributions older then 12.0
  because their autoconf is too old, so also patch Makefile.in
  in addition to Makefile.am where needed.</changelog>
<changelog author="phisama@suse.de" date="1357819201">- Hardcode the name passed to find_lang so that it works for
  coreutils-testsuite too.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1358683200">- Avoid segmentation fault in "join -i" with long line input
  (bnc#798541, VUL-1, CVE-2013-0223)
  * src/join.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "sort -d" and "sort -M" with long line input
  (bnc#798538, VUL-1, CVE-2013-0221)
  * src/sort.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "uniq" with long line input
  (bnc#796243, VUL-1, CVE-2013-0222)
  * src/cut.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch)
- Fix test-suite errors (bnc#798261).
  * tests/cp/fiemap-FMR: Fix path to src directory and declare
    require_valgrind_ function.
    (coreutils-cp-corrupt-fragmented-sparse.patch)
  * tests/misc/cut:
    Fix src/cut.c to properly pass output-delimiter tests.
    Synchronize cut.c related part of the i18n patch with Fedora's.
    Merge coreutils-i18n-infloop.patch into coreutils-i18n.patch.
    Merge coreutils-i18n-uninit.patch into coreutils-i18n.patch.
    In tests/misc/cut, do not replace the non-i18n error messages.
    (coreutils-i18n.patch)
  * tests/rm/ext3-perf:
    This test failed due to heavy parallel CPU and/or disk load because it
    is based on timeouts. Do not run the test-suite with 'make -jN.
    (coreutils.spec, coreutils-testsuite.spec)
  * tests/du/slink:
    This test fails on OBS infrastructure and will be removed upstreams
    in coreutils-8.21 anyway. Skip the test until we upgrade.
    Upstream discussion:
    http://lists.gnu.org/archive/html/coreutils/2013-01/msg00053.html
    (coreutils-skip-du-slink-test.patch)
  * Further spec changes:
    Run more tests: also run "very expensive" tests; add acl, python-pyinotify,
    strace and valgrind to the build requirements.
    Remove patch5 and patch6 as they are now merged into coreutils-i18n.patch
    (see above).
    (coreutils.spec, coreutils-testsuite.spec)
- Maintenance changes:
  (coreutils.spec, coreutils-testsuite.spec)
  * Add perl and texinfo to the build requirements as they are needed to
    re-generate the man pages and the texinfo documentation.
  * Remove already-active "-Wall" compiler option from CFLAGS variable.
  * Install the compressed test-suite.log into the documentation directory
    of the coreutils-testsuite package (section %check and %files).
  * Properly guard the spec sections for the coreutils and the
    coreutils-testsuite package.
  * Update patches to reflect new line numbers.</changelog>
<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>

</package>
<package pkgid="71029704203d026bcf5c9ab0db3355e4d02587ba3d581ec7e8beaa171f0d2313" name="coreutils" arch="i586">
    <version epoch="0" ver="8.21" rel="7.8.1"/>

<changelog author="pth@suse.de" date="1357819200">- Don't call autoreconf on distributions older then 12.0
  because their autoconf is too old, so also patch Makefile.in
  in addition to Makefile.am where needed.</changelog>
<changelog author="phisama@suse.de" date="1357819201">- Hardcode the name passed to find_lang so that it works for
  coreutils-testsuite too.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1358683200">- Avoid segmentation fault in "join -i" with long line input
  (bnc#798541, VUL-1, CVE-2013-0223)
  * src/join.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "sort -d" and "sort -M" with long line input
  (bnc#798538, VUL-1, CVE-2013-0221)
  * src/sort.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "uniq" with long line input
  (bnc#796243, VUL-1, CVE-2013-0222)
  * src/cut.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch)
- Fix test-suite errors (bnc#798261).
  * tests/cp/fiemap-FMR: Fix path to src directory and declare
    require_valgrind_ function.
    (coreutils-cp-corrupt-fragmented-sparse.patch)
  * tests/misc/cut:
    Fix src/cut.c to properly pass output-delimiter tests.
    Synchronize cut.c related part of the i18n patch with Fedora's.
    Merge coreutils-i18n-infloop.patch into coreutils-i18n.patch.
    Merge coreutils-i18n-uninit.patch into coreutils-i18n.patch.
    In tests/misc/cut, do not replace the non-i18n error messages.
    (coreutils-i18n.patch)
  * tests/rm/ext3-perf:
    This test failed due to heavy parallel CPU and/or disk load because it
    is based on timeouts. Do not run the test-suite with 'make -jN.
    (coreutils.spec, coreutils-testsuite.spec)
  * tests/du/slink:
    This test fails on OBS infrastructure and will be removed upstreams
    in coreutils-8.21 anyway. Skip the test until we upgrade.
    Upstream discussion:
    http://lists.gnu.org/archive/html/coreutils/2013-01/msg00053.html
    (coreutils-skip-du-slink-test.patch)
  * Further spec changes:
    Run more tests: also run "very expensive" tests; add acl, python-pyinotify,
    strace and valgrind to the build requirements.
    Remove patch5 and patch6 as they are now merged into coreutils-i18n.patch
    (see above).
    (coreutils.spec, coreutils-testsuite.spec)
- Maintenance changes:
  (coreutils.spec, coreutils-testsuite.spec)
  * Add perl and texinfo to the build requirements as they are needed to
    re-generate the man pages and the texinfo documentation.
  * Remove already-active "-Wall" compiler option from CFLAGS variable.
  * Install the compressed test-suite.log into the documentation directory
    of the coreutils-testsuite package (section %check and %files).
  * Properly guard the spec sections for the coreutils and the
    coreutils-testsuite package.
  * Update patches to reflect new line numbers.</changelog>
<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>
<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>

</package>
<package pkgid="1c38b24fca091b83b1287c6e9d9a6ad7b5c49443d77d340ce967c74b62af92c7" name="coreutils" arch="src">
    <version epoch="0" ver="8.21" rel="7.12.1"/>

<changelog author="mail@bernhard-voelker.de" date="1358683200">- Avoid segmentation fault in "join -i" with long line input
  (bnc#798541, VUL-1, CVE-2013-0223)
  * src/join.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "sort -d" and "sort -M" with long line input
  (bnc#798538, VUL-1, CVE-2013-0221)
  * src/sort.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "uniq" with long line input
  (bnc#796243, VUL-1, CVE-2013-0222)
  * src/cut.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch)
- Fix test-suite errors (bnc#798261).
  * tests/cp/fiemap-FMR: Fix path to src directory and declare
    require_valgrind_ function.
    (coreutils-cp-corrupt-fragmented-sparse.patch)
  * tests/misc/cut:
    Fix src/cut.c to properly pass output-delimiter tests.
    Synchronize cut.c related part of the i18n patch with Fedora's.
    Merge coreutils-i18n-infloop.patch into coreutils-i18n.patch.
    Merge coreutils-i18n-uninit.patch into coreutils-i18n.patch.
    In tests/misc/cut, do not replace the non-i18n error messages.
    (coreutils-i18n.patch)
  * tests/rm/ext3-perf:
    This test failed due to heavy parallel CPU and/or disk load because it
    is based on timeouts. Do not run the test-suite with 'make -jN.
    (coreutils.spec, coreutils-testsuite.spec)
  * tests/du/slink:
    This test fails on OBS infrastructure and will be removed upstreams
    in coreutils-8.21 anyway. Skip the test until we upgrade.
    Upstream discussion:
    http://lists.gnu.org/archive/html/coreutils/2013-01/msg00053.html
    (coreutils-skip-du-slink-test.patch)
  * Further spec changes:
    Run more tests: also run "very expensive" tests; add acl, python-pyinotify,
    strace and valgrind to the build requirements.
    Remove patch5 and patch6 as they are now merged into coreutils-i18n.patch
    (see above).
    (coreutils.spec, coreutils-testsuite.spec)
- Maintenance changes:
  (coreutils.spec, coreutils-testsuite.spec)
  * Add perl and texinfo to the build requirements as they are needed to
    re-generate the man pages and the texinfo documentation.
  * Remove already-active "-Wall" compiler option from CFLAGS variable.
  * Install the compressed test-suite.log into the documentation directory
    of the coreutils-testsuite package (section %check and %files).
  * Properly guard the spec sections for the coreutils and the
    coreutils-testsuite package.
  * Update patches to reflect new line numbers.</changelog>
<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>
<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392000">- stat,tail: support new file system types (bnc#856644)
  (coreutils-stat-tail-new-filesystems.patch): Add patch
  squashing three commits from upstream.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392001">- Fix 2 major regressions in sort.
  (coreutils-i18n.patch)
  Both introduced by the "fix multibyte incompabilities" merge.
  * Fix sorting by non-first field (rh#1003544)
    Before, sort would have sorted the input by the 1st field
    instead of the second as requested:
    printf "%s\n" 'x  A 1' 'x  B 1' 'xx A 2' 'xx B 2' | sort -k2
  * Fix "sort always sorts in C locale" (bnc#857262, rh#1046735,
    rh#1001775)
    Before, the non-collated input would have output first:
    printf "%s\n" ą a b c ć ł z ż ź | LC_ALL=pl_PL.UTF-8 sort
- Refresh later patches:
  (coreutils-invalid-ids.patch): Refresh patch.
  (coreutils-remove_hostname_documentation.patch): Likewise.
  (coreutils-remove_kill_documentation.patch): Likewise.
  (coreutils-stat-tail-new-filesystems.patch): Likewise.
  (coreutils-sysinfo.patch): Likewise.
  (longlong-aarch64.patch): Likewise, with -p0.
  (coreutils.spec,coreutils-testsuite.spec): Remove the -p1 option
  for applying the above aarch64 %patch17.</changelog>

</package>
<package pkgid="2e2e951af469195109566bd330947d876e2fa64dcc45bef60e52f4b94df4fb33" name="coreutils" arch="src">
    <version epoch="0" ver="8.21" rel="7.16.1"/>

<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>
<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392000">- stat,tail: support new file system types (bnc#856644)
  (coreutils-stat-tail-new-filesystems.patch): Add patch
  squashing three commits from upstream.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392001">- Fix 2 major regressions in sort.
  (coreutils-i18n.patch)
  Both introduced by the "fix multibyte incompabilities" merge.
  * Fix sorting by non-first field (rh#1003544)
    Before, sort would have sorted the input by the 1st field
    instead of the second as requested:
    printf "%s\n" 'x  A 1' 'x  B 1' 'xx A 2' 'xx B 2' | sort -k2
  * Fix "sort always sorts in C locale" (bnc#857262, rh#1046735,
    rh#1001775)
    Before, the non-collated input would have output first:
    printf "%s\n" ą a b c ć ł z ż ź | LC_ALL=pl_PL.UTF-8 sort
- Refresh later patches:
  (coreutils-invalid-ids.patch): Refresh patch.
  (coreutils-remove_hostname_documentation.patch): Likewise.
  (coreutils-remove_kill_documentation.patch): Likewise.
  (coreutils-stat-tail-new-filesystems.patch): Likewise.
  (coreutils-sysinfo.patch): Likewise.
  (longlong-aarch64.patch): Likewise, with -p0.
  (coreutils.spec,coreutils-testsuite.spec): Remove the -p1 option
  for applying the above aarch64 %patch17.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1394971200">- Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
  date: fix crash or infinite loop when parsing a malformed TZ="".
- Add upstream patch (gnu#17010, gnu#14116):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
  to avoid that ln(1) segfaults for an empty, relative target.
  Also fixes updating of existing symlinks with --relative.
- Avoid another false sort test failure (coreutils-i18n.patch):
  tests/misc/sort.pl: skip some multi-byte test cases (20a,21a).</changelog>

</package>
<package pkgid="b03bf27bcc70bfbf4c67bd6e901bad5008ac8892abd67076bd289cb28e81c67b" name="coreutils" arch="src">
    <version epoch="0" ver="8.21" rel="7.4.1"/>

<changelog author="pth@suse.de" date="1352376000">- Add the missing parts in coreutil.spec so that the testsuite is
  only run when coreutils-testsuite is built. Also add additional
  BuildRequires for the testsuite.</changelog>
<changelog author="idonmez@suse.com" date="1353326400">- Statically link to gmp otherwise expr depends on gmp and gmp
  configure script depends on expr which creates a build cycle.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1354622400">- Update default posix version to 200112 (bnc#783352).
- Add coreutils-df-always-hide-rootfs.patch:
  Hide rootfs in df (df not using yet /proc/self/mountinfo).</changelog>
<changelog author="pth@suse.de" date="1357819200">- Don't call autoreconf on distributions older then 12.0
  because their autoconf is too old, so also patch Makefile.in
  in addition to Makefile.am where needed.</changelog>
<changelog author="phisama@suse.de" date="1357819201">- Hardcode the name passed to find_lang so that it works for
  coreutils-testsuite too.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1358683200">- Avoid segmentation fault in "join -i" with long line input
  (bnc#798541, VUL-1, CVE-2013-0223)
  * src/join.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "sort -d" and "sort -M" with long line input
  (bnc#798538, VUL-1, CVE-2013-0221)
  * src/sort.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "uniq" with long line input
  (bnc#796243, VUL-1, CVE-2013-0222)
  * src/cut.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch)
- Fix test-suite errors (bnc#798261).
  * tests/cp/fiemap-FMR: Fix path to src directory and declare
    require_valgrind_ function.
    (coreutils-cp-corrupt-fragmented-sparse.patch)
  * tests/misc/cut:
    Fix src/cut.c to properly pass output-delimiter tests.
    Synchronize cut.c related part of the i18n patch with Fedora's.
    Merge coreutils-i18n-infloop.patch into coreutils-i18n.patch.
    Merge coreutils-i18n-uninit.patch into coreutils-i18n.patch.
    In tests/misc/cut, do not replace the non-i18n error messages.
    (coreutils-i18n.patch)
  * tests/rm/ext3-perf:
    This test failed due to heavy parallel CPU and/or disk load because it
    is based on timeouts. Do not run the test-suite with 'make -jN.
    (coreutils.spec, coreutils-testsuite.spec)
  * tests/du/slink:
    This test fails on OBS infrastructure and will be removed upstreams
    in coreutils-8.21 anyway. Skip the test until we upgrade.
    Upstream discussion:
    http://lists.gnu.org/archive/html/coreutils/2013-01/msg00053.html
    (coreutils-skip-du-slink-test.patch)
  * Further spec changes:
    Run more tests: also run "very expensive" tests; add acl, python-pyinotify,
    strace and valgrind to the build requirements.
    Remove patch5 and patch6 as they are now merged into coreutils-i18n.patch
    (see above).
    (coreutils.spec, coreutils-testsuite.spec)
- Maintenance changes:
  (coreutils.spec, coreutils-testsuite.spec)
  * Add perl and texinfo to the build requirements as they are needed to
    re-generate the man pages and the texinfo documentation.
  * Remove already-active "-Wall" compiler option from CFLAGS variable.
  * Install the compressed test-suite.log into the documentation directory
    of the coreutils-testsuite package (section %check and %files).
  * Properly guard the spec sections for the coreutils and the
    coreutils-testsuite package.
  * Update patches to reflect new line numbers.</changelog>
<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>

</package>
<package pkgid="69ab04c506c0376590750174d00052222be26cebf693f16751493bc7cd10b5b0" name="coreutils" arch="src">
    <version epoch="0" ver="8.21" rel="7.8.1"/>

<changelog author="pth@suse.de" date="1357819200">- Don't call autoreconf on distributions older then 12.0
  because their autoconf is too old, so also patch Makefile.in
  in addition to Makefile.am where needed.</changelog>
<changelog author="phisama@suse.de" date="1357819201">- Hardcode the name passed to find_lang so that it works for
  coreutils-testsuite too.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1358683200">- Avoid segmentation fault in "join -i" with long line input
  (bnc#798541, VUL-1, CVE-2013-0223)
  * src/join.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "sort -d" and "sort -M" with long line input
  (bnc#798538, VUL-1, CVE-2013-0221)
  * src/sort.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "uniq" with long line input
  (bnc#796243, VUL-1, CVE-2013-0222)
  * src/cut.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch)
- Fix test-suite errors (bnc#798261).
  * tests/cp/fiemap-FMR: Fix path to src directory and declare
    require_valgrind_ function.
    (coreutils-cp-corrupt-fragmented-sparse.patch)
  * tests/misc/cut:
    Fix src/cut.c to properly pass output-delimiter tests.
    Synchronize cut.c related part of the i18n patch with Fedora's.
    Merge coreutils-i18n-infloop.patch into coreutils-i18n.patch.
    Merge coreutils-i18n-uninit.patch into coreutils-i18n.patch.
    In tests/misc/cut, do not replace the non-i18n error messages.
    (coreutils-i18n.patch)
  * tests/rm/ext3-perf:
    This test failed due to heavy parallel CPU and/or disk load because it
    is based on timeouts. Do not run the test-suite with 'make -jN.
    (coreutils.spec, coreutils-testsuite.spec)
  * tests/du/slink:
    This test fails on OBS infrastructure and will be removed upstreams
    in coreutils-8.21 anyway. Skip the test until we upgrade.
    Upstream discussion:
    http://lists.gnu.org/archive/html/coreutils/2013-01/msg00053.html
    (coreutils-skip-du-slink-test.patch)
  * Further spec changes:
    Run more tests: also run "very expensive" tests; add acl, python-pyinotify,
    strace and valgrind to the build requirements.
    Remove patch5 and patch6 as they are now merged into coreutils-i18n.patch
    (see above).
    (coreutils.spec, coreutils-testsuite.spec)
- Maintenance changes:
  (coreutils.spec, coreutils-testsuite.spec)
  * Add perl and texinfo to the build requirements as they are needed to
    re-generate the man pages and the texinfo documentation.
  * Remove already-active "-Wall" compiler option from CFLAGS variable.
  * Install the compressed test-suite.log into the documentation directory
    of the coreutils-testsuite package (section %check and %files).
  * Properly guard the spec sections for the coreutils and the
    coreutils-testsuite package.
  * Update patches to reflect new line numbers.</changelog>
<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>
<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>

</package>
<package pkgid="3b61a23929915a4720ad232bec68b563527c00839113b212b24827727e0145a0" name="coreutils" arch="x86_64">
    <version epoch="0" ver="8.21" rel="7.12.1"/>

<changelog author="mail@bernhard-voelker.de" date="1358683200">- Avoid segmentation fault in "join -i" with long line input
  (bnc#798541, VUL-1, CVE-2013-0223)
  * src/join.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "sort -d" and "sort -M" with long line input
  (bnc#798538, VUL-1, CVE-2013-0221)
  * src/sort.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "uniq" with long line input
  (bnc#796243, VUL-1, CVE-2013-0222)
  * src/cut.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch)
- Fix test-suite errors (bnc#798261).
  * tests/cp/fiemap-FMR: Fix path to src directory and declare
    require_valgrind_ function.
    (coreutils-cp-corrupt-fragmented-sparse.patch)
  * tests/misc/cut:
    Fix src/cut.c to properly pass output-delimiter tests.
    Synchronize cut.c related part of the i18n patch with Fedora's.
    Merge coreutils-i18n-infloop.patch into coreutils-i18n.patch.
    Merge coreutils-i18n-uninit.patch into coreutils-i18n.patch.
    In tests/misc/cut, do not replace the non-i18n error messages.
    (coreutils-i18n.patch)
  * tests/rm/ext3-perf:
    This test failed due to heavy parallel CPU and/or disk load because it
    is based on timeouts. Do not run the test-suite with 'make -jN.
    (coreutils.spec, coreutils-testsuite.spec)
  * tests/du/slink:
    This test fails on OBS infrastructure and will be removed upstreams
    in coreutils-8.21 anyway. Skip the test until we upgrade.
    Upstream discussion:
    http://lists.gnu.org/archive/html/coreutils/2013-01/msg00053.html
    (coreutils-skip-du-slink-test.patch)
  * Further spec changes:
    Run more tests: also run "very expensive" tests; add acl, python-pyinotify,
    strace and valgrind to the build requirements.
    Remove patch5 and patch6 as they are now merged into coreutils-i18n.patch
    (see above).
    (coreutils.spec, coreutils-testsuite.spec)
- Maintenance changes:
  (coreutils.spec, coreutils-testsuite.spec)
  * Add perl and texinfo to the build requirements as they are needed to
    re-generate the man pages and the texinfo documentation.
  * Remove already-active "-Wall" compiler option from CFLAGS variable.
  * Install the compressed test-suite.log into the documentation directory
    of the coreutils-testsuite package (section %check and %files).
  * Properly guard the spec sections for the coreutils and the
    coreutils-testsuite package.
  * Update patches to reflect new line numbers.</changelog>
<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>
<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392000">- stat,tail: support new file system types (bnc#856644)
  (coreutils-stat-tail-new-filesystems.patch): Add patch
  squashing three commits from upstream.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392001">- Fix 2 major regressions in sort.
  (coreutils-i18n.patch)
  Both introduced by the "fix multibyte incompabilities" merge.
  * Fix sorting by non-first field (rh#1003544)
    Before, sort would have sorted the input by the 1st field
    instead of the second as requested:
    printf "%s\n" 'x  A 1' 'x  B 1' 'xx A 2' 'xx B 2' | sort -k2
  * Fix "sort always sorts in C locale" (bnc#857262, rh#1046735,
    rh#1001775)
    Before, the non-collated input would have output first:
    printf "%s\n" ą a b c ć ł z ż ź | LC_ALL=pl_PL.UTF-8 sort
- Refresh later patches:
  (coreutils-invalid-ids.patch): Refresh patch.
  (coreutils-remove_hostname_documentation.patch): Likewise.
  (coreutils-remove_kill_documentation.patch): Likewise.
  (coreutils-stat-tail-new-filesystems.patch): Likewise.
  (coreutils-sysinfo.patch): Likewise.
  (longlong-aarch64.patch): Likewise, with -p0.
  (coreutils.spec,coreutils-testsuite.spec): Remove the -p1 option
  for applying the above aarch64 %patch17.</changelog>

</package>
<package pkgid="fc4901ec40668194ebafd0f7541c111580aabe43b4594478ae591f7ab95eabb0" name="coreutils" arch="x86_64">
    <version epoch="0" ver="8.21" rel="7.16.1"/>

<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>
<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392000">- stat,tail: support new file system types (bnc#856644)
  (coreutils-stat-tail-new-filesystems.patch): Add patch
  squashing three commits from upstream.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392001">- Fix 2 major regressions in sort.
  (coreutils-i18n.patch)
  Both introduced by the "fix multibyte incompabilities" merge.
  * Fix sorting by non-first field (rh#1003544)
    Before, sort would have sorted the input by the 1st field
    instead of the second as requested:
    printf "%s\n" 'x  A 1' 'x  B 1' 'xx A 2' 'xx B 2' | sort -k2
  * Fix "sort always sorts in C locale" (bnc#857262, rh#1046735,
    rh#1001775)
    Before, the non-collated input would have output first:
    printf "%s\n" ą a b c ć ł z ż ź | LC_ALL=pl_PL.UTF-8 sort
- Refresh later patches:
  (coreutils-invalid-ids.patch): Refresh patch.
  (coreutils-remove_hostname_documentation.patch): Likewise.
  (coreutils-remove_kill_documentation.patch): Likewise.
  (coreutils-stat-tail-new-filesystems.patch): Likewise.
  (coreutils-sysinfo.patch): Likewise.
  (longlong-aarch64.patch): Likewise, with -p0.
  (coreutils.spec,coreutils-testsuite.spec): Remove the -p1 option
  for applying the above aarch64 %patch17.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1394971200">- Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
  date: fix crash or infinite loop when parsing a malformed TZ="".
- Add upstream patch (gnu#17010, gnu#14116):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
  to avoid that ln(1) segfaults for an empty, relative target.
  Also fixes updating of existing symlinks with --relative.
- Avoid another false sort test failure (coreutils-i18n.patch):
  tests/misc/sort.pl: skip some multi-byte test cases (20a,21a).</changelog>

</package>
<package pkgid="d47538fcb2ce9e8106fcbf033b1a41b337935b3c14bee2d2747167010109617d" name="coreutils" arch="x86_64">
    <version epoch="0" ver="8.21" rel="7.4.1"/>

<changelog author="pth@suse.de" date="1352376000">- Add the missing parts in coreutil.spec so that the testsuite is
  only run when coreutils-testsuite is built. Also add additional
  BuildRequires for the testsuite.</changelog>
<changelog author="idonmez@suse.com" date="1353326400">- Statically link to gmp otherwise expr depends on gmp and gmp
  configure script depends on expr which creates a build cycle.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1354622400">- Update default posix version to 200112 (bnc#783352).
- Add coreutils-df-always-hide-rootfs.patch:
  Hide rootfs in df (df not using yet /proc/self/mountinfo).</changelog>
<changelog author="pth@suse.de" date="1357819200">- Don't call autoreconf on distributions older then 12.0
  because their autoconf is too old, so also patch Makefile.in
  in addition to Makefile.am where needed.</changelog>
<changelog author="phisama@suse.de" date="1357819201">- Hardcode the name passed to find_lang so that it works for
  coreutils-testsuite too.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1358683200">- Avoid segmentation fault in "join -i" with long line input
  (bnc#798541, VUL-1, CVE-2013-0223)
  * src/join.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "sort -d" and "sort -M" with long line input
  (bnc#798538, VUL-1, CVE-2013-0221)
  * src/sort.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "uniq" with long line input
  (bnc#796243, VUL-1, CVE-2013-0222)
  * src/cut.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch)
- Fix test-suite errors (bnc#798261).
  * tests/cp/fiemap-FMR: Fix path to src directory and declare
    require_valgrind_ function.
    (coreutils-cp-corrupt-fragmented-sparse.patch)
  * tests/misc/cut:
    Fix src/cut.c to properly pass output-delimiter tests.
    Synchronize cut.c related part of the i18n patch with Fedora's.
    Merge coreutils-i18n-infloop.patch into coreutils-i18n.patch.
    Merge coreutils-i18n-uninit.patch into coreutils-i18n.patch.
    In tests/misc/cut, do not replace the non-i18n error messages.
    (coreutils-i18n.patch)
  * tests/rm/ext3-perf:
    This test failed due to heavy parallel CPU and/or disk load because it
    is based on timeouts. Do not run the test-suite with 'make -jN.
    (coreutils.spec, coreutils-testsuite.spec)
  * tests/du/slink:
    This test fails on OBS infrastructure and will be removed upstreams
    in coreutils-8.21 anyway. Skip the test until we upgrade.
    Upstream discussion:
    http://lists.gnu.org/archive/html/coreutils/2013-01/msg00053.html
    (coreutils-skip-du-slink-test.patch)
  * Further spec changes:
    Run more tests: also run "very expensive" tests; add acl, python-pyinotify,
    strace and valgrind to the build requirements.
    Remove patch5 and patch6 as they are now merged into coreutils-i18n.patch
    (see above).
    (coreutils.spec, coreutils-testsuite.spec)
- Maintenance changes:
  (coreutils.spec, coreutils-testsuite.spec)
  * Add perl and texinfo to the build requirements as they are needed to
    re-generate the man pages and the texinfo documentation.
  * Remove already-active "-Wall" compiler option from CFLAGS variable.
  * Install the compressed test-suite.log into the documentation directory
    of the coreutils-testsuite package (section %check and %files).
  * Properly guard the spec sections for the coreutils and the
    coreutils-testsuite package.
  * Update patches to reflect new line numbers.</changelog>
<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>

</package>
<package pkgid="d92a8605a8a2f3712299c43fe85fc8cdfa6f014c83b63ce79eabfb3e2d802a10" name="coreutils" arch="x86_64">
    <version epoch="0" ver="8.21" rel="7.8.1"/>

<changelog author="pth@suse.de" date="1357819200">- Don't call autoreconf on distributions older then 12.0
  because their autoconf is too old, so also patch Makefile.in
  in addition to Makefile.am where needed.</changelog>
<changelog author="phisama@suse.de" date="1357819201">- Hardcode the name passed to find_lang so that it works for
  coreutils-testsuite too.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1358683200">- Avoid segmentation fault in "join -i" with long line input
  (bnc#798541, VUL-1, CVE-2013-0223)
  * src/join.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "sort -d" and "sort -M" with long line input
  (bnc#798538, VUL-1, CVE-2013-0221)
  * src/sort.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "uniq" with long line input
  (bnc#796243, VUL-1, CVE-2013-0222)
  * src/cut.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch)
- Fix test-suite errors (bnc#798261).
  * tests/cp/fiemap-FMR: Fix path to src directory and declare
    require_valgrind_ function.
    (coreutils-cp-corrupt-fragmented-sparse.patch)
  * tests/misc/cut:
    Fix src/cut.c to properly pass output-delimiter tests.
    Synchronize cut.c related part of the i18n patch with Fedora's.
    Merge coreutils-i18n-infloop.patch into coreutils-i18n.patch.
    Merge coreutils-i18n-uninit.patch into coreutils-i18n.patch.
    In tests/misc/cut, do not replace the non-i18n error messages.
    (coreutils-i18n.patch)
  * tests/rm/ext3-perf:
    This test failed due to heavy parallel CPU and/or disk load because it
    is based on timeouts. Do not run the test-suite with 'make -jN.
    (coreutils.spec, coreutils-testsuite.spec)
  * tests/du/slink:
    This test fails on OBS infrastructure and will be removed upstreams
    in coreutils-8.21 anyway. Skip the test until we upgrade.
    Upstream discussion:
    http://lists.gnu.org/archive/html/coreutils/2013-01/msg00053.html
    (coreutils-skip-du-slink-test.patch)
  * Further spec changes:
    Run more tests: also run "very expensive" tests; add acl, python-pyinotify,
    strace and valgrind to the build requirements.
    Remove patch5 and patch6 as they are now merged into coreutils-i18n.patch
    (see above).
    (coreutils.spec, coreutils-testsuite.spec)
- Maintenance changes:
  (coreutils.spec, coreutils-testsuite.spec)
  * Add perl and texinfo to the build requirements as they are needed to
    re-generate the man pages and the texinfo documentation.
  * Remove already-active "-Wall" compiler option from CFLAGS variable.
  * Install the compressed test-suite.log into the documentation directory
    of the coreutils-testsuite package (section %check and %files).
  * Properly guard the spec sections for the coreutils and the
    coreutils-testsuite package.
  * Update patches to reflect new line numbers.</changelog>
<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>
<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>

</package>
<package pkgid="5707f11317c01b42f87bfb3b058ea3df5af0609476d67edb564b70118fb20597" name="coreutils-lang" arch="noarch">
    <version epoch="0" ver="8.21" rel="7.12.1"/>

<changelog author="mail@bernhard-voelker.de" date="1358683200">- Avoid segmentation fault in "join -i" with long line input
  (bnc#798541, VUL-1, CVE-2013-0223)
  * src/join.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "sort -d" and "sort -M" with long line input
  (bnc#798538, VUL-1, CVE-2013-0221)
  * src/sort.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "uniq" with long line input
  (bnc#796243, VUL-1, CVE-2013-0222)
  * src/cut.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch)
- Fix test-suite errors (bnc#798261).
  * tests/cp/fiemap-FMR: Fix path to src directory and declare
    require_valgrind_ function.
    (coreutils-cp-corrupt-fragmented-sparse.patch)
  * tests/misc/cut:
    Fix src/cut.c to properly pass output-delimiter tests.
    Synchronize cut.c related part of the i18n patch with Fedora's.
    Merge coreutils-i18n-infloop.patch into coreutils-i18n.patch.
    Merge coreutils-i18n-uninit.patch into coreutils-i18n.patch.
    In tests/misc/cut, do not replace the non-i18n error messages.
    (coreutils-i18n.patch)
  * tests/rm/ext3-perf:
    This test failed due to heavy parallel CPU and/or disk load because it
    is based on timeouts. Do not run the test-suite with 'make -jN.
    (coreutils.spec, coreutils-testsuite.spec)
  * tests/du/slink:
    This test fails on OBS infrastructure and will be removed upstreams
    in coreutils-8.21 anyway. Skip the test until we upgrade.
    Upstream discussion:
    http://lists.gnu.org/archive/html/coreutils/2013-01/msg00053.html
    (coreutils-skip-du-slink-test.patch)
  * Further spec changes:
    Run more tests: also run "very expensive" tests; add acl, python-pyinotify,
    strace and valgrind to the build requirements.
    Remove patch5 and patch6 as they are now merged into coreutils-i18n.patch
    (see above).
    (coreutils.spec, coreutils-testsuite.spec)
- Maintenance changes:
  (coreutils.spec, coreutils-testsuite.spec)
  * Add perl and texinfo to the build requirements as they are needed to
    re-generate the man pages and the texinfo documentation.
  * Remove already-active "-Wall" compiler option from CFLAGS variable.
  * Install the compressed test-suite.log into the documentation directory
    of the coreutils-testsuite package (section %check and %files).
  * Properly guard the spec sections for the coreutils and the
    coreutils-testsuite package.
  * Update patches to reflect new line numbers.</changelog>
<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>
<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392000">- stat,tail: support new file system types (bnc#856644)
  (coreutils-stat-tail-new-filesystems.patch): Add patch
  squashing three commits from upstream.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392001">- Fix 2 major regressions in sort.
  (coreutils-i18n.patch)
  Both introduced by the "fix multibyte incompabilities" merge.
  * Fix sorting by non-first field (rh#1003544)
    Before, sort would have sorted the input by the 1st field
    instead of the second as requested:
    printf "%s\n" 'x  A 1' 'x  B 1' 'xx A 2' 'xx B 2' | sort -k2
  * Fix "sort always sorts in C locale" (bnc#857262, rh#1046735,
    rh#1001775)
    Before, the non-collated input would have output first:
    printf "%s\n" ą a b c ć ł z ż ź | LC_ALL=pl_PL.UTF-8 sort
- Refresh later patches:
  (coreutils-invalid-ids.patch): Refresh patch.
  (coreutils-remove_hostname_documentation.patch): Likewise.
  (coreutils-remove_kill_documentation.patch): Likewise.
  (coreutils-stat-tail-new-filesystems.patch): Likewise.
  (coreutils-sysinfo.patch): Likewise.
  (longlong-aarch64.patch): Likewise, with -p0.
  (coreutils.spec,coreutils-testsuite.spec): Remove the -p1 option
  for applying the above aarch64 %patch17.</changelog>

</package>
<package pkgid="ab40962ad6b279ec1558427acd405435c3174f4779c039c2d9312c358a8430b8" name="coreutils-lang" arch="noarch">
    <version epoch="0" ver="8.21" rel="7.16.1"/>

<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>
<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392000">- stat,tail: support new file system types (bnc#856644)
  (coreutils-stat-tail-new-filesystems.patch): Add patch
  squashing three commits from upstream.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1390392001">- Fix 2 major regressions in sort.
  (coreutils-i18n.patch)
  Both introduced by the "fix multibyte incompabilities" merge.
  * Fix sorting by non-first field (rh#1003544)
    Before, sort would have sorted the input by the 1st field
    instead of the second as requested:
    printf "%s\n" 'x  A 1' 'x  B 1' 'xx A 2' 'xx B 2' | sort -k2
  * Fix "sort always sorts in C locale" (bnc#857262, rh#1046735,
    rh#1001775)
    Before, the non-collated input would have output first:
    printf "%s\n" ą a b c ć ł z ż ź | LC_ALL=pl_PL.UTF-8 sort
- Refresh later patches:
  (coreutils-invalid-ids.patch): Refresh patch.
  (coreutils-remove_hostname_documentation.patch): Likewise.
  (coreutils-remove_kill_documentation.patch): Likewise.
  (coreutils-stat-tail-new-filesystems.patch): Likewise.
  (coreutils-sysinfo.patch): Likewise.
  (longlong-aarch64.patch): Likewise, with -p0.
  (coreutils.spec,coreutils-testsuite.spec): Remove the -p1 option
  for applying the above aarch64 %patch17.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1394971200">- Add upstream patch (gnu#16872):
  * coreutils-date-avoid-crash-in-TZ-parsing.patch: Add patch for
  date: fix crash or infinite loop when parsing a malformed TZ="".
- Add upstream patch (gnu#17010, gnu#14116):
  * coreutils-ln-avoid-segfault-for-empty-target.patch: Add patch
  to avoid that ln(1) segfaults for an empty, relative target.
  Also fixes updating of existing symlinks with --relative.
- Avoid another false sort test failure (coreutils-i18n.patch):
  tests/misc/sort.pl: skip some multi-byte test cases (20a,21a).</changelog>

</package>
<package pkgid="802aa77b2e19076b9616888ae1c6c1cf1e458a0cfff1607cc843b65c0adc40c5" name="coreutils-lang" arch="noarch">
    <version epoch="0" ver="8.21" rel="7.4.1"/>

<changelog author="pth@suse.de" date="1352376000">- Add the missing parts in coreutil.spec so that the testsuite is
  only run when coreutils-testsuite is built. Also add additional
  BuildRequires for the testsuite.</changelog>
<changelog author="idonmez@suse.com" date="1353326400">- Statically link to gmp otherwise expr depends on gmp and gmp
  configure script depends on expr which creates a build cycle.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1354622400">- Update default posix version to 200112 (bnc#783352).
- Add coreutils-df-always-hide-rootfs.patch:
  Hide rootfs in df (df not using yet /proc/self/mountinfo).</changelog>
<changelog author="pth@suse.de" date="1357819200">- Don't call autoreconf on distributions older then 12.0
  because their autoconf is too old, so also patch Makefile.in
  in addition to Makefile.am where needed.</changelog>
<changelog author="phisama@suse.de" date="1357819201">- Hardcode the name passed to find_lang so that it works for
  coreutils-testsuite too.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1358683200">- Avoid segmentation fault in "join -i" with long line input
  (bnc#798541, VUL-1, CVE-2013-0223)
  * src/join.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "sort -d" and "sort -M" with long line input
  (bnc#798538, VUL-1, CVE-2013-0221)
  * src/sort.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "uniq" with long line input
  (bnc#796243, VUL-1, CVE-2013-0222)
  * src/cut.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch)
- Fix test-suite errors (bnc#798261).
  * tests/cp/fiemap-FMR: Fix path to src directory and declare
    require_valgrind_ function.
    (coreutils-cp-corrupt-fragmented-sparse.patch)
  * tests/misc/cut:
    Fix src/cut.c to properly pass output-delimiter tests.
    Synchronize cut.c related part of the i18n patch with Fedora's.
    Merge coreutils-i18n-infloop.patch into coreutils-i18n.patch.
    Merge coreutils-i18n-uninit.patch into coreutils-i18n.patch.
    In tests/misc/cut, do not replace the non-i18n error messages.
    (coreutils-i18n.patch)
  * tests/rm/ext3-perf:
    This test failed due to heavy parallel CPU and/or disk load because it
    is based on timeouts. Do not run the test-suite with 'make -jN.
    (coreutils.spec, coreutils-testsuite.spec)
  * tests/du/slink:
    This test fails on OBS infrastructure and will be removed upstreams
    in coreutils-8.21 anyway. Skip the test until we upgrade.
    Upstream discussion:
    http://lists.gnu.org/archive/html/coreutils/2013-01/msg00053.html
    (coreutils-skip-du-slink-test.patch)
  * Further spec changes:
    Run more tests: also run "very expensive" tests; add acl, python-pyinotify,
    strace and valgrind to the build requirements.
    Remove patch5 and patch6 as they are now merged into coreutils-i18n.patch
    (see above).
    (coreutils.spec, coreutils-testsuite.spec)
- Maintenance changes:
  (coreutils.spec, coreutils-testsuite.spec)
  * Add perl and texinfo to the build requirements as they are needed to
    re-generate the man pages and the texinfo documentation.
  * Remove already-active "-Wall" compiler option from CFLAGS variable.
  * Install the compressed test-suite.log into the documentation directory
    of the coreutils-testsuite package (section %check and %files).
  * Properly guard the spec sections for the coreutils and the
    coreutils-testsuite package.
  * Update patches to reflect new line numbers.</changelog>
<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>

</package>
<package pkgid="234dbe612d6848567b7abd4be22be055444276df9799ed526675df4e5da525da" name="coreutils-lang" arch="noarch">
    <version epoch="0" ver="8.21" rel="7.8.1"/>

<changelog author="pth@suse.de" date="1357819200">- Don't call autoreconf on distributions older then 12.0
  because their autoconf is too old, so also patch Makefile.in
  in addition to Makefile.am where needed.</changelog>
<changelog author="phisama@suse.de" date="1357819201">- Hardcode the name passed to find_lang so that it works for
  coreutils-testsuite too.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1358683200">- Avoid segmentation fault in "join -i" with long line input
  (bnc#798541, VUL-1, CVE-2013-0223)
  * src/join.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "sort -d" and "sort -M" with long line input
  (bnc#798538, VUL-1, CVE-2013-0221)
  * src/sort.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch, from Philipp Thomas &lt;pth@suse.de&gt;)
- Avoid segmentation fault in "uniq" with long line input
  (bnc#796243, VUL-1, CVE-2013-0222)
  * src/cut.c: Instead of usig unreliable alloca() stack allocation,
    use heap allocation via xmalloc()+free().
    (coreutils-i18n.patch)
- Fix test-suite errors (bnc#798261).
  * tests/cp/fiemap-FMR: Fix path to src directory and declare
    require_valgrind_ function.
    (coreutils-cp-corrupt-fragmented-sparse.patch)
  * tests/misc/cut:
    Fix src/cut.c to properly pass output-delimiter tests.
    Synchronize cut.c related part of the i18n patch with Fedora's.
    Merge coreutils-i18n-infloop.patch into coreutils-i18n.patch.
    Merge coreutils-i18n-uninit.patch into coreutils-i18n.patch.
    In tests/misc/cut, do not replace the non-i18n error messages.
    (coreutils-i18n.patch)
  * tests/rm/ext3-perf:
    This test failed due to heavy parallel CPU and/or disk load because it
    is based on timeouts. Do not run the test-suite with 'make -jN.
    (coreutils.spec, coreutils-testsuite.spec)
  * tests/du/slink:
    This test fails on OBS infrastructure and will be removed upstreams
    in coreutils-8.21 anyway. Skip the test until we upgrade.
    Upstream discussion:
    http://lists.gnu.org/archive/html/coreutils/2013-01/msg00053.html
    (coreutils-skip-du-slink-test.patch)
  * Further spec changes:
    Run more tests: also run "very expensive" tests; add acl, python-pyinotify,
    strace and valgrind to the build requirements.
    Remove patch5 and patch6 as they are now merged into coreutils-i18n.patch
    (see above).
    (coreutils.spec, coreutils-testsuite.spec)
- Maintenance changes:
  (coreutils.spec, coreutils-testsuite.spec)
  * Add perl and texinfo to the build requirements as they are needed to
    re-generate the man pages and the texinfo documentation.
  * Remove already-active "-Wall" compiler option from CFLAGS variable.
  * Install the compressed test-suite.log into the documentation directory
    of the coreutils-testsuite package (section %check and %files).
  * Properly guard the spec sections for the coreutils and the
    coreutils-testsuite package.
  * Update patches to reflect new line numbers.</changelog>
<changelog author="coolo@suse.com" date="1359288000">- do not require texinfo for building, texlive is a bit too heavy</changelog>
<changelog author="mail@bernhard-voelker.de" date="1363867200">- Fix multibyte issue in unexpand (rh#821262)
  (coreutils-i18n.patch: patch by Roman Kollár &lt;rkollar@redhat.com&gt;)
- Fix cut to terminate mbdelim string
  Otherwise, cut might do an unbounded strdup of the delimiter string
  in i18n mode (https://bugzilla.redhat.com/show_bug.cgi?id=911929)
  (coreutils-i18n.patch, from Mark Wielaard &lt;mjw@redhat.com&gt;)
- Add su(1) again
  Now, su(1) will be provided via a symlink trick
  to the file installed with a ".core" suffix.
  By this, we can upgrade to 8.21 without having to wait
  for a util-linux version providing it.
  * coreutils-su.patch: Add cumulative su patch from previous Base:System
    version 8.17, ported to 8.21 build structure. This supersedes the
    following partial patches:
    coreutils-8.6-compile-su-with-fpie.diff,
    coreutils-8.6-honor-settings-in-etc-default-su-resp-etc-login.defs.diff,
    coreutils-8.6-log-all-su-attempts.diff,
    coreutils-8.6-make-sure-sbin-resp-usr-sbin-are-in-PATH.diff,
    coreutils-8.6-pam-support-for-su.diff,
    coreutils-8.6-set-sane-default-path.diff,
    coreutils-8.6-update-man-page-for-pam.diff,
    coreutils-bnc#697897-setsid.patch.
  * pam, pam-devel: Add as requirements, also during build.
  * coreutils.spec (%description): Clarify that su is included although removed
    upstreams.
    (%install): Install su+kill files with suffix ".core".
    (%post): Move setting permissions on su from %posttrans to %install.
    (%posttrans): Create symlinks to files with ".core" suffix unless already
    existing.
- Install kill(1) with the same symlink trick.
- Remove now-obsolete patches and files:
  * coreutils-8.17.de.po.xz:
  * coreutils-8.17.tar.xz:
    Remove sources + translation of previous version
  * coreutils-acl-nofollow.patch:
  * coreutils-basename_documentation.patch:
  * coreutils-cp-corrupt-fragmented-sparse.patch:
  * coreutils-df-always-hide-rootfs.patch:
  * coreutils-skip-du-slink-test.patch:
    Fixed upstream.
  * coreutils-getaddrinfo.patch:
  * coreutils-misc.patch:
  * coreutils-no_silent-rule.patch:
    Remove test and build related patches.
  * coreutils-ptr_int_casts.patch:
    Remove because merged into coreutils-i18n.patch.
- Add files:
  * coreutils-8.21.tar.xz:
    Add tarball of the new upstream version
  * coreutils-8.21.de.po.xz:
    Add language file.
- Update patches:
  * coreutils-i18n.patch
    Merge some Fedora changes to keep the i18n patch like theirs.
    Fix and cleanup sort's multibyte test with incorporated test data.
  * coreutils-remove_hostname_documentation.patch
- Add patch to build 'timeout' as PIE (OBS requires it).
  This patch actually was included in one of the old su patches.
  * new patch name: coreutils-build-timeout-as-pie.patch
- Temporary disable some questionable patches (by commenting in the spec file):
  * coreutils-gl_printf_safe.patch
  * coreutils-8.9-singlethreaded-sort.patch
- Change build / spec file:
  * Bump version from 8.17 to 8.21.
  * Fix macro invocation in "Provides" for stat.
  * Remove ancient "Obsoletes" entries.
  * Remove/add the above removed/added sources and patches.
  * Temporarily comment the code for statically linking LIB_GMP
    (as it does not work).
  * Remove -Wall from CFLAGS as it is already included in OBS' default options.
  * Remove the --without-included-regex option to use
    coreutils' regex implementation.
  * Remove custom gl_cv_func_printf_directive_n and gl_cv_func_isnanl_works.
  * Touch "man/*.x" to force the rebuild of the man pages.
  * Make sort's multi-byte test script executable in %check section.
  * Hardcode package name for "%find_lang" and "%files lang -f" lines.
  * In the %files section, add the COPYING and THANKS files.
    Furthermore, fix the path to the LC_TIME files.
  * Change package description to accomodate to added programs
    (hostid, nproc, realpath, stdbuf, truncate)
    and mention the hacky installation of programs to move (kill, su).
- Update to 8.21 (2013-02-14) [stable]
  * * New programs
  numfmt: reformat numbers
  * * New features
  df now accepts the --output[=FIELD_LIST] option to define the list of columns
  to include in the output, or all available columns if the FIELD_LIST is
  omitted.  Note this enables df to output both block and inode fields together.
  du now accepts the --threshold=SIZE option to restrict the output to entries
  with such a minimum SIZE (or a maximum SIZE if it is negative).
  du recognizes -t SIZE as equivalent, for compatibility with FreeBSD.
  * * Bug fixes
  cp --no-preserve=mode now no longer exits non-zero.
  [bug introduced in coreutils-8.20]
  cut with a range like "N-" no longer allocates N/8 bytes.  That buffer
  would never be used, and allocation failure could cause cut to fail.
  [bug introduced in coreutils-8.10]
  cut no longer accepts the invalid range 0-, which made it print empty lines.
  Instead, cut now fails and emits an appropriate diagnostic.
  [This bug was present in "the beginning".]
  cut now handles overlapping to-EOL ranges properly.  Before, it would
  interpret "-b2-,3-" like "-b3-".  Now it's treated like "-b2-".
  [This bug was present in "the beginning".]
  cut no longer prints extraneous delimiters when a to-EOL range subsumes
  another range.  Before, "echo 123|cut --output-delim=: -b2-,3" would print
  "2:3".  Now it prints "23".  [bug introduced in 5.3.0]
  cut -f no longer inspects input line N+1 before fully outputting line N,
  which avoids delayed output for intermittent input.
  [bug introduced in TEXTUTILS-1_8b]
  factor no longer loops infinitely on 32 bit powerpc or sparc systems.
  [bug introduced in coreutils-8.20]
  install -m M SOURCE DEST no longer has a race condition where DEST's
  permissions are temporarily derived from SOURCE instead of from M.
  pr -n no longer crashes when passed values &gt;= 32.  Also, line numbers are
  consistently padded with spaces, rather than with zeros for certain widths.
  [bug introduced in TEXTUTILS-1_22i]
  seq -w ensures that for numbers input in scientific notation,
  the output numbers are properly aligned and of the correct width.
  [This bug was present in "the beginning".]
  seq -w ensures correct alignment when the step value includes a precision
  while the start value does not, and the number sequence narrows.
  [This bug was present in "the beginning".]
  seq -s no longer prints an erroneous newline after the first number, and
  outputs a newline after the last number rather than a trailing separator.
  Also seq no longer ignores a specified step value when the end value is 1.
  [bugs introduced in coreutils-8.20]
  timeout now ensures that blocking of ALRM signals is not inherited from
  its parent, which would cause timeouts to be ignored.
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  df --total now prints '-' into the target column (mount point) of the
  summary line, accommodating the --output option where the target field
  can be in any column.  If there is no source column, then df prints
  'total' in the target column.
  df now properly outputs file system information with bind mounts present on
  the system by skipping duplicate entries (identified by the device number).
  Consequently, df also elides the early-boot pseudo file system type "rootfs".
  nl no longer supports the --page-increment option, which has been
  deprecated since coreutils-7.5.  Use --line-increment instead.
  * * Improvements
  readlink now supports multiple arguments, and a complementary
  - z, --zero option to delimit output items with the NUL character.
  stat and tail now know about CEPH.  stat -f --format=%T now reports the file
  system type, and tail -f uses polling for files on CEPH file systems.
  stty now supports configuring DTR/DSR hardware flow control where available.
  * * Build-related
  Perl is now more of a prerequisite.  It has long been required in order
  to run (not skip) a significant percentage of the tests.  Now, it is
  also required in order to generate proper man pages, via help2man.  The
  generated man/*.1 man pages are no longer distributed.  Building without
  perl, you would create stub man pages.  Thus, while perl is not an
  official prerequisite (build and "make check" will still succeed), any
  resulting man pages would be inferior.  In addition, this fixes a bug
  in distributed (not from clone) Makefile.in that could cause parallel
  build failure when building from modified sources, as is common practice
  for a patched distribution package.
  factor now builds on x86_64 with x32 ABI, 32 bit MIPS, and all HPPA systems,
  by avoiding incompatible asm.  [bug introduced in coreutils-8.20]
  A root-only test predicate would always fail.  Its job was to determine
  whether our dummy user, $NON_ROOT_USERNAME, was able to run binaries from
  the build directory.  As a result, all dependent tests were always skipped.
  Now, those tests may be run once again.  [bug introduced in coreutils-8.20]
- Update to 8.20 (2012-10-23) [stable]
  * * New features
  dd now accepts 'status=none' to suppress all informational output.
  md5sum now accepts the --tag option to print BSD-style output with GNU
  file name escaping.  This also affects sha1sum, sha224sum, sha256sum,
  sha384sum and sha512sum.
  * * Bug fixes
  cp could read from freed memory and could even make corrupt copies.
  This could happen with a very fragmented and sparse input file,
  on GNU/Linux file systems supporting fiemap extent scanning.
  This bug also affects mv when it resorts to copying, and install.
  [bug introduced in coreutils-8.11]
  cp --no-preserve=mode now no longer preserves the original file's
  permissions but correctly sets mode specified by 0666 &amp; ~umask
  du no longer emits a "disk-corrupted"-style diagnostic when it detects
  a directory cycle that is due to a bind-mounted directory.  Instead,
  it detects this precise type of cycle, diagnoses it as such and
  eventually exits nonzero.
  factor (when using gmp) would mistakenly declare some composite numbers
  to be prime, e.g., 465658903, 2242724851, 6635692801 and many more.
  The fix makes factor somewhat slower (~25%) for ranges of consecutive
  numbers, and up to 8 times slower for some worst-case individual numbers.
  [bug introduced in coreutils-7.0, with GNU MP support]
  ls now correctly colors dangling symlinks when listing their containing
  directories, with orphaned symlink coloring disabled in LS_COLORS.
  [bug introduced in coreutils-8.14]
  rm -i -d now prompts the user then removes an empty directory, rather
  than ignoring the -d option and failing with an 'Is a directory' error.
  [bug introduced in coreutils-8.19, with the addition of --dir (-d)]
  rm -r S/ (where S is a symlink-to-directory) no longer gives the invalid
  "Too many levels of symbolic links" diagnostic.
  [bug introduced in coreutils-8.6]
  seq now handles arbitrarily long non-negative whole numbers when the
  increment is 1 and when no format-changing option is specified.
  Before, this would infloop:
    b=100000000000000000000; seq $b $b
  [the bug dates back to the initial implementation]
  * * Changes in behavior
  nproc now diagnoses with an error, non option command line parameters.
  * * Improvements
  factor's core has been rewritten for speed and increased range.
  It can now factor numbers up to 2^128, even without GMP support.
  Its speed is from a few times better (for small numbers) to over
  10,000 times better (just below 2^64).  The new code also runs a
  deterministic primality test for each prime factor, not just a
  probabilistic test.
  seq is now up to 70 times faster than it was in coreutils-8.19 and prior,
  but only with non-negative whole numbers, an increment of 1, and no
  format-changing options.
  stat and tail know about ZFS, VZFS and VMHGFS.  stat -f --format=%T now
  reports the file system type, and tail -f now uses inotify for files on
  ZFS and VZFS file systems, rather than the default (for unknown file
  system types) of issuing a warning and reverting to polling.  tail -f
  still uses polling for files on VMHGFS file systems.
  * * Build-related
  root-only tests now check for permissions of our dummy user,
  $NON_ROOT_USERNAME, before trying to run binaries from the build directory.
  Before, we would get hard-to-diagnose reports of failing root-only tests.
  Now, those tests are skipped with a useful diagnostic when the root tests
  are run without following the instructions in README.
  We now build most directories using non-recursive make rules.  I.e.,
  rather than running make in man/, lib/, src/, tests/, instead, the top
  level Makefile.am includes a $dir/local.mk that describes how to build
  the targets in the corresponding directory.  Two directories remain
  unconverted: po/, gnulib-tests/.  One nice side-effect is that the more
  accurate dependencies have eliminated a nagging occasional failure that
  was seen when running parallel "make syntax-check".
- Update to 8.19 (2012-08-20) [stable]
  * * Bug fixes
  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]
  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=1 -S32b -u
  [bug introduced in coreutils-8.6]
  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=1 -S32b -u&gt;/dev/null
  [bug introduced in coreutils-8.6]
  * * New features
  rm now accepts the --dir (-d) option which makes it remove empty directories.
  Since removing empty directories is relatively safe, this option can be
  used as a part of the alias rm='rm --dir'.  This improves compatibility
  with Mac OS X and BSD systems which also honor the -d option.
- Update to 8.18 (2012-08-12) [stable]
  * * Bug fixes
  cksum now prints checksums atomically so that concurrent
  processes will not intersperse their output.
  [the bug dates back to the initial implementation]
  date -d "$(printf '\xb0')" would print 00:00:00 with today's date
  rather than diagnosing the invalid input.  Now it reports this:
  date: invalid date '\260'
  [This bug was present in "the beginning".]
  df no longer outputs control characters present in the mount point name.
  Such characters are replaced with '?', so for example, scripts consuming
  lines output by df, can work reliably.
  [This bug was present in "the beginning".]
  df --total now exits with an appropriate diagnostic and error code, when
  file system --type options do not lead to a processed file system.
  [This bug dates back to when --total was added in coreutils-7.0]
  head --lines=-N (-n-N) now resets the read pointer of a seekable input file.
  This means that "head -n-3" no longer consumes all of its input, and lines
  not output by head may be processed by other programs.  For example, this
  command now prints the final line, 2, while before it would print nothing:
    seq 2 &gt; k; (head -n-1 &gt; /dev/null; cat) &lt; k
  [This bug was present in "the beginning".]
  ls --color would mis-color relative-named symlinks in /
  [bug introduced in coreutils-8.17]
  split now ensures it doesn't overwrite the input file with generated output.
  [the bug dates back to the initial implementation]
  stat and df now report the correct file system usage,
  in all situations on GNU/Linux, by correctly determining the block size.
  [df bug since coreutils-5.0.91, stat bug since the initial implementation]
  tail -f no longer tries to use inotify on AUFS or PanFS file systems
  [you might say this was introduced in coreutils-7.5, along with inotify
  support, but even now, its magic number isn't in the usual place.]
  * * New features
  stat -f recognizes the new remote file system types: aufs, panfs.
  * * Changes in behavior
  su: this program has been removed.  We stopped installing "su" by
  default with the release of coreutils-6.9.90 on 2007-12-01.  Now,
  that the util-linux package has the union of the Suse and Fedora
  patches as well as enough support to build on the Hurd, we no longer
  have any reason to include it here.
  * * Improvements
  sort avoids redundant processing in the presence of inaccessible inputs,
  or unwritable output.  Sort now diagnoses certain errors at start-up,
  rather than after potentially expensive processing.
  sort now allocates no more than 75% of physical memory by default,
  to better share system resources, and thus operate more efficiently.
  [The default max memory usage changed from 50% to 100% in coreutils-8.16]</changelog>
<changelog author="mmeister@suse.com" date="1363867201">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="mail@bernhard-voelker.de" date="1365076800">- Fix source url for coreutils-testsuite.</changelog>
<changelog author="mhrusecky@suse.com" date="1368619200">- Provides: /bin/{kill,su}
  * for compatibility with programs requiring these (like lsb) until these will
    be provided by util-linux</changelog>
<changelog author="mail@bernhard-voelker.de" date="1369051200">- Try to fix nap() races in gnulib-tests.
  (coreutils-gnulib-tests-fix-nap-race.patch: add upstream patch)
  (coreutils-gnulib-tests-fix-nap-race-obs.patch: add openSUSE patch for OBS)</changelog>
<changelog author="mail@bernhard-voelker.de" date="1370606400">- Remove su(1) and kill(1) - both are provided by util-linux now.
  * su.pamd, su.default, coreutils-su.patch: Remove patch and PAM
    config files related to su(1).
  * coreutils-remove_kill_documentation.patch: Add patch to remove
    kill from the texinfo manual.
  * coreutils.spec: Remove above, su-related patch and sources.
    Remove Requires:pam and BuildRequires:pam-devel.
    Remove Provides:/bin/{su,kill}.
    Remove paragraph mentioning su(1) and kill(1) in %description.
    Remove `moving su trickery` and other left-overs from %install,
    %post and %files.
    Remove %posttrans and %verifyscript sections (as these contained
    su-related stuff).
    Add code to %install to remove kill's program and man page.</changelog>
<changelog author="schwab@suse.de" date="1370606401">- longlong-aarch64.patch: fix build on aarch64</changelog>
<changelog author="jengelh@inai.de" date="1371384000">- Explicitly list libattr-devel as BuildRequires
- More robust make install call</changelog>
<changelog author="schwab@suse.de" date="1373284800">- Override broken configure checks
- coreutils-gl_printf_safe.patch: remove unused patch</changelog>
<changelog author="mail@bernhard-voelker.de" date="1374580800">- Undo the previous change.
  Remove configure options gl_cv_func_printf_directive_n and
  gl_cv_func_printf_infinite_long_double again because of constant
  factory build failures on x86_64 and i586.  The argument for
  adding them was that the fortify checks would be bypassed
  by the gnulib "reimplementation of printf", but that is not
  the case: instead, gnulib just adds some wrapping code to ensure
  a consistent behaviour on all supported platforms.</changelog>
<changelog author="pth@suse.de" date="1375790400">- Remove the the unnecessary povision of itself as rpmbuild takes
  care of that.
- Remove all traces of coreutils-8.9-singlethreaded-sort.patch in
  the spec file.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1375876800">- Remove "BuildRequires: help2man" as it is included.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1385899200">- Update I18N patch from Fedora:
  (coreutils-i18n.patch)
  * sort: fix multibyte incompabilities (rh#821264)
  * pr -e, with a mix of backspaces and TABs, could corrupt the
    heap in multibyte locales (analyzed by J.Koncicky)
  * path in the testsuite to cover i18n regressions
  * Enable cut and sort-merge perl tests for multibyte as well
- Refresh longlong-aarch64.patch.</changelog>
<changelog author="schwab@linux-m68k.org" date="1386417600">- Require valgrind only when it exists</changelog>
<changelog author="mail@bernhard-voelker.de" date="1386763200">- Avoid false sort test failure (coreutils-i18n.patch):
  As for the C locale, skip the multi-byte test case
  'output-is-input-mb.p'.</changelog>
<changelog author="mail@bernhard-voelker.de" date="1387454400">- Fix issue with binary input in non-C locale (rh#1036289)
  (coreutils-i18n.patch): Initialize memory for some edge cases
  in the i18n patch for uniq and join.</changelog>

</package>
<package pkgid="73c9411fe8fd01618dd3f6cfb38616dc69f2faee9d576353b6ad058d91bb7175" name="couchdb" arch="i586">
    <version epoch="0" ver="1.3.0" rel="2.4.1"/>

<changelog author="roosmaa@gmail.com" date="1301572800">- update to version 1.0.2
  * Make test suite work with Safari and Chrome.
  * Fixed animated progress spinner.
  * Fix raw view document link due to overzealous URI encoding.
  * Spell javascript correctly in loadScript(uri).
  * Fix leaking file handles after compacting databases and views.
  * Fix databases forgetting their validation function after
    compaction.
  * Fix occasional timeout errors after successfully compacting
    large databases.
  * Fix ocassional error when writing to a database that has just
    been compacted.
  * Fix occasional timeout errors on systems with slow or heavily
    loaded IO.
  * Fix for OOME when compactions include documents with many
    conflicts.
  * Fix for missing attachment compression when MIME types
    included parameters.
  * Preserve purge metadata during compaction to avoid spurious
    view rebuilds.
  * Fix spurious conflicts introduced when uploading an attachment
    after a doc has been in a conflict.
    See COUCHDB-902 for details.
  * Fix for frequently edited documents in multi-master deployments
    being duplicated in changes and _alldocs. See COUCHDDB-968 for
    details on how to repair.
  * Significantly higher read and write throughput against database
    and view index files.
  * Reduce lengthy stack traces.
  * Allow logging of native types.
  * Allow reduce=false parameter in map-only views.
  * Fix parsing of Accept headers.
  * Fix for multipart GET APIs when an attachment was created
    during a local-local replication. See COUCHDB-1022 for details.
  * Updated ibrowse library to 2.1.2 fixing numerous replication
    issues.
  * Make sure that the replicator respects HTTP settings defined
    in the config.
  * Fix error when the ibrowse connection closes unexpectedly.
  * Fix authenticated replication (with HTTP basic auth) of design
    documents with attachments.
  * Various fixes to make replication more resilient for
    edge-cases.
  * Don’t trigger view updates when requesting _design/doc/_info.
  * Fix for circular references in CommonJS requires.
  * Made isArray() function available to functions executed in
    the query server.
  * Documents are now sealed before being passed to map functions.
  * Force view compaction failure when duplicated document data
    exists. When this error is seen in the logs users should
    rebuild their views from scratch to fix the issue.
    See COUCHDB-999 for details.</changelog>
<changelog author="mrueckert@suse.de" date="1307361600">- update to version 1.1.0
  - Native SSL support.
  - Added support for HTTP range requests for attachments.
  - Added built-in filters for _changes: _doc_ids and _design.
  - Added configuration option for TCP_NODELAY aka “Nagle”.
  - Allow wildcards in vhosts definitions.
  - More granular ETag support for views.
  - More flexible URL rewriter.
  - Added OS Process module to manage daemons outside of CouchDB.
  - Added HTTP Proxy handler for more scalable externals.
  - Added _replicator database to manage replications.
  - Multiple micro-optimizations when reading data.
  - Added CommonJS support to map functions.
  - Added stale=update_after query option that triggers a view
    update after returning a stale=ok response.
  - More explicit error messages when it’s not possible to access a
    file due to lack of permissions.
  - Added a “change password”-feature to Futon.</changelog>
<changelog author="saschpe@suse.de" date="1317384000">- Set license to Apache-2.0 (SPDX style)
- Removed outdated %clean section
- Use %_smp_mflags instead of %jobs macro
- Use %make_install instead of %makeinstall</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dmacvicar@suse.de" date="1323345600">- create /var/run/couchdb explicitly in the init script
  (needed with /var/run as tmpfs)</changelog>
<changelog author="coolo@suse.com" date="1323950400">- apache pulled 1.1.0, so update to 1.1.1
  - Support SpiderMonkey 1.8.5
  - Add configurable maximum to the number of bytes returned by _log.
  - Allow CommonJS modules to be an empty string.
  - Bump minimum Erlang version to R13B02.
  - Do not run deleted validate_doc_update functions.
  - ETags for views include current sequence if include_docs=true.
  - Fix bug where duplicates can appear in _changes feed.
  - Fix bug where update handlers break after conflict resolution.
  - Fix bug with _replicator where include "filter" could crash couch.
  - Fix crashes when compacting large views.
  - Fix file descriptor leak in _log
  - Fix missing revisions in _changes?style=all_docs.
  - Improve handling of compaction at max_dbs_open limit.
  - JSONP responses now send "text/javascript" for Content-Type.
  - Link to ICU 4.2 on Windows.
  - Permit forward slashes in path to update functions.
  - Reap couchjs processes that hit reduce_overflow error.
  - Status code can be specified in update handlers.
  - Support provides() in show functions.
  - _view_cleanup when ddoc has no views now removes all index files.
  - max_replication_retry_count now supports "infinity".
  - Fix replication crash when source database has a document with empty ID.
  - Fix deadlock when assigning couchjs processes to serve requests.
  - Fixes to the document multipart PUT API.
  - Fixes regarding file descriptor leaks for databases with views.</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update to 1.2.0, plenty of changes - see
  http://www.apache.org/dist/couchdb/notes/1.2.0/apache-couchdb-1.2.0.html</changelog>
<changelog author="factory-maintainer@kulow.org" date="1339761600">- fix requires for factory</changelog>
<changelog author="dmacvicar@suse.de" date="1342094400">- remove all xulrunner support
  without the rpath patch was already not working
- add --enable-js-trunk to build with newer libjs</changelog>
<changelog author="jatan@suse.de" date="1342180800">- Add init and sysconfig scripts from IBS Devel:Cloud, so that CouchDB
  actually starts when installed</changelog>
<changelog author="saschpe@suse.de" date="1343131200">- Set login shell of user couchdb to /bin/false
- Create /var/run/couchdb in %post and %ghost it (tmpfs)</changelog>
<changelog author="saschpe@suse.de" date="1343649600">- BuildRequire js-devel (already in openSUSE) instead of libjs-devel
  (only in server:database)</changelog>
<changelog author="vjt@openssl.it" date="1352376000">- Replace js-devel BuildRequire with mozilla-xulrunner192-devel
  (already in openSUSE)
- Remove BuildRequire curl-devel as it is not needed anymore
  http://www.apache.org/dist/couchdb/notes/1.2.0/apache-couchdb-1.2.0.html</changelog>
<changelog author="vjt@openssl.it" date="1353326400">- Re-introduce js-devel BuildRequire for openSUSE-12.2</changelog>
<changelog author="aspiers@suse.com" date="1353585600">- Use "su" instead of "sudo" in init script, else couchdb inside
  screen session dies when screen terminates.</changelog>
<changelog author="rhafer@suse.com" date="1354881600">- Fixed LSB headers in init script to make inserv happy. CouchDB
  cannot start in runlevel 2 as it requires $network.</changelog>
<changelog author="vjt@openssl.it" date="1357300800">- Fix a futon bug when saving view code of design documents that
  do not define the "language" property. The CouchDB server treats
  them as "javascript" views, so the same behavior has been added
  to the futon.</changelog>
<changelog author="sbrabec@suse.cz" date="1357732800">- Fix path to nologin in useradd (bnc#796242).</changelog>
<changelog author="mhrusecky@suse.cz" date="1366200000">- update to 1.3.0, see
  http://www.apache.org/dist/couchdb/notes/1.3.0/apache-couchdb-1.3.0.html
- patch to compile with new erlang:
    couchdb-parameterized-modules-r16b.patch</changelog>
<changelog author="nkrinner@suse.com" date="1396612800">- Bug 871111 - VUL-1: CVE-2014-2668: couchdb: remote denial of service via /_uuids
  Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of
  service (CPU and memory consumption) via the count parameter to /_uuids.
  Fix from upstream added as bnc-871111-remote-dos-via_uuids.patch</changelog>

</package>
<package pkgid="facaf0aa8900cdccc2a19c03944e2e2ea75300f32496d707f789c2e28ab7b3d7" name="couchdb" arch="src">
    <version epoch="0" ver="1.3.0" rel="2.4.1"/>

<changelog author="roosmaa@gmail.com" date="1301572800">- update to version 1.0.2
  * Make test suite work with Safari and Chrome.
  * Fixed animated progress spinner.
  * Fix raw view document link due to overzealous URI encoding.
  * Spell javascript correctly in loadScript(uri).
  * Fix leaking file handles after compacting databases and views.
  * Fix databases forgetting their validation function after
    compaction.
  * Fix occasional timeout errors after successfully compacting
    large databases.
  * Fix ocassional error when writing to a database that has just
    been compacted.
  * Fix occasional timeout errors on systems with slow or heavily
    loaded IO.
  * Fix for OOME when compactions include documents with many
    conflicts.
  * Fix for missing attachment compression when MIME types
    included parameters.
  * Preserve purge metadata during compaction to avoid spurious
    view rebuilds.
  * Fix spurious conflicts introduced when uploading an attachment
    after a doc has been in a conflict.
    See COUCHDB-902 for details.
  * Fix for frequently edited documents in multi-master deployments
    being duplicated in changes and _alldocs. See COUCHDDB-968 for
    details on how to repair.
  * Significantly higher read and write throughput against database
    and view index files.
  * Reduce lengthy stack traces.
  * Allow logging of native types.
  * Allow reduce=false parameter in map-only views.
  * Fix parsing of Accept headers.
  * Fix for multipart GET APIs when an attachment was created
    during a local-local replication. See COUCHDB-1022 for details.
  * Updated ibrowse library to 2.1.2 fixing numerous replication
    issues.
  * Make sure that the replicator respects HTTP settings defined
    in the config.
  * Fix error when the ibrowse connection closes unexpectedly.
  * Fix authenticated replication (with HTTP basic auth) of design
    documents with attachments.
  * Various fixes to make replication more resilient for
    edge-cases.
  * Don’t trigger view updates when requesting _design/doc/_info.
  * Fix for circular references in CommonJS requires.
  * Made isArray() function available to functions executed in
    the query server.
  * Documents are now sealed before being passed to map functions.
  * Force view compaction failure when duplicated document data
    exists. When this error is seen in the logs users should
    rebuild their views from scratch to fix the issue.
    See COUCHDB-999 for details.</changelog>
<changelog author="mrueckert@suse.de" date="1307361600">- update to version 1.1.0
  - Native SSL support.
  - Added support for HTTP range requests for attachments.
  - Added built-in filters for _changes: _doc_ids and _design.
  - Added configuration option for TCP_NODELAY aka “Nagle”.
  - Allow wildcards in vhosts definitions.
  - More granular ETag support for views.
  - More flexible URL rewriter.
  - Added OS Process module to manage daemons outside of CouchDB.
  - Added HTTP Proxy handler for more scalable externals.
  - Added _replicator database to manage replications.
  - Multiple micro-optimizations when reading data.
  - Added CommonJS support to map functions.
  - Added stale=update_after query option that triggers a view
    update after returning a stale=ok response.
  - More explicit error messages when it’s not possible to access a
    file due to lack of permissions.
  - Added a “change password”-feature to Futon.</changelog>
<changelog author="saschpe@suse.de" date="1317384000">- Set license to Apache-2.0 (SPDX style)
- Removed outdated %clean section
- Use %_smp_mflags instead of %jobs macro
- Use %make_install instead of %makeinstall</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dmacvicar@suse.de" date="1323345600">- create /var/run/couchdb explicitly in the init script
  (needed with /var/run as tmpfs)</changelog>
<changelog author="coolo@suse.com" date="1323950400">- apache pulled 1.1.0, so update to 1.1.1
  - Support SpiderMonkey 1.8.5
  - Add configurable maximum to the number of bytes returned by _log.
  - Allow CommonJS modules to be an empty string.
  - Bump minimum Erlang version to R13B02.
  - Do not run deleted validate_doc_update functions.
  - ETags for views include current sequence if include_docs=true.
  - Fix bug where duplicates can appear in _changes feed.
  - Fix bug where update handlers break after conflict resolution.
  - Fix bug with _replicator where include "filter" could crash couch.
  - Fix crashes when compacting large views.
  - Fix file descriptor leak in _log
  - Fix missing revisions in _changes?style=all_docs.
  - Improve handling of compaction at max_dbs_open limit.
  - JSONP responses now send "text/javascript" for Content-Type.
  - Link to ICU 4.2 on Windows.
  - Permit forward slashes in path to update functions.
  - Reap couchjs processes that hit reduce_overflow error.
  - Status code can be specified in update handlers.
  - Support provides() in show functions.
  - _view_cleanup when ddoc has no views now removes all index files.
  - max_replication_retry_count now supports "infinity".
  - Fix replication crash when source database has a document with empty ID.
  - Fix deadlock when assigning couchjs processes to serve requests.
  - Fixes to the document multipart PUT API.
  - Fixes regarding file descriptor leaks for databases with views.</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update to 1.2.0, plenty of changes - see
  http://www.apache.org/dist/couchdb/notes/1.2.0/apache-couchdb-1.2.0.html</changelog>
<changelog author="factory-maintainer@kulow.org" date="1339761600">- fix requires for factory</changelog>
<changelog author="dmacvicar@suse.de" date="1342094400">- remove all xulrunner support
  without the rpath patch was already not working
- add --enable-js-trunk to build with newer libjs</changelog>
<changelog author="jatan@suse.de" date="1342180800">- Add init and sysconfig scripts from IBS Devel:Cloud, so that CouchDB
  actually starts when installed</changelog>
<changelog author="saschpe@suse.de" date="1343131200">- Set login shell of user couchdb to /bin/false
- Create /var/run/couchdb in %post and %ghost it (tmpfs)</changelog>
<changelog author="saschpe@suse.de" date="1343649600">- BuildRequire js-devel (already in openSUSE) instead of libjs-devel
  (only in server:database)</changelog>
<changelog author="vjt@openssl.it" date="1352376000">- Replace js-devel BuildRequire with mozilla-xulrunner192-devel
  (already in openSUSE)
- Remove BuildRequire curl-devel as it is not needed anymore
  http://www.apache.org/dist/couchdb/notes/1.2.0/apache-couchdb-1.2.0.html</changelog>
<changelog author="vjt@openssl.it" date="1353326400">- Re-introduce js-devel BuildRequire for openSUSE-12.2</changelog>
<changelog author="aspiers@suse.com" date="1353585600">- Use "su" instead of "sudo" in init script, else couchdb inside
  screen session dies when screen terminates.</changelog>
<changelog author="rhafer@suse.com" date="1354881600">- Fixed LSB headers in init script to make inserv happy. CouchDB
  cannot start in runlevel 2 as it requires $network.</changelog>
<changelog author="vjt@openssl.it" date="1357300800">- Fix a futon bug when saving view code of design documents that
  do not define the "language" property. The CouchDB server treats
  them as "javascript" views, so the same behavior has been added
  to the futon.</changelog>
<changelog author="sbrabec@suse.cz" date="1357732800">- Fix path to nologin in useradd (bnc#796242).</changelog>
<changelog author="mhrusecky@suse.cz" date="1366200000">- update to 1.3.0, see
  http://www.apache.org/dist/couchdb/notes/1.3.0/apache-couchdb-1.3.0.html
- patch to compile with new erlang:
    couchdb-parameterized-modules-r16b.patch</changelog>
<changelog author="nkrinner@suse.com" date="1396612800">- Bug 871111 - VUL-1: CVE-2014-2668: couchdb: remote denial of service via /_uuids
  Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of
  service (CPU and memory consumption) via the count parameter to /_uuids.
  Fix from upstream added as bnc-871111-remote-dos-via_uuids.patch</changelog>

</package>
<package pkgid="7e801eb326741d96e0bacdd8ba4782c7baf8a0ac49ef8dd449e53d0bb3962cc7" name="couchdb" arch="x86_64">
    <version epoch="0" ver="1.3.0" rel="2.4.1"/>

<changelog author="roosmaa@gmail.com" date="1301572800">- update to version 1.0.2
  * Make test suite work with Safari and Chrome.
  * Fixed animated progress spinner.
  * Fix raw view document link due to overzealous URI encoding.
  * Spell javascript correctly in loadScript(uri).
  * Fix leaking file handles after compacting databases and views.
  * Fix databases forgetting their validation function after
    compaction.
  * Fix occasional timeout errors after successfully compacting
    large databases.
  * Fix ocassional error when writing to a database that has just
    been compacted.
  * Fix occasional timeout errors on systems with slow or heavily
    loaded IO.
  * Fix for OOME when compactions include documents with many
    conflicts.
  * Fix for missing attachment compression when MIME types
    included parameters.
  * Preserve purge metadata during compaction to avoid spurious
    view rebuilds.
  * Fix spurious conflicts introduced when uploading an attachment
    after a doc has been in a conflict.
    See COUCHDB-902 for details.
  * Fix for frequently edited documents in multi-master deployments
    being duplicated in changes and _alldocs. See COUCHDDB-968 for
    details on how to repair.
  * Significantly higher read and write throughput against database
    and view index files.
  * Reduce lengthy stack traces.
  * Allow logging of native types.
  * Allow reduce=false parameter in map-only views.
  * Fix parsing of Accept headers.
  * Fix for multipart GET APIs when an attachment was created
    during a local-local replication. See COUCHDB-1022 for details.
  * Updated ibrowse library to 2.1.2 fixing numerous replication
    issues.
  * Make sure that the replicator respects HTTP settings defined
    in the config.
  * Fix error when the ibrowse connection closes unexpectedly.
  * Fix authenticated replication (with HTTP basic auth) of design
    documents with attachments.
  * Various fixes to make replication more resilient for
    edge-cases.
  * Don’t trigger view updates when requesting _design/doc/_info.
  * Fix for circular references in CommonJS requires.
  * Made isArray() function available to functions executed in
    the query server.
  * Documents are now sealed before being passed to map functions.
  * Force view compaction failure when duplicated document data
    exists. When this error is seen in the logs users should
    rebuild their views from scratch to fix the issue.
    See COUCHDB-999 for details.</changelog>
<changelog author="mrueckert@suse.de" date="1307361600">- update to version 1.1.0
  - Native SSL support.
  - Added support for HTTP range requests for attachments.
  - Added built-in filters for _changes: _doc_ids and _design.
  - Added configuration option for TCP_NODELAY aka “Nagle”.
  - Allow wildcards in vhosts definitions.
  - More granular ETag support for views.
  - More flexible URL rewriter.
  - Added OS Process module to manage daemons outside of CouchDB.
  - Added HTTP Proxy handler for more scalable externals.
  - Added _replicator database to manage replications.
  - Multiple micro-optimizations when reading data.
  - Added CommonJS support to map functions.
  - Added stale=update_after query option that triggers a view
    update after returning a stale=ok response.
  - More explicit error messages when it’s not possible to access a
    file due to lack of permissions.
  - Added a “change password”-feature to Futon.</changelog>
<changelog author="saschpe@suse.de" date="1317384000">- Set license to Apache-2.0 (SPDX style)
- Removed outdated %clean section
- Use %_smp_mflags instead of %jobs macro
- Use %make_install instead of %makeinstall</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add libtool as buildrequire to avoid implicit dependency</changelog>
<changelog author="dmacvicar@suse.de" date="1323345600">- create /var/run/couchdb explicitly in the init script
  (needed with /var/run as tmpfs)</changelog>
<changelog author="coolo@suse.com" date="1323950400">- apache pulled 1.1.0, so update to 1.1.1
  - Support SpiderMonkey 1.8.5
  - Add configurable maximum to the number of bytes returned by _log.
  - Allow CommonJS modules to be an empty string.
  - Bump minimum Erlang version to R13B02.
  - Do not run deleted validate_doc_update functions.
  - ETags for views include current sequence if include_docs=true.
  - Fix bug where duplicates can appear in _changes feed.
  - Fix bug where update handlers break after conflict resolution.
  - Fix bug with _replicator where include "filter" could crash couch.
  - Fix crashes when compacting large views.
  - Fix file descriptor leak in _log
  - Fix missing revisions in _changes?style=all_docs.
  - Improve handling of compaction at max_dbs_open limit.
  - JSONP responses now send "text/javascript" for Content-Type.
  - Link to ICU 4.2 on Windows.
  - Permit forward slashes in path to update functions.
  - Reap couchjs processes that hit reduce_overflow error.
  - Status code can be specified in update handlers.
  - Support provides() in show functions.
  - _view_cleanup when ddoc has no views now removes all index files.
  - max_replication_retry_count now supports "infinity".
  - Fix replication crash when source database has a document with empty ID.
  - Fix deadlock when assigning couchjs processes to serve requests.
  - Fixes to the document multipart PUT API.
  - Fixes regarding file descriptor leaks for databases with views.</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update to 1.2.0, plenty of changes - see
  http://www.apache.org/dist/couchdb/notes/1.2.0/apache-couchdb-1.2.0.html</changelog>
<changelog author="factory-maintainer@kulow.org" date="1339761600">- fix requires for factory</changelog>
<changelog author="dmacvicar@suse.de" date="1342094400">- remove all xulrunner support
  without the rpath patch was already not working
- add --enable-js-trunk to build with newer libjs</changelog>
<changelog author="jatan@suse.de" date="1342180800">- Add init and sysconfig scripts from IBS Devel:Cloud, so that CouchDB
  actually starts when installed</changelog>
<changelog author="saschpe@suse.de" date="1343131200">- Set login shell of user couchdb to /bin/false
- Create /var/run/couchdb in %post and %ghost it (tmpfs)</changelog>
<changelog author="saschpe@suse.de" date="1343649600">- BuildRequire js-devel (already in openSUSE) instead of libjs-devel
  (only in server:database)</changelog>
<changelog author="vjt@openssl.it" date="1352376000">- Replace js-devel BuildRequire with mozilla-xulrunner192-devel
  (already in openSUSE)
- Remove BuildRequire curl-devel as it is not needed anymore
  http://www.apache.org/dist/couchdb/notes/1.2.0/apache-couchdb-1.2.0.html</changelog>
<changelog author="vjt@openssl.it" date="1353326400">- Re-introduce js-devel BuildRequire for openSUSE-12.2</changelog>
<changelog author="aspiers@suse.com" date="1353585600">- Use "su" instead of "sudo" in init script, else couchdb inside
  screen session dies when screen terminates.</changelog>
<changelog author="rhafer@suse.com" date="1354881600">- Fixed LSB headers in init script to make inserv happy. CouchDB
  cannot start in runlevel 2 as it requires $network.</changelog>
<changelog author="vjt@openssl.it" date="1357300800">- Fix a futon bug when saving view code of design documents that
  do not define the "language" property. The CouchDB server treats
  them as "javascript" views, so the same behavior has been added
  to the futon.</changelog>
<changelog author="sbrabec@suse.cz" date="1357732800">- Fix path to nologin in useradd (bnc#796242).</changelog>
<changelog author="mhrusecky@suse.cz" date="1366200000">- update to 1.3.0, see
  http://www.apache.org/dist/couchdb/notes/1.3.0/apache-couchdb-1.3.0.html
- patch to compile with new erlang:
    couchdb-parameterized-modules-r16b.patch</changelog>
<changelog author="nkrinner@suse.com" date="1396612800">- Bug 871111 - VUL-1: CVE-2014-2668: couchdb: remote denial of service via /_uuids
  Apache CouchDB 1.5.0 and earlier allows remote attackers to cause a denial of
  service (CPU and memory consumption) via the count parameter to /_uuids.
  Fix from upstream added as bnc-871111-remote-dos-via_uuids.patch</changelog>

</package>
<package pkgid="258b87e3b49d12b26a07c6779b4565780d595c7b2fbad37297b982bb983172de" name="cpio" arch="i586">
    <version epoch="0" ver="2.11" rel="25.4.1"/>

<changelog author="mseben@suse.cz" date="1247832000">- fix identification of the density code for DAT160 bnc#415166</changelog>
<changelog author="rguenther@suse.de" date="1247832001">- Drop rmt BuildRequires again</changelog>
<changelog author="mseben@novell.com" date="1249905600">- merged DAT160.patch with mt.patch
- added other tape density definitions from mt_st package (bnc#523357)</changelog>
<changelog author="rschweikert@novell.com" date="1255694400">- close files after copy (bnc#543132)
  (cpio-2.10-close_files_after_copy.patch)</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="jengelh@medozas.de" date="1261828800">- enable parallel build</changelog>
<changelog author="mseben@novell.com" date="1267617600">- added heap_overflow_in_rtapelib.patch fix possible heap overflow in
  rtapelib.c (bnc#579475)</changelog>
<changelog author="mseben@novell.com" date="1268395200">- updated to 2.11
  * Fix mt build.
  * In copy-in mode, if directory attributes do not permit writing to it,
    setting them is delayed until the end of run. This allows to
  correctly extract files in such directories.
  * In copy-in mode, permissions of a directory are restored if it
    appears in the file list after files in it (e.g. in listings
  produced by find . -depth). This fixes debian bug #458079.
  * Fix possible memory overflow in the rmt client code (CVE-2010-0624).
- deprecated heap_overflow_in_rtapelib.patch,chmodRaceC.patch and
  include_fatal_c.patch</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="puzel@novell.com" date="1281441600">- add cpio-pattern-file-sigsegv.patch (bnc#629860)</changelog>
<changelog author="aj@suse.de" date="1283256000">- Recommend instead of require lang package since it's not mandatory.</changelog>
<changelog author="puzel@novell.com" date="1289304000">- disable-silent-rules</changelog>
<changelog author="andrea.turrini@gmail.com" date="1316347200">- fix typos in spec file</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- added autoconf to BuildRequires</changelog>
<changelog author="rschweikert@suse.com" date="1328184000">- leave binary in /usr (UsrMerge project), link to binary from /bin</changelog>
<changelog author="aj@suse.de" date="1342612800">- Fix build with missing gets declaration (glibc 2.16)</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="vcizek@suse.com" date="1374580800">- add a missing fix from SLE for bnc#830779 (original bug bnc#658031)
  added paxutils-rtapelib_mtget.patch</changelog>
<changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>

</package>
<package pkgid="d687b7d1f0ac5178366a1aac61388d071d236bd3d0baefeaefa52bb05b161121" name="cpio" arch="src">
    <version epoch="0" ver="2.11" rel="25.4.1"/>

<changelog author="mseben@suse.cz" date="1247832000">- fix identification of the density code for DAT160 bnc#415166</changelog>
<changelog author="rguenther@suse.de" date="1247832001">- Drop rmt BuildRequires again</changelog>
<changelog author="mseben@novell.com" date="1249905600">- merged DAT160.patch with mt.patch
- added other tape density definitions from mt_st package (bnc#523357)</changelog>
<changelog author="rschweikert@novell.com" date="1255694400">- close files after copy (bnc#543132)
  (cpio-2.10-close_files_after_copy.patch)</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="jengelh@medozas.de" date="1261828800">- enable parallel build</changelog>
<changelog author="mseben@novell.com" date="1267617600">- added heap_overflow_in_rtapelib.patch fix possible heap overflow in
  rtapelib.c (bnc#579475)</changelog>
<changelog author="mseben@novell.com" date="1268395200">- updated to 2.11
  * Fix mt build.
  * In copy-in mode, if directory attributes do not permit writing to it,
    setting them is delayed until the end of run. This allows to
  correctly extract files in such directories.
  * In copy-in mode, permissions of a directory are restored if it
    appears in the file list after files in it (e.g. in listings
  produced by find . -depth). This fixes debian bug #458079.
  * Fix possible memory overflow in the rmt client code (CVE-2010-0624).
- deprecated heap_overflow_in_rtapelib.patch,chmodRaceC.patch and
  include_fatal_c.patch</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="puzel@novell.com" date="1281441600">- add cpio-pattern-file-sigsegv.patch (bnc#629860)</changelog>
<changelog author="aj@suse.de" date="1283256000">- Recommend instead of require lang package since it's not mandatory.</changelog>
<changelog author="puzel@novell.com" date="1289304000">- disable-silent-rules</changelog>
<changelog author="andrea.turrini@gmail.com" date="1316347200">- fix typos in spec file</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- added autoconf to BuildRequires</changelog>
<changelog author="rschweikert@suse.com" date="1328184000">- leave binary in /usr (UsrMerge project), link to binary from /bin</changelog>
<changelog author="aj@suse.de" date="1342612800">- Fix build with missing gets declaration (glibc 2.16)</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="vcizek@suse.com" date="1374580800">- add a missing fix from SLE for bnc#830779 (original bug bnc#658031)
  added paxutils-rtapelib_mtget.patch</changelog>
<changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>

</package>
<package pkgid="610592534e46fdb64d67ad4cf041447355dae110f4b88518cac349eb350d93b1" name="cpio" arch="x86_64">
    <version epoch="0" ver="2.11" rel="25.4.1"/>

<changelog author="mseben@suse.cz" date="1247832000">- fix identification of the density code for DAT160 bnc#415166</changelog>
<changelog author="rguenther@suse.de" date="1247832001">- Drop rmt BuildRequires again</changelog>
<changelog author="mseben@novell.com" date="1249905600">- merged DAT160.patch with mt.patch
- added other tape density definitions from mt_st package (bnc#523357)</changelog>
<changelog author="rschweikert@novell.com" date="1255694400">- close files after copy (bnc#543132)
  (cpio-2.10-close_files_after_copy.patch)</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="jengelh@medozas.de" date="1261828800">- enable parallel build</changelog>
<changelog author="mseben@novell.com" date="1267617600">- added heap_overflow_in_rtapelib.patch fix possible heap overflow in
  rtapelib.c (bnc#579475)</changelog>
<changelog author="mseben@novell.com" date="1268395200">- updated to 2.11
  * Fix mt build.
  * In copy-in mode, if directory attributes do not permit writing to it,
    setting them is delayed until the end of run. This allows to
  correctly extract files in such directories.
  * In copy-in mode, permissions of a directory are restored if it
    appears in the file list after files in it (e.g. in listings
  produced by find . -depth). This fixes debian bug #458079.
  * Fix possible memory overflow in the rmt client code (CVE-2010-0624).
- deprecated heap_overflow_in_rtapelib.patch,chmodRaceC.patch and
  include_fatal_c.patch</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="puzel@novell.com" date="1281441600">- add cpio-pattern-file-sigsegv.patch (bnc#629860)</changelog>
<changelog author="aj@suse.de" date="1283256000">- Recommend instead of require lang package since it's not mandatory.</changelog>
<changelog author="puzel@novell.com" date="1289304000">- disable-silent-rules</changelog>
<changelog author="andrea.turrini@gmail.com" date="1316347200">- fix typos in spec file</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- added autoconf to BuildRequires</changelog>
<changelog author="rschweikert@suse.com" date="1328184000">- leave binary in /usr (UsrMerge project), link to binary from /bin</changelog>
<changelog author="aj@suse.de" date="1342612800">- Fix build with missing gets declaration (glibc 2.16)</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="vcizek@suse.com" date="1374580800">- add a missing fix from SLE for bnc#830779 (original bug bnc#658031)
  added paxutils-rtapelib_mtget.patch</changelog>
<changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>

</package>
<package pkgid="94d7f97a2c758cc3d6676612299a6741b0361bdea47280c97dc3812c3edaef7e" name="cpio-lang" arch="noarch">
    <version epoch="0" ver="2.11" rel="25.4.1"/>

<changelog author="mseben@suse.cz" date="1247832000">- fix identification of the density code for DAT160 bnc#415166</changelog>
<changelog author="rguenther@suse.de" date="1247832001">- Drop rmt BuildRequires again</changelog>
<changelog author="mseben@novell.com" date="1249905600">- merged DAT160.patch with mt.patch
- added other tape density definitions from mt_st package (bnc#523357)</changelog>
<changelog author="rschweikert@novell.com" date="1255694400">- close files after copy (bnc#543132)
  (cpio-2.10-close_files_after_copy.patch)</changelog>
<changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
<changelog author="jengelh@medozas.de" date="1261828800">- enable parallel build</changelog>
<changelog author="mseben@novell.com" date="1267617600">- added heap_overflow_in_rtapelib.patch fix possible heap overflow in
  rtapelib.c (bnc#579475)</changelog>
<changelog author="mseben@novell.com" date="1268395200">- updated to 2.11
  * Fix mt build.
  * In copy-in mode, if directory attributes do not permit writing to it,
    setting them is delayed until the end of run. This allows to
  correctly extract files in such directories.
  * In copy-in mode, permissions of a directory are restored if it
    appears in the file list after files in it (e.g. in listings
  produced by find . -depth). This fixes debian bug #458079.
  * Fix possible memory overflow in the rmt client code (CVE-2010-0624).
- deprecated heap_overflow_in_rtapelib.patch,chmodRaceC.patch and
  include_fatal_c.patch</changelog>
<changelog author="jengelh@medozas.de" date="1277726400">- use %_smp_mflags</changelog>
<changelog author="puzel@novell.com" date="1281441600">- add cpio-pattern-file-sigsegv.patch (bnc#629860)</changelog>
<changelog author="aj@suse.de" date="1283256000">- Recommend instead of require lang package since it's not mandatory.</changelog>
<changelog author="puzel@novell.com" date="1289304000">- disable-silent-rules</changelog>
<changelog author="andrea.turrini@gmail.com" date="1316347200">- fix typos in spec file</changelog>
<changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="vcizek@suse.cz" date="1325505600">- added autoconf to BuildRequires</changelog>
<changelog author="rschweikert@suse.com" date="1328184000">- leave binary in /usr (UsrMerge project), link to binary from /bin</changelog>
<changelog author="aj@suse.de" date="1342612800">- Fix build with missing gets declaration (glibc 2.16)</changelog>
<changelog author="mmeister@suse.com" date="1363867200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="vcizek@suse.com" date="1374580800">- add a missing fix from SLE for bnc#830779 (original bug bnc#658031)
  added paxutils-rtapelib_mtget.patch</changelog>
<changelog author="vcizek@suse.com" date="1417435200">- fix an OOB write with cpio -i (bnc#907456) (CVE-2014-9112)
  * added 0001-Fix-memory-overrun-on-reading-improperly-created-lin.patch</changelog>

</package>
<package pkgid="28f5e125f22751988f34ffed7a2ce930abd7e976098837f1e2fcb43fd8c732d4" name="crash" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="29a67602620be502a2d9d40d6e08648bbdcea9f57be967adec9a66db51510dbf" name="crash" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="3e582755f29e234c0870350e02704c25e85cbbc75c45b193d58cc6a8c0a4bd9e" name="crash" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="5de73150043f25277248d298fa0b18624f86f82a27e5f93401cc9d5ecbefb251" name="crash" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="8314eab935121cb3084d3722b5e7f2a9c9a7015ea6e693b3bca2f1942433e838" name="crash" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="8328a2adcdb545cbe29c4d9d01b0dfb6b665fb152aa719bc19543081109b17f2" name="crash" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="8b1b65abe9478e76cc6c89fa28e57ccf31811cad064c1e313152ddfd222f1e95" name="crash" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="1b554e1260f4c0ee19d76862df06c2b0f81ca233902e6fe61683a47ede586290" name="crash" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="d8cb3ec68dd604cb058b4a9fe68264d56cb996ccb1b1ffc6ccc6db62521833bb" name="crash" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="6ab899b4def3ec67241fc68c3859e11919631e5b825f14593f351d8b30c52773" name="crash" arch="src">
    <version epoch="0" ver="7.0.2" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="3f2cc8e4449eb0e5c3cafbce86fefdb6b150f87b422f24ded48db09519ca1968" name="crash" arch="src">
    <version epoch="0" ver="7.0.2" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="d2cf55c2bab0a948d1357246a66f35f938411dab1fc01ac4f225677ad051eb7d" name="crash" arch="src">
    <version epoch="0" ver="7.0.2" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="7f7668a9f9384f33cd6f7e1f954ae796983203fb03fbf67e353ef40189963147" name="crash" arch="src">
    <version epoch="0" ver="7.0.2" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="09f2980fda5d5e501f8dfd4dda9b02c12b48e620fdb90238cfd588d6db50ad03" name="crash" arch="src">
    <version epoch="0" ver="7.0.2" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="b2a0ee8a2dc9508ebe231941a6db333be070a096af5d1613c574d409203bd842" name="crash" arch="src">
    <version epoch="0" ver="7.0.2" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="1444dd71cbe337c9bd71fbb2c1c73890bfe0322ee993ef2e8c06f1e0df1ffb52" name="crash" arch="src">
    <version epoch="0" ver="7.0.2" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="985b0d3bb8ebaee00fe8bbc6af6e2c6b3b8a18a665664811798b8f67baade386" name="crash" arch="src">
    <version epoch="0" ver="7.0.2" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="2b679de8372ecb381dd650c62e82f7a2a4cc5e0505a7fefdeb77aa4d7875cee7" name="crash" arch="src">
    <version epoch="0" ver="7.0.2" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="43d108e6423a644958fbe90e32a3f09848b000532c0344e7d66ebf643627d1a5" name="crash" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="eb4c0970ebf2cefdc2c28c332e1044cdf94bda97d82e1206071b2cc2bf8aee7a" name="crash" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="6983aefa966c0fec15b8493b0c828599692591c01a233af8cd9d659070d19453" name="crash" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="6e26e0c4c300262123814a88de75ae73dd84dadefd7d13208acc485bae366f56" name="crash" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="5aa66bd2935ab93a3568ed345c5fd9747eb5db3700c5960e9b02e6e57f1edf7b" name="crash" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="50a8b96edbdcc6c33b3ff725e6fdbf5883ad7e6f9f3c12953c3ced7bb633f7ef" name="crash" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="5360d4700215f423a97d87c580fcdae1c6ecfd6fbe6ffcc9bf51b3ffd07f66ad" name="crash" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="f8aec59df2eb08a75c69662d461e5dbf6f83532c323295e17494d55269d2861c" name="crash" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="5ebca9c4d0bae76984b3596d1d859519552052d3902613b6f754498dcf6df4de" name="crash" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="323e67edfa247029a4a903ff74c907872984ad5c2c24670a06939eacca08f02b" name="crash-devel" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="51dedfe5807a00633218e10381778799dacb826ec597dff426d86190a33406c1" name="crash-devel" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="b856ed8013619d64bc1e5b514088efeb71c2497e99561a75cbf106e4789d1afd" name="crash-devel" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="2c7d8c63f6c21596fe14f4afbe2ef624c3f9b84b75c1d2a51e44095c03e7faa3" name="crash-devel" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="6e306a92e9bd327e45a66fa7a14ea9556496f368c50778365202907b4cd447ee" name="crash-devel" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="a566f6734bf6b33262580591763c2972854ef74931ff5d87e31f884132d1e8ac" name="crash-devel" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="5cfdd8fc9f3098516d7e2914966ac4c1219198ce09deb422d9e22455c7a0fa7c" name="crash-devel" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="1a890e2f26ba136518d3e8f680fd0df8fa55142c9912261a76d146e0182718f3" name="crash-devel" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="0f8973d6a1924ea5f9b2c12b1513169463876dea24542e94104bcdea78e3b637" name="crash-devel" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="dc9ec86dcbcf2437d82d03cd658b4b92a5191ccd4d8b3e4cdda72dae864b9744" name="crash-devel" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="2b79a3ab7a9227c9eab764a2097e8b7ff34611be86c58a2ce563ab369f10017f" name="crash-devel" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="3aed1d183ac694411f6ac714e62afc84a07a874da1cbe2ceb3acc4244771ef95" name="crash-devel" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="98a53f93ac40d4a8e99d12ff28b589ebd4975a6e1de17b60a029f1add8ec3001" name="crash-devel" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="d58a2ec521d9dd16381ac4f933e0d6eedc2c124024caceee35e635887523a030" name="crash-devel" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="232d4bc3967d4f3317017cac4ccafc7d5cd9a7e97bd35682d2249d9626918cb1" name="crash-devel" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="810d2892f5301baf335edc855a3160a5aab0d523cac20b3bcb723d3703e4ff64" name="crash-devel" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="191104000c3694d5e89a5fbe40e64e75ecbadd8cb4c6352a5a5d03ce592a6c98" name="crash-devel" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="47d6fd22e43b88a895b1a0c9beb4f1dd5ee0d5590e30ec33494f61afe9e0005e" name="crash-devel" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="dd1a7251331c525b80d871f1b15a05770e4c0d556ae23152f2de7128471ef650" name="crash-doc" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="06a443d244512be7cd299da56fbaeb17501c8bcd5fd478e809b0bb64b685c865" name="crash-doc" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="96f0800986554670459282769636c145dfa8128f78e94ee5247e5ad2eb71c022" name="crash-doc" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="4db6924b9a2ae288dfdcdb70370db6f7e650aac2fdbebb6590f03ac188d36121" name="crash-doc" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="af86944344de88c31720a3ebb59851cea67dfb07f63b656b73b5ef1b9baffb34" name="crash-doc" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="37b6912e982de69e848b16abcc4b6d45546eebffa47cc10e4a2d289f710f3056" name="crash-doc" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="652fcae072fa3b69ba42dbcb6552398b660f90c6b837a35ebc789f601292fe45" name="crash-doc" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="84fc9feea558dc96813c7d2410e2fddf99cc42bf14e54fb74f4341254479e011" name="crash-doc" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="e51d58857e9d1712fc7c427174c61bad1fc915d5e228e947d5f330ee2cdc4e45" name="crash-doc" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="b181fb671ddc732bda8fde1292df9eaf08d721f3b71ada42a371e547fdbc720b" name="crash-doc" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="54826e41e81579793e5d1be36219d5b0f7037dd2647b581750516ba4a1c6215f" name="crash-doc" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="1376cae370d0bae03394ba3576f80c6bd37a1245cb814b6fa9a09225f27bbc72" name="crash-doc" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="3d524d620b6ccb220ff9791152d76333a146d668bf53eff4ab2822e5448afe32" name="crash-doc" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="7ce85388bafa83f516e457c14d2581920b39b2267c148180d4b5366a519de6a3" name="crash-doc" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="18efacf50cc409691facaf636201f0e645803c8325126cb6d34fcbe9520a0ea7" name="crash-doc" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="714244488ff9bbc77b291f539f345f7a71e8bd7df0a779d5dc54ce919bddca9b" name="crash-doc" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="b12be930404260c21a957be86cc5979da1aad66353915730a86f765c5050572b" name="crash-doc" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="3bde7a361dd43e0d84b39f051090afde992c16b09addbb2f7b38d0d922368025" name="crash-doc" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="fa9fafd93e8ddd2f04c3cf6dc5f42852d60846ab928843dcb14056408d133e67" name="crash-eppic" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="d6f06b449ea05384131ea48101780fac99f33c53706a673a55290ebe83bd1547" name="crash-eppic" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="02f50609c99f5c5eb32deaec8d0779672f89f5aac35fc484cf46618e53a280f7" name="crash-eppic" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="9616b217e220e81f9933caf02a03878949612c08d45ed3ee0196992bf0d01afd" name="crash-eppic" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="0276a4ab0a80d8beefc9aef77afac693e6957d9c31996c2f1b443e6faa95929e" name="crash-eppic" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="bbc270386c841772368ac32c69f39d1679e9e1ec4dca2224e78c1b1ee1dbf522" name="crash-eppic" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="fb8cac80b808f5c8b8bf329613051c3ea3cde80aeca1b821f2300fa589790a8e" name="crash-eppic" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="30a37233a5f11b8fa7cc1e8c60f70063866b799ab25362201227d2b3625530fa" name="crash-eppic" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="d68dd391a0ee3cf11c6745543bf45052c49700bee36d643e3f7a4fbf3d72be92" name="crash-eppic" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="a6c2e1e0defa701a3bb4d753ab46e22bf91244716b25734d4f9cb65cff666008" name="crash-eppic" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="3eb72f8584d02f8abaf8b52b8d60372b2bf6401a352f08cc010b3eb9a4fe6c3e" name="crash-eppic" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="aed3e7c3b7549639d0723a2be78462e5adc5846f997342ed6963ade85cd4eb3e" name="crash-eppic" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="d0a4bb506e92c105fb2699b63647db5b4d425e56b24fa8598ecbda48cb31f16b" name="crash-eppic" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="83ba984420d46d2d2cd96245c560c1f6156f6ca9c96212687791c3f0fababea3" name="crash-eppic" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="b786ee812c03643d700fa4d71a8b9f100210f2599a94501750390de4c6fd3972" name="crash-eppic" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="9a8cd70c1062b471cc996d8cdda7c0187d7ed96701c547be27c568e8527fd058" name="crash-eppic" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="f737b295ab5affa266f0a40b233984e78112d315cbde74f83bbe993a834efef6" name="crash-eppic" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="25202799306b4d1bc76da3b064ab518b78dfca6e5d31c2f9eae3a0c0888a784c" name="crash-eppic" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="11e2fefa2e73115502274dd6035c1dd18711d24f88bef2f8588176596fa79b8a" name="crash-gcore" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="8fd1ffbbe850804c62eb83754378cf4208784e94584ac1553e44cc8b2e1d5efd" name="crash-gcore" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="f85f47d363a03609978a44014ed5c2e715ba348ff419bd59dab6a3ae357eaf8e" name="crash-gcore" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="b8d42daae506dafd6849bb99db76235d006f94d1b55145817822dccd7a7ba751" name="crash-gcore" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="81d4e3a6770b3c7c4d56e012e38f3f35e179663d06bfb12a7aa99dac20f78a83" name="crash-gcore" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="38174ec56d47e73211118423d0121bdca2669f2120e2b8ad58f93e418f16284c" name="crash-gcore" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="5ae649f0cab2e56ac5daca539ae889f3ecd4a80b0c41270591148569adfa8eb3" name="crash-gcore" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="ea6023a065a4df0f766a50d1b4352bec3d05bd848e0d1ff240215cbf45e2cef9" name="crash-gcore" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="7cbb323a02d7b50ad5f2cdd0612d865256a80b1773da144c2dec876e0a485093" name="crash-gcore" arch="i586">
    <version epoch="0" ver="7.0.2" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="0c6ab41b17522e54653bde95685354a015d5181d3ad47dca3e3a907db8c16008" name="crash-gcore" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="f430473b5ade0b1f384ea2c8f3ba4054a6807979d2b782129ac71fb6170945ab" name="crash-gcore" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="3b4194b783681edd859e2f1e66f794359b71c15573116d3718ef17a1a74e96e7" name="crash-gcore" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="3a26f65a1e556f09d412a986e18acf5ab397018e3a4e2ed63abc0e8a2f9adbd6" name="crash-gcore" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="80fc8b45c1bf272d6c846c28f8d868090627cc4529f240f9fb8485f131dacb21" name="crash-gcore" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="f7047b8e5a1935e27a00777df7730753f9e00b848b1a69730c58f5eceb4b34a3" name="crash-gcore" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="0a9110a710181c490ee1b9d2cd3cd490cd202259c54d7fa51fe226f274ff1947" name="crash-gcore" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="936a8483fde12577beccf2def5e77a2ae82cccf941a35dafb1025d288fbe40af" name="crash-gcore" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="3d7f470c3563f455ebd3b5e8967c248df99a5e1ef79dcdd1cf364b403d4fda84" name="crash-gcore" arch="x86_64">
    <version epoch="0" ver="7.0.2" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="9974eab7b2c24361c266ca3cb62fff5327b3f6d2deb2e6ed75e5bfce8ea0ceb1" name="crash-kmp-default" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_11" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="cee975f93114b6edd6eaf5f51a0f04e63491754e4854ed20319dc22585ca5836" name="crash-kmp-default" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_17" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="1fb6e0d9dff8411ed26f137e7ed41ebfa908120f831d9b01439e183773989172" name="crash-kmp-default" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_21" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="0e79f3b85420442a31c3392284c6df4c28a076b3063d8af6d8b299e177455e62" name="crash-kmp-default" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_25" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="232b2a6a15c4c598b8a8b8cd926d5915b573e0c087306bbf84fc876889900bfc" name="crash-kmp-default" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_29" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="2568f8e4644fa61e1b628ed3ae58fe14b767c3bc5c67e16cf8c9b12223df6632" name="crash-kmp-default" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_34" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="f51429179e4f0886fac3c55047b833d50584d3259b82213806f288998e13df2f" name="crash-kmp-default" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_7" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="81c84a431756d0421d316bd1a4ab1ff53e691c46bef07807f65273cdeb23a3a2" name="crash-kmp-default" arch="i586">
    <version epoch="0" ver="7.0.2_k3.12.57_44" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="a7c9f155c3935c0fdc9794a55272b72b1f4620ae7da66f8c7a2e7781ddea9fb2" name="crash-kmp-default" arch="i586">
    <version epoch="0" ver="7.0.2_k3.12.59_47" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="9513e4ecfe201af2a2479b4e6355b35712b316ac5a1679cb08b724422726c52a" name="crash-kmp-default" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_11" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="7acfd2e4e63a00c728087db3171ae42d363d6aa2155bd0ebc0d38e194d7dc611" name="crash-kmp-default" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_17" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="74d2c73268d6412f78d7c673559286a56893a239e26eea479d5a6cd94d948dc6" name="crash-kmp-default" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_21" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="cfe5f34f9d56cc073295e61c1ff80b121df2ef0e2500e4f3033fd52baee0f516" name="crash-kmp-default" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_25" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="ecf95457c3c6c4e35c5c9ae82ac37a91b59e64713ce17b7a23c5c0d39ddd77d8" name="crash-kmp-default" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_29" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="2dacd16b82c34f8b03aeeafcf157b3865a5e423ef1fb2aa428a45c4bdcd6b4a5" name="crash-kmp-default" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_34" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="caf494c77772ab47ccf3cd5adb82416a9261f84c9ff302577ad98f90d2211ac0" name="crash-kmp-default" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_7" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="b460a7355a78390fd68bb9f8c85d158b52b165b366a074919b31998f025baba8" name="crash-kmp-default" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.12.57_44" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="6b371681940dcba945edba1cf85db94ac6a2677d5cf67ca0c3feef8810a5e329" name="crash-kmp-default" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.12.59_47" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="de31e3898b11176a6a4037a9bc72e561de5b904f37908af1198cbdebf36f2937" name="crash-kmp-desktop" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_11" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="dc99a2578a44eee88f4ad77526f6b39bf1b30751b3b1db88944502775f778b7d" name="crash-kmp-desktop" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_17" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="b85b60c16b04bab044acf05b7c43b682397c49657488855818ca09e0174bd646" name="crash-kmp-desktop" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_21" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="5d32e5d52d5f19073e7f68e0a7dbd286e1e263477d851232a10bd4fd3ad74878" name="crash-kmp-desktop" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_25" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="48c22bc77eb3f1bd4856eb51de170827eaaadc82ef42c62492a1d01b0f27f6ce" name="crash-kmp-desktop" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_29" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="3fdb4c3958e7026afca47b46a18ce2addcce75f4e6e59b8b9aa6b0ce60560894" name="crash-kmp-desktop" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_34" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="ae6f41ba02834eef553e5bfa4a1c04574b2dd02c0f14acd3ad9107d3f2b9477d" name="crash-kmp-desktop" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_7" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="54790d1bb25db052bdb477cbd4d605935e3f760325bc98f2234d57281d8560ed" name="crash-kmp-desktop" arch="i586">
    <version epoch="0" ver="7.0.2_k3.12.57_44" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="9b99432921082d4c42546d478d35b639a7d912c6837bd9c12e23e65cd87355a8" name="crash-kmp-desktop" arch="i586">
    <version epoch="0" ver="7.0.2_k3.12.59_47" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="d829dabcb2d263c8e4aedb733aecd7012b7bf378713f05db8d71f63faa17e2a5" name="crash-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_11" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="d8a07a4fd178cf664a55dec74144983458171b24fa8027970cc3e51e6870e482" name="crash-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_17" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="790bcb35a2b458a24d2a7cf9aee4e65a04daccb0f2143bb9cb5255268d2037c3" name="crash-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_21" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="efb6b4dfea2cf34f7994b46bfacb6e14c90f4690b35df4ad9d46d6d559c8b305" name="crash-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_25" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="ed166891c4671c89e6db393b52a8a6bd4392e99f103fe891279087d9b9b86312" name="crash-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_29" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="024fe8c3bf633aa1c2c2d067a6b2a812821f1f955039bd241e944c29b90ea082" name="crash-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_34" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="cbb597747be3c43a79fb056a456b5314bca19b010aab8bf5f5f8722057bea8f2" name="crash-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_7" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="88c031dea7e9ee97f6f95d9ed12d55c5524a109bd3d4cf128c75f2ac8951249f" name="crash-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.12.57_44" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="afd33df90757c6db2dfbd79fb8397ec1cd8d62f3cff9654a98dd4b4ce4526517" name="crash-kmp-desktop" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.12.59_47" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="461dad8060a0f9e2985ebf419515c56695dc4d5a30ab2b4d399398dd7e771d3b" name="crash-kmp-pae" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_11" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="e827084bbc38e5376821e16f3a61308cf645b4207a8dc09d178cd6280a3b3619" name="crash-kmp-pae" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_17" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="787f4630fe06a49015b9de05a046dc78e7bb27938f0b8549d7a42312e6ece7e7" name="crash-kmp-pae" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_21" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="7f3d2904f08c0bb2227c5be60c71d74b114e1918fb2e8dacc95eb9931310ace1" name="crash-kmp-pae" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_25" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="162b23e3fbe7f729fbd8feee173d0772108513fce8587b58eb4130ffd0580d52" name="crash-kmp-pae" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_29" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="735d8bc130c992ba38cc7c58d316dba1edd7d31edd506be0a7200a3ce20b3283" name="crash-kmp-pae" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_34" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="ee60e00c7034acf004258d0aaccbddc70c4f097f8e8d25493a34989f8fb8e24c" name="crash-kmp-pae" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_7" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="ac6075322049c26b0e01172700593fece01a1ca57edc5eb6d5beb8702b7b4f47" name="crash-kmp-pae" arch="i586">
    <version epoch="0" ver="7.0.2_k3.12.57_44" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="068410cfceb864da8b8b14d3c438089ef0350afdd2187cc5d3257c4498d31a3e" name="crash-kmp-pae" arch="i586">
    <version epoch="0" ver="7.0.2_k3.12.59_47" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="34765a4c301e96cbedc6af1178239b6b3d17970a248de399d3296ec35cf3675b" name="crash-kmp-xen" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_11" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="c3e84e1b27c0f928764226ffe09aed6e7e13f00ef932e80868d0c61a17e9e490" name="crash-kmp-xen" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_17" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="8e29a15686c7b3451e1244574b38c568764609ecc0bcaea4aec418dbcb1c7434" name="crash-kmp-xen" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_21" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="cfb4344e9f5628313cd3929b8962ac26a851822bf122b51d6c5f457bad24235e" name="crash-kmp-xen" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_25" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="9148786e6736470b8e42345751c25201ab92155b0263f90a56f96b317e6f494b" name="crash-kmp-xen" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_29" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="b1de0087db72755a1575700ccdd6c17c437661922e580be143e76d8e1d1b33da" name="crash-kmp-xen" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_34" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="c283db4ba0505796d0324efc2607006c72e2fbdc907e40019227782a0bfb0e3a" name="crash-kmp-xen" arch="i586">
    <version epoch="0" ver="7.0.2_k3.11.10_7" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="529e4d4335ffa0b455ba436634f91376a4650ba6ff26ae6faf4d5fb48f1442b1" name="crash-kmp-xen" arch="i586">
    <version epoch="0" ver="7.0.2_k3.12.57_44" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="e85896f4e2a26750fa973321a9484d33746e89eb42f5e822fee6f5ea72d4dc8f" name="crash-kmp-xen" arch="i586">
    <version epoch="0" ver="7.0.2_k3.12.59_47" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="9affe9123b1abcb94f6ced5320fb8ae634465db1ec83b4642e35cdab46c843aa" name="crash-kmp-xen" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_11" rel="2.7.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="ec179043a4abb8f61efffbc89f4c8b48ed040225f088f20137e3ddb6b4aa7cdf" name="crash-kmp-xen" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_17" rel="2.10.9"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="b9f8d34aa381db11061eeae10fd586340186a0a4da9975dd31af5a265952a3b3" name="crash-kmp-xen" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_21" rel="2.13.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="f2cf69884bb482d4df473740e4903081b134c67bc8757ae8dacd8c3b54357f2a" name="crash-kmp-xen" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_25" rel="2.16.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="0b6f39c685242165e16c92123ac7e934cbd15b2c05381738c16dc45c1d35995d" name="crash-kmp-xen" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_29" rel="2.19.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="15c2b8b218fa85639382caded6d47675d6b80f24ac70ff9281a61446f67af300" name="crash-kmp-xen" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_34" rel="2.23.7"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="da105273e30e9c5ba3df3416a4750c81fc52b126dd29b09264022b3b0c7849bf" name="crash-kmp-xen" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.11.10_7" rel="2.4.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="7726db6e39124ef690efc21aea0e945be34ab997d55caf8a9025a2058cd67f66" name="crash-kmp-xen" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.12.57_44" rel="2.28.4"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="d0c42acdcafd4092dabd4574921c4c722046c9206683243c1fbd018d42f5663b" name="crash-kmp-xen" arch="x86_64">
    <version epoch="0" ver="7.0.2_k3.12.59_47" rel="2.30.1"/>

<changelog author="ptesarik@suse.cz" date="1318507200">- crash-debuginfo-compressed.patch: Search debuginfo files in the
  same directory as the original gzipped kernel image (bnc#723639).</changelog>
<changelog author="dmair@suse.com" date="1320667200">- Update to crash 6.0.0 from upstream and modifications to compile.</changelog>
<changelog author="idonmez@suse.com" date="1324987200">- Fix wrong size parameter in memset call</changelog>
<changelog author="dmair@suse.com" date="1325764800">- Update to crash 6.0.2 from upstream and modifications to compile.</changelog>
<changelog author="ptesarik@suse.cz" date="1326110400">- crash-wrong-memset.patch: fix compilation on SLE11.</changelog>
<changelog author="dmair@suse.com" date="1328616000">- Update to crash 6.0.3 from upstream and modifications to compile.
  6.0.3 change log is:
  o Fix to gdb-7.3.1/bfd/bfdio.c to properly zero out a complete
    struct stat with a corrected memset argument
  o Fix for the SIAL extension module to remove a call to
    sial_free() for an uninitialised variable
  o Fix for the "runq" command for kernels that are configured
    with CONFIG_FAIR_GROUP_SCHED
  o Implemented build and code for the analysis of 32-bit PPC ELF
    kdump vmcores
  o Implemented the capability of building a PPC crash binary on
    a PPC64 host, which can be done by entering "make target=PPC"
  o Determine the PPC page size from the kdump PAGESIZE vmcoreinfo
    data
  o Fix for the "kmem -[sS]", "kmem -[fF]" and "kmem &lt;address&gt;"
    options in 3.2 kernels
  o Addition of a set of dumpfile read diagnostic debug statements
  o Fix for X86 kernels that have CONFIG_X86_32,
    CONFIG_DISCONTIGMEM, CONFIG_DISCONTIGMEM_MANUAL and CONFIG_NUMA
    all configured
  o Fix for the "vtop" command on large NUMA X86 kernels where a
    node's starting physical address is larger than 32-bits
  o Update for the ARM architecture to recognize a recent change
    of its vmlinux section name from ".init" to ".init.text"
  o Significant speed increase of the "kmem -p" command, especially
    on large-memory systems
  o Implemented new "irq -a" and "irq -s" options
  o Removal of a redundant read of the kernel's __per_cpu_offset
    pointers in the ARM architecture's arm_get_crash_notes()
    function
  o Fix for an ARM architecture segmentation violation because of a
    stack overflow due to recursion in the page table translation
    code
  o Fix for the the "FREE HIGH" tally in the X86 "kmem -i" display
  o Fix for the "kmem -n" output display for 32-bit architectures
    that are configured with CONFIG_SPARSEMEM
  o Cleanup of several SIAL extension module files to address bison
    2.5 and gcc 4.4.3 compile-time warnings
  o Fix for "net -[sS]" command options on the ARM architecture
  o Fix for the ARM "bt" command to allow the core kernel unwind
    tables to be used in cases where the module unwind tables are
    inaccessible
  o Implementation of a new "dev -d" option that displays disk
    device I/O statistics
  o Update for 3.1.x and later kernels configured with CONFIG_SLAB,
    which have replaced the kmem_cache.nodelists[] array with a
    pointer to an  outside array
  o Implemented build and code for analysis of 32-bit PPC
    compressed kdump vmcores
  o Prevent the "runq" command from dumping an unending loop of
    tasks if the CFS runqueue has been corrupted
  o Repurposed/renamed the rarely-used and rarely-needed "mod -r"
    option to "mod -R"
  o Implemented a new "mod -r" option, which will pass the
    "-readnow" flag to the embedded gdb module, which will override
    the two-stage strategy that it uses for reading symbol tables
    from module object files
  o Performance increase for the "kmem -s &lt;address&gt;" option on
    kernels configured with CONFIG_SLAB, most notably on kernels
    whose kmem_cache.array[NR_CPUS] array is several pages in size
  o Require that the "&lt;slabname&gt;" argument to "kmem -s &lt;slabname&gt;"
    be escaped with a '\' character in two situations:
    (1) in the highly-unlikely case of a kmem_cache slab named
    "list", to prevent the ambiguity with the "kmem -s list"
    command option.
    (2) if the first character of the &lt;slabname&gt; actually is a '\'
    character
  Modifications to compile are as follows:
  o Replacement of crash-6.0.2.tar.gz with crash-6.0.3.tar.gz
  o Remove crash-wrong-memset.patch the fix is present in 6.0.3
  o Remove crash-add-read-diags.patch the change is in 6.0.3</changelog>
<changelog author="dmair@suse.com" date="1330516800">- Update to crash 6.0.4 from upstream and adjust patch locations
  to match current crash source.
  6.0.4 changelog is:
  o Fix to allow the recently-added "mod -g" and "mod -r" options
    to be used together.
  o Additional update for 3.1.x and later kernels configured with
    CONFIG_SLAB, which have replaced the kmem_cache.nodelists[]
    array with a pointer to an outside array.
  o Document the "crash [-h|--help] all" option in the crash.8 man
    page and in the "crash [-h|--help]" output.
  o Fix the S390/S390X-specific "s390dbf" command's "hex_ascii"
    debug data printing routine to prevent the display of
    non-ASCII characters.
  o Fix for ARM stack unwinding on 3.2 and later kernels due to
    commit:
    http://git.kernel.org/linus/de66a979012dbc66b1ec0125795a3f79ee667b8a
  o Implemented a new "search -x &lt;count&gt;" option that displays the
    memory contents before and after any found search target.
  o  Fix for the x86_64 Xen hypervisor "bt" command.  Without the
    patch, the contents of the RDX register in exception frames
    incorrectly shows the contents of the RCX register.
  o Implementation of a platform-based vmalloc address translation
    scheme for the 32-bit PPC architecture, introducing suppport
    for the PPC44X platform while maintaining the current default
    platform.
  o Fix for the usage of native gdb commands where the command
    output is redirected to a pipe and then redirected to a file.
  o Fix to prevent a crash session that is run over a network
    connection that is killed/removed from going into 100%
    cpu-time loop.
  o Fix for the support of PPC64 compressed kdumps, a regression
    that was introduced in crash-6.0.3 when support for 32-bit PPC
    compressed kdumps was implemented.
  o Fix for the x86_64 "bt" command to prevent the possible
    skipping of the stack frame just above an exception frame that
    indicates "[exception RIP: unknown or invalid address]".
  Patches with modified target locations are:
    crash-make-emacs-default.diff
    crash-sles9-time.patch
    crash-crosscrash-hint.diff
    crash-missing-declarations.patch</changelog>
<changelog author="dmair@suse.com" date="1332849600">- Update to crash 6.0.5 from upstream and adjust patch positions
  to match current crash source.
  6.0.5 changelog is:
  o Enhancement to the "foreach" command to allow any of the "name"
    arguments to be POSIX extended regular expressions.  The
    expression string must be encompassed by "'" characters, and
    will be matched against the names of all tasks.
  o Fix for the embedded gdb module's "ptype" command, and by
    extension, the crash utility's "struct" command, to be able to
    fully display embedded structure or union members of a
    structure/union.  Without the patch, if a structure or union is
    a member of a structure or union that is a member of a
    structure or union, then it is displayed as "struct {...}" or
    "union {...}".
  o Extend the "ps -l" output to also display the task state next
    to its last_run/timestamp value.
  o Enhancement to the "foreach" command which adds a new "state"
    task-indentifier argument that filters tasks by their task
    state. The state argument may be any of the task states
    displayed by the "ps" command: RU, IN, UN, ST, ZO, SW or DE.
  o Implemented a new pc-&gt;cmd_cleanup function pointer and an
    optional pc-&gt;cmd_cleanup_arg argument that will allow any
    command to register a function and an optional argument that
    will be called after a command has completed successfully, or
    more likely, unsuccessfully. Normally the only cleanup required
    for a command is the freeing of buffers that were allocated
    with GETBUF(), but that is performed automatically after each
    command is run.  However, with the introduction of the new
    POSIX regular expression functionality of the "foreach"
    command, there needed to be a way to call regfree() in the case
    where where regcomp() was called successfully, but then the
    command later encountered one of several fatal error
    conditions. This facility is also available for use by
    extension module commands.
  o Enforce the usage of a kernel thread's pgd from its active_mm
    for the ARM "vtop -c" command; if its active_mm is NULL, make
    the command fail similarly to the other architectures,
    displaying the error message "vtop: no active_mm for this
    kernel thread".
  o Fix for the x86_64 "bt" command running against recent kernels
    if an active task was operating on its IRQ stack when the crash
    occurred.  Without the patch, the determination of the IRQ
    exception frame was off-by-8, displaying invalid register data
    and the error message "bt: WARNING: possibly bogus exception
    frame".
  o Update to handle the vfsmount structure change in 3.3 kernels,
    in which most members of the vfsmount structure have been moved
    into a new "struct mount", and the vfsmount structure has been
    embedded in the new mount structure.  Without the patch, the
    following commands will fail, displaying the following error
    messages:
    mount: "mount: invalid structure member offset: vfsmount_mnt_list"
    files: "files: invalid structure member offset: dentry_d_covers"
    vm: "vm: invalid structure member offset: dentry_d_covers"
    swap: "swap: invalid structure member offset: dentry_d_covers
    fuser: "files: invalid structure member offset: dentry_d_covers"
    The "fuser" command generates the above error because it uses
    the "files" command behind the scenes.
  o Fix for the "ps" command to prevent the display of "??" under
    the ST (task state) column.  Without the patch, in more recent
    kernels, if more than one bit were set in the task_struct.state
    field, the state would display "??".  With the fix, the primary
    state will always be displayed.
  o Update to the output of the "set" command when it displays a
    task's state.  Without the patch, if more than one bit was set
    in the task_struct.state field, "STATE: (unknown)" would be
    displayed.  With the fix, all bits in both the task_struct.state
    and task_struct.exit_state fields are translated.
  o Implemented a new "vm -P &lt;vma-address&gt;" option, which is similar
    to "vm -p", but only does the page translations of the specified
    VM area of a context.
  o Add support for the Freescale PowerPC e500mc version of the E500
    processor chipset, and rework the PPC platform-specific code in
    order to more easily support new processors.
  o Implemented a new "gdb" crash environment variable that can be
    used to alter a crash session's behavior such that all commands
    are passed directly to the embedded gdb module.  The new mode
    is turned on and off by entering "set gdb on" and "set gdb off".
    When running in this mode, the command prompt will be "gdb&gt;".
    In order to execute native crash commands while running in this
    mode, precede the command with the "crash" directive, for
    example, "crash ps".
  o Fix for a "*** stack smashing detected ***: crash terminated"
    failure during the initial system banner display on a 32-bit
    PPC platform.
  o Redesigned/simplified the internal read_string() function to
    prevent a potential segmentation violation.
  o Updates for the 32-bit PPC "vtop" command output:
    (1) Translate kernel virtual addresses for FSL BOOKE by using
    the TLBCAM setting
    (2) Remove the PMD line from the display
    (3) Fix the displayed PHYSICAL values of FSL BOOKE PTE format
  o Fix for crash invocation failure on 3.3-era kernels in which
    the former standalone "xtime" timespec structure has been moved
    into the "timekeeper" structure.  Without the patch, the crash
    session would fail early on with the message "crash: cannot
    resolve: xtime". The patch also prevents the crash session
    failure in the unlikely event that the timespec access fails.</changelog>
<changelog author="dmair@suse.com" date="1336996800">- Update to crash 6.0.6 from upstream
  o Extend the supported cross-architecture build capability so
    that it applies to the SIAL extentension module. Without the
    patch, when building the SIAL module an environment where the
    overlying crash utility was built with "make target=ARM",
    "make target=PPC", or "make target=X86", the SIAL extension
    module would continue to be built for the host architecture
  o Fixes for memory leaks and possible segmentation violations
    when unloading SIAL extension module scripts.
  o Fix for the new "foreach RU" task state qualifier.  Without the
    patch, the runnable tasks are not selected.
  o Fix to disallow multiple task states from being entered using
    the "foreach &lt;task-state&gt;" qualifier.  Without the patch, if
    multiple states were entered, the last one on the command line
    would be honored.
  o Fix for the "extend" command to allow the usage of 32-bit PPC
    extension modules.  Without the patch, the command fails with the
    message: "extend: &lt;object&gt;.so: not an ELF format object file".
  o If an input line starts with "#" or "//", then the line will be
    saved as a comment that is visible when re-cycling through the
    command history list.
  o Fix for a crash-5.1.9 regression that broke the "bt -g" option.
    Without the patch, the option is ignored completely.
  o Fix for s390x virtual-to-physical translation of virtual
    addresses that are backed by 1MB pages.
  o The s390x has a dumpfile method that creates "live dumps", where
    the kernel continues to run while the dumpfile is being created.
    The initial system banner display and the "sys" command will
    inform the user that the dumpfile is a "[LIVE DUMP]", and the
    "bt -a" option will fail with the message "bt: -a option not
    supported on a live system or live dump".
  o Newly-created dumpfiles generated by the "snap.c" extension module
    will now be recognized as "live dumps".  Accordingly, the initial
    system banner display and the "sys" command will inform the user
    that the dumpfile is a "[LIVE DUMP]", and the "bt -a" option will
    fail with the message "bt: -a option not supported on a live
    system or live dump".
  o If "bt" alone is attempted on an active task in a "live dump", it
    will indicate "(active)", i.e., the same as if it were attempted
    on a live system.
  o If an extension module does not define the appropriate architecture,
    i.e., "-DX86", "-DX86_64", etc., then the inclusion of "defs.h"
    will generate a compiler failure indicating "error: 'NR_CPUS'
    undeclared here (not in a function)".  In that case, the
    architecture will now default to that of the host machine.
  o Prevent a highly-unlikely incorrect calculation of the maximum
    cpudata array length of a kmem_cache during initialization of
    of CONFIG_SLAB kernels.
  o Prevent an infinite loop during the initialization of the
    kmem_cache subsystem in CONFIG_SLAB kernels if the cache list or
    the vmcore is corrupt.  If the kmem_cache list links back into
    itself, messages showing the first "duplicate" entry in the list
    and "crash: unable to initialize kmem slab cache subsystem" will
    be displayed.
  o Update to the "mod" command to additionally search for module
    object files in the directory containing the kernel namelist
    (vmlinux) file. This will allow an alternate module-debuginfo
    directory tree to be set up like so:
    [#] cd &lt;directory&gt;
    [#] rpm2cpio kernel-debuginfo-&lt;release&gt;.rpm | cpio -idv
    Having done that, and by referencing the vmlinux file in that
    directory tree directly or by symbolic link, the "mod" command
    will search for module object files starting from the directory
    containing the vmlinux file if they are not found in the standard
    /lib/modules/&lt;release&gt; directory.
  o Update to the s390x "bt" command if a task was running in
    userspace. Without the patch, the back trace display ended at the
    kernel entry function frame; with the patch, the user space PSW
    register is displayed with a "(user space)" tag, followed by the
    general purpose register set.
  o In the unlikely event that the access of ARM or x86_64 kernel
    unwind table data fails during crash invocation, print a warning
    message and allow the crash session to continue.  Without the
    patch, the crash session would fail immediately.</changelog>
<changelog author="ptesarik@suse.cz" date="1337256000">- delete crash-foreach-match-running.patch: upstream</changelog>
<changelog author="dmair@suse.com" date="1338552000">- Update to crash 6.0.7 from upstream and adjust patches to apply
  without offsets. Upstream changes:
  o Enhanced the search command to allow the searched-for value to
    be entered as a crash (expression) or a kernel symbol name. The
    resultant value of an (expression) or kernel symbol value must
    fit into in the designated value size if -w or -h are used, and
    neither variant may be used with the -c option.  If found, both
    the resultant value and the argument input string will be
    displayed next to the target address(es).
  o Added a new "search -t" option that will restrict the search to
    the kernel stack pages of all tasks.  If one or more matches
    are found in a task's kernel stack, the output is preceded with
    a task-identifying header.
  o Fix for the s390x "bt -[tT]" options when run on an active task
    on a live system.  Without the patch, the options fail with the
    message "bt: invalid/stale stack pointer for this task: 0".
  o Fix for s390x "vm -p" option, which may show invalid user to
    physical address translation data if a page is not mapped.
    Without the patch, a page's translation may indicate
    "&lt;address&gt;   SWAP: (unknown swap location)  OFFSET: 0",
    or show an incorrect swap offset on an actual swap device.
  o Added new "vm -[xd]" options to be used in conjunction with
    "vm -[mv]", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "vm -[mv]".  The
    new flags may also be used with "foreach vm -[mv]".
  o Fix for the s390x "vm -p" and "vtop -u &lt;user-address&gt;" commands
    if the page containing the relevant PTE is not mapped.  Without
    the patch, the commands fail with the error message "vm: read
    error: kernel virtual address: 0  type: entry" or "vtop: read
    error: kernel virtual address: 0  type: entry"
  o Fix for the s390x "vm -p" command and "vtop -u &lt;user-address&gt;"
    commands to properly translate pages that are swapped out into
    their swap file and offset.  Without the patch, the swap file
    and offset would not be displayed.
  o Added new "list -[xd]" options to be used in conjunction with
    "list -s", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "list -s".
  o Added new "net -[xd]" options to be used in conjunction with
    "net -S", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "net -S".  The new
    flags may also be used with "foreach net -S".
  o Added new "mach -[xd]" options to be used in conjunction with
    "mach -c", which override the current default output format
    with hexadecimal or decimal format for just the command instance.
    Without the patch, it would require changing the default output
    format with "hex" or "dec" prior to executing "mach -c".
  o If the value read from the cpu online, present, or possible masks
    contains a cpu bit value that is outside the architecture's maximum
    NR_CPUS value, print a warning message during invocation.  Without
    the patch, a corrupt vmcore containing a bogus mask value could
    quietly corrupt heap memory.
  o Add support to for reading dumpfiles compressed by LZO using
    makedumpfile version 1.4.4 or later.  This feature is disabled by
    default.  To enable this feature, build the crash utility in the
    following manner:
    (1) Install the LZO libraries by using the host system's package
    manager or by directly downloading libraries from author's
    website.  The packages required are:
  - lzo
  - lzo-minilzo
  - lzo-devel
    The author's website is: http://www.oberhumer.com/opensource/lzo
    (2) Create a CFLAGS.extra file and an LDFLAGS.extra file in top-level
    crash sources directory:
  - enter -DLZO in the CFLAGS.extra file
  - enter -llzo2 in the LDFLAGS.extra file.
    (3) Build crash with "make" as always.
  * Only available as a source option for manual build in this
    environment
  o Fix for the included "trace" extension module.  Without the patch,
    if the module initialization sequence fails, a double-free in the
    module may lead to a subsequent malloc() segmentation violation
    in the crash session.
  o Incorporated the "ipcs" extension module written by Qiao Nuohan
    as a built-in command.  The command displays the kernel's usage
    of the System V shared memory, semaphore and message queue IPC
    facilities.  It differs from the original extension module by
    fixing a failure scenario if the current task is exiting, and
    adds a "-n pid|task" option, which displays the IPCS facilities
    with respect to the namespace of a given pid or task.
  o Fix for a gdb-7.3.1 regression that causes the line number capability
    to fail with certain ranges of x86 base kernel text addresses.
    Without the patch, the "dis -l &lt;symbol&gt;" or "sym &lt;symbol&gt;"
    commands would fail to show line number information for certain
    ranges of base kernel text addresses.
  o Added a new "printm" command to the embedded gdb module.  It
    is currently only used by the "pstruct" extension module, but
    can be used to dump the type, size, offset, bitpos and bitsize
    values of an expression.
  o Added a new "runq -t" option that displays the timestamp information
    of each cpu's runqueue, which consists of either the rq.clock, the
    rq.most_recent_timestamp or rq.timestamp_last_tick value, whichever
    applies.  Following each cpu timestamp is the last_run or timestamp
    value of the active task on that cpu, whichever applies, along with
    the task identification.
  o Fix for an initialization-time warning when running on a live system
    with the most recent version of the modprobe command, which no longer
    supports the -l and --type options.  The modprobe is used to detect
    whether the crash.ko memory driver is part of the distribution.
    Without the patch, a warning message is issued that indicates
    "/sbin/modprobe: invalid option -- 'l'".  If the driver is built into
    the kernel, the message is harmless.  If the driver is not built into
    kernel, then the crash.ko (/dev/crash) driver would not be selected
    as the live memory source.</changelog>
<changelog author="dmair@suse.com" date="1342526400">- Enabled support for reading dumpfiles compressed by LZO using
  makedumpfile version 1.4.4 or later.</changelog>
<changelog author="aj@suse.de" date="1343563200">- Fix build with glibc 2.16 (struct siginfo -&gt; siginfo_t).</changelog>
<changelog author="tabraham@suse.com" date="1359115200">- crash-var_length_log_rec.patch: support variable-length record
  kernel log buffer present in kernel 3.5 and later (bnc#796151).</changelog>
<changelog author="dmair@suse.com" date="1359979200">- crash-compressed-booted-kernel.patch: Fix for "crash when invoked
  without arguments fails to analyze the live system" (bnc#777516).</changelog>
<changelog author="dmair@suse.com" date="1359979201">- Re-execution of 150764 by tabraham@suse.com to re-align patch
  content, re-number patches for latest spec contents and to
  remove some incidental content (e.g. whitespace insertion and
  leftover comments of new lines). Comment from tabraham follows:
  - added crash-display-date-fix.patch
  This is a backport of the fix from crash-6.0.9 to fix the date
  displayed by the initial system banner and by the "sys" command
  for linux kernel 3.6 and later. Without the patch, the date
  displayed will be that of the UNIX epoch adjusted to local time.
  - added crash-kmem_cache_slab.patch
  This is a backport of the fix from crash-6.1.0 for Linux 3.0 and
  later kernels that have been configured with CONFIG_SLAB and with-
  out CONFIG_NODES_SHIFT. Without the patch, the warning messages
  "crash: nr_node_ids: symbol does not exist" and "crash: unable to
  initialize kmem slab cache subsystem" are displayed during
  initialization, and the "kmem -[sS]" options fail with the message
  "kmem: kmem cache slab subsystem not available".</changelog>
<changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
<changelog author="dmair@suse.com" date="1368187200">- Implementation of v6.1.3 from upstream.
  crash-display-date-fix.patch   - removed/redundant
  crash-kmem_cache_slab.patch    - removed/redundant
  crash-siginfo.patch            - removed/redundant
  crash-var_length_log_rec.patch - removed/redundant
  eppic-switch-to-system-lib.patch - Implementation of EPPIC via
  system library rather than retrieve and include in build. Added
  eppic constants to spec file without removing the sial constants
  for now.
  crash-crosscrash-hint.diff    - refreshed
  crash-make-emacs-default.diff - refreshed
  crash-sles9-time.patch        - refreshed</changelog>
<changelog author="dmair@suse.com" date="1378987200">- Implementation of v7.0.2 from upstream.
  o See http://people.redhat.com/anderson/crash.changelog.html
    for a complete list of changes from 6.1.3.
- crash-rl_digit_loop-return.patch	- removed
- crash-missing-declarations.patch	- refreshed
- crash-rl_digit_loop-return.patch	- refreshed
- eppic-switch-to-system-lib.patch	- refreshed</changelog>
<changelog author="ptesarik@suse.com" date="1379073600">- crash-crosscrash-hint.diff: Removed, because crosscrash isn't
  maintained any longer.</changelog>

</package>
<package pkgid="bc8fd1b7d6d6bd590718dea02d7f12b8299cf71184ff93f085bfabd707cbdefc" name="cron" arch="i586">
    <version epoch="0" ver="4.2" rel="50.4.1"/>

<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="fcrozat@suse.com" date="1317297600">- Use systemd macros to register cron.service.</changelog>
<changelog author="fcrozat@suse.com" date="1317988800">- Ensure service_add_post is called in %post and not verify.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322568000">- Cron started before network is up [bnc#733275]</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="aj@suse.de" date="1322654401">- Add dependency on ypbind and nscd (bnc#732356)
- Do not install generic INSTALL file.
- Use set_permissions for newer distros.</changelog>
<changelog author="tabraham@novell.com" date="1326888000">- removed cronie-1.4.7-syslog_output.patch deprecated by this update
- Update to 1.4.8
  + Cron writes job output to syslog incorrectly. When cron is
    invoked in a way to print job output to syslog, it does print
    only the first character of the output
  + Check orphanded crontabs for adoption
  + Unify logging in case SyslogOutput with the rest of crond
  + The charset of anacron's mail is always ANSI_X3.4-1968. There
    are no setlocale in anacron's source
  + Cronie disables inotify when the /etc/crontab file does not
    exist at startup. Existance of crontab and directories wasn't
    controlled before creating inotify watches.</changelog>
<changelog author="tabraham@novell.com" date="1334059200">- added cronie-1.4.8-bug_756197.diff to remove references to anacron
  in crontab.5</changelog>
<changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless autmake dependency</changelog>
<changelog author="coolo@suse.com" date="1340625600">- the recommends for postfix was from a time when smtp_daemon
  was required, now that smtp_daemon is recommended, the recommend
  for postfix is between useless and harmful - so reduce it to a suggests</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345032000">- When the cron daemon does not fork, as it is the case
  when using systemd, pid files are useless. avoid creating
  them in the first place.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd by pkgconfig provide to get systemd-mini
  in build environments (to break cycle)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351425600">- DO not require sysvinit(syslog), the journal is enough</changelog>
<changelog author="vdziewiecki@suse.com" date="1352721600">-Fix Bug 786096 - VUL-1: cron: does not close file descriptors before invocation of commands</changelog>
<changelog author="fcrozat@suse.com" date="1359979200">- Regenerate cronie-pam_config.diff, last line of the patch was not
  properly added, causing bnc#801553.</changelog>
<changelog author="meissner@suse.com" date="1360238400">- fixed the file descriptor leak correctly (bnc#786096,bnc#802345)</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering units after syslog.target is no longer recommended.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378814400">- define PIDIDIR to "/run" instead of the (outdated) definition
  coming from glibc "paths.h"
- systemd: there is no mail-transfer-agent target anymore, services
  must be ordered After= a list of possible MTA.</changelog>
<changelog author="kstreitova@suse.com" date="1421409600">- add cronie-1.4.8-pam_env.patch in order to fix loading the PAM
  environment from the pam_env module as documented in the manual
  page. Also fix memory leak of environment returned by
  pam_getenvlist() (bnc#900604).</changelog>

</package>
<package pkgid="c6f47bb9b19eb616e6c796468d73afde6f725ab491ffe186da93e4dd88fbffc1" name="cron" arch="x86_64">
    <version epoch="0" ver="4.2" rel="50.4.1"/>

<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="fcrozat@suse.com" date="1317297600">- Use systemd macros to register cron.service.</changelog>
<changelog author="fcrozat@suse.com" date="1317988800">- Ensure service_add_post is called in %post and not verify.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322568000">- Cron started before network is up [bnc#733275]</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="aj@suse.de" date="1322654401">- Add dependency on ypbind and nscd (bnc#732356)
- Do not install generic INSTALL file.
- Use set_permissions for newer distros.</changelog>
<changelog author="tabraham@novell.com" date="1326888000">- removed cronie-1.4.7-syslog_output.patch deprecated by this update
- Update to 1.4.8
  + Cron writes job output to syslog incorrectly. When cron is
    invoked in a way to print job output to syslog, it does print
    only the first character of the output
  + Check orphanded crontabs for adoption
  + Unify logging in case SyslogOutput with the rest of crond
  + The charset of anacron's mail is always ANSI_X3.4-1968. There
    are no setlocale in anacron's source
  + Cronie disables inotify when the /etc/crontab file does not
    exist at startup. Existance of crontab and directories wasn't
    controlled before creating inotify watches.</changelog>
<changelog author="tabraham@novell.com" date="1334059200">- added cronie-1.4.8-bug_756197.diff to remove references to anacron
  in crontab.5</changelog>
<changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless autmake dependency</changelog>
<changelog author="coolo@suse.com" date="1340625600">- the recommends for postfix was from a time when smtp_daemon
  was required, now that smtp_daemon is recommended, the recommend
  for postfix is between useless and harmful - so reduce it to a suggests</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345032000">- When the cron daemon does not fork, as it is the case
  when using systemd, pid files are useless. avoid creating
  them in the first place.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd by pkgconfig provide to get systemd-mini
  in build environments (to break cycle)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351425600">- DO not require sysvinit(syslog), the journal is enough</changelog>
<changelog author="vdziewiecki@suse.com" date="1352721600">-Fix Bug 786096 - VUL-1: cron: does not close file descriptors before invocation of commands</changelog>
<changelog author="fcrozat@suse.com" date="1359979200">- Regenerate cronie-pam_config.diff, last line of the patch was not
  properly added, causing bnc#801553.</changelog>
<changelog author="meissner@suse.com" date="1360238400">- fixed the file descriptor leak correctly (bnc#786096,bnc#802345)</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering units after syslog.target is no longer recommended.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378814400">- define PIDIDIR to "/run" instead of the (outdated) definition
  coming from glibc "paths.h"
- systemd: there is no mail-transfer-agent target anymore, services
  must be ordered After= a list of possible MTA.</changelog>
<changelog author="kstreitova@suse.com" date="1421409600">- add cronie-1.4.8-pam_env.patch in order to fix loading the PAM
  environment from the pam_env module as documented in the manual
  page. Also fix memory leak of environment returned by
  pam_getenvlist() (bnc#900604).</changelog>

</package>
<package pkgid="b9686dc8500db8ab2d6b9f07d28bcfad05e65656e25fc4a8ad2c9b0a9706bc20" name="cronie" arch="i586">
    <version epoch="0" ver="1.4.8" rel="50.4.1"/>

<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="fcrozat@suse.com" date="1317297600">- Use systemd macros to register cron.service.</changelog>
<changelog author="fcrozat@suse.com" date="1317988800">- Ensure service_add_post is called in %post and not verify.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322568000">- Cron started before network is up [bnc#733275]</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="aj@suse.de" date="1322654401">- Add dependency on ypbind and nscd (bnc#732356)
- Do not install generic INSTALL file.
- Use set_permissions for newer distros.</changelog>
<changelog author="tabraham@novell.com" date="1326888000">- removed cronie-1.4.7-syslog_output.patch deprecated by this update
- Update to 1.4.8
  + Cron writes job output to syslog incorrectly. When cron is
    invoked in a way to print job output to syslog, it does print
    only the first character of the output
  + Check orphanded crontabs for adoption
  + Unify logging in case SyslogOutput with the rest of crond
  + The charset of anacron's mail is always ANSI_X3.4-1968. There
    are no setlocale in anacron's source
  + Cronie disables inotify when the /etc/crontab file does not
    exist at startup. Existance of crontab and directories wasn't
    controlled before creating inotify watches.</changelog>
<changelog author="tabraham@novell.com" date="1334059200">- added cronie-1.4.8-bug_756197.diff to remove references to anacron
  in crontab.5</changelog>
<changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless autmake dependency</changelog>
<changelog author="coolo@suse.com" date="1340625600">- the recommends for postfix was from a time when smtp_daemon
  was required, now that smtp_daemon is recommended, the recommend
  for postfix is between useless and harmful - so reduce it to a suggests</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345032000">- When the cron daemon does not fork, as it is the case
  when using systemd, pid files are useless. avoid creating
  them in the first place.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd by pkgconfig provide to get systemd-mini
  in build environments (to break cycle)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351425600">- DO not require sysvinit(syslog), the journal is enough</changelog>
<changelog author="vdziewiecki@suse.com" date="1352721600">-Fix Bug 786096 - VUL-1: cron: does not close file descriptors before invocation of commands</changelog>
<changelog author="fcrozat@suse.com" date="1359979200">- Regenerate cronie-pam_config.diff, last line of the patch was not
  properly added, causing bnc#801553.</changelog>
<changelog author="meissner@suse.com" date="1360238400">- fixed the file descriptor leak correctly (bnc#786096,bnc#802345)</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering units after syslog.target is no longer recommended.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378814400">- define PIDIDIR to "/run" instead of the (outdated) definition
  coming from glibc "paths.h"
- systemd: there is no mail-transfer-agent target anymore, services
  must be ordered After= a list of possible MTA.</changelog>
<changelog author="kstreitova@suse.com" date="1421409600">- add cronie-1.4.8-pam_env.patch in order to fix loading the PAM
  environment from the pam_env module as documented in the manual
  page. Also fix memory leak of environment returned by
  pam_getenvlist() (bnc#900604).</changelog>

</package>
<package pkgid="16319a4c7474fa17aa5bbbdcda7ee7fd907d5e146ff28887e70b4f5eda73a139" name="cronie" arch="src">
    <version epoch="0" ver="1.4.8" rel="50.4.1"/>

<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="fcrozat@suse.com" date="1317297600">- Use systemd macros to register cron.service.</changelog>
<changelog author="fcrozat@suse.com" date="1317988800">- Ensure service_add_post is called in %post and not verify.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322568000">- Cron started before network is up [bnc#733275]</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="aj@suse.de" date="1322654401">- Add dependency on ypbind and nscd (bnc#732356)
- Do not install generic INSTALL file.
- Use set_permissions for newer distros.</changelog>
<changelog author="tabraham@novell.com" date="1326888000">- removed cronie-1.4.7-syslog_output.patch deprecated by this update
- Update to 1.4.8
  + Cron writes job output to syslog incorrectly. When cron is
    invoked in a way to print job output to syslog, it does print
    only the first character of the output
  + Check orphanded crontabs for adoption
  + Unify logging in case SyslogOutput with the rest of crond
  + The charset of anacron's mail is always ANSI_X3.4-1968. There
    are no setlocale in anacron's source
  + Cronie disables inotify when the /etc/crontab file does not
    exist at startup. Existance of crontab and directories wasn't
    controlled before creating inotify watches.</changelog>
<changelog author="tabraham@novell.com" date="1334059200">- added cronie-1.4.8-bug_756197.diff to remove references to anacron
  in crontab.5</changelog>
<changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless autmake dependency</changelog>
<changelog author="coolo@suse.com" date="1340625600">- the recommends for postfix was from a time when smtp_daemon
  was required, now that smtp_daemon is recommended, the recommend
  for postfix is between useless and harmful - so reduce it to a suggests</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345032000">- When the cron daemon does not fork, as it is the case
  when using systemd, pid files are useless. avoid creating
  them in the first place.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd by pkgconfig provide to get systemd-mini
  in build environments (to break cycle)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351425600">- DO not require sysvinit(syslog), the journal is enough</changelog>
<changelog author="vdziewiecki@suse.com" date="1352721600">-Fix Bug 786096 - VUL-1: cron: does not close file descriptors before invocation of commands</changelog>
<changelog author="fcrozat@suse.com" date="1359979200">- Regenerate cronie-pam_config.diff, last line of the patch was not
  properly added, causing bnc#801553.</changelog>
<changelog author="meissner@suse.com" date="1360238400">- fixed the file descriptor leak correctly (bnc#786096,bnc#802345)</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering units after syslog.target is no longer recommended.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378814400">- define PIDIDIR to "/run" instead of the (outdated) definition
  coming from glibc "paths.h"
- systemd: there is no mail-transfer-agent target anymore, services
  must be ordered After= a list of possible MTA.</changelog>
<changelog author="kstreitova@suse.com" date="1421409600">- add cronie-1.4.8-pam_env.patch in order to fix loading the PAM
  environment from the pam_env module as documented in the manual
  page. Also fix memory leak of environment returned by
  pam_getenvlist() (bnc#900604).</changelog>

</package>
<package pkgid="0e76695a89b09dafa4ffbc6fafecffe6b41178dcfad8c492e8abdc915a09b420" name="cronie" arch="x86_64">
    <version epoch="0" ver="1.4.8" rel="50.4.1"/>

<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="fcrozat@suse.com" date="1317297600">- Use systemd macros to register cron.service.</changelog>
<changelog author="fcrozat@suse.com" date="1317988800">- Ensure service_add_post is called in %post and not verify.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322568000">- Cron started before network is up [bnc#733275]</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="aj@suse.de" date="1322654401">- Add dependency on ypbind and nscd (bnc#732356)
- Do not install generic INSTALL file.
- Use set_permissions for newer distros.</changelog>
<changelog author="tabraham@novell.com" date="1326888000">- removed cronie-1.4.7-syslog_output.patch deprecated by this update
- Update to 1.4.8
  + Cron writes job output to syslog incorrectly. When cron is
    invoked in a way to print job output to syslog, it does print
    only the first character of the output
  + Check orphanded crontabs for adoption
  + Unify logging in case SyslogOutput with the rest of crond
  + The charset of anacron's mail is always ANSI_X3.4-1968. There
    are no setlocale in anacron's source
  + Cronie disables inotify when the /etc/crontab file does not
    exist at startup. Existance of crontab and directories wasn't
    controlled before creating inotify watches.</changelog>
<changelog author="tabraham@novell.com" date="1334059200">- added cronie-1.4.8-bug_756197.diff to remove references to anacron
  in crontab.5</changelog>
<changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless autmake dependency</changelog>
<changelog author="coolo@suse.com" date="1340625600">- the recommends for postfix was from a time when smtp_daemon
  was required, now that smtp_daemon is recommended, the recommend
  for postfix is between useless and harmful - so reduce it to a suggests</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345032000">- When the cron daemon does not fork, as it is the case
  when using systemd, pid files are useless. avoid creating
  them in the first place.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd by pkgconfig provide to get systemd-mini
  in build environments (to break cycle)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351425600">- DO not require sysvinit(syslog), the journal is enough</changelog>
<changelog author="vdziewiecki@suse.com" date="1352721600">-Fix Bug 786096 - VUL-1: cron: does not close file descriptors before invocation of commands</changelog>
<changelog author="fcrozat@suse.com" date="1359979200">- Regenerate cronie-pam_config.diff, last line of the patch was not
  properly added, causing bnc#801553.</changelog>
<changelog author="meissner@suse.com" date="1360238400">- fixed the file descriptor leak correctly (bnc#786096,bnc#802345)</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering units after syslog.target is no longer recommended.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378814400">- define PIDIDIR to "/run" instead of the (outdated) definition
  coming from glibc "paths.h"
- systemd: there is no mail-transfer-agent target anymore, services
  must be ordered After= a list of possible MTA.</changelog>
<changelog author="kstreitova@suse.com" date="1421409600">- add cronie-1.4.8-pam_env.patch in order to fix loading the PAM
  environment from the pam_env module as documented in the manual
  page. Also fix memory leak of environment returned by
  pam_getenvlist() (bnc#900604).</changelog>

</package>
<package pkgid="b9a0e109dc1be6b87e16162f4ad3afa7e73095b18595d3e9d3971b76575f56cb" name="cronie-anacron" arch="i586">
    <version epoch="0" ver="1.4.8" rel="50.4.1"/>

<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="fcrozat@suse.com" date="1317297600">- Use systemd macros to register cron.service.</changelog>
<changelog author="fcrozat@suse.com" date="1317988800">- Ensure service_add_post is called in %post and not verify.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322568000">- Cron started before network is up [bnc#733275]</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="aj@suse.de" date="1322654401">- Add dependency on ypbind and nscd (bnc#732356)
- Do not install generic INSTALL file.
- Use set_permissions for newer distros.</changelog>
<changelog author="tabraham@novell.com" date="1326888000">- removed cronie-1.4.7-syslog_output.patch deprecated by this update
- Update to 1.4.8
  + Cron writes job output to syslog incorrectly. When cron is
    invoked in a way to print job output to syslog, it does print
    only the first character of the output
  + Check orphanded crontabs for adoption
  + Unify logging in case SyslogOutput with the rest of crond
  + The charset of anacron's mail is always ANSI_X3.4-1968. There
    are no setlocale in anacron's source
  + Cronie disables inotify when the /etc/crontab file does not
    exist at startup. Existance of crontab and directories wasn't
    controlled before creating inotify watches.</changelog>
<changelog author="tabraham@novell.com" date="1334059200">- added cronie-1.4.8-bug_756197.diff to remove references to anacron
  in crontab.5</changelog>
<changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless autmake dependency</changelog>
<changelog author="coolo@suse.com" date="1340625600">- the recommends for postfix was from a time when smtp_daemon
  was required, now that smtp_daemon is recommended, the recommend
  for postfix is between useless and harmful - so reduce it to a suggests</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345032000">- When the cron daemon does not fork, as it is the case
  when using systemd, pid files are useless. avoid creating
  them in the first place.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd by pkgconfig provide to get systemd-mini
  in build environments (to break cycle)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351425600">- DO not require sysvinit(syslog), the journal is enough</changelog>
<changelog author="vdziewiecki@suse.com" date="1352721600">-Fix Bug 786096 - VUL-1: cron: does not close file descriptors before invocation of commands</changelog>
<changelog author="fcrozat@suse.com" date="1359979200">- Regenerate cronie-pam_config.diff, last line of the patch was not
  properly added, causing bnc#801553.</changelog>
<changelog author="meissner@suse.com" date="1360238400">- fixed the file descriptor leak correctly (bnc#786096,bnc#802345)</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering units after syslog.target is no longer recommended.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378814400">- define PIDIDIR to "/run" instead of the (outdated) definition
  coming from glibc "paths.h"
- systemd: there is no mail-transfer-agent target anymore, services
  must be ordered After= a list of possible MTA.</changelog>
<changelog author="kstreitova@suse.com" date="1421409600">- add cronie-1.4.8-pam_env.patch in order to fix loading the PAM
  environment from the pam_env module as documented in the manual
  page. Also fix memory leak of environment returned by
  pam_getenvlist() (bnc#900604).</changelog>

</package>
<package pkgid="b8e1b24d187904f8db700dd7809aeed7bce4022c618ba4f3e5cab4740f753c04" name="cronie-anacron" arch="x86_64">
    <version epoch="0" ver="1.4.8" rel="50.4.1"/>

<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="fcrozat@suse.com" date="1317297600">- Use systemd macros to register cron.service.</changelog>
<changelog author="fcrozat@suse.com" date="1317988800">- Ensure service_add_post is called in %post and not verify.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322568000">- Cron started before network is up [bnc#733275]</changelog>
<changelog author="coolo@suse.com" date="1322654400">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="aj@suse.de" date="1322654401">- Add dependency on ypbind and nscd (bnc#732356)
- Do not install generic INSTALL file.
- Use set_permissions for newer distros.</changelog>
<changelog author="tabraham@novell.com" date="1326888000">- removed cronie-1.4.7-syslog_output.patch deprecated by this update
- Update to 1.4.8
  + Cron writes job output to syslog incorrectly. When cron is
    invoked in a way to print job output to syslog, it does print
    only the first character of the output
  + Check orphanded crontabs for adoption
  + Unify logging in case SyslogOutput with the rest of crond
  + The charset of anacron's mail is always ANSI_X3.4-1968. There
    are no setlocale in anacron's source
  + Cronie disables inotify when the /etc/crontab file does not
    exist at startup. Existance of crontab and directories wasn't
    controlled before creating inotify watches.</changelog>
<changelog author="tabraham@novell.com" date="1334059200">- added cronie-1.4.8-bug_756197.diff to remove references to anacron
  in crontab.5</changelog>
<changelog author="sweet_f_a@gmx.de" date="1338379200">- remove useless autmake dependency</changelog>
<changelog author="coolo@suse.com" date="1340625600">- the recommends for postfix was from a time when smtp_daemon
  was required, now that smtp_daemon is recommended, the recommend
  for postfix is between useless and harmful - so reduce it to a suggests</changelog>
<changelog author="crrodriguez@opensuse.org" date="1345032000">- When the cron daemon does not fork, as it is the case
  when using systemd, pid files are useless. avoid creating
  them in the first place.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd by pkgconfig provide to get systemd-mini
  in build environments (to break cycle)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1351425600">- DO not require sysvinit(syslog), the journal is enough</changelog>
<changelog author="vdziewiecki@suse.com" date="1352721600">-Fix Bug 786096 - VUL-1: cron: does not close file descriptors before invocation of commands</changelog>
<changelog author="fcrozat@suse.com" date="1359979200">- Regenerate cronie-pam_config.diff, last line of the patch was not
  properly added, causing bnc#801553.</changelog>
<changelog author="meissner@suse.com" date="1360238400">- fixed the file descriptor leak correctly (bnc#786096,bnc#802345)</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="crrodriguez@opensuse.org" date="1365940800">- Ordering units after syslog.target is no longer recommended.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1378814400">- define PIDIDIR to "/run" instead of the (outdated) definition
  coming from glibc "paths.h"
- systemd: there is no mail-transfer-agent target anymore, services
  must be ordered After= a list of possible MTA.</changelog>
<changelog author="kstreitova@suse.com" date="1421409600">- add cronie-1.4.8-pam_env.patch in order to fix loading the PAM
  environment from the pam_env module as documented in the manual
  page. Also fix memory leak of environment returned by
  pam_getenvlist() (bnc#900604).</changelog>

</package>
<package pkgid="ab9566e2ccc0ca64d752cb2f97600c3564d2f9af3d2834a51c3523e853ec5fc6" name="ctdb" arch="i586">
    <version epoch="0" ver="2.3" rel="2.4.1"/>

<changelog author="jmcdonough@suse.de" date="1270209600">- Update to version 1.0.114.
  + Lots of changes from Metze
- Update to version 1.0.113.
  + Incorrect use of dup2() could cause ctdb to spin eating 100% cpu.
- Update to version 1.0.112.
  + Revert the use of wbinfo --ping-dc as it is proving too unreliable.
  + Minor testsuite changes.
- Update to version 1.0.111.
  + Fix a logging bug when an eventscript is aborted that could cause a crash.
  + Add back cb_status that was lost in a previous commit.
- Update to version 1.0.110.
  + Metxe: fix for filedescriptor leak in the new eventscript code.
  + Rusty: fix for a crash bug in the eventscript code.
- Update to version 1.0.109.
  + Massive eventscript updates. (bz58828)
  + Nice the daemon instead of using realtime scheduler, also use mlockall() to
    reduce the risk of blockign due to paging.
  + Workarounds for valgrind when forking once for each script. Valgrind consumes
    massive cpu when terminating the scripts on virtual systems.
  + Sync the tdb library with upstream, and use the new TDB_DISALLOW_NESTING flag.
  + Add new command "ctdb dumpdbbackup"
  + Start using the new tdb check framework to validate tdb files upon startup.
  + A new framework where we can control health for individual tdb databases.
  + Fix a crash bug in the logging code.
  + New transaction code for persistent databases.
  + Various other smaller fixes.
- Update to version 1.0.108.
  + Transaction updates from Michael Adam.
  + Use the new wbinfo --ping-dc instead of -p in the eventscript for samba
    the check if winbindd is ok.
  + Add a better "process-exist" for samba so it will automatically
    reap smbd's on stopped and banned nodes to reclaim subrecords.
    This will be done a bit differently in the next release.
  + Use a statically allocated buffer for the 'first-time' capture buffer
    to reduce the pressure on malloc/free.
- Update to version 1.0.107.
  + fix for rusty to solve a double-free that can happen when there are
    multiple packets queued and the connection is destroyed before
    all packets are processed.
- Update to version 1.0.106.
  + Buildscript changes from Michael Adam
  + Dont do a full recovery when there is a mismatch detected for ip addresses,
    just do a less disruptive ip-reallocation
  + When starting ctdbd, wait until all initial recoveries have finished
    before we issue the "startup" event.
    So dont start services or monitoring until the cluster has
    stabilized.
  + Major eventscript overhaul by Ronnie, Rusty and Martins and fixes of a few
    bugs found.</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="lmuelle@suse.de" date="1272196800">- Buildrequire pkg-config only for SUSE based products.</changelog>
<changelog author="jmcdonough@suse.de" date="1282564800">- Update to version 1.2.
  + Many tdb cleanups and fixups by rusty.
  + Create cnfs event script and crash cleanup script.
  + Create libctdb and reorganize headers.
  + Expand test suite significantly.
  + Remove "ctdb freeze" command.
  + Lots of fixes.</changelog>
<changelog author="jmcdonough@suse.de" date="1301659200">- Update to version 1.2.27
  + Lots of fixes
  + Remove nfstickle event script
  + Add ganesha event script</changelog>
<changelog author="jmcdonough@suse.de" date="1305028800">- Update to version 1.2.29
  + Interface handling updates
  + Reduce logging at lower levels
  + Event checking updates
  + Various other fixes</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1324382400">- Remove call to suse_update_config macro for post-11.4 systems.</changelog>
<changelog author="coolo@suse.com" date="1324468800">- Add autoconf as buildrequire to avoid implicit dependency for post-11.4
  systems.</changelog>
<changelog author="lmuelle@suse.de" date="1327320000">- Simplify conditional BuildRrequires of pkg-config.</changelog>
<changelog author="lmuelle@suse.de" date="1327579200">- Use correct license, GPLv3+ for the package.</changelog>
<changelog author="ddiss@suse.de" date="1328616000">- Mark event scripts as %verify(not mode) to ensure rpm --verify does not
  complain about mode changes made by enablescript; (bnc#694262).</changelog>
<changelog author="ddiss@suse.de" date="1328616001">- Remove stop_on_removal and restart_on_update pre/post uninstall hooks, ctdbd
  processes are managed by the CTDB resource agent; (bnc#745388).</changelog>
<changelog author="lmuelle@suse.de" date="1330430400">- Split the PreReq in separate lines.
- PreReq coreutils instead of fileutils.</changelog>
<changelog author="lmuelle@suse.com" date="1344427200">- Update to version 1.2.46
  + Add ltdbtool and man page</changelog>
<changelog author="ddiss@suse.com" date="1350648000">- Update to version 1.2.52
  + util: ctdb_fork() closes all sockets opened by the main daemon
  + Logging: Map TEVENT_DEBUG_FATAL to DEBUG_CRIT
  + Eventscripts: "recovered" event should not fail on NATGW failure
  + common: Debug ctdb_addr_to_str() using new function ctdb_external_trace()
  + Initscript: Kill any existing ctdbd processes if the ping succeeds
  + Eventscripts: new functions set_proc() and get_proc().
  + Eventscripts: Add "reconfigure" pseudo-event for policy routing</changelog>
<changelog author="ddiss@suse.com" date="1373544000">- Update to version 2.3
  + 2 new configuration variables for 60.nfs eventscript:
  - CTDB_MONITOR_NFS_THREAD_COUNT
  - CTDB_NFS_DUMP_STUCK_THREADS
  + Removed DeadlockTimeout tunable.  To enable debug of locking issues set
    CTDB_DEBUG_LOCKS=/etc/ctdb/debug_locks.sh
  + In overall statistics and database statistics, lock buckets have been
    updated to use following timings:
    &lt; 1ms, &lt; 10ms, &lt; 100ms, &lt; 1s, &lt; 2s, &lt; 4s, &lt; 8s, &lt; 16s, &lt; 32s, &lt; 64s, &gt;= 64s
  + Initscript is now simplified with most CTDB-specific functionality
    split out to ctdbd_wrapper, which is used to start and stop ctdbd.
  + Add systemd support.
  + CTDB subprocesses are now given informative names to allow them to
    be easily distinguished when using programs like "top" or "perf".
  + ctdb tool should not exit from a retry loop if a control times out
    (e.g. under high load).  This simple fix will stop an exit from the
    retry loop on any error.
  + When updating flags on all nodes, use the correct updated flags.  This
    should avoid wrong flag change messages in the logs.
  + The recovery daemon will not ban other nodes if the current node
    is banned.
  + ctdb dbstatistics command now correctly outputs database statistics.
  + Fixed a panic with overlapping shutdowns (regression in 2.2).
  + Fixed 60.ganesha "monitor" event (regression in 2.2).
  + Fixed a buffer overflow in the "reloadips" implementation.
  + Fixed segmentation faults in ping_pong (called with incorrect
    argument) and test binaries (called when ctdbd not running).
  + The recovery daemon on stopped or banned node will stop participating in any
    cluster activity.
  + Improve cluster wide database traverse by sending the records directly from
    traverse child process to requesting node.
  + TDB checking and dropping of all IPs moved from initscript to "init"
    event in 00.ctdb.
  + To avoid "rogue IPs" the release IP callback now fails if the
    released IP is still present on an interface.
- Update to version 2.2
  + The "stopped" event has been removed.
  + New --pidfile option for ctdbd, used by initscript
  + The 60.nfs eventscript now uses configuration files in
    /etc/ctdb/nfs-rpc-checks.d/ for timeouts and actions instead of
    hardcoding them into the script.
  + Notification handler scripts can now be dropped into /etc/ctdb/notify.d/.
  + The NoIPTakeoverOnDisabled tunable has been renamed to
    NoIPHostOnAllDisabled and now works properly when set on individual
    nodes.
  + New ctdb subcommand "runstate" prints the current internal runstate.
    Runstates are used for serialising startup.
  + The Unix domain socket is now set to non-blocking after the
    connection succeeds.  This avoids connections failing with EAGAIN
    and not being retried.
  + Fetching from the log ringbuffer now succeeds if the buffer is full.
  + Fix a severe recovery bug that can lead to data corruption for SMB clients.
  + The statd-callout script now runs as root via sudo.
  + "ctdb delip" no longer fails if it is unable to move the IP.
  + A race in the ctdb tool's ipreallocate code was fixed.  This fixes
    potential bugs in the "disable", "enable", "stop", "continue",
    "ban", "unban", "ipreallocate" and "sync" commands.
  + The monitor cancellation code could sometimes hang indefinitely.
    This could cause "ctdb stop" and "ctdb shutdown" to fail.
  + The socket I/O handling has been optimised to improve performance.
  + IPs will not be assigned to nodes during CTDB initialisation.  They
    will only be assigned to nodes that are in the "running" runstate.
  + Improved database locking code.  One improvement is to use a
    standalone locking helper executable - the avoids creating many
    forked copies of ctdbd and potentially running a node out of memory.
  + New control CTDB_CONTROL_IPREALLOCATED is now used to generate
    "ipreallocated" events.
  + Message handlers are now indexed, providing a significant
    performance improvement.</changelog>
<changelog author="ddiss@suse.com" date="1373544001">- Conditionally package the CTDB Perforance Co-Pilot monitoring agent.
  + Only built if suse_version is greater than 1140.
  + Add ctdb-pcp-pmda-rpmlintrc to filter out devel-file-in-non-devel-package
    warning.</changelog>
<changelog author="ddiss@suse.com" date="1394625600">- Avoid lockwait congestion by using an overflow queue; (bnc#867815).</changelog>
<changelog author="ddiss@suse.com" date="1402401600">- Fix temp file vulnerabilities; CVE-2013-4159; (bnc#836064).</changelog>

</package>
<package pkgid="15d0f9ec2f609a4274066cc4cf5e72a7ea0e806262f188fd1444dd87d0bfd966" name="ctdb" arch="i586">
    <version epoch="0" ver="4.2.4" rel="3.54.2"/>

<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435147200">- Update to 4.1.19.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fix fsmo transfer exception; (bso#10924).
  + s3: smbcacls: Ensure we read a hex number as %x, not %u; (bso#11068).
  + s3:winbindd: Make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + Error code path doesn't call END_PROFILE; (bso#11244).
  + Make mangled names work with acl_xattr; (bso#11249).
  + libads: Record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + s4: libcli/finddcs_cldap: Continue processing CLDAP until all addresses
    are used; (bso#11284).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + idmap_rfc2307: Fix 'wbinfo --gid-to-sid' query; (bso#11313).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441886400">- Update to 4.1.20.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + Fix logon via MS Remote Desktop; (bso#11061).
  + s3:winbindd: make sure we pass a valid server to
    rpccli_netlogon_sam_network_logon*(); (bso#11081).
  + s3:param/loadparm fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + Use resource group sids obtained from pac logon_info; (bso#11328).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption;
    (bso#11366).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444737600">- Update to 4.1.21.
  + Avoid quoting problems in user's DNs; (bso#11488).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>
<changelog author="nopower@suse.com" date="1445515200">- Prevent null pointer access in samlogon fallback when security
  credentials are null; (bnc#949022).</changelog>
<changelog author="nopower@suse.com" date="1446638400">- Ensure attempt to ssh into locked account  triggers
  "Your account is disabled....." to the console; (bnc#953382).</changelog>
<changelog author="lmuelle@suse.com" date="1447502400">- Cleanup and enhance the pidl sub package.</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update to 4.1.22.
  + Malicious request can cause Samba LDAP server to hang, spinning using CPU;
    CVE-2015-3223; (bso#11325); (bnc#958581).
  + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
    (bnc#958586).
  + Insufficient symlink verification (file access outside the share);
    CVE-2015-5252; (bso#11395); (bnc#958582).
  + No man in the middle protection when forcing smb encryption on the client
    side; CVE-2015-5296; (bso#11536); (bnc#958584).
  + Currently the snapshot browsing is not secure thru windows previous version
    (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
  + Fix Microsoft MS15-096 to prevent machine accounts from being changed into
    user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).
  + Fix remote DoS in Samba (AD) LDAP server; CVE-2015-7540; (bso#9187);
    (bnc#958580).</changelog>
<changelog author="lmuelle@suse.com" date="1452513600">- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).</changelog>
<changelog author="lmuelle@suse.com" date="1452686400">- Remove autoconf build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1452859200">- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).</changelog>
<changelog author="mkubecek@suse.cz" date="1460462400">- upgrade to version 4.2.4
- A man-in-the-middle can downgrade NTLMSSP authentication;
  CVE-2016-2110; (bso#11688); (bsc#973031).
- Domain controller netlogon member computer can be spoofed;
  CVE-2016-2111; (bso#11749); (bsc#973032).
- LDAP conenctions vulnerable to downgrade and  MITM attack;
  CVE-2016-2112; (bso#11644); (bsc#973033).
- TLS certificate validation missing; CVE-2016-2113; (bso#11752);
  (bsc#973034).
- Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115;
  (bso#11756); (bsc#973036).
- "Badlock" DCERPC impersonation of authenticated account possible;
  CVE-2016-2118; (bso#11804); (bsc#971965).
- DCERPC server and client vulnerable to DOS and MITM attacks;
  CVE-2015-5370; (bso#11344); (bsc#936862).</changelog>

</package>
<package pkgid="fb1c359646ce9e1a977391822860ab4a8b43f37d937577b20ac1f38d474315e7" name="ctdb" arch="src">
    <version epoch="0" ver="2.3" rel="2.4.1"/>

<changelog author="jmcdonough@suse.de" date="1270209600">- Update to version 1.0.114.
  + Lots of changes from Metze
- Update to version 1.0.113.
  + Incorrect use of dup2() could cause ctdb to spin eating 100% cpu.
- Update to version 1.0.112.
  + Revert the use of wbinfo --ping-dc as it is proving too unreliable.
  + Minor testsuite changes.
- Update to version 1.0.111.
  + Fix a logging bug when an eventscript is aborted that could cause a crash.
  + Add back cb_status that was lost in a previous commit.
- Update to version 1.0.110.
  + Metxe: fix for filedescriptor leak in the new eventscript code.
  + Rusty: fix for a crash bug in the eventscript code.
- Update to version 1.0.109.
  + Massive eventscript updates. (bz58828)
  + Nice the daemon instead of using realtime scheduler, also use mlockall() to
    reduce the risk of blockign due to paging.
  + Workarounds for valgrind when forking once for each script. Valgrind consumes
    massive cpu when terminating the scripts on virtual systems.
  + Sync the tdb library with upstream, and use the new TDB_DISALLOW_NESTING flag.
  + Add new command "ctdb dumpdbbackup"
  + Start using the new tdb check framework to validate tdb files upon startup.
  + A new framework where we can control health for individual tdb databases.
  + Fix a crash bug in the logging code.
  + New transaction code for persistent databases.
  + Various other smaller fixes.
- Update to version 1.0.108.
  + Transaction updates from Michael Adam.
  + Use the new wbinfo --ping-dc instead of -p in the eventscript for samba
    the check if winbindd is ok.
  + Add a better "process-exist" for samba so it will automatically
    reap smbd's on stopped and banned nodes to reclaim subrecords.
    This will be done a bit differently in the next release.
  + Use a statically allocated buffer for the 'first-time' capture buffer
    to reduce the pressure on malloc/free.
- Update to version 1.0.107.
  + fix for rusty to solve a double-free that can happen when there are
    multiple packets queued and the connection is destroyed before
    all packets are processed.
- Update to version 1.0.106.
  + Buildscript changes from Michael Adam
  + Dont do a full recovery when there is a mismatch detected for ip addresses,
    just do a less disruptive ip-reallocation
  + When starting ctdbd, wait until all initial recoveries have finished
    before we issue the "startup" event.
    So dont start services or monitoring until the cluster has
    stabilized.
  + Major eventscript overhaul by Ronnie, Rusty and Martins and fixes of a few
    bugs found.</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="lmuelle@suse.de" date="1272196800">- Buildrequire pkg-config only for SUSE based products.</changelog>
<changelog author="jmcdonough@suse.de" date="1282564800">- Update to version 1.2.
  + Many tdb cleanups and fixups by rusty.
  + Create cnfs event script and crash cleanup script.
  + Create libctdb and reorganize headers.
  + Expand test suite significantly.
  + Remove "ctdb freeze" command.
  + Lots of fixes.</changelog>
<changelog author="jmcdonough@suse.de" date="1301659200">- Update to version 1.2.27
  + Lots of fixes
  + Remove nfstickle event script
  + Add ganesha event script</changelog>
<changelog author="jmcdonough@suse.de" date="1305028800">- Update to version 1.2.29
  + Interface handling updates
  + Reduce logging at lower levels
  + Event checking updates
  + Various other fixes</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1324382400">- Remove call to suse_update_config macro for post-11.4 systems.</changelog>
<changelog author="coolo@suse.com" date="1324468800">- Add autoconf as buildrequire to avoid implicit dependency for post-11.4
  systems.</changelog>
<changelog author="lmuelle@suse.de" date="1327320000">- Simplify conditional BuildRrequires of pkg-config.</changelog>
<changelog author="lmuelle@suse.de" date="1327579200">- Use correct license, GPLv3+ for the package.</changelog>
<changelog author="ddiss@suse.de" date="1328616000">- Mark event scripts as %verify(not mode) to ensure rpm --verify does not
  complain about mode changes made by enablescript; (bnc#694262).</changelog>
<changelog author="ddiss@suse.de" date="1328616001">- Remove stop_on_removal and restart_on_update pre/post uninstall hooks, ctdbd
  processes are managed by the CTDB resource agent; (bnc#745388).</changelog>
<changelog author="lmuelle@suse.de" date="1330430400">- Split the PreReq in separate lines.
- PreReq coreutils instead of fileutils.</changelog>
<changelog author="lmuelle@suse.com" date="1344427200">- Update to version 1.2.46
  + Add ltdbtool and man page</changelog>
<changelog author="ddiss@suse.com" date="1350648000">- Update to version 1.2.52
  + util: ctdb_fork() closes all sockets opened by the main daemon
  + Logging: Map TEVENT_DEBUG_FATAL to DEBUG_CRIT
  + Eventscripts: "recovered" event should not fail on NATGW failure
  + common: Debug ctdb_addr_to_str() using new function ctdb_external_trace()
  + Initscript: Kill any existing ctdbd processes if the ping succeeds
  + Eventscripts: new functions set_proc() and get_proc().
  + Eventscripts: Add "reconfigure" pseudo-event for policy routing</changelog>
<changelog author="ddiss@suse.com" date="1373544000">- Update to version 2.3
  + 2 new configuration variables for 60.nfs eventscript:
  - CTDB_MONITOR_NFS_THREAD_COUNT
  - CTDB_NFS_DUMP_STUCK_THREADS
  + Removed DeadlockTimeout tunable.  To enable debug of locking issues set
    CTDB_DEBUG_LOCKS=/etc/ctdb/debug_locks.sh
  + In overall statistics and database statistics, lock buckets have been
    updated to use following timings:
    &lt; 1ms, &lt; 10ms, &lt; 100ms, &lt; 1s, &lt; 2s, &lt; 4s, &lt; 8s, &lt; 16s, &lt; 32s, &lt; 64s, &gt;= 64s
  + Initscript is now simplified with most CTDB-specific functionality
    split out to ctdbd_wrapper, which is used to start and stop ctdbd.
  + Add systemd support.
  + CTDB subprocesses are now given informative names to allow them to
    be easily distinguished when using programs like "top" or "perf".
  + ctdb tool should not exit from a retry loop if a control times out
    (e.g. under high load).  This simple fix will stop an exit from the
    retry loop on any error.
  + When updating flags on all nodes, use the correct updated flags.  This
    should avoid wrong flag change messages in the logs.
  + The recovery daemon will not ban other nodes if the current node
    is banned.
  + ctdb dbstatistics command now correctly outputs database statistics.
  + Fixed a panic with overlapping shutdowns (regression in 2.2).
  + Fixed 60.ganesha "monitor" event (regression in 2.2).
  + Fixed a buffer overflow in the "reloadips" implementation.
  + Fixed segmentation faults in ping_pong (called with incorrect
    argument) and test binaries (called when ctdbd not running).
  + The recovery daemon on stopped or banned node will stop participating in any
    cluster activity.
  + Improve cluster wide database traverse by sending the records directly from
    traverse child process to requesting node.
  + TDB checking and dropping of all IPs moved from initscript to "init"
    event in 00.ctdb.
  + To avoid "rogue IPs" the release IP callback now fails if the
    released IP is still present on an interface.
- Update to version 2.2
  + The "stopped" event has been removed.
  + New --pidfile option for ctdbd, used by initscript
  + The 60.nfs eventscript now uses configuration files in
    /etc/ctdb/nfs-rpc-checks.d/ for timeouts and actions instead of
    hardcoding them into the script.
  + Notification handler scripts can now be dropped into /etc/ctdb/notify.d/.
  + The NoIPTakeoverOnDisabled tunable has been renamed to
    NoIPHostOnAllDisabled and now works properly when set on individual
    nodes.
  + New ctdb subcommand "runstate" prints the current internal runstate.
    Runstates are used for serialising startup.
  + The Unix domain socket is now set to non-blocking after the
    connection succeeds.  This avoids connections failing with EAGAIN
    and not being retried.
  + Fetching from the log ringbuffer now succeeds if the buffer is full.
  + Fix a severe recovery bug that can lead to data corruption for SMB clients.
  + The statd-callout script now runs as root via sudo.
  + "ctdb delip" no longer fails if it is unable to move the IP.
  + A race in the ctdb tool's ipreallocate code was fixed.  This fixes
    potential bugs in the "disable", "enable", "stop", "continue",
    "ban", "unban", "ipreallocate" and "sync" commands.
  + The monitor cancellation code could sometimes hang indefinitely.
    This could cause "ctdb stop" and "ctdb shutdown" to fail.
  + The socket I/O handling has been optimised to improve performance.
  + IPs will not be assigned to nodes during CTDB initialisation.  They
    will only be assigned to nodes that are in the "running" runstate.
  + Improved database locking code.  One improvement is to use a
    standalone locking helper executable - the avoids creating many
    forked copies of ctdbd and potentially running a node out of memory.
  + New control CTDB_CONTROL_IPREALLOCATED is now used to generate
    "ipreallocated" events.
  + Message handlers are now indexed, providing a significant
    performance improvement.</changelog>
<changelog author="ddiss@suse.com" date="1373544001">- Conditionally package the CTDB Perforance Co-Pilot monitoring agent.
  + Only built if suse_version is greater than 1140.
  + Add ctdb-pcp-pmda-rpmlintrc to filter out devel-file-in-non-devel-package
    warning.</changelog>
<changelog author="ddiss@suse.com" date="1394625600">- Avoid lockwait congestion by using an overflow queue; (bnc#867815).</changelog>
<changelog author="ddiss@suse.com" date="1402401600">- Fix temp file vulnerabilities; CVE-2013-4159; (bnc#836064).</changelog>

</package>
<package pkgid="6f185f962e1f4b7a0e6f155ee3a0986125082219fcde9d63df9438a26e98de11" name="ctdb" arch="x86_64">
    <version epoch="0" ver="2.3" rel="2.4.1"/>

<changelog author="jmcdonough@suse.de" date="1270209600">- Update to version 1.0.114.
  + Lots of changes from Metze
- Update to version 1.0.113.
  + Incorrect use of dup2() could cause ctdb to spin eating 100% cpu.
- Update to version 1.0.112.
  + Revert the use of wbinfo --ping-dc as it is proving too unreliable.
  + Minor testsuite changes.
- Update to version 1.0.111.
  + Fix a logging bug when an eventscript is aborted that could cause a crash.
  + Add back cb_status that was lost in a previous commit.
- Update to version 1.0.110.
  + Metxe: fix for filedescriptor leak in the new eventscript code.
  + Rusty: fix for a crash bug in the eventscript code.
- Update to version 1.0.109.
  + Massive eventscript updates. (bz58828)
  + Nice the daemon instead of using realtime scheduler, also use mlockall() to
    reduce the risk of blockign due to paging.
  + Workarounds for valgrind when forking once for each script. Valgrind consumes
    massive cpu when terminating the scripts on virtual systems.
  + Sync the tdb library with upstream, and use the new TDB_DISALLOW_NESTING flag.
  + Add new command "ctdb dumpdbbackup"
  + Start using the new tdb check framework to validate tdb files upon startup.
  + A new framework where we can control health for individual tdb databases.
  + Fix a crash bug in the logging code.
  + New transaction code for persistent databases.
  + Various other smaller fixes.
- Update to version 1.0.108.
  + Transaction updates from Michael Adam.
  + Use the new wbinfo --ping-dc instead of -p in the eventscript for samba
    the check if winbindd is ok.
  + Add a better "process-exist" for samba so it will automatically
    reap smbd's on stopped and banned nodes to reclaim subrecords.
    This will be done a bit differently in the next release.
  + Use a statically allocated buffer for the 'first-time' capture buffer
    to reduce the pressure on malloc/free.
- Update to version 1.0.107.
  + fix for rusty to solve a double-free that can happen when there are
    multiple packets queued and the connection is destroyed before
    all packets are processed.
- Update to version 1.0.106.
  + Buildscript changes from Michael Adam
  + Dont do a full recovery when there is a mismatch detected for ip addresses,
    just do a less disruptive ip-reallocation
  + When starting ctdbd, wait until all initial recoveries have finished
    before we issue the "startup" event.
    So dont start services or monitoring until the cluster has
    stabilized.
  + Major eventscript overhaul by Ronnie, Rusty and Martins and fixes of a few
    bugs found.</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="lmuelle@suse.de" date="1272196800">- Buildrequire pkg-config only for SUSE based products.</changelog>
<changelog author="jmcdonough@suse.de" date="1282564800">- Update to version 1.2.
  + Many tdb cleanups and fixups by rusty.
  + Create cnfs event script and crash cleanup script.
  + Create libctdb and reorganize headers.
  + Expand test suite significantly.
  + Remove "ctdb freeze" command.
  + Lots of fixes.</changelog>
<changelog author="jmcdonough@suse.de" date="1301659200">- Update to version 1.2.27
  + Lots of fixes
  + Remove nfstickle event script
  + Add ganesha event script</changelog>
<changelog author="jmcdonough@suse.de" date="1305028800">- Update to version 1.2.29
  + Interface handling updates
  + Reduce logging at lower levels
  + Event checking updates
  + Various other fixes</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1324382400">- Remove call to suse_update_config macro for post-11.4 systems.</changelog>
<changelog author="coolo@suse.com" date="1324468800">- Add autoconf as buildrequire to avoid implicit dependency for post-11.4
  systems.</changelog>
<changelog author="lmuelle@suse.de" date="1327320000">- Simplify conditional BuildRrequires of pkg-config.</changelog>
<changelog author="lmuelle@suse.de" date="1327579200">- Use correct license, GPLv3+ for the package.</changelog>
<changelog author="ddiss@suse.de" date="1328616000">- Mark event scripts as %verify(not mode) to ensure rpm --verify does not
  complain about mode changes made by enablescript; (bnc#694262).</changelog>
<changelog author="ddiss@suse.de" date="1328616001">- Remove stop_on_removal and restart_on_update pre/post uninstall hooks, ctdbd
  processes are managed by the CTDB resource agent; (bnc#745388).</changelog>
<changelog author="lmuelle@suse.de" date="1330430400">- Split the PreReq in separate lines.
- PreReq coreutils instead of fileutils.</changelog>
<changelog author="lmuelle@suse.com" date="1344427200">- Update to version 1.2.46
  + Add ltdbtool and man page</changelog>
<changelog author="ddiss@suse.com" date="1350648000">- Update to version 1.2.52
  + util: ctdb_fork() closes all sockets opened by the main daemon
  + Logging: Map TEVENT_DEBUG_FATAL to DEBUG_CRIT
  + Eventscripts: "recovered" event should not fail on NATGW failure
  + common: Debug ctdb_addr_to_str() using new function ctdb_external_trace()
  + Initscript: Kill any existing ctdbd processes if the ping succeeds
  + Eventscripts: new functions set_proc() and get_proc().
  + Eventscripts: Add "reconfigure" pseudo-event for policy routing</changelog>
<changelog author="ddiss@suse.com" date="1373544000">- Update to version 2.3
  + 2 new configuration variables for 60.nfs eventscript:
  - CTDB_MONITOR_NFS_THREAD_COUNT
  - CTDB_NFS_DUMP_STUCK_THREADS
  + Removed DeadlockTimeout tunable.  To enable debug of locking issues set
    CTDB_DEBUG_LOCKS=/etc/ctdb/debug_locks.sh
  + In overall statistics and database statistics, lock buckets have been
    updated to use following timings:
    &lt; 1ms, &lt; 10ms, &lt; 100ms, &lt; 1s, &lt; 2s, &lt; 4s, &lt; 8s, &lt; 16s, &lt; 32s, &lt; 64s, &gt;= 64s
  + Initscript is now simplified with most CTDB-specific functionality
    split out to ctdbd_wrapper, which is used to start and stop ctdbd.
  + Add systemd support.
  + CTDB subprocesses are now given informative names to allow them to
    be easily distinguished when using programs like "top" or "perf".
  + ctdb tool should not exit from a retry loop if a control times out
    (e.g. under high load).  This simple fix will stop an exit from the
    retry loop on any error.
  + When updating flags on all nodes, use the correct updated flags.  This
    should avoid wrong flag change messages in the logs.
  + The recovery daemon will not ban other nodes if the current node
    is banned.
  + ctdb dbstatistics command now correctly outputs database statistics.
  + Fixed a panic with overlapping shutdowns (regression in 2.2).
  + Fixed 60.ganesha "monitor" event (regression in 2.2).
  + Fixed a buffer overflow in the "reloadips" implementation.
  + Fixed segmentation faults in ping_pong (called with incorrect
    argument) and test binaries (called when ctdbd not running).
  + The recovery daemon on stopped or banned node will stop participating in any
    cluster activity.
  + Improve cluster wide database traverse by sending the records directly from
    traverse child process to requesting node.
  + TDB checking and dropping of all IPs moved from initscript to "init"
    event in 00.ctdb.
  + To avoid "rogue IPs" the release IP callback now fails if the
    released IP is still present on an interface.
- Update to version 2.2
  + The "stopped" event has been removed.
  + New --pidfile option for ctdbd, used by initscript
  + The 60.nfs eventscript now uses configuration files in
    /etc/ctdb/nfs-rpc-checks.d/ for timeouts and actions instead of
    hardcoding them into the script.
  + Notification handler scripts can now be dropped into /etc/ctdb/notify.d/.
  + The NoIPTakeoverOnDisabled tunable has been renamed to
    NoIPHostOnAllDisabled and now works properly when set on individual
    nodes.
  + New ctdb subcommand "runstate" prints the current internal runstate.
    Runstates are used for serialising startup.
  + The Unix domain socket is now set to non-blocking after the
    connection succeeds.  This avoids connections failing with EAGAIN
    and not being retried.
  + Fetching from the log ringbuffer now succeeds if the buffer is full.
  + Fix a severe recovery bug that can lead to data corruption for SMB clients.
  + The statd-callout script now runs as root via sudo.
  + "ctdb delip" no longer fails if it is unable to move the IP.
  + A race in the ctdb tool's ipreallocate code was fixed.  This fixes
    potential bugs in the "disable", "enable", "stop", "continue",
    "ban", "unban", "ipreallocate" and "sync" commands.
  + The monitor cancellation code could sometimes hang indefinitely.
    This could cause "ctdb stop" and "ctdb shutdown" to fail.
  + The socket I/O handling has been optimised to improve performance.
  + IPs will not be assigned to nodes during CTDB initialisation.  They
    will only be assigned to nodes that are in the "running" runstate.
  + Improved database locking code.  One improvement is to use a
    standalone locking helper executable - the avoids creating many
    forked copies of ctdbd and potentially running a node out of memory.
  + New control CTDB_CONTROL_IPREALLOCATED is now used to generate
    "ipreallocated" events.
  + Message handlers are now indexed, providing a significant
    performance improvement.</changelog>
<changelog author="ddiss@suse.com" date="1373544001">- Conditionally package the CTDB Perforance Co-Pilot monitoring agent.
  + Only built if suse_version is greater than 1140.
  + Add ctdb-pcp-pmda-rpmlintrc to filter out devel-file-in-non-devel-package
    warning.</changelog>
<changelog author="ddiss@suse.com" date="1394625600">- Avoid lockwait congestion by using an overflow queue; (bnc#867815).</changelog>
<changelog author="ddiss@suse.com" date="1402401600">- Fix temp file vulnerabilities; CVE-2013-4159; (bnc#836064).</changelog>

</package>
<package pkgid="c3c5f9f2d43c33a25b7bc761821b209e0e1ee76233c15cc6d0960997d67f9597" name="ctdb" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="3.54.2"/>

<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435147200">- Update to 4.1.19.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fix fsmo transfer exception; (bso#10924).
  + s3: smbcacls: Ensure we read a hex number as %x, not %u; (bso#11068).
  + s3:winbindd: Make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + Error code path doesn't call END_PROFILE; (bso#11244).
  + Make mangled names work with acl_xattr; (bso#11249).
  + libads: Record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + s4: libcli/finddcs_cldap: Continue processing CLDAP until all addresses
    are used; (bso#11284).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + idmap_rfc2307: Fix 'wbinfo --gid-to-sid' query; (bso#11313).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441886400">- Update to 4.1.20.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + Fix logon via MS Remote Desktop; (bso#11061).
  + s3:winbindd: make sure we pass a valid server to
    rpccli_netlogon_sam_network_logon*(); (bso#11081).
  + s3:param/loadparm fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + Use resource group sids obtained from pac logon_info; (bso#11328).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption;
    (bso#11366).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444737600">- Update to 4.1.21.
  + Avoid quoting problems in user's DNs; (bso#11488).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>
<changelog author="nopower@suse.com" date="1445515200">- Prevent null pointer access in samlogon fallback when security
  credentials are null; (bnc#949022).</changelog>
<changelog author="nopower@suse.com" date="1446638400">- Ensure attempt to ssh into locked account  triggers
  "Your account is disabled....." to the console; (bnc#953382).</changelog>
<changelog author="lmuelle@suse.com" date="1447502400">- Cleanup and enhance the pidl sub package.</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update to 4.1.22.
  + Malicious request can cause Samba LDAP server to hang, spinning using CPU;
    CVE-2015-3223; (bso#11325); (bnc#958581).
  + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
    (bnc#958586).
  + Insufficient symlink verification (file access outside the share);
    CVE-2015-5252; (bso#11395); (bnc#958582).
  + No man in the middle protection when forcing smb encryption on the client
    side; CVE-2015-5296; (bso#11536); (bnc#958584).
  + Currently the snapshot browsing is not secure thru windows previous version
    (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
  + Fix Microsoft MS15-096 to prevent machine accounts from being changed into
    user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).
  + Fix remote DoS in Samba (AD) LDAP server; CVE-2015-7540; (bso#9187);
    (bnc#958580).</changelog>
<changelog author="lmuelle@suse.com" date="1452513600">- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).</changelog>
<changelog author="lmuelle@suse.com" date="1452686400">- Remove autoconf build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1452859200">- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).</changelog>
<changelog author="mkubecek@suse.cz" date="1460462400">- upgrade to version 4.2.4
- A man-in-the-middle can downgrade NTLMSSP authentication;
  CVE-2016-2110; (bso#11688); (bsc#973031).
- Domain controller netlogon member computer can be spoofed;
  CVE-2016-2111; (bso#11749); (bsc#973032).
- LDAP conenctions vulnerable to downgrade and  MITM attack;
  CVE-2016-2112; (bso#11644); (bsc#973033).
- TLS certificate validation missing; CVE-2016-2113; (bso#11752);
  (bsc#973034).
- Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115;
  (bso#11756); (bsc#973036).
- "Badlock" DCERPC impersonation of authenticated account possible;
  CVE-2016-2118; (bso#11804); (bsc#971965).
- DCERPC server and client vulnerable to DOS and MITM attacks;
  CVE-2015-5370; (bso#11344); (bsc#936862).</changelog>

</package>
<package pkgid="747392147081e5ecf92061d28eadff259e215fe7ac047956ab3926fd79278ede" name="ctdb-devel" arch="i586">
    <version epoch="0" ver="2.3" rel="2.4.1"/>

<changelog author="jmcdonough@suse.de" date="1270209600">- Update to version 1.0.114.
  + Lots of changes from Metze
- Update to version 1.0.113.
  + Incorrect use of dup2() could cause ctdb to spin eating 100% cpu.
- Update to version 1.0.112.
  + Revert the use of wbinfo --ping-dc as it is proving too unreliable.
  + Minor testsuite changes.
- Update to version 1.0.111.
  + Fix a logging bug when an eventscript is aborted that could cause a crash.
  + Add back cb_status that was lost in a previous commit.
- Update to version 1.0.110.
  + Metxe: fix for filedescriptor leak in the new eventscript code.
  + Rusty: fix for a crash bug in the eventscript code.
- Update to version 1.0.109.
  + Massive eventscript updates. (bz58828)
  + Nice the daemon instead of using realtime scheduler, also use mlockall() to
    reduce the risk of blockign due to paging.
  + Workarounds for valgrind when forking once for each script. Valgrind consumes
    massive cpu when terminating the scripts on virtual systems.
  + Sync the tdb library with upstream, and use the new TDB_DISALLOW_NESTING flag.
  + Add new command "ctdb dumpdbbackup"
  + Start using the new tdb check framework to validate tdb files upon startup.
  + A new framework where we can control health for individual tdb databases.
  + Fix a crash bug in the logging code.
  + New transaction code for persistent databases.
  + Various other smaller fixes.
- Update to version 1.0.108.
  + Transaction updates from Michael Adam.
  + Use the new wbinfo --ping-dc instead of -p in the eventscript for samba
    the check if winbindd is ok.
  + Add a better "process-exist" for samba so it will automatically
    reap smbd's on stopped and banned nodes to reclaim subrecords.
    This will be done a bit differently in the next release.
  + Use a statically allocated buffer for the 'first-time' capture buffer
    to reduce the pressure on malloc/free.
- Update to version 1.0.107.
  + fix for rusty to solve a double-free that can happen when there are
    multiple packets queued and the connection is destroyed before
    all packets are processed.
- Update to version 1.0.106.
  + Buildscript changes from Michael Adam
  + Dont do a full recovery when there is a mismatch detected for ip addresses,
    just do a less disruptive ip-reallocation
  + When starting ctdbd, wait until all initial recoveries have finished
    before we issue the "startup" event.
    So dont start services or monitoring until the cluster has
    stabilized.
  + Major eventscript overhaul by Ronnie, Rusty and Martins and fixes of a few
    bugs found.</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="lmuelle@suse.de" date="1272196800">- Buildrequire pkg-config only for SUSE based products.</changelog>
<changelog author="jmcdonough@suse.de" date="1282564800">- Update to version 1.2.
  + Many tdb cleanups and fixups by rusty.
  + Create cnfs event script and crash cleanup script.
  + Create libctdb and reorganize headers.
  + Expand test suite significantly.
  + Remove "ctdb freeze" command.
  + Lots of fixes.</changelog>
<changelog author="jmcdonough@suse.de" date="1301659200">- Update to version 1.2.27
  + Lots of fixes
  + Remove nfstickle event script
  + Add ganesha event script</changelog>
<changelog author="jmcdonough@suse.de" date="1305028800">- Update to version 1.2.29
  + Interface handling updates
  + Reduce logging at lower levels
  + Event checking updates
  + Various other fixes</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1324382400">- Remove call to suse_update_config macro for post-11.4 systems.</changelog>
<changelog author="coolo@suse.com" date="1324468800">- Add autoconf as buildrequire to avoid implicit dependency for post-11.4
  systems.</changelog>
<changelog author="lmuelle@suse.de" date="1327320000">- Simplify conditional BuildRrequires of pkg-config.</changelog>
<changelog author="lmuelle@suse.de" date="1327579200">- Use correct license, GPLv3+ for the package.</changelog>
<changelog author="ddiss@suse.de" date="1328616000">- Mark event scripts as %verify(not mode) to ensure rpm --verify does not
  complain about mode changes made by enablescript; (bnc#694262).</changelog>
<changelog author="ddiss@suse.de" date="1328616001">- Remove stop_on_removal and restart_on_update pre/post uninstall hooks, ctdbd
  processes are managed by the CTDB resource agent; (bnc#745388).</changelog>
<changelog author="lmuelle@suse.de" date="1330430400">- Split the PreReq in separate lines.
- PreReq coreutils instead of fileutils.</changelog>
<changelog author="lmuelle@suse.com" date="1344427200">- Update to version 1.2.46
  + Add ltdbtool and man page</changelog>
<changelog author="ddiss@suse.com" date="1350648000">- Update to version 1.2.52
  + util: ctdb_fork() closes all sockets opened by the main daemon
  + Logging: Map TEVENT_DEBUG_FATAL to DEBUG_CRIT
  + Eventscripts: "recovered" event should not fail on NATGW failure
  + common: Debug ctdb_addr_to_str() using new function ctdb_external_trace()
  + Initscript: Kill any existing ctdbd processes if the ping succeeds
  + Eventscripts: new functions set_proc() and get_proc().
  + Eventscripts: Add "reconfigure" pseudo-event for policy routing</changelog>
<changelog author="ddiss@suse.com" date="1373544000">- Update to version 2.3
  + 2 new configuration variables for 60.nfs eventscript:
  - CTDB_MONITOR_NFS_THREAD_COUNT
  - CTDB_NFS_DUMP_STUCK_THREADS
  + Removed DeadlockTimeout tunable.  To enable debug of locking issues set
    CTDB_DEBUG_LOCKS=/etc/ctdb/debug_locks.sh
  + In overall statistics and database statistics, lock buckets have been
    updated to use following timings:
    &lt; 1ms, &lt; 10ms, &lt; 100ms, &lt; 1s, &lt; 2s, &lt; 4s, &lt; 8s, &lt; 16s, &lt; 32s, &lt; 64s, &gt;= 64s
  + Initscript is now simplified with most CTDB-specific functionality
    split out to ctdbd_wrapper, which is used to start and stop ctdbd.
  + Add systemd support.
  + CTDB subprocesses are now given informative names to allow them to
    be easily distinguished when using programs like "top" or "perf".
  + ctdb tool should not exit from a retry loop if a control times out
    (e.g. under high load).  This simple fix will stop an exit from the
    retry loop on any error.
  + When updating flags on all nodes, use the correct updated flags.  This
    should avoid wrong flag change messages in the logs.
  + The recovery daemon will not ban other nodes if the current node
    is banned.
  + ctdb dbstatistics command now correctly outputs database statistics.
  + Fixed a panic with overlapping shutdowns (regression in 2.2).
  + Fixed 60.ganesha "monitor" event (regression in 2.2).
  + Fixed a buffer overflow in the "reloadips" implementation.
  + Fixed segmentation faults in ping_pong (called with incorrect
    argument) and test binaries (called when ctdbd not running).
  + The recovery daemon on stopped or banned node will stop participating in any
    cluster activity.
  + Improve cluster wide database traverse by sending the records directly from
    traverse child process to requesting node.
  + TDB checking and dropping of all IPs moved from initscript to "init"
    event in 00.ctdb.
  + To avoid "rogue IPs" the release IP callback now fails if the
    released IP is still present on an interface.
- Update to version 2.2
  + The "stopped" event has been removed.
  + New --pidfile option for ctdbd, used by initscript
  + The 60.nfs eventscript now uses configuration files in
    /etc/ctdb/nfs-rpc-checks.d/ for timeouts and actions instead of
    hardcoding them into the script.
  + Notification handler scripts can now be dropped into /etc/ctdb/notify.d/.
  + The NoIPTakeoverOnDisabled tunable has been renamed to
    NoIPHostOnAllDisabled and now works properly when set on individual
    nodes.
  + New ctdb subcommand "runstate" prints the current internal runstate.
    Runstates are used for serialising startup.
  + The Unix domain socket is now set to non-blocking after the
    connection succeeds.  This avoids connections failing with EAGAIN
    and not being retried.
  + Fetching from the log ringbuffer now succeeds if the buffer is full.
  + Fix a severe recovery bug that can lead to data corruption for SMB clients.
  + The statd-callout script now runs as root via sudo.
  + "ctdb delip" no longer fails if it is unable to move the IP.
  + A race in the ctdb tool's ipreallocate code was fixed.  This fixes
    potential bugs in the "disable", "enable", "stop", "continue",
    "ban", "unban", "ipreallocate" and "sync" commands.
  + The monitor cancellation code could sometimes hang indefinitely.
    This could cause "ctdb stop" and "ctdb shutdown" to fail.
  + The socket I/O handling has been optimised to improve performance.
  + IPs will not be assigned to nodes during CTDB initialisation.  They
    will only be assigned to nodes that are in the "running" runstate.
  + Improved database locking code.  One improvement is to use a
    standalone locking helper executable - the avoids creating many
    forked copies of ctdbd and potentially running a node out of memory.
  + New control CTDB_CONTROL_IPREALLOCATED is now used to generate
    "ipreallocated" events.
  + Message handlers are now indexed, providing a significant
    performance improvement.</changelog>
<changelog author="ddiss@suse.com" date="1373544001">- Conditionally package the CTDB Perforance Co-Pilot monitoring agent.
  + Only built if suse_version is greater than 1140.
  + Add ctdb-pcp-pmda-rpmlintrc to filter out devel-file-in-non-devel-package
    warning.</changelog>
<changelog author="ddiss@suse.com" date="1394625600">- Avoid lockwait congestion by using an overflow queue; (bnc#867815).</changelog>
<changelog author="ddiss@suse.com" date="1402401600">- Fix temp file vulnerabilities; CVE-2013-4159; (bnc#836064).</changelog>

</package>
<package pkgid="edcb143f6d207bfbda8388d2b8f7724e30044e65fd989c7061863f060a5a9dcf" name="ctdb-devel" arch="i586">
    <version epoch="0" ver="4.2.4" rel="3.54.2"/>

<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435147200">- Update to 4.1.19.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fix fsmo transfer exception; (bso#10924).
  + s3: smbcacls: Ensure we read a hex number as %x, not %u; (bso#11068).
  + s3:winbindd: Make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + Error code path doesn't call END_PROFILE; (bso#11244).
  + Make mangled names work with acl_xattr; (bso#11249).
  + libads: Record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + s4: libcli/finddcs_cldap: Continue processing CLDAP until all addresses
    are used; (bso#11284).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + idmap_rfc2307: Fix 'wbinfo --gid-to-sid' query; (bso#11313).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441886400">- Update to 4.1.20.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + Fix logon via MS Remote Desktop; (bso#11061).
  + s3:winbindd: make sure we pass a valid server to
    rpccli_netlogon_sam_network_logon*(); (bso#11081).
  + s3:param/loadparm fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + Use resource group sids obtained from pac logon_info; (bso#11328).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption;
    (bso#11366).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444737600">- Update to 4.1.21.
  + Avoid quoting problems in user's DNs; (bso#11488).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>
<changelog author="nopower@suse.com" date="1445515200">- Prevent null pointer access in samlogon fallback when security
  credentials are null; (bnc#949022).</changelog>
<changelog author="nopower@suse.com" date="1446638400">- Ensure attempt to ssh into locked account  triggers
  "Your account is disabled....." to the console; (bnc#953382).</changelog>
<changelog author="lmuelle@suse.com" date="1447502400">- Cleanup and enhance the pidl sub package.</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update to 4.1.22.
  + Malicious request can cause Samba LDAP server to hang, spinning using CPU;
    CVE-2015-3223; (bso#11325); (bnc#958581).
  + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
    (bnc#958586).
  + Insufficient symlink verification (file access outside the share);
    CVE-2015-5252; (bso#11395); (bnc#958582).
  + No man in the middle protection when forcing smb encryption on the client
    side; CVE-2015-5296; (bso#11536); (bnc#958584).
  + Currently the snapshot browsing is not secure thru windows previous version
    (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
  + Fix Microsoft MS15-096 to prevent machine accounts from being changed into
    user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).
  + Fix remote DoS in Samba (AD) LDAP server; CVE-2015-7540; (bso#9187);
    (bnc#958580).</changelog>
<changelog author="lmuelle@suse.com" date="1452513600">- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).</changelog>
<changelog author="lmuelle@suse.com" date="1452686400">- Remove autoconf build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1452859200">- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).</changelog>
<changelog author="mkubecek@suse.cz" date="1460462400">- upgrade to version 4.2.4
- A man-in-the-middle can downgrade NTLMSSP authentication;
  CVE-2016-2110; (bso#11688); (bsc#973031).
- Domain controller netlogon member computer can be spoofed;
  CVE-2016-2111; (bso#11749); (bsc#973032).
- LDAP conenctions vulnerable to downgrade and  MITM attack;
  CVE-2016-2112; (bso#11644); (bsc#973033).
- TLS certificate validation missing; CVE-2016-2113; (bso#11752);
  (bsc#973034).
- Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115;
  (bso#11756); (bsc#973036).
- "Badlock" DCERPC impersonation of authenticated account possible;
  CVE-2016-2118; (bso#11804); (bsc#971965).
- DCERPC server and client vulnerable to DOS and MITM attacks;
  CVE-2015-5370; (bso#11344); (bsc#936862).</changelog>

</package>
<package pkgid="d6ec4d18864f9d7743a97d349ebec1ca006f5289c90b36ac99a99780ab5f3768" name="ctdb-devel" arch="x86_64">
    <version epoch="0" ver="2.3" rel="2.4.1"/>

<changelog author="jmcdonough@suse.de" date="1270209600">- Update to version 1.0.114.
  + Lots of changes from Metze
- Update to version 1.0.113.
  + Incorrect use of dup2() could cause ctdb to spin eating 100% cpu.
- Update to version 1.0.112.
  + Revert the use of wbinfo --ping-dc as it is proving too unreliable.
  + Minor testsuite changes.
- Update to version 1.0.111.
  + Fix a logging bug when an eventscript is aborted that could cause a crash.
  + Add back cb_status that was lost in a previous commit.
- Update to version 1.0.110.
  + Metxe: fix for filedescriptor leak in the new eventscript code.
  + Rusty: fix for a crash bug in the eventscript code.
- Update to version 1.0.109.
  + Massive eventscript updates. (bz58828)
  + Nice the daemon instead of using realtime scheduler, also use mlockall() to
    reduce the risk of blockign due to paging.
  + Workarounds for valgrind when forking once for each script. Valgrind consumes
    massive cpu when terminating the scripts on virtual systems.
  + Sync the tdb library with upstream, and use the new TDB_DISALLOW_NESTING flag.
  + Add new command "ctdb dumpdbbackup"
  + Start using the new tdb check framework to validate tdb files upon startup.
  + A new framework where we can control health for individual tdb databases.
  + Fix a crash bug in the logging code.
  + New transaction code for persistent databases.
  + Various other smaller fixes.
- Update to version 1.0.108.
  + Transaction updates from Michael Adam.
  + Use the new wbinfo --ping-dc instead of -p in the eventscript for samba
    the check if winbindd is ok.
  + Add a better "process-exist" for samba so it will automatically
    reap smbd's on stopped and banned nodes to reclaim subrecords.
    This will be done a bit differently in the next release.
  + Use a statically allocated buffer for the 'first-time' capture buffer
    to reduce the pressure on malloc/free.
- Update to version 1.0.107.
  + fix for rusty to solve a double-free that can happen when there are
    multiple packets queued and the connection is destroyed before
    all packets are processed.
- Update to version 1.0.106.
  + Buildscript changes from Michael Adam
  + Dont do a full recovery when there is a mismatch detected for ip addresses,
    just do a less disruptive ip-reallocation
  + When starting ctdbd, wait until all initial recoveries have finished
    before we issue the "startup" event.
    So dont start services or monitoring until the cluster has
    stabilized.
  + Major eventscript overhaul by Ronnie, Rusty and Martins and fixes of a few
    bugs found.</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="lmuelle@suse.de" date="1272196800">- Buildrequire pkg-config only for SUSE based products.</changelog>
<changelog author="jmcdonough@suse.de" date="1282564800">- Update to version 1.2.
  + Many tdb cleanups and fixups by rusty.
  + Create cnfs event script and crash cleanup script.
  + Create libctdb and reorganize headers.
  + Expand test suite significantly.
  + Remove "ctdb freeze" command.
  + Lots of fixes.</changelog>
<changelog author="jmcdonough@suse.de" date="1301659200">- Update to version 1.2.27
  + Lots of fixes
  + Remove nfstickle event script
  + Add ganesha event script</changelog>
<changelog author="jmcdonough@suse.de" date="1305028800">- Update to version 1.2.29
  + Interface handling updates
  + Reduce logging at lower levels
  + Event checking updates
  + Various other fixes</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1324382400">- Remove call to suse_update_config macro for post-11.4 systems.</changelog>
<changelog author="coolo@suse.com" date="1324468800">- Add autoconf as buildrequire to avoid implicit dependency for post-11.4
  systems.</changelog>
<changelog author="lmuelle@suse.de" date="1327320000">- Simplify conditional BuildRrequires of pkg-config.</changelog>
<changelog author="lmuelle@suse.de" date="1327579200">- Use correct license, GPLv3+ for the package.</changelog>
<changelog author="ddiss@suse.de" date="1328616000">- Mark event scripts as %verify(not mode) to ensure rpm --verify does not
  complain about mode changes made by enablescript; (bnc#694262).</changelog>
<changelog author="ddiss@suse.de" date="1328616001">- Remove stop_on_removal and restart_on_update pre/post uninstall hooks, ctdbd
  processes are managed by the CTDB resource agent; (bnc#745388).</changelog>
<changelog author="lmuelle@suse.de" date="1330430400">- Split the PreReq in separate lines.
- PreReq coreutils instead of fileutils.</changelog>
<changelog author="lmuelle@suse.com" date="1344427200">- Update to version 1.2.46
  + Add ltdbtool and man page</changelog>
<changelog author="ddiss@suse.com" date="1350648000">- Update to version 1.2.52
  + util: ctdb_fork() closes all sockets opened by the main daemon
  + Logging: Map TEVENT_DEBUG_FATAL to DEBUG_CRIT
  + Eventscripts: "recovered" event should not fail on NATGW failure
  + common: Debug ctdb_addr_to_str() using new function ctdb_external_trace()
  + Initscript: Kill any existing ctdbd processes if the ping succeeds
  + Eventscripts: new functions set_proc() and get_proc().
  + Eventscripts: Add "reconfigure" pseudo-event for policy routing</changelog>
<changelog author="ddiss@suse.com" date="1373544000">- Update to version 2.3
  + 2 new configuration variables for 60.nfs eventscript:
  - CTDB_MONITOR_NFS_THREAD_COUNT
  - CTDB_NFS_DUMP_STUCK_THREADS
  + Removed DeadlockTimeout tunable.  To enable debug of locking issues set
    CTDB_DEBUG_LOCKS=/etc/ctdb/debug_locks.sh
  + In overall statistics and database statistics, lock buckets have been
    updated to use following timings:
    &lt; 1ms, &lt; 10ms, &lt; 100ms, &lt; 1s, &lt; 2s, &lt; 4s, &lt; 8s, &lt; 16s, &lt; 32s, &lt; 64s, &gt;= 64s
  + Initscript is now simplified with most CTDB-specific functionality
    split out to ctdbd_wrapper, which is used to start and stop ctdbd.
  + Add systemd support.
  + CTDB subprocesses are now given informative names to allow them to
    be easily distinguished when using programs like "top" or "perf".
  + ctdb tool should not exit from a retry loop if a control times out
    (e.g. under high load).  This simple fix will stop an exit from the
    retry loop on any error.
  + When updating flags on all nodes, use the correct updated flags.  This
    should avoid wrong flag change messages in the logs.
  + The recovery daemon will not ban other nodes if the current node
    is banned.
  + ctdb dbstatistics command now correctly outputs database statistics.
  + Fixed a panic with overlapping shutdowns (regression in 2.2).
  + Fixed 60.ganesha "monitor" event (regression in 2.2).
  + Fixed a buffer overflow in the "reloadips" implementation.
  + Fixed segmentation faults in ping_pong (called with incorrect
    argument) and test binaries (called when ctdbd not running).
  + The recovery daemon on stopped or banned node will stop participating in any
    cluster activity.
  + Improve cluster wide database traverse by sending the records directly from
    traverse child process to requesting node.
  + TDB checking and dropping of all IPs moved from initscript to "init"
    event in 00.ctdb.
  + To avoid "rogue IPs" the release IP callback now fails if the
    released IP is still present on an interface.
- Update to version 2.2
  + The "stopped" event has been removed.
  + New --pidfile option for ctdbd, used by initscript
  + The 60.nfs eventscript now uses configuration files in
    /etc/ctdb/nfs-rpc-checks.d/ for timeouts and actions instead of
    hardcoding them into the script.
  + Notification handler scripts can now be dropped into /etc/ctdb/notify.d/.
  + The NoIPTakeoverOnDisabled tunable has been renamed to
    NoIPHostOnAllDisabled and now works properly when set on individual
    nodes.
  + New ctdb subcommand "runstate" prints the current internal runstate.
    Runstates are used for serialising startup.
  + The Unix domain socket is now set to non-blocking after the
    connection succeeds.  This avoids connections failing with EAGAIN
    and not being retried.
  + Fetching from the log ringbuffer now succeeds if the buffer is full.
  + Fix a severe recovery bug that can lead to data corruption for SMB clients.
  + The statd-callout script now runs as root via sudo.
  + "ctdb delip" no longer fails if it is unable to move the IP.
  + A race in the ctdb tool's ipreallocate code was fixed.  This fixes
    potential bugs in the "disable", "enable", "stop", "continue",
    "ban", "unban", "ipreallocate" and "sync" commands.
  + The monitor cancellation code could sometimes hang indefinitely.
    This could cause "ctdb stop" and "ctdb shutdown" to fail.
  + The socket I/O handling has been optimised to improve performance.
  + IPs will not be assigned to nodes during CTDB initialisation.  They
    will only be assigned to nodes that are in the "running" runstate.
  + Improved database locking code.  One improvement is to use a
    standalone locking helper executable - the avoids creating many
    forked copies of ctdbd and potentially running a node out of memory.
  + New control CTDB_CONTROL_IPREALLOCATED is now used to generate
    "ipreallocated" events.
  + Message handlers are now indexed, providing a significant
    performance improvement.</changelog>
<changelog author="ddiss@suse.com" date="1373544001">- Conditionally package the CTDB Perforance Co-Pilot monitoring agent.
  + Only built if suse_version is greater than 1140.
  + Add ctdb-pcp-pmda-rpmlintrc to filter out devel-file-in-non-devel-package
    warning.</changelog>
<changelog author="ddiss@suse.com" date="1394625600">- Avoid lockwait congestion by using an overflow queue; (bnc#867815).</changelog>
<changelog author="ddiss@suse.com" date="1402401600">- Fix temp file vulnerabilities; CVE-2013-4159; (bnc#836064).</changelog>

</package>
<package pkgid="c467cb10556e90fb7af849c042e615f21fead0a0adafd204c9956a6f758369d0" name="ctdb-devel" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="3.54.2"/>

<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435147200">- Update to 4.1.19.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fix fsmo transfer exception; (bso#10924).
  + s3: smbcacls: Ensure we read a hex number as %x, not %u; (bso#11068).
  + s3:winbindd: Make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + Error code path doesn't call END_PROFILE; (bso#11244).
  + Make mangled names work with acl_xattr; (bso#11249).
  + libads: Record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + s4: libcli/finddcs_cldap: Continue processing CLDAP until all addresses
    are used; (bso#11284).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + idmap_rfc2307: Fix 'wbinfo --gid-to-sid' query; (bso#11313).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441886400">- Update to 4.1.20.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + Fix logon via MS Remote Desktop; (bso#11061).
  + s3:winbindd: make sure we pass a valid server to
    rpccli_netlogon_sam_network_logon*(); (bso#11081).
  + s3:param/loadparm fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + Use resource group sids obtained from pac logon_info; (bso#11328).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption;
    (bso#11366).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444737600">- Update to 4.1.21.
  + Avoid quoting problems in user's DNs; (bso#11488).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>
<changelog author="nopower@suse.com" date="1445515200">- Prevent null pointer access in samlogon fallback when security
  credentials are null; (bnc#949022).</changelog>
<changelog author="nopower@suse.com" date="1446638400">- Ensure attempt to ssh into locked account  triggers
  "Your account is disabled....." to the console; (bnc#953382).</changelog>
<changelog author="lmuelle@suse.com" date="1447502400">- Cleanup and enhance the pidl sub package.</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update to 4.1.22.
  + Malicious request can cause Samba LDAP server to hang, spinning using CPU;
    CVE-2015-3223; (bso#11325); (bnc#958581).
  + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
    (bnc#958586).
  + Insufficient symlink verification (file access outside the share);
    CVE-2015-5252; (bso#11395); (bnc#958582).
  + No man in the middle protection when forcing smb encryption on the client
    side; CVE-2015-5296; (bso#11536); (bnc#958584).
  + Currently the snapshot browsing is not secure thru windows previous version
    (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
  + Fix Microsoft MS15-096 to prevent machine accounts from being changed into
    user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).
  + Fix remote DoS in Samba (AD) LDAP server; CVE-2015-7540; (bso#9187);
    (bnc#958580).</changelog>
<changelog author="lmuelle@suse.com" date="1452513600">- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).</changelog>
<changelog author="lmuelle@suse.com" date="1452686400">- Remove autoconf build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1452859200">- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).</changelog>
<changelog author="mkubecek@suse.cz" date="1460462400">- upgrade to version 4.2.4
- A man-in-the-middle can downgrade NTLMSSP authentication;
  CVE-2016-2110; (bso#11688); (bsc#973031).
- Domain controller netlogon member computer can be spoofed;
  CVE-2016-2111; (bso#11749); (bsc#973032).
- LDAP conenctions vulnerable to downgrade and  MITM attack;
  CVE-2016-2112; (bso#11644); (bsc#973033).
- TLS certificate validation missing; CVE-2016-2113; (bso#11752);
  (bsc#973034).
- Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115;
  (bso#11756); (bsc#973036).
- "Badlock" DCERPC impersonation of authenticated account possible;
  CVE-2016-2118; (bso#11804); (bsc#971965).
- DCERPC server and client vulnerable to DOS and MITM attacks;
  CVE-2015-5370; (bso#11344); (bsc#936862).</changelog>

</package>
<package pkgid="a83d2f6a615e1ff7b3cc0a425241a7222067acff1724371b13d8194b221ccdd0" name="ctdb-pcp-pmda" arch="i586">
    <version epoch="0" ver="2.3" rel="2.4.1"/>

<changelog author="jmcdonough@suse.de" date="1270209600">- Update to version 1.0.114.
  + Lots of changes from Metze
- Update to version 1.0.113.
  + Incorrect use of dup2() could cause ctdb to spin eating 100% cpu.
- Update to version 1.0.112.
  + Revert the use of wbinfo --ping-dc as it is proving too unreliable.
  + Minor testsuite changes.
- Update to version 1.0.111.
  + Fix a logging bug when an eventscript is aborted that could cause a crash.
  + Add back cb_status that was lost in a previous commit.
- Update to version 1.0.110.
  + Metxe: fix for filedescriptor leak in the new eventscript code.
  + Rusty: fix for a crash bug in the eventscript code.
- Update to version 1.0.109.
  + Massive eventscript updates. (bz58828)
  + Nice the daemon instead of using realtime scheduler, also use mlockall() to
    reduce the risk of blockign due to paging.
  + Workarounds for valgrind when forking once for each script. Valgrind consumes
    massive cpu when terminating the scripts on virtual systems.
  + Sync the tdb library with upstream, and use the new TDB_DISALLOW_NESTING flag.
  + Add new command "ctdb dumpdbbackup"
  + Start using the new tdb check framework to validate tdb files upon startup.
  + A new framework where we can control health for individual tdb databases.
  + Fix a crash bug in the logging code.
  + New transaction code for persistent databases.
  + Various other smaller fixes.
- Update to version 1.0.108.
  + Transaction updates from Michael Adam.
  + Use the new wbinfo --ping-dc instead of -p in the eventscript for samba
    the check if winbindd is ok.
  + Add a better "process-exist" for samba so it will automatically
    reap smbd's on stopped and banned nodes to reclaim subrecords.
    This will be done a bit differently in the next release.
  + Use a statically allocated buffer for the 'first-time' capture buffer
    to reduce the pressure on malloc/free.
- Update to version 1.0.107.
  + fix for rusty to solve a double-free that can happen when there are
    multiple packets queued and the connection is destroyed before
    all packets are processed.
- Update to version 1.0.106.
  + Buildscript changes from Michael Adam
  + Dont do a full recovery when there is a mismatch detected for ip addresses,
    just do a less disruptive ip-reallocation
  + When starting ctdbd, wait until all initial recoveries have finished
    before we issue the "startup" event.
    So dont start services or monitoring until the cluster has
    stabilized.
  + Major eventscript overhaul by Ronnie, Rusty and Martins and fixes of a few
    bugs found.</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="lmuelle@suse.de" date="1272196800">- Buildrequire pkg-config only for SUSE based products.</changelog>
<changelog author="jmcdonough@suse.de" date="1282564800">- Update to version 1.2.
  + Many tdb cleanups and fixups by rusty.
  + Create cnfs event script and crash cleanup script.
  + Create libctdb and reorganize headers.
  + Expand test suite significantly.
  + Remove "ctdb freeze" command.
  + Lots of fixes.</changelog>
<changelog author="jmcdonough@suse.de" date="1301659200">- Update to version 1.2.27
  + Lots of fixes
  + Remove nfstickle event script
  + Add ganesha event script</changelog>
<changelog author="jmcdonough@suse.de" date="1305028800">- Update to version 1.2.29
  + Interface handling updates
  + Reduce logging at lower levels
  + Event checking updates
  + Various other fixes</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1324382400">- Remove call to suse_update_config macro for post-11.4 systems.</changelog>
<changelog author="coolo@suse.com" date="1324468800">- Add autoconf as buildrequire to avoid implicit dependency for post-11.4
  systems.</changelog>
<changelog author="lmuelle@suse.de" date="1327320000">- Simplify conditional BuildRrequires of pkg-config.</changelog>
<changelog author="lmuelle@suse.de" date="1327579200">- Use correct license, GPLv3+ for the package.</changelog>
<changelog author="ddiss@suse.de" date="1328616000">- Mark event scripts as %verify(not mode) to ensure rpm --verify does not
  complain about mode changes made by enablescript; (bnc#694262).</changelog>
<changelog author="ddiss@suse.de" date="1328616001">- Remove stop_on_removal and restart_on_update pre/post uninstall hooks, ctdbd
  processes are managed by the CTDB resource agent; (bnc#745388).</changelog>
<changelog author="lmuelle@suse.de" date="1330430400">- Split the PreReq in separate lines.
- PreReq coreutils instead of fileutils.</changelog>
<changelog author="lmuelle@suse.com" date="1344427200">- Update to version 1.2.46
  + Add ltdbtool and man page</changelog>
<changelog author="ddiss@suse.com" date="1350648000">- Update to version 1.2.52
  + util: ctdb_fork() closes all sockets opened by the main daemon
  + Logging: Map TEVENT_DEBUG_FATAL to DEBUG_CRIT
  + Eventscripts: "recovered" event should not fail on NATGW failure
  + common: Debug ctdb_addr_to_str() using new function ctdb_external_trace()
  + Initscript: Kill any existing ctdbd processes if the ping succeeds
  + Eventscripts: new functions set_proc() and get_proc().
  + Eventscripts: Add "reconfigure" pseudo-event for policy routing</changelog>
<changelog author="ddiss@suse.com" date="1373544000">- Update to version 2.3
  + 2 new configuration variables for 60.nfs eventscript:
  - CTDB_MONITOR_NFS_THREAD_COUNT
  - CTDB_NFS_DUMP_STUCK_THREADS
  + Removed DeadlockTimeout tunable.  To enable debug of locking issues set
    CTDB_DEBUG_LOCKS=/etc/ctdb/debug_locks.sh
  + In overall statistics and database statistics, lock buckets have been
    updated to use following timings:
    &lt; 1ms, &lt; 10ms, &lt; 100ms, &lt; 1s, &lt; 2s, &lt; 4s, &lt; 8s, &lt; 16s, &lt; 32s, &lt; 64s, &gt;= 64s
  + Initscript is now simplified with most CTDB-specific functionality
    split out to ctdbd_wrapper, which is used to start and stop ctdbd.
  + Add systemd support.
  + CTDB subprocesses are now given informative names to allow them to
    be easily distinguished when using programs like "top" or "perf".
  + ctdb tool should not exit from a retry loop if a control times out
    (e.g. under high load).  This simple fix will stop an exit from the
    retry loop on any error.
  + When updating flags on all nodes, use the correct updated flags.  This
    should avoid wrong flag change messages in the logs.
  + The recovery daemon will not ban other nodes if the current node
    is banned.
  + ctdb dbstatistics command now correctly outputs database statistics.
  + Fixed a panic with overlapping shutdowns (regression in 2.2).
  + Fixed 60.ganesha "monitor" event (regression in 2.2).
  + Fixed a buffer overflow in the "reloadips" implementation.
  + Fixed segmentation faults in ping_pong (called with incorrect
    argument) and test binaries (called when ctdbd not running).
  + The recovery daemon on stopped or banned node will stop participating in any
    cluster activity.
  + Improve cluster wide database traverse by sending the records directly from
    traverse child process to requesting node.
  + TDB checking and dropping of all IPs moved from initscript to "init"
    event in 00.ctdb.
  + To avoid "rogue IPs" the release IP callback now fails if the
    released IP is still present on an interface.
- Update to version 2.2
  + The "stopped" event has been removed.
  + New --pidfile option for ctdbd, used by initscript
  + The 60.nfs eventscript now uses configuration files in
    /etc/ctdb/nfs-rpc-checks.d/ for timeouts and actions instead of
    hardcoding them into the script.
  + Notification handler scripts can now be dropped into /etc/ctdb/notify.d/.
  + The NoIPTakeoverOnDisabled tunable has been renamed to
    NoIPHostOnAllDisabled and now works properly when set on individual
    nodes.
  + New ctdb subcommand "runstate" prints the current internal runstate.
    Runstates are used for serialising startup.
  + The Unix domain socket is now set to non-blocking after the
    connection succeeds.  This avoids connections failing with EAGAIN
    and not being retried.
  + Fetching from the log ringbuffer now succeeds if the buffer is full.
  + Fix a severe recovery bug that can lead to data corruption for SMB clients.
  + The statd-callout script now runs as root via sudo.
  + "ctdb delip" no longer fails if it is unable to move the IP.
  + A race in the ctdb tool's ipreallocate code was fixed.  This fixes
    potential bugs in the "disable", "enable", "stop", "continue",
    "ban", "unban", "ipreallocate" and "sync" commands.
  + The monitor cancellation code could sometimes hang indefinitely.
    This could cause "ctdb stop" and "ctdb shutdown" to fail.
  + The socket I/O handling has been optimised to improve performance.
  + IPs will not be assigned to nodes during CTDB initialisation.  They
    will only be assigned to nodes that are in the "running" runstate.
  + Improved database locking code.  One improvement is to use a
    standalone locking helper executable - the avoids creating many
    forked copies of ctdbd and potentially running a node out of memory.
  + New control CTDB_CONTROL_IPREALLOCATED is now used to generate
    "ipreallocated" events.
  + Message handlers are now indexed, providing a significant
    performance improvement.</changelog>
<changelog author="ddiss@suse.com" date="1373544001">- Conditionally package the CTDB Perforance Co-Pilot monitoring agent.
  + Only built if suse_version is greater than 1140.
  + Add ctdb-pcp-pmda-rpmlintrc to filter out devel-file-in-non-devel-package
    warning.</changelog>
<changelog author="ddiss@suse.com" date="1394625600">- Avoid lockwait congestion by using an overflow queue; (bnc#867815).</changelog>
<changelog author="ddiss@suse.com" date="1402401600">- Fix temp file vulnerabilities; CVE-2013-4159; (bnc#836064).</changelog>

</package>
<package pkgid="6f3f172214f6fda030c46c755f86152b3a02bc299c8a2116e4fe819dc11f7501" name="ctdb-pcp-pmda" arch="i586">
    <version epoch="0" ver="4.2.4" rel="3.54.2"/>

<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435147200">- Update to 4.1.19.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fix fsmo transfer exception; (bso#10924).
  + s3: smbcacls: Ensure we read a hex number as %x, not %u; (bso#11068).
  + s3:winbindd: Make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + Error code path doesn't call END_PROFILE; (bso#11244).
  + Make mangled names work with acl_xattr; (bso#11249).
  + libads: Record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + s4: libcli/finddcs_cldap: Continue processing CLDAP until all addresses
    are used; (bso#11284).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + idmap_rfc2307: Fix 'wbinfo --gid-to-sid' query; (bso#11313).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441886400">- Update to 4.1.20.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + Fix logon via MS Remote Desktop; (bso#11061).
  + s3:winbindd: make sure we pass a valid server to
    rpccli_netlogon_sam_network_logon*(); (bso#11081).
  + s3:param/loadparm fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + Use resource group sids obtained from pac logon_info; (bso#11328).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption;
    (bso#11366).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444737600">- Update to 4.1.21.
  + Avoid quoting problems in user's DNs; (bso#11488).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>
<changelog author="nopower@suse.com" date="1445515200">- Prevent null pointer access in samlogon fallback when security
  credentials are null; (bnc#949022).</changelog>
<changelog author="nopower@suse.com" date="1446638400">- Ensure attempt to ssh into locked account  triggers
  "Your account is disabled....." to the console; (bnc#953382).</changelog>
<changelog author="lmuelle@suse.com" date="1447502400">- Cleanup and enhance the pidl sub package.</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update to 4.1.22.
  + Malicious request can cause Samba LDAP server to hang, spinning using CPU;
    CVE-2015-3223; (bso#11325); (bnc#958581).
  + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
    (bnc#958586).
  + Insufficient symlink verification (file access outside the share);
    CVE-2015-5252; (bso#11395); (bnc#958582).
  + No man in the middle protection when forcing smb encryption on the client
    side; CVE-2015-5296; (bso#11536); (bnc#958584).
  + Currently the snapshot browsing is not secure thru windows previous version
    (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
  + Fix Microsoft MS15-096 to prevent machine accounts from being changed into
    user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).
  + Fix remote DoS in Samba (AD) LDAP server; CVE-2015-7540; (bso#9187);
    (bnc#958580).</changelog>
<changelog author="lmuelle@suse.com" date="1452513600">- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).</changelog>
<changelog author="lmuelle@suse.com" date="1452686400">- Remove autoconf build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1452859200">- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).</changelog>
<changelog author="mkubecek@suse.cz" date="1460462400">- upgrade to version 4.2.4
- A man-in-the-middle can downgrade NTLMSSP authentication;
  CVE-2016-2110; (bso#11688); (bsc#973031).
- Domain controller netlogon member computer can be spoofed;
  CVE-2016-2111; (bso#11749); (bsc#973032).
- LDAP conenctions vulnerable to downgrade and  MITM attack;
  CVE-2016-2112; (bso#11644); (bsc#973033).
- TLS certificate validation missing; CVE-2016-2113; (bso#11752);
  (bsc#973034).
- Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115;
  (bso#11756); (bsc#973036).
- "Badlock" DCERPC impersonation of authenticated account possible;
  CVE-2016-2118; (bso#11804); (bsc#971965).
- DCERPC server and client vulnerable to DOS and MITM attacks;
  CVE-2015-5370; (bso#11344); (bsc#936862).</changelog>

</package>
<package pkgid="2da8b7a969bc13cd4ecf41d4d8a52d27faccfa4710da49356a5dcbaa2b098c86" name="ctdb-pcp-pmda" arch="x86_64">
    <version epoch="0" ver="2.3" rel="2.4.1"/>

<changelog author="jmcdonough@suse.de" date="1270209600">- Update to version 1.0.114.
  + Lots of changes from Metze
- Update to version 1.0.113.
  + Incorrect use of dup2() could cause ctdb to spin eating 100% cpu.
- Update to version 1.0.112.
  + Revert the use of wbinfo --ping-dc as it is proving too unreliable.
  + Minor testsuite changes.
- Update to version 1.0.111.
  + Fix a logging bug when an eventscript is aborted that could cause a crash.
  + Add back cb_status that was lost in a previous commit.
- Update to version 1.0.110.
  + Metxe: fix for filedescriptor leak in the new eventscript code.
  + Rusty: fix for a crash bug in the eventscript code.
- Update to version 1.0.109.
  + Massive eventscript updates. (bz58828)
  + Nice the daemon instead of using realtime scheduler, also use mlockall() to
    reduce the risk of blockign due to paging.
  + Workarounds for valgrind when forking once for each script. Valgrind consumes
    massive cpu when terminating the scripts on virtual systems.
  + Sync the tdb library with upstream, and use the new TDB_DISALLOW_NESTING flag.
  + Add new command "ctdb dumpdbbackup"
  + Start using the new tdb check framework to validate tdb files upon startup.
  + A new framework where we can control health for individual tdb databases.
  + Fix a crash bug in the logging code.
  + New transaction code for persistent databases.
  + Various other smaller fixes.
- Update to version 1.0.108.
  + Transaction updates from Michael Adam.
  + Use the new wbinfo --ping-dc instead of -p in the eventscript for samba
    the check if winbindd is ok.
  + Add a better "process-exist" for samba so it will automatically
    reap smbd's on stopped and banned nodes to reclaim subrecords.
    This will be done a bit differently in the next release.
  + Use a statically allocated buffer for the 'first-time' capture buffer
    to reduce the pressure on malloc/free.
- Update to version 1.0.107.
  + fix for rusty to solve a double-free that can happen when there are
    multiple packets queued and the connection is destroyed before
    all packets are processed.
- Update to version 1.0.106.
  + Buildscript changes from Michael Adam
  + Dont do a full recovery when there is a mismatch detected for ip addresses,
    just do a less disruptive ip-reallocation
  + When starting ctdbd, wait until all initial recoveries have finished
    before we issue the "startup" event.
    So dont start services or monitoring until the cluster has
    stabilized.
  + Major eventscript overhaul by Ronnie, Rusty and Martins and fixes of a few
    bugs found.</changelog>
<changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
<changelog author="lmuelle@suse.de" date="1272196800">- Buildrequire pkg-config only for SUSE based products.</changelog>
<changelog author="jmcdonough@suse.de" date="1282564800">- Update to version 1.2.
  + Many tdb cleanups and fixups by rusty.
  + Create cnfs event script and crash cleanup script.
  + Create libctdb and reorganize headers.
  + Expand test suite significantly.
  + Remove "ctdb freeze" command.
  + Lots of fixes.</changelog>
<changelog author="jmcdonough@suse.de" date="1301659200">- Update to version 1.2.27
  + Lots of fixes
  + Remove nfstickle event script
  + Add ganesha event script</changelog>
<changelog author="jmcdonough@suse.de" date="1305028800">- Update to version 1.2.29
  + Interface handling updates
  + Reduce logging at lower levels
  + Event checking updates
  + Various other fixes</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
<changelog author="coolo@suse.com" date="1324382400">- Remove call to suse_update_config macro for post-11.4 systems.</changelog>
<changelog author="coolo@suse.com" date="1324468800">- Add autoconf as buildrequire to avoid implicit dependency for post-11.4
  systems.</changelog>
<changelog author="lmuelle@suse.de" date="1327320000">- Simplify conditional BuildRrequires of pkg-config.</changelog>
<changelog author="lmuelle@suse.de" date="1327579200">- Use correct license, GPLv3+ for the package.</changelog>
<changelog author="ddiss@suse.de" date="1328616000">- Mark event scripts as %verify(not mode) to ensure rpm --verify does not
  complain about mode changes made by enablescript; (bnc#694262).</changelog>
<changelog author="ddiss@suse.de" date="1328616001">- Remove stop_on_removal and restart_on_update pre/post uninstall hooks, ctdbd
  processes are managed by the CTDB resource agent; (bnc#745388).</changelog>
<changelog author="lmuelle@suse.de" date="1330430400">- Split the PreReq in separate lines.
- PreReq coreutils instead of fileutils.</changelog>
<changelog author="lmuelle@suse.com" date="1344427200">- Update to version 1.2.46
  + Add ltdbtool and man page</changelog>
<changelog author="ddiss@suse.com" date="1350648000">- Update to version 1.2.52
  + util: ctdb_fork() closes all sockets opened by the main daemon
  + Logging: Map TEVENT_DEBUG_FATAL to DEBUG_CRIT
  + Eventscripts: "recovered" event should not fail on NATGW failure
  + common: Debug ctdb_addr_to_str() using new function ctdb_external_trace()
  + Initscript: Kill any existing ctdbd processes if the ping succeeds
  + Eventscripts: new functions set_proc() and get_proc().
  + Eventscripts: Add "reconfigure" pseudo-event for policy routing</changelog>
<changelog author="ddiss@suse.com" date="1373544000">- Update to version 2.3
  + 2 new configuration variables for 60.nfs eventscript:
  - CTDB_MONITOR_NFS_THREAD_COUNT
  - CTDB_NFS_DUMP_STUCK_THREADS
  + Removed DeadlockTimeout tunable.  To enable debug of locking issues set
    CTDB_DEBUG_LOCKS=/etc/ctdb/debug_locks.sh
  + In overall statistics and database statistics, lock buckets have been
    updated to use following timings:
    &lt; 1ms, &lt; 10ms, &lt; 100ms, &lt; 1s, &lt; 2s, &lt; 4s, &lt; 8s, &lt; 16s, &lt; 32s, &lt; 64s, &gt;= 64s
  + Initscript is now simplified with most CTDB-specific functionality
    split out to ctdbd_wrapper, which is used to start and stop ctdbd.
  + Add systemd support.
  + CTDB subprocesses are now given informative names to allow them to
    be easily distinguished when using programs like "top" or "perf".
  + ctdb tool should not exit from a retry loop if a control times out
    (e.g. under high load).  This simple fix will stop an exit from the
    retry loop on any error.
  + When updating flags on all nodes, use the correct updated flags.  This
    should avoid wrong flag change messages in the logs.
  + The recovery daemon will not ban other nodes if the current node
    is banned.
  + ctdb dbstatistics command now correctly outputs database statistics.
  + Fixed a panic with overlapping shutdowns (regression in 2.2).
  + Fixed 60.ganesha "monitor" event (regression in 2.2).
  + Fixed a buffer overflow in the "reloadips" implementation.
  + Fixed segmentation faults in ping_pong (called with incorrect
    argument) and test binaries (called when ctdbd not running).
  + The recovery daemon on stopped or banned node will stop participating in any
    cluster activity.
  + Improve cluster wide database traverse by sending the records directly from
    traverse child process to requesting node.
  + TDB checking and dropping of all IPs moved from initscript to "init"
    event in 00.ctdb.
  + To avoid "rogue IPs" the release IP callback now fails if the
    released IP is still present on an interface.
- Update to version 2.2
  + The "stopped" event has been removed.
  + New --pidfile option for ctdbd, used by initscript
  + The 60.nfs eventscript now uses configuration files in
    /etc/ctdb/nfs-rpc-checks.d/ for timeouts and actions instead of
    hardcoding them into the script.
  + Notification handler scripts can now be dropped into /etc/ctdb/notify.d/.
  + The NoIPTakeoverOnDisabled tunable has been renamed to
    NoIPHostOnAllDisabled and now works properly when set on individual
    nodes.
  + New ctdb subcommand "runstate" prints the current internal runstate.
    Runstates are used for serialising startup.
  + The Unix domain socket is now set to non-blocking after the
    connection succeeds.  This avoids connections failing with EAGAIN
    and not being retried.
  + Fetching from the log ringbuffer now succeeds if the buffer is full.
  + Fix a severe recovery bug that can lead to data corruption for SMB clients.
  + The statd-callout script now runs as root via sudo.
  + "ctdb delip" no longer fails if it is unable to move the IP.
  + A race in the ctdb tool's ipreallocate code was fixed.  This fixes
    potential bugs in the "disable", "enable", "stop", "continue",
    "ban", "unban", "ipreallocate" and "sync" commands.
  + The monitor cancellation code could sometimes hang indefinitely.
    This could cause "ctdb stop" and "ctdb shutdown" to fail.
  + The socket I/O handling has been optimised to improve performance.
  + IPs will not be assigned to nodes during CTDB initialisation.  They
    will only be assigned to nodes that are in the "running" runstate.
  + Improved database locking code.  One improvement is to use a
    standalone locking helper executable - the avoids creating many
    forked copies of ctdbd and potentially running a node out of memory.
  + New control CTDB_CONTROL_IPREALLOCATED is now used to generate
    "ipreallocated" events.
  + Message handlers are now indexed, providing a significant
    performance improvement.</changelog>
<changelog author="ddiss@suse.com" date="1373544001">- Conditionally package the CTDB Perforance Co-Pilot monitoring agent.
  + Only built if suse_version is greater than 1140.
  + Add ctdb-pcp-pmda-rpmlintrc to filter out devel-file-in-non-devel-package
    warning.</changelog>
<changelog author="ddiss@suse.com" date="1394625600">- Avoid lockwait congestion by using an overflow queue; (bnc#867815).</changelog>
<changelog author="ddiss@suse.com" date="1402401600">- Fix temp file vulnerabilities; CVE-2013-4159; (bnc#836064).</changelog>

</package>
<package pkgid="af7b6b94b33e2768c7d0c18baad4ccf3a20cf061836f86b0f5cdd92730c429fc" name="ctdb-pcp-pmda" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="3.54.2"/>

<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435147200">- Update to 4.1.19.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fix fsmo transfer exception; (bso#10924).
  + s3: smbcacls: Ensure we read a hex number as %x, not %u; (bso#11068).
  + s3:winbindd: Make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + Error code path doesn't call END_PROFILE; (bso#11244).
  + Make mangled names work with acl_xattr; (bso#11249).
  + libads: Record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + s4: libcli/finddcs_cldap: Continue processing CLDAP until all addresses
    are used; (bso#11284).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + idmap_rfc2307: Fix 'wbinfo --gid-to-sid' query; (bso#11313).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441886400">- Update to 4.1.20.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + Fix logon via MS Remote Desktop; (bso#11061).
  + s3:winbindd: make sure we pass a valid server to
    rpccli_netlogon_sam_network_logon*(); (bso#11081).
  + s3:param/loadparm fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + Use resource group sids obtained from pac logon_info; (bso#11328).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption;
    (bso#11366).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444737600">- Update to 4.1.21.
  + Avoid quoting problems in user's DNs; (bso#11488).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>
<changelog author="nopower@suse.com" date="1445515200">- Prevent null pointer access in samlogon fallback when security
  credentials are null; (bnc#949022).</changelog>
<changelog author="nopower@suse.com" date="1446638400">- Ensure attempt to ssh into locked account  triggers
  "Your account is disabled....." to the console; (bnc#953382).</changelog>
<changelog author="lmuelle@suse.com" date="1447502400">- Cleanup and enhance the pidl sub package.</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update to 4.1.22.
  + Malicious request can cause Samba LDAP server to hang, spinning using CPU;
    CVE-2015-3223; (bso#11325); (bnc#958581).
  + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
    (bnc#958586).
  + Insufficient symlink verification (file access outside the share);
    CVE-2015-5252; (bso#11395); (bnc#958582).
  + No man in the middle protection when forcing smb encryption on the client
    side; CVE-2015-5296; (bso#11536); (bnc#958584).
  + Currently the snapshot browsing is not secure thru windows previous version
    (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
  + Fix Microsoft MS15-096 to prevent machine accounts from being changed into
    user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).
  + Fix remote DoS in Samba (AD) LDAP server; CVE-2015-7540; (bso#9187);
    (bnc#958580).</changelog>
<changelog author="lmuelle@suse.com" date="1452513600">- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).</changelog>
<changelog author="lmuelle@suse.com" date="1452686400">- Remove autoconf build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1452859200">- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).</changelog>
<changelog author="mkubecek@suse.cz" date="1460462400">- upgrade to version 4.2.4
- A man-in-the-middle can downgrade NTLMSSP authentication;
  CVE-2016-2110; (bso#11688); (bsc#973031).
- Domain controller netlogon member computer can be spoofed;
  CVE-2016-2111; (bso#11749); (bsc#973032).
- LDAP conenctions vulnerable to downgrade and  MITM attack;
  CVE-2016-2112; (bso#11644); (bsc#973033).
- TLS certificate validation missing; CVE-2016-2113; (bso#11752);
  (bsc#973034).
- Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115;
  (bso#11756); (bsc#973036).
- "Badlock" DCERPC impersonation of authenticated account possible;
  CVE-2016-2118; (bso#11804); (bsc#971965).
- DCERPC server and client vulnerable to DOS and MITM attacks;
  CVE-2015-5370; (bso#11344); (bsc#936862).</changelog>

</package>
<package pkgid="36ec9dc42102a729418061b4d7dda39af75f8dc264effbc10c20caba61a878aa" name="ctdb-tests" arch="i586">
    <version epoch="0" ver="4.2.4" rel="3.54.2"/>

<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435147200">- Update to 4.1.19.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fix fsmo transfer exception; (bso#10924).
  + s3: smbcacls: Ensure we read a hex number as %x, not %u; (bso#11068).
  + s3:winbindd: Make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + Error code path doesn't call END_PROFILE; (bso#11244).
  + Make mangled names work with acl_xattr; (bso#11249).
  + libads: Record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + s4: libcli/finddcs_cldap: Continue processing CLDAP until all addresses
    are used; (bso#11284).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + idmap_rfc2307: Fix 'wbinfo --gid-to-sid' query; (bso#11313).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441886400">- Update to 4.1.20.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + Fix logon via MS Remote Desktop; (bso#11061).
  + s3:winbindd: make sure we pass a valid server to
    rpccli_netlogon_sam_network_logon*(); (bso#11081).
  + s3:param/loadparm fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + Use resource group sids obtained from pac logon_info; (bso#11328).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption;
    (bso#11366).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444737600">- Update to 4.1.21.
  + Avoid quoting problems in user's DNs; (bso#11488).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>
<changelog author="nopower@suse.com" date="1445515200">- Prevent null pointer access in samlogon fallback when security
  credentials are null; (bnc#949022).</changelog>
<changelog author="nopower@suse.com" date="1446638400">- Ensure attempt to ssh into locked account  triggers
  "Your account is disabled....." to the console; (bnc#953382).</changelog>
<changelog author="lmuelle@suse.com" date="1447502400">- Cleanup and enhance the pidl sub package.</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update to 4.1.22.
  + Malicious request can cause Samba LDAP server to hang, spinning using CPU;
    CVE-2015-3223; (bso#11325); (bnc#958581).
  + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
    (bnc#958586).
  + Insufficient symlink verification (file access outside the share);
    CVE-2015-5252; (bso#11395); (bnc#958582).
  + No man in the middle protection when forcing smb encryption on the client
    side; CVE-2015-5296; (bso#11536); (bnc#958584).
  + Currently the snapshot browsing is not secure thru windows previous version
    (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
  + Fix Microsoft MS15-096 to prevent machine accounts from being changed into
    user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).
  + Fix remote DoS in Samba (AD) LDAP server; CVE-2015-7540; (bso#9187);
    (bnc#958580).</changelog>
<changelog author="lmuelle@suse.com" date="1452513600">- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).</changelog>
<changelog author="lmuelle@suse.com" date="1452686400">- Remove autoconf build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1452859200">- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).</changelog>
<changelog author="mkubecek@suse.cz" date="1460462400">- upgrade to version 4.2.4
- A man-in-the-middle can downgrade NTLMSSP authentication;
  CVE-2016-2110; (bso#11688); (bsc#973031).
- Domain controller netlogon member computer can be spoofed;
  CVE-2016-2111; (bso#11749); (bsc#973032).
- LDAP conenctions vulnerable to downgrade and  MITM attack;
  CVE-2016-2112; (bso#11644); (bsc#973033).
- TLS certificate validation missing; CVE-2016-2113; (bso#11752);
  (bsc#973034).
- Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115;
  (bso#11756); (bsc#973036).
- "Badlock" DCERPC impersonation of authenticated account possible;
  CVE-2016-2118; (bso#11804); (bsc#971965).
- DCERPC server and client vulnerable to DOS and MITM attacks;
  CVE-2015-5370; (bso#11344); (bsc#936862).</changelog>

</package>
<package pkgid="9148d869f975822141015d723a97f658f51db636911ee12963b03fee0b01aafd" name="ctdb-tests" arch="x86_64">
    <version epoch="0" ver="4.2.4" rel="3.54.2"/>

<changelog author="lmuelle@suse.com" date="1431518400">- Remove the independently built libraries ldb, talloc, tdn, and tevent and
  the post-10.3 renamed libsmbclient from baselibs.conf.</changelog>
<changelog author="lmuelle@suse.com" date="1432296000">- Avoid a crash inside the tevent epoll backend; (bso#11141); (bnc#931854).</changelog>
<changelog author="nopower@suse.com" date="1434456000">- Backport changes to use resource group sids obtained from pac logon_info;
  (bso#11328); (bnc#912457).</changelog>
<changelog author="lmuelle@suse.com" date="1435147200">- Update to 4.1.19.
  + s4:lib/tls: Fix build with gnutls 3.4; (bso#8780).
  + s4.2/fsmo.py: Fix fsmo transfer exception; (bso#10924).
  + s3: smbcacls: Ensure we read a hex number as %x, not %u; (bso#11068).
  + s3:winbindd: Make sure we remove pending io requests before closing client
    sockets; (bso#11141); (bnc#931854).
  + Fix panic triggered by smbd_smb2_request_notify_done() -&gt;
    smbXsrv_session_find_channel() in smbd; (bso#11182).
  + Error code path doesn't call END_PROFILE; (bso#11244).
  + Make mangled names work with acl_xattr; (bso#11249).
  + libads: Record service ticket endtime for sealed ldap connections;
    (bso#11267).
  + s3:smb2: Add padding to last command in compound requests; (bso#11277).
  + s3: IPv6 enabled DNS connections for ADS client; (bso#11283).
  + s4: libcli/finddcs_cldap: Continue processing CLDAP until all addresses
    are used; (bso#11284).
  + Excessive cli_resolve_path() usage can slow down transmission; (bso#11295).
  + idmap_rfc2307: Fix 'wbinfo --gid-to-sid' query; (bso#11313).</changelog>
<changelog author="lmuelle@suse.com" date="1435924800">- Make the winbind package depend on the matching libwbclient version and
  vice versa; (bnc#936909).</changelog>
<changelog author="tchvatal@suse.com" date="1436097600">- Disable rpath usage; (bnc#902421).</changelog>
<changelog author="lmuelle@suse.com" date="1438948800">- Adapt net-kdc-lookup patch for post-3.3 Samba versions; (bnc#295284).</changelog>
<changelog author="lmuelle@suse.com" date="1441022400">- Configure with --bundled-libraries=NONE; (bso#11458).</changelog>
<changelog author="lmuelle@suse.com" date="1441886400">- Update to 4.1.20.
  + s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable;
    (bso#10823).
  + Fix logon via MS Remote Desktop; (bso#11061).
  + s3:winbindd: make sure we pass a valid server to
    rpccli_netlogon_sam_network_logon*(); (bso#11081).
  + s3:param/loadparm fix 'testparm --show-all-parameters'; (bso#11170).
  + s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup; (bso#11320).
  + Use resource group sids obtained from pac logon_info; (bso#11328).
  + s3: smbd: Use separate flag to track become_root()/unbecome_root() state;
    (bso#11339).
  + s3: smbd: Codenomicon crash in do_smb_load_module(); (bso#11342).
  + lib: replace: Add strsep function (missing on Solaris); (bso#11359).
  + s3:libsmb: Fix a bug in conversion of ea list to ea array; (bso#11361).
  + docs: Overhaul the description of "smb encrypt" to include SMB3 encryption;
    (bso#11366).
  + smbd: Fix SMB3 functionality of "smb encrypt"; (bso#11372).
  + s3-smbd: Reset protocol in smbXsrv_connection_init_tables failure paths;
    (bso#11373).
  + s3-smbd: Leave sys_disk_free() if dfree command is used; (bso#11403).
  + s3-auth: Fix a possible null pointer dereference; (bso#11404).
  + s3-net: Use talloc array in share allowedusers; (bso#11426).
  + s3-util: Compare the maximum allowed length of a NetBIOS name; (bso#11427).</changelog>
<changelog author="lmuelle@suse.com" date="1443182400">- Relocate the tmpfiles.d directory to the client package; (bnc#947552).</changelog>
<changelog author="lmuelle@suse.com" date="1444737600">- Update to 4.1.21.
  + Avoid quoting problems in user's DNs; (bso#11488).</changelog>
<changelog author="lmuelle@suse.com" date="1444996800">- Fix 100% CPU in winbindd when logging in with "user must change password on
  next logon"; (bso#11038).</changelog>
<changelog author="nopower@suse.com" date="1445515200">- Prevent null pointer access in samlogon fallback when security
  credentials are null; (bnc#949022).</changelog>
<changelog author="nopower@suse.com" date="1446638400">- Ensure attempt to ssh into locked account  triggers
  "Your account is disabled....." to the console; (bnc#953382).</changelog>
<changelog author="lmuelle@suse.com" date="1447502400">- Cleanup and enhance the pidl sub package.</changelog>
<changelog author="lmuelle@suse.com" date="1449835200">- Update to 4.1.22.
  + Malicious request can cause Samba LDAP server to hang, spinning using CPU;
    CVE-2015-3223; (bso#11325); (bnc#958581).
  + Remote read memory exploit in LDB; CVE-2015-5330; (bso#11599);
    (bnc#958586).
  + Insufficient symlink verification (file access outside the share);
    CVE-2015-5252; (bso#11395); (bnc#958582).
  + No man in the middle protection when forcing smb encryption on the client
    side; CVE-2015-5296; (bso#11536); (bnc#958584).
  + Currently the snapshot browsing is not secure thru windows previous version
    (shadow_copy2); CVE-2015-5299; (bso#11529); (bnc#958583).
  + Fix Microsoft MS15-096 to prevent machine accounts from being changed into
    user accounts; CVE-2015-8467; (bso#11552); (bnc#958585).
  + Fix remote DoS in Samba (AD) LDAP server; CVE-2015-7540; (bso#9187);
    (bnc#958580).</changelog>
<changelog author="lmuelle@suse.com" date="1452513600">- Prevent access denied if the share path is "/"; (bso#11647); (bnc#960249).</changelog>
<changelog author="lmuelle@suse.com" date="1452686400">- Remove autoconf build-time requirement.</changelog>
<changelog author="lmuelle@suse.com" date="1452859200">- Add quotes around path of update-apparmor-samba-profile; (bnc#962177).</changelog>
<changelog author="mkubecek@suse.cz" date="1460462400">- upgrade to version 4.2.4
- A man-in-the-middle can downgrade NTLMSSP authentication;
  CVE-2016-2110; (bso#11688); (bsc#973031).
- Domain controller netlogon member computer can be spoofed;
  CVE-2016-2111; (bso#11749); (bsc#973032).
- LDAP conenctions vulnerable to downgrade and  MITM attack;
  CVE-2016-2112; (bso#11644); (bsc#973033).
- TLS certificate validation missing; CVE-2016-2113; (bso#11752);
  (bsc#973034).
- Named pipe IPC vulnerable to MITM attacks; CVE-2016-2115;
  (bso#11756); (bsc#973036).
- "Badlock" DCERPC impersonation of authenticated account possible;
  CVE-2016-2118; (bso#11804); (bsc#971965).
- DCERPC server and client vulnerable to DOS and MITM attacks;
  CVE-2015-5370; (bso#11344); (bsc#936862).</changelog>

</package>
<package pkgid="331a36392ffa5b5bf0ca54fe7db5b2b435ce65f1edda92f67aa598d3f19be516" name="cups" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>

</package>
<package pkgid="73fbac04a376e70fbbebc7ff1cc732cd9779881f695500905fd05b8865a8e72e" name="cups" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>

</package>
<package pkgid="b34dcea866613134543758ea147bdfa16de3885325b9650ca6694e1b839a6de3" name="cups" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.20.1"/>

<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
<changelog author="jsmeix@suse.de" date="1429704000">- str4609.CVE-2015-1158.CVE-2015-1159.CUPS-1.5.4.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bugzilla.suse.com bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>

</package>
<package pkgid="dc0f92d0191cd38e9d7e20d99eb1b022fa0fa2415a61dae8af7d5d257f6bb6f8" name="cups" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322913600">- Update systemd patch to a newer version that uses
  libsystemd-daemon instead of bundling sd-daemon wrappers.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>

</package>
<package pkgid="80a3c39d32b00bbefd6f74767b32f3ef8aacf2e02306639d9916c477529737eb" name="cups" arch="src">
    <version epoch="0" ver="1.5.4" rel="12.13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>

</package>
<package pkgid="f78123147fc5ab9b2c481383e09e37b2d07e45e8e0075196ee261ca97dd1bd6b" name="cups" arch="src">
    <version epoch="0" ver="1.5.4" rel="12.17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>

</package>
<package pkgid="7bd70f9ba67ced5c9457086aaabf4924afc1b8cc61ebdb71250cf299dbbbec5f" name="cups" arch="src">
    <version epoch="0" ver="1.5.4" rel="12.20.1"/>

<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
<changelog author="jsmeix@suse.de" date="1429704000">- str4609.CVE-2015-1158.CVE-2015-1159.CUPS-1.5.4.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bugzilla.suse.com bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>

</package>
<package pkgid="57178b0be759f78fa3693fea68580f98141eb6a9f18ae43fac511cab8b739d64" name="cups" arch="src">
    <version epoch="0" ver="1.5.4" rel="12.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322913600">- Update systemd patch to a newer version that uses
  libsystemd-daemon instead of bundling sd-daemon wrappers.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>

</package>
<package pkgid="6e41b657392a9c62e1f4db9abb69dfbc4458492c2aa1b51705412bc461e1d9f2" name="cups" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>

</package>
<package pkgid="07c41686e8cc665b7dc5982e7a89423dc2d8f99d7c06d496234bd76e3921e50b" name="cups" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>

</package>
<package pkgid="e3cb0afb8971c3adbeb983b770deba7fe64a4b240739a32dea4583abe21cfd9a" name="cups" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.20.1"/>

<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
<changelog author="jsmeix@suse.de" date="1429704000">- str4609.CVE-2015-1158.CVE-2015-1159.CUPS-1.5.4.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bugzilla.suse.com bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>

</package>
<package pkgid="597e5446fe8566ba1b98719dce7cf495069cafc68c461a343f721869018e75e8" name="cups" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322913600">- Update systemd patch to a newer version that uses
  libsystemd-daemon instead of bundling sd-daemon wrappers.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>

</package>
<package pkgid="e9a54e4300987208d971014875dc58d54fd68760bc752b5ce2e89b0e81f70ef2" name="cups-client" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>

</package>
<package pkgid="ac7112c3df2ffc7c4c3854ca061331cc8049417e141bcee0021d92e95851a495" name="cups-client" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>

</package>
<package pkgid="57ed6fa6bbac7f52a6e45df084be7072ed1509a52bc15f47405c3e41b62dbcc2" name="cups-client" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.20.1"/>

<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
<changelog author="jsmeix@suse.de" date="1429704000">- str4609.CVE-2015-1158.CVE-2015-1159.CUPS-1.5.4.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bugzilla.suse.com bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>

</package>
<package pkgid="f1761192fd7f428975d63b087aee47fcf870d5038d5d11169beb845bc0236245" name="cups-client" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322913600">- Update systemd patch to a newer version that uses
  libsystemd-daemon instead of bundling sd-daemon wrappers.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>

</package>
<package pkgid="2b0b676eebd13897fb54c122cbbcae5cff6d68031b026c0a4fda7da012b19f33" name="cups-client" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>

</package>
<package pkgid="c7c8d3a7075d1e07f2199a8d4fc9683c44f73611e4d095e396490a54323bcb71" name="cups-client" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>

</package>
<package pkgid="5cdb8be207c45fee57b67d2edb9bf0a931f250085bbcadd7c85ac837e1c43891" name="cups-client" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.20.1"/>

<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
<changelog author="jsmeix@suse.de" date="1429704000">- str4609.CVE-2015-1158.CVE-2015-1159.CUPS-1.5.4.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bugzilla.suse.com bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>

</package>
<package pkgid="71c183d3c5d3360986328d2a344c07879dd5f8a6d390eec3e2506e31e28bb537" name="cups-client" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322913600">- Update systemd patch to a newer version that uses
  libsystemd-daemon instead of bundling sd-daemon wrappers.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>

</package>
<package pkgid="30e8f27ec7c35a2ec88d7bdbbca65b3f481328365c549996c79c820f75a99063" name="cups-ddk" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>

</package>
<package pkgid="0aacc88ff60a58cb50ec327639d5f1fc6250cb5559c2303026b0f5cfdac92f2a" name="cups-ddk" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>

</package>
<package pkgid="519f332849852366e6450e866f0d45eec0b4fe6c6f7db0a420b66a688f30c931" name="cups-ddk" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.20.1"/>

<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
<changelog author="jsmeix@suse.de" date="1429704000">- str4609.CVE-2015-1158.CVE-2015-1159.CUPS-1.5.4.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bugzilla.suse.com bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>

</package>
<package pkgid="113439e2b451c158923b71f2e60184566310e4c7989f5275877f293723bdb326" name="cups-ddk" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322913600">- Update systemd patch to a newer version that uses
  libsystemd-daemon instead of bundling sd-daemon wrappers.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>

</package>
<package pkgid="5f3a8a832cf8264feeb9ef6b3f4922929ac643a820bb4bac84149ac555aa6ecf" name="cups-ddk" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>

</package>
<package pkgid="3f7ef7cd9355353a59096f4a9e1baf695149d2090e69063f50f749560bd76dc4" name="cups-ddk" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>

</package>
<package pkgid="91bf89b6fc44cd23f01f62dfb82b8070813367f60aa4a05a1728df3b3748608d" name="cups-ddk" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.20.1"/>

<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
<changelog author="jsmeix@suse.de" date="1429704000">- str4609.CVE-2015-1158.CVE-2015-1159.CUPS-1.5.4.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bugzilla.suse.com bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>

</package>
<package pkgid="1df28b2115b6f0030432b585940aec9c1d3e02d549b3152511bbb5eb884737ce" name="cups-ddk" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322913600">- Update systemd patch to a newer version that uses
  libsystemd-daemon instead of bundling sd-daemon wrappers.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>

</package>
<package pkgid="b605a94d03ab5eb717437e00b201e43e4f9b4fed90897242184b8e0324780815" name="cups-devel" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>

</package>
<package pkgid="c0c1999606f13583b2b4505bba8de765534da35f045ecc8a9fc12585bec9f25a" name="cups-devel" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>

</package>
<package pkgid="448b271e88bca9946b670a12dacf4bb9a0fe438211faa07c12d6132f3631a195" name="cups-devel" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.20.1"/>

<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
<changelog author="jsmeix@suse.de" date="1429704000">- str4609.CVE-2015-1158.CVE-2015-1159.CUPS-1.5.4.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bugzilla.suse.com bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>

</package>
<package pkgid="8e6617d8769d621841807a8b5867b5a5b75c8f4cf36b20b6134301783fc2877e" name="cups-devel" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322913600">- Update systemd patch to a newer version that uses
  libsystemd-daemon instead of bundling sd-daemon wrappers.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>

</package>
<package pkgid="9772f58d2642dba18af14d0f7566e01a7debcd6b91354ff96d6847e0496f845d" name="cups-devel" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>

</package>
<package pkgid="ca6c025ad09ec2c4b35dc1cac2f3ebab992c13c0c3ff2efda11ddf7a0c996afb" name="cups-devel" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>

</package>
<package pkgid="0648a543a882ad2788af9317d03055b04f219cb8fecbb43931a23f27f8b2695f" name="cups-devel" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.20.1"/>

<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
<changelog author="jsmeix@suse.de" date="1429704000">- str4609.CVE-2015-1158.CVE-2015-1159.CUPS-1.5.4.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bugzilla.suse.com bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>

</package>
<package pkgid="3560e6bb2eef674d3eb6b3be5a0cfbf3aeb2caeab4cfcaaa2f45cc0e7ec1b166" name="cups-devel" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322913600">- Update systemd patch to a newer version that uses
  libsystemd-daemon instead of bundling sd-daemon wrappers.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>

</package>
<package pkgid="6b9a569b14f510e3458eb67fd45ce1df48cd0bcb78dd1b4a2340663b05a46020" name="cups-libs" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>

</package>
<package pkgid="e1d77e35f3716286dfdb2cc5aabb6adea80930e65f64568251826ee69ae6c7a3" name="cups-libs" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>

</package>
<package pkgid="2c63443488dbbede1665394c1c05c119df805a27dd38acdf17fbeef4cd90a9c6" name="cups-libs" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.20.1"/>

<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
<changelog author="jsmeix@suse.de" date="1429704000">- str4609.CVE-2015-1158.CVE-2015-1159.CUPS-1.5.4.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bugzilla.suse.com bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>

</package>
<package pkgid="b102000afc1d56d49b299cc141a06e4d544b8f745d1102f7e68114362eeae2f5" name="cups-libs" arch="i586">
    <version epoch="0" ver="1.5.4" rel="12.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322913600">- Update systemd patch to a newer version that uses
  libsystemd-daemon instead of bundling sd-daemon wrappers.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>

</package>
<package pkgid="2cce3a667db36068004c8a647d14b83aae6aee8bf22b136f0dc1a7a4d89418d4" name="cups-libs" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>

</package>
<package pkgid="066448f9a107fc72158533fffdd72fd074b53d41b41be32132de7a1bae9badf2" name="cups-libs" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>

</package>
<package pkgid="334a19dfb86bac5ef8df64f0d3549bcf3f899af346219f3596d9d114b54f7e65" name="cups-libs" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.20.1"/>

<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
<changelog author="jsmeix@suse.de" date="1429704000">- str4609.CVE-2015-1158.CVE-2015-1159.CUPS-1.5.4.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bugzilla.suse.com bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>

</package>
<package pkgid="3a389ae992b5d36c556b8d71fe0de451f68a7b0be4bfc8d0ecf9d7e2819fff51" name="cups-libs" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322913600">- Update systemd patch to a newer version that uses
  libsystemd-daemon instead of bundling sd-daemon wrappers.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>

</package>
<package pkgid="839fcd19cb039c7c90cf3c7341377dac83fda8d3ffc68ec54377ec271d6ac37e" name="cups-libs-32bit" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.13.1"/>

<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>

</package>
<package pkgid="148d0d1d7f8145bb4da3b220b592e16d36435f71a1290da253459e0e56515e12" name="cups-libs-32bit" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.17.1"/>

<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>

</package>
<package pkgid="8e6e4988194ea57e6d11f6dba908db1f50bbc8b816e532ad3f3e5f1c4250d766" name="cups-libs-32bit" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.20.1"/>

<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>
<changelog author="meissner@suse.com" date="1393934400">- cups-0003-systemd-only-listen-on-localhost-for-socket-activation.patch
  Remove all network listening from the cups.socket file, leave this
  to the server process itself. (bnc#857372)
  For starting the server by default instead of on-demand,
  please run "systemctl enable cups.service".</changelog>
<changelog author="jsmeix@suse.de" date="1424174400">- str4551.CVE-2014-9679.CUPS-1.5.4.patch
  fixes a possible buffer overflow in filter/raster.c
  (CUPS STR#4551 CVE-2014-9679 bugzilla.suse.com bsc#917799).</changelog>
<changelog author="jsmeix@suse.de" date="1429704000">- str4609.CVE-2015-1158.CVE-2015-1159.CUPS-1.5.4.patch
  fixes a possible privilege escalation via cross-site scripting
  and bad print job submission used to replace cupsd.conf on server
  (CUPS STR#4609 CERT-VU-810572 CVE-2015-1158 CVE-2015-1159
  bugzilla.suse.com bsc#924208).
  In general it is crucial to limit access to CUPS to trustworthy
  users who do not misuse their permission to submit print jobs
  which means to upload arbitrary data onto the CUPS server, see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>

</package>
<package pkgid="ead1239900ad5bede1da09fd49f3c1ecdc83ae0feb9afcbb1aaee2e7d5fc3987" name="cups-libs-32bit" arch="x86_64">
    <version epoch="0" ver="1.5.4" rel="12.4.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322913600">- Update systemd patch to a newer version that uses
  libsystemd-daemon instead of bundling sd-daemon wrappers.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1324123200">- Update systemd patch, Bind to datagram socket as well in
  systemd cups.socket unit file, to prevent that port being
  stolen by another service (from RH).
- There is no need to use -fno-strict-aliasing
  in cflags any longer.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326196800">- Use explicit buildrequires on the needed libraries.
  otherwise build will fail after libtiff-devel deps cleanup
- Cleanup requires of -devel package, which only needs glibc-devel
- Fix up, cups-config script, which with option --libs adds:
  LIBS="-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto
  - lz -lpthread -lm -lcrypt "
  IMGLIBS="-ltiff -ljpeg -lpng"
  This only makes sense when using static linking but we don't ship
  static libraries and will only help bloating dependant packages.</changelog>
<changelog author="jsmeix@suse.de" date="1328616000">- Upgraded to CUPS 1.5.2 (mainly a bugfix release). This release
  fixes a number of printing, encryption, and ipptool issues.
  Excerpt:
  * The scheduler incorrectly used free() on a POSIX ACL value,
    which could cause a crash (STR #3970).
  * Encryption was broken with OpenSSL (probably STR #3933
    and bnc#739410 ).
  * Badly formed GIF files could cause the image filters
    to crash (STR #3914).
  For a complete list see the CHANGES.txt file.</changelog>
<changelog author="jsmeix@suse.de" date="1334059200">- In cups.spec only "Requires: ghostscript" but no longer require
  ghostscript-fonts-std in cups.spec because in ghostscript.spec
  there is already "Requires: ghostscript-fonts-std"
  (related to openSUSE Bugzilla bnc#735824).
- In cups.spec remove the Obsoletes/Provides cups-SUSE-ppds-dat
  because cups-SUSE-ppds-dat.rpm existed only up to SLE10
  but it does no longer exist since 11.1/SLE11
  and CUPS 1.5.x is not provided for SLE10.
- Use traditional bash scriptlets for post/postun with
  an explicite "exit 0" line at the end to be fail safe and
  therefore also "PreReq: /sbin/ldconfig" explicitly for the
  cups-libs sub-package, see the "Shared_libraries" section in
  http://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets</changelog>
<changelog author="jsmeix@suse.de" date="1334232000">- No longer require Ghostscript but only "Recommends: ghostscript"
  because the Ghostscript device "cups" is needed by several CUPS
  filters (in particular the "rasterto..." filters) but those
  filters are not used on all systems (e.g. on a print server
  with only "raw" queues) so that a weak Recommends fits better.
  Furthermore this avoids a build dependency cycle between the
  main-packages cups and ghostscript.
- No longer require /usr/bin/pdftops but only a "Recommends"
  because the CUPS filter /usr/lib/cups/filter/pdftops
  (which calls /usr/bin/pdftops) is not used on all systems
  (e.g. on a print server with only "raw" queues) so that
  a weak Recommends fits better.</changelog>
<changelog author="jsmeix@suse.de" date="1337169600">- Upgraded to CUPS 1.5.3 (mainly a bugfix release) that fixes
  a number of PostScript, SSL, authenticated printing,
  and networking issues.
  Excerpt:
  * The scheduler could crash if a PPD file contained
    an invalid paper size (STR #4049).
  * Missing localizations caused empty output (STR #4033).
  * Changed how timeouts are implemented in the LPD backend
    (STR #4013).
  * The default InputSlot setting was never used (STR #3957).
  * Fixed the IPP backend's handling of HTTP/1.0 compatibility
    (STR #3988).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch reverts cups-ssl.m4 to what
  it was in CUPS 1.5.2 so that autoconf produces a syntactically
  correct configure script otherwise "bash -n configure" fails
  with "syntax error: unexpected end of file",
  see http://www.cups.org/str.php?L4084</changelog>
<changelog author="jsmeix@suse.de" date="1343822400">- Save /etc/cups/cupsd.conf and /etc/cups/cupsd.conf.default
  from becoming hardlinked via the fdupes run in cups.spec
  (see the 'Wed Aug 26 21:43:03 CEST 2009' entry below)
  by making their content different and at the same time
  fix the misleading comment (openSUSE Bugzilla bnc#773971).
- Minor clean-up in cups.spec (the "Remove unpackaged files"
  via "rm -rf &lt;some_man-pages&gt;") is no longer needed because
  those man pages are no longer installed.</changelog>
<changelog author="cfarrell@suse.com" date="1346760000">- license update: SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1
  Apple grant an openssl linking exception (and an exception for
  linking on Apple owned operating systems).</changelog>
<changelog author="mmeister@suse.com" date="1348747200">- Version upgrade to 1.5.4 (mainly a bugfix release) that fixes
  some IPP printing issues.
  Excerpt:
  * The IPP backend no longer tries to get the job status for
    printers that do not implement the required operation
    (STR #4083).
  * Sending a document in an unsupported format to an IPP printer
    now automatically cancels the job (STR #4093).
  * The IPP backend now treats the client-error-not-possible
    status code as a job history issue, allowing IPP printing to
    Windows to work(STR #4047).
  For a complete list see the CHANGES.txt file.
- revert_cups-ssl.m4_to_1.5.2.patch is now obsolete because of
  an upstream fix.</changelog>
<changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environment (to break cycle)</changelog>
<changelog author="fcrozat@suse.com" date="1352808000">- Add cups-provides-cupsd.service: ensure cupsd.service is provided
  by cups.service.</changelog>
<changelog author="jsmeix@suse.de" date="1356004800">- Added "BuildRequires: poppler-tools" which installs
  /usr/bin/pdftops for the build-time check in cups-pdf.m4
  regarding HAVE_PDFTOPS_WITH_ORIGPAGESIZE that makes sure
  that the CUPS filter /usr/lib/cups/filter/pdftops calls
  /usr/bin/pdftops with "-origpagesizes" otherwise it would
  result wrong PostScript output for poppler &gt; 0.18.0 (bnc#776080)
  see also https://www.cups.org/str.php?L3689 (STR #3689).
- Changed 'configure --with-pdftops=/usr/bin/pdftops' back to
  the upstream default 'configure --with-pdftops=pdftops'
  (compare the entry dated 'Fri Jul 31 15:08:41 CEST 2009').
- Removed leftover and since a longer time obsolete
  "BuildRequires: avahi-compat-mDNSResponder-devel".</changelog>
<changelog author="rmilasan@suse.com" date="1359547200">- Move everything (pid, lock, socket files) to /run only for 12.3.
  Added: cups-move-everything-to-run.patch
  See also
  http://lists.opensuse.org/opensuse-factory/2013-01/msg00578.html</changelog>
<changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="jsmeix@suse.de" date="1372248000">- Use BuildRequires krb5-mini-devel to avoid this build cycle:
  cups -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; gtk2 -&gt; cups
  (according to OBS request 180870).
  Because krb5-mini-devel is not available for SLE11
  krb5-devel must still be used for SLE11 builds
  (required addition to OBS request 180870).</changelog>
<changelog author="jsmeix@suse.de" date="1372248001">- Changed Source0 URL from
  http://ftp.easysw.com/pub/cups/1.5.4/cups-1.5.4-source.tar.bz2
  to its currently valid location
  http://www.cups.org/software/1.5.4/cups-1.5.4-source.tar.bz2
  so that the factory-auto check script does no longer error out
  with "Failed to download ...  Source URLs are not valid."</changelog>
<changelog author="stefan.bruens@rwth-aachen.de" date="1372420800">- Fix endless loop if IPP server does not accect job (bnc#827418)
  see also https://www.cups.org/str.php?L4190 (STR#4190,
  patch str4190.patch).</changelog>
<changelog author="jsmeix@suse.de" date="1373025600">- cups-polld_avoid_busy_loop.patch avoids any possible busy loop
  in cups-polld in case of unusual issues by sleeping interval
  seconds (bnc#828228).</changelog>
<changelog author="jsmeix@suse.de" date="1389700800">- cups-0002-systemd-listen-only-on-localhost-for-socket-activation.patch
  fixes the systemd cups.socket file so that systemd listens only
  on localhost (bnc#857372).</changelog>

</package>
<package pkgid="f1f847b026d2b62399834be0600f6ef20a07f7d81a5d88e471209d62414b4dd4" name="curl" arch="i586">
    <version epoch="0" ver="7.32.0" rel="2.12.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322654400">- Use O_CLOEXEC in library code.</changelog>
<changelog author="mmarek@suse.cz" date="1325073600">- Package /usr/share/aclocal to avoid build dependency on automake.</changelog>
<changelog author="dmueller@suse.de" date="1326888000">- use the rpmoptflags unconditionally, don't do own compiler flag
  magic. Fixes debuginfo package built</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>

</package>
<package pkgid="92b4d63105b74c87db7ccf9139828ae798da5f617741904b37ee877a6cd61184" name="curl" arch="i586">
    <version epoch="0" ver="7.32.0" rel="2.16.1"/>

<changelog author="mmarek@suse.cz" date="1325073600">- Package /usr/share/aclocal to avoid build dependency on automake.</changelog>
<changelog author="dmueller@suse.de" date="1326888000">- use the rpmoptflags unconditionally, don't do own compiler flag
  magic. Fixes debuginfo package built</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>

</package>
<package pkgid="fb1750a8ad1a8f56b3243caa95a6d036089bf537b0d1eb67f075c5ef30fe1b42" name="curl" arch="i586">
    <version epoch="0" ver="7.32.0" rel="2.23.1"/>

<changelog author="dmueller@suse.de" date="1326888000">- use the rpmoptflags unconditionally, don't do own compiler flag
  magic. Fixes debuginfo package built</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>

</package>
<package pkgid="168ab94675982d81529d3186f78d1716baf306991b4e8adf4c3efdc560e30d41" name="curl" arch="i586">
    <version epoch="0" ver="7.32.0" rel="2.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>

</package>
<package pkgid="3a93831d684e52e17a83283654aa1ef893a1d7eb3ef2db6658ae3eb18695a8d6" name="curl" arch="i586">
    <version epoch="0" ver="7.32.0" rel="2.31.1"/>

<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>

</package>
<package pkgid="baff269b53f745aa645cc20d41d2364d0d7a5d99da89f168f2657ba556652241" name="curl" arch="i586">
    <version epoch="0" ver="7.32.0" rel="2.4.1"/>

<changelog author="jengelh@medozas.de" date="1322568000">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322654400">- Use O_CLOEXEC in library code.</changelog>
<changelog author="mmarek@suse.cz" date="1325073600">- Package /usr/share/aclocal to avoid build dependency on automake.</changelog>
<changelog author="dmueller@suse.de" date="1326888000">- use the rpmoptflags unconditionally, don't do own compiler flag
  magic. Fixes debuginfo package built</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>

</package>
<package pkgid="d84bc079761e8970a3815bb4853581047b5b2e2d38290f5eea40f942943667be" name="curl" arch="i586">
    <version epoch="0" ver="7.40.0" rel="2.35.1"/>

<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>

</package>
<package pkgid="a0271958b97953bfc9b29a2314ab0f9c4c38122be2eee7cd4df3f9174b36275d" name="curl" arch="i586">
    <version epoch="0" ver="7.42.0" rel="2.38.1"/>

<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>

</package>
<package pkgid="6cf209d0bd9c6cb6b877e660158884f62025caf886092c4f753295203d6bd38e" name="curl" arch="i586">
    <version epoch="0" ver="7.42.1" rel="2.42.1"/>

<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>
<changelog author="vcizek@suse.com" date="1430308800">- update to 7.42.1
  * fixes CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
- rename curl-devel to libcurl-devel in baselibs.conf</changelog>

</package>
<package pkgid="f6ad1d157b47e39fd85e984644ce31bb7781a994737ce368c8052d3d576917cb" name="curl" arch="i586">
    <version epoch="0" ver="7.42.1" rel="2.47.1"/>

<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>
<changelog author="vcizek@suse.com" date="1430308800">- update to 7.42.1
  * fixes CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
- rename curl-devel to libcurl-devel in baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1434024000">- enable metalink support (boo#851126)</changelog>
<changelog author="mvetter@suse.com" date="1434542400">- Applying patch to fix CVE-2015-3236 (bsc#934501)</changelog>
<changelog author="mvetter@suse.com" date="1434542401">- Applying patch to fix CVE-2015-3237 (bsc#934502)</changelog>

</package>
<package pkgid="d7db20672a48fbda9675f5f5baf2625ea5e44325f57e8152d181fb5bc610bda4" name="curl" arch="i586">
    <version epoch="0" ver="7.42.1" rel="2.50.1"/>

<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>
<changelog author="vcizek@suse.com" date="1430308800">- update to 7.42.1
  * fixes CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
- rename curl-devel to libcurl-devel in baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1434024000">- enable metalink support (boo#851126)</changelog>
<changelog author="mvetter@suse.com" date="1434542400">- Applying patch to fix CVE-2015-3236 (bsc#934501)</changelog>
<changelog author="mvetter@suse.com" date="1434542401">- Applying patch to fix CVE-2015-3237 (bsc#934502)</changelog>
<changelog author="wr@rosenauer.org" date="1454068800">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch
- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch</changelog>

</package>
<package pkgid="e0d1578ec440ef3b4c6f1163cb80fed41f34f58d548ab138fca13fbf0b33fbf8" name="curl" arch="i586">
    <version epoch="0" ver="7.42.1" rel="2.53.2"/>

<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>
<changelog author="vcizek@suse.com" date="1430308800">- update to 7.42.1
  * fixes CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
- rename curl-devel to libcurl-devel in baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1434024000">- enable metalink support (boo#851126)</changelog>
<changelog author="mvetter@suse.com" date="1434542400">- Applying patch to fix CVE-2015-3236 (bsc#934501)</changelog>
<changelog author="mvetter@suse.com" date="1434542401">- Applying patch to fix CVE-2015-3237 (bsc#934502)</changelog>
<changelog author="wr@rosenauer.org" date="1454068800">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch
- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="0ade26ff57216f9963e388b8f475efd6f5f4f0911cd488f6564d42f7233b8b53" name="curl" arch="src">
    <version epoch="0" ver="7.32.0" rel="2.12.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322654400">- Use O_CLOEXEC in library code.</changelog>
<changelog author="mmarek@suse.cz" date="1325073600">- Package /usr/share/aclocal to avoid build dependency on automake.</changelog>
<changelog author="dmueller@suse.de" date="1326888000">- use the rpmoptflags unconditionally, don't do own compiler flag
  magic. Fixes debuginfo package built</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>

</package>
<package pkgid="f992b437ca429f496b640c2395980657ae8fbe7ae694bfc87dfa8e5a7b21778e" name="curl" arch="src">
    <version epoch="0" ver="7.32.0" rel="2.16.1"/>

<changelog author="mmarek@suse.cz" date="1325073600">- Package /usr/share/aclocal to avoid build dependency on automake.</changelog>
<changelog author="dmueller@suse.de" date="1326888000">- use the rpmoptflags unconditionally, don't do own compiler flag
  magic. Fixes debuginfo package built</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>

</package>
<package pkgid="acf6eff50dc0677012b7fc7af83e2d8ec73cddc568a23b1b0801a63348e715a0" name="curl" arch="src">
    <version epoch="0" ver="7.32.0" rel="2.23.1"/>

<changelog author="dmueller@suse.de" date="1326888000">- use the rpmoptflags unconditionally, don't do own compiler flag
  magic. Fixes debuginfo package built</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>

</package>
<package pkgid="aeb2bd5bcf8a8eab694d4b1960d51426118dd71ef2503f961e5d69263906e9a8" name="curl" arch="src">
    <version epoch="0" ver="7.32.0" rel="2.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>

</package>
<package pkgid="6cc6e6e2200549331b8b04391b0b1f6c9162b2c9916ef22fff94daf20f48a12c" name="curl" arch="src">
    <version epoch="0" ver="7.32.0" rel="2.31.1"/>

<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>

</package>
<package pkgid="f18a5ce4d701c133c7a2652f6fd0b4f0853988b7df97b5cd3e2edb63b4857adf" name="curl" arch="src">
    <version epoch="0" ver="7.32.0" rel="2.4.1"/>

<changelog author="jengelh@medozas.de" date="1322568000">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322654400">- Use O_CLOEXEC in library code.</changelog>
<changelog author="mmarek@suse.cz" date="1325073600">- Package /usr/share/aclocal to avoid build dependency on automake.</changelog>
<changelog author="dmueller@suse.de" date="1326888000">- use the rpmoptflags unconditionally, don't do own compiler flag
  magic. Fixes debuginfo package built</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>

</package>
<package pkgid="0c017bebd6c2ff86a4429b000020a64f80b9a7c77da2626967ec9a5f2a1d2dce" name="curl" arch="src">
    <version epoch="0" ver="7.40.0" rel="2.35.1"/>

<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>

</package>
<package pkgid="4eaf91b68e07be5abf7a7c1c12a98de8e4e545ff6161d2a885ab4789177f63a9" name="curl" arch="src">
    <version epoch="0" ver="7.42.0" rel="2.38.1"/>

<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>

</package>
<package pkgid="89a51c7cf6f4b42dbbee96582cc35650fdf9f745012e3491b158189193a5a661" name="curl" arch="src">
    <version epoch="0" ver="7.42.1" rel="2.42.1"/>

<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>
<changelog author="vcizek@suse.com" date="1430308800">- update to 7.42.1
  * fixes CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
- rename curl-devel to libcurl-devel in baselibs.conf</changelog>

</package>
<package pkgid="39c8c7cc83547cb3a75cda7f50e3e6981f11eeb84446648927e080744af71a15" name="curl" arch="src">
    <version epoch="0" ver="7.42.1" rel="2.47.1"/>

<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>
<changelog author="vcizek@suse.com" date="1430308800">- update to 7.42.1
  * fixes CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
- rename curl-devel to libcurl-devel in baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1434024000">- enable metalink support (boo#851126)</changelog>
<changelog author="mvetter@suse.com" date="1434542400">- Applying patch to fix CVE-2015-3236 (bsc#934501)</changelog>
<changelog author="mvetter@suse.com" date="1434542401">- Applying patch to fix CVE-2015-3237 (bsc#934502)</changelog>

</package>
<package pkgid="4e34fe189ae7639eaa365c01a5cd0b7fab4ebe883698379ab5fe37effdac34c4" name="curl" arch="src">
    <version epoch="0" ver="7.42.1" rel="2.50.1"/>

<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>
<changelog author="vcizek@suse.com" date="1430308800">- update to 7.42.1
  * fixes CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
- rename curl-devel to libcurl-devel in baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1434024000">- enable metalink support (boo#851126)</changelog>
<changelog author="mvetter@suse.com" date="1434542400">- Applying patch to fix CVE-2015-3236 (bsc#934501)</changelog>
<changelog author="mvetter@suse.com" date="1434542401">- Applying patch to fix CVE-2015-3237 (bsc#934502)</changelog>
<changelog author="wr@rosenauer.org" date="1454068800">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch
- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch</changelog>

</package>
<package pkgid="7bf8db32cccb7fd13489a8ba3ae0bb56769f1575bc2d60b272d8fe3cb2bc2e4d" name="curl" arch="src">
    <version epoch="0" ver="7.42.1" rel="2.53.2"/>

<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>
<changelog author="vcizek@suse.com" date="1430308800">- update to 7.42.1
  * fixes CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
- rename curl-devel to libcurl-devel in baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1434024000">- enable metalink support (boo#851126)</changelog>
<changelog author="mvetter@suse.com" date="1434542400">- Applying patch to fix CVE-2015-3236 (bsc#934501)</changelog>
<changelog author="mvetter@suse.com" date="1434542401">- Applying patch to fix CVE-2015-3237 (bsc#934502)</changelog>
<changelog author="wr@rosenauer.org" date="1454068800">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch
- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="b8f6c63470a534c9b21f5f0f972474f7ff1e138d0caf86ed3773132eeecef665" name="curl" arch="x86_64">
    <version epoch="0" ver="7.32.0" rel="2.12.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322654400">- Use O_CLOEXEC in library code.</changelog>
<changelog author="mmarek@suse.cz" date="1325073600">- Package /usr/share/aclocal to avoid build dependency on automake.</changelog>
<changelog author="dmueller@suse.de" date="1326888000">- use the rpmoptflags unconditionally, don't do own compiler flag
  magic. Fixes debuginfo package built</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>

</package>
<package pkgid="62b72e6d4ec89a39fc0d0ffa5e024e4ed36ef3444fe079a8dd96b9651a9022c6" name="curl" arch="x86_64">
    <version epoch="0" ver="7.32.0" rel="2.16.1"/>

<changelog author="mmarek@suse.cz" date="1325073600">- Package /usr/share/aclocal to avoid build dependency on automake.</changelog>
<changelog author="dmueller@suse.de" date="1326888000">- use the rpmoptflags unconditionally, don't do own compiler flag
  magic. Fixes debuginfo package built</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>

</package>
<package pkgid="d15a591e26917ffc90dcdc9714c8fa6f1a13807e42e835a049f4e33ac9dfaf7a" name="curl" arch="x86_64">
    <version epoch="0" ver="7.32.0" rel="2.23.1"/>

<changelog author="dmueller@suse.de" date="1326888000">- use the rpmoptflags unconditionally, don't do own compiler flag
  magic. Fixes debuginfo package built</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>

</package>
<package pkgid="b857171b71e58d18ab1f19870c46bb950a79b4c67b1339327b3a40fa25f74ac4" name="curl" arch="x86_64">
    <version epoch="0" ver="7.32.0" rel="2.27.1"/>

<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>

</package>
<package pkgid="47a0d21226d3b9c37baf3a567965c034aac2e76ffd92d2c8dcb6de2aea638aa2" name="curl" arch="x86_64">
    <version epoch="0" ver="7.32.0" rel="2.31.1"/>

<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>

</package>
<package pkgid="5e3aa871dc58892e5b53659c34bdbe14a1ebd0772b2c52a3956100c246dde6cd" name="curl" arch="x86_64">
    <version epoch="0" ver="7.32.0" rel="2.4.1"/>

<changelog author="jengelh@medozas.de" date="1322568000">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322654400">- Use O_CLOEXEC in library code.</changelog>
<changelog author="mmarek@suse.cz" date="1325073600">- Package /usr/share/aclocal to avoid build dependency on automake.</changelog>
<changelog author="dmueller@suse.de" date="1326888000">- use the rpmoptflags unconditionally, don't do own compiler flag
  magic. Fixes debuginfo package built</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version curl 7.24.0
- refresh patches to fix broken build</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328702400">- Problem with the c-ares backend, workaround for [bnc#745534]</changelog>
<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>

</package>
<package pkgid="8d84042268da43e688b0672e44eecf7015707e6b6e32cea6e124a027f151df6f" name="curl" arch="x86_64">
    <version epoch="0" ver="7.40.0" rel="2.35.1"/>

<changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 7.25.0
  * Added CURLOPT_TCP_KEEPALIVE, CURLOPT_TCP_KEEPIDLE,
  CURLOPT_TCP_KEEPINTVL
  * use new library-side TCP_KEEPALIVE options
  * Added a new CURLOPT_MAIL_AUTH option
  * Added support for --mail-auth
  * (for more see the shipped CHANGES file)</changelog>
<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>

</package>
<package pkgid="8f0220d44c8fb1b1ced62607386cdd4381d97e672937ae7c3cc6d0e249adb85d" name="curl" arch="x86_64">
    <version epoch="0" ver="7.42.0" rel="2.38.1"/>

<changelog author="dnh@opensuse.org" date="1341835200">- define _GNU_SOURCE for oS/SLES &lt;= 11.4, as O_CLOEXEC is
  defined inside a ifdef __USE_GNU</changelog>
<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>

</package>
<package pkgid="63e75df3f83ed030c481501b35c4ab5f315349c5db93f7ef68a3170f79dfc229" name="curl" arch="x86_64">
    <version epoch="0" ver="7.42.1" rel="2.42.1"/>

<changelog author="crrodriguez@opensuse.org" date="1343563200">- Curl 7.27.0
  * support metalinks
  * Add sasl authentication support
  * various bugfixes
- Fix previous change, _GNU_SOURCE --&gt; AC_USE_SYSTEM_EXTENSIONS</changelog>
<changelog author="gber@opensuse.org" date="1352030400">- added curl-ftp-prevent-the-multi-interface-from-blocking.patch in
  order to prevent the multi interface from blocking when using ftp
  and the remote end responds very slowly (sf#3579064)</changelog>
<changelog author="crrodriguez@opensuse.org" date="1353412800">- Curl 7.28.1
  * FTP: prevent the multi interface from blocking Obsoletes
  curl-ftp-prevent-the-multi-interface-from-blocking.patch
  * don't send '#' fragments when using proxy
  * OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
  * TFTP: handle resend
  * memory leak: CURLOPT_RESOLVE with multi interface
  * SSL: Several SSL-backend related fixes</changelog>
<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>
<changelog author="vcizek@suse.com" date="1430308800">- update to 7.42.1
  * fixes CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
- rename curl-devel to libcurl-devel in baselibs.conf</changelog>

</package>
<package pkgid="07ab3156b7115b62f68653c2999b34ce82923717f1fd62267eabb9a82fca8043" name="curl" arch="x86_64">
    <version epoch="0" ver="7.42.1" rel="2.47.1"/>

<changelog author="sbrabec@suse.cz" date="1354017600">- Verify GPG signature.</changelog>
<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>
<changelog author="vcizek@suse.com" date="1430308800">- update to 7.42.1
  * fixes CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
- rename curl-devel to libcurl-devel in baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1434024000">- enable metalink support (boo#851126)</changelog>
<changelog author="mvetter@suse.com" date="1434542400">- Applying patch to fix CVE-2015-3236 (bsc#934501)</changelog>
<changelog author="mvetter@suse.com" date="1434542401">- Applying patch to fix CVE-2015-3237 (bsc#934502)</changelog>

</package>
<package pkgid="bf474397684b40f271953eb33b8dd9b1d831ce2fe8aecbf7cb468c0ba961aa53" name="curl" arch="x86_64">
    <version epoch="0" ver="7.42.1" rel="2.50.1"/>

<changelog author="sbrabec@suse.cz" date="1357905600">- Break build loop and make GPG signature verification optional.</changelog>
<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>
<changelog author="vcizek@suse.com" date="1430308800">- update to 7.42.1
  * fixes CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
- rename curl-devel to libcurl-devel in baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1434024000">- enable metalink support (boo#851126)</changelog>
<changelog author="mvetter@suse.com" date="1434542400">- Applying patch to fix CVE-2015-3236 (bsc#934501)</changelog>
<changelog author="mvetter@suse.com" date="1434542401">- Applying patch to fix CVE-2015-3237 (bsc#934502)</changelog>
<changelog author="wr@rosenauer.org" date="1454068800">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch
- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch</changelog>

</package>
<package pkgid="367fbc3b8a45e8e1513eb6ffaf15100f1f2d35f69375765e3313d14ef42ab7fd" name="curl" arch="x86_64">
    <version epoch="0" ver="7.42.1" rel="2.53.2"/>

<changelog author="vcizek@suse.com" date="1360238400">- fixed CVE-2013-0249 (bnc#802411)
- refreshed patches</changelog>
<changelog author="crrodriguez@opensuse.org" date="1361102400">- Add curl-secure-getenv.patch: Use secure_getenv if available.
  libcurl might be linked to a program where "secure execution" is
  required.</changelog>
<changelog author="vcizek@suse.com" date="1365768000">- update to 7.30.0
  includes security fixes for CVE-2013-0249 and CVE-2013-1944
  (bugs bnc#814655 and bnc#802411 respectively)
  (dropped curl-CVE-2013-0249.patch)
- Changes:
  imap: Changed response tag generation to be completely unique
  imap: Added support for SASL-IR extension
  imap: Added support for the list command
  imap: Added support for the append command
  imap: Added custom request parsing
  imap: Added support to the fetch command for UID and SECTION properties
  imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  imap/pop3/smtp: Added support for the STARTTLS capability
  checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag
  Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS
    for new multi interface connection handling
  Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL
    and CURLMOPT_PIPELI NING_SERVER_BL for new pipelining control
  test: offer "automake" output and check for perl better
  always-multi: always use non-blocking internals
  imap: Added support for sasl digest-md5 authentication
  imap: Added support for sasl cram-md5 authentication
  imap: Added support for sasl ntlm authentication
  imap: Added support for sasl login authentication
  imap: Added support for sasl plain text authentication
  imap: Added support for login disabled server capability
  mk-ca-bundle: add -f, support passing to stdout and more
  writeout: -w now supports remote_ip/port and local_ip/port
- refreshed patches</changelog>
<changelog author="vcizek@suse.com" date="1372075200">- update to 7.31.0
  * includes fix for CVE-2013-2174 (bnc#824517)
  * SECURITY VULNERABILITY: curl_easy_unescape() may parse data
    beyond the end of the input buffer [26]
  * Changes:
    darwinssl: add TLS session resumption
    darwinssl: add TLS crypto authentication
    imap/pop3/smtp: Added support for ;auth= in the URL
    imap/pop3/smtp: Added support for ;auth= to CURLOPT_USERPWD
    usercertinmem.c: add example showing user cert in memory
    url: Added smtp and pop3 hostnames to the protocol detection list
    imap/pop3/smtp: Added support for enabling the SASL initial response
    curl -E: allow to use ':' in certificate nicknames</changelog>
<changelog author="coolo@suse.com" date="1372680000">- avoid cycle between curl and krb5 by using krb5-mini-devel</changelog>
<changelog author="crrodriguez@opensuse.org" date="1376308800">- curl 7.32.0
  * curl: allow timeouts to accept decimal values
  * CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
  * SIGPIPE: ignored while inside the library
  * OpenSSL: check for read errors
  * configure: automake 1.14 compatibility tweak
  * curl_multi_wait: set revents for extra fds
  * global dns cache: didn't work (regression)
  * mk-ca-bundle.1: don't install on make install</changelog>
<changelog author="vcizek@suse.com" date="1385985600">- fix CVE-2013-4545 (bnc#849596)
  = acknowledge VERIFYHOST without VERIFYPEER</changelog>
<changelog author="vcizek@suse.com" date="1389700800">- fix for CVE-2014-0015 (bnc#858673)
  * re-use of wrong HTTP NTLM connection in libcurl
  * added curl-CVE-2014-0015-NTLM_connection_reuse.patch
- fix test failure because of an expired cookie (bnc#862144)
  * added curl-test172_cookie_expiration.patch</changelog>
<changelog author="vcizek@suse.com" date="1395057600">- fixes for two security vulnerabilities:
  * CVE-2014-138 (bnc#868627)
  - curl: wrong re-use of connections
  - added curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1396440000">- fixes for two security vulnerabilities:
  * CVE-2014-0138 (bnc#868627)
  - curl: wrong re-use of connections
  - added: curl-CVE-2014-0138.patch
  - removed: curl-CVE-2014-138-bad-reuse.patch
  * CVE-2014-0139 (bnc#868629)
  - curl: IP address wildcard certificate validation
  - added: curl-CVE-2014-0139.patch
  - removed curl-CVE-2014-139-reject-cert-ip-wildcards.patch</changelog>
<changelog author="vcizek@suse.com" date="1409659200">- fix for CVE-2014-3613 (bnc#894575) and CVE-2014-3620 (bnc#895991)
  * libcurl cookie leaks
  * added curl-CVE-2014-3613.patch</changelog>
<changelog author="vcizek@suse.com" date="1412078400">- fix a crash in libcurl when removing an already removed handle
  (bnc#897816)
  * added curl-allow_multiple_handle_removes.patch</changelog>
<changelog author="vcizek@suse.com" date="1420718400">- update to 7.40.0:
  * fixes CVE-2014-8150 (bnc#911363)
  * fixes CVE-2014-3707 (bnc#901924)
  * Changes:
    http_digest: Added support for Windows SSPI based authentication
    version info: Added Kerberos V5 to the supported features
    Makefile: Added VC targets for WinIDN
    config-win32: Introduce build targets for VS2012+
    SSL: Add PEM format support for public key pinning
    smtp: Added support for the conversion of Unix newlines during mail send
    smb: Added initial support for the SMB/CIFS protocol
    Added support for HTTP over unix domain sockets,
    via CURLOPT_UNIX_SOCKET_PATH and --unix-socket
    sasl: Added support for GSS-API based Kerberos V5 authentication
- dropped patches (upstream):
  * curl-CVE-2014-0015-NTLM_connection_reuse.patch
  * curl-CVE-2014-0138.patch
  * curl-CVE-2014-0139.patch
  * curl-CVE-2014-3613.patch
  * curl-allow_multiple_handle_removes.patch
  * curl-test172_cookie_expiration.patch
- refresh remaining patches</changelog>
<changelog author="vcizek@suse.com" date="1429704000">- update to 7.42.0
  * refresh libcurl-ocloexec.patch
- fixes security vulnerabilities:
  * CVE-2015-3143 (bnc#927556)
  - Re-using authenticated connection when unauthenticated
  * CVE-2015-3144 (bnc#927608)
  - host name out of boundary memory access
  * CVE-2015-3145 (bnc#927607)
  - cookie parser out of boundary memory access
  * CVE-2015-3148 (bnc#927746)
  - Negotiate not treated as connection-oriented</changelog>
<changelog author="vcizek@suse.com" date="1430308800">- update to 7.42.1
  * fixes CVE-2015-3153 (bnc#928533)
  - sensitive HTTP server headers also sent to proxies
- rename curl-devel to libcurl-devel in baselibs.conf</changelog>
<changelog author="vcizek@suse.com" date="1434024000">- enable metalink support (boo#851126)</changelog>
<changelog author="mvetter@suse.com" date="1434542400">- Applying patch to fix CVE-2015-3236 (bsc#934501)</changelog>
<changelog author="mvetter@suse.com" date="1434542401">- Applying patch to fix CVE-2015-3237 (bsc#934502)</changelog>
<changelog author="wr@rosenauer.org" date="1454068800">- fix CVE-2016-0755 (bsc#962983)
  * libcurl NTLM credentials not-checked for proxy connection re-use
  * http://curl.haxx.se/docs/adv_20160127A.html
  * add curl-CVE-2016-0755.patch
- unexpire cookie in test 46 (bsc#962996)
  * add 0001-test46-update-cookie-expire-time.patch</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="6f909121472e26c9c5f9c130f8f9be77d406cad0e700f6ec760ec283ed8e1cf0" name="curlftpfs" arch="i586">
    <version epoch="0" ver="0.9.2" rel="59.3.1"/>

<changelog author="cthiel@suse.de" date="1148817600">- removed bogus curlftpfs-0.8.patch</changelog>
<changelog author="cthiel@suse.de" date="1159790400">- update to 0.9
  * enable utf8 support
  * enable chmod and chown</changelog>
<changelog author="mszeredi@suse.cz" date="1176379200">- update to 0.9.1
  * Ask for a password in the terminal so that it doesn't show in ps.
  * Support different codepages.
  * Cache files not found.
  * Support for SOCKS proxy.
  * Bug fixes.</changelog>
<changelog author="bk@suse.de" date="1186747200">- Add "Requires: fuse" to ensure that fuse is present (285101#c29)</changelog>
<changelog author="mszeredi@suse.de" date="1211976000">- update to 0.9.2
  * fixes 'du' for files &gt;= 4GB (bnc#381658).
  * open(O_RDWR) --&gt; fail with ENOTSUP.
  * Fix ftpfs_truncate creating empty files with no permissions set.
  * Support streaming writes (bnc#281052).
  * Added option to use a custom command to list files.
  * Add ftp_method option to make it faster to browse directories.
  * Disable EPSV by default because it can cause the program to hang.</changelog>
<changelog author="mszeredi@suse.cz" date="1274443200">- fix bug in file upload [bnc#580609]</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="jeffm@suse.com" date="1336392000">- curlftpfs requires building with -pthread</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags</changelog>
<changelog author="ernestopheles@googlemail.com" date="1448020800">- bug-955687.patch: fixed memory leak. openSUSE bug boo#955687
  (Debian bug 587250)</changelog>

</package>
<package pkgid="ad310c25ab2c4b7d89fb57c0710865ab897522bb9ec0e90e438be4f9bc9314dc" name="curlftpfs" arch="src">
    <version epoch="0" ver="0.9.2" rel="59.3.1"/>

<changelog author="cthiel@suse.de" date="1144756800">- initial package (version 0.6)</changelog>
<changelog author="cthiel@suse.de" date="1145102400">- update to version 0.7
  * Added big manpage with all options documented.
  * Bug fix for exporting the ftp mounted directory with samba.</changelog>
<changelog author="cthiel@suse.de" date="1148558400">- update to version 0.8
  * Chunk downloading is now supported. You can now stream your music or
    video, download more than one file, or browse the filesystem while you
    download.</changelog>
<changelog author="cthiel@suse.de" date="1148817600">- removed bogus curlftpfs-0.8.patch</changelog>
<changelog author="cthiel@suse.de" date="1159790400">- update to 0.9
  * enable utf8 support
  * enable chmod and chown</changelog>
<changelog author="mszeredi@suse.cz" date="1176379200">- update to 0.9.1
  * Ask for a password in the terminal so that it doesn't show in ps.
  * Support different codepages.
  * Cache files not found.
  * Support for SOCKS proxy.
  * Bug fixes.</changelog>
<changelog author="bk@suse.de" date="1186747200">- Add "Requires: fuse" to ensure that fuse is present (285101#c29)</changelog>
<changelog author="mszeredi@suse.de" date="1211976000">- update to 0.9.2
  * fixes 'du' for files &gt;= 4GB (bnc#381658).
  * open(O_RDWR) --&gt; fail with ENOTSUP.
  * Fix ftpfs_truncate creating empty files with no permissions set.
  * Support streaming writes (bnc#281052).
  * Added option to use a custom command to list files.
  * Add ftp_method option to make it faster to browse directories.
  * Disable EPSV by default because it can cause the program to hang.</changelog>
<changelog author="mszeredi@suse.cz" date="1274443200">- fix bug in file upload [bnc#580609]</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="jeffm@suse.com" date="1336392000">- curlftpfs requires building with -pthread</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags</changelog>
<changelog author="ernestopheles@googlemail.com" date="1448020800">- bug-955687.patch: fixed memory leak. openSUSE bug boo#955687
  (Debian bug 587250)</changelog>

</package>
<package pkgid="9e41bec9569757b8746a3fd40da947a12c46e74ed4f0c6c641135bb59718b8be" name="curlftpfs" arch="x86_64">
    <version epoch="0" ver="0.9.2" rel="59.3.1"/>

<changelog author="cthiel@suse.de" date="1148817600">- removed bogus curlftpfs-0.8.patch</changelog>
<changelog author="cthiel@suse.de" date="1159790400">- update to 0.9
  * enable utf8 support
  * enable chmod and chown</changelog>
<changelog author="mszeredi@suse.cz" date="1176379200">- update to 0.9.1
  * Ask for a password in the terminal so that it doesn't show in ps.
  * Support different codepages.
  * Cache files not found.
  * Support for SOCKS proxy.
  * Bug fixes.</changelog>
<changelog author="bk@suse.de" date="1186747200">- Add "Requires: fuse" to ensure that fuse is present (285101#c29)</changelog>
<changelog author="mszeredi@suse.de" date="1211976000">- update to 0.9.2
  * fixes 'du' for files &gt;= 4GB (bnc#381658).
  * open(O_RDWR) --&gt; fail with ENOTSUP.
  * Fix ftpfs_truncate creating empty files with no permissions set.
  * Support streaming writes (bnc#281052).
  * Added option to use a custom command to list files.
  * Add ftp_method option to make it faster to browse directories.
  * Disable EPSV by default because it can cause the program to hang.</changelog>
<changelog author="mszeredi@suse.cz" date="1274443200">- fix bug in file upload [bnc#580609]</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="jeffm@suse.com" date="1336392000">- curlftpfs requires building with -pthread</changelog>
<changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags</changelog>
<changelog author="ernestopheles@googlemail.com" date="1448020800">- bug-955687.patch: fixed memory leak. openSUSE bug boo#955687
  (Debian bug 587250)</changelog>

</package>
<package pkgid="9f23d4d34c1a08133cde921b49b00cfcef9111e47b6f193885ff4b421e3ee30a" name="cyrus-imapd" arch="i586">
    <version epoch="0" ver="2.3.19" rel="34.3.1"/>

<changelog author="rbos@opensuse.org" date="1276430400">- Define and use _name because the macro expansion is not smart enough.
  Without this construction the name definition of cyrus-imapd-kolab is
  changed to cyrus-imapd.</changelog>
<changelog author="rhafer@novell.com" date="1285848000">- Check for libdb 4.8 presence</changelog>
<changelog author="rhafer@novell.com" date="1288180800">- removed unneeded authid_normalize.patch the same functionality
  is already available through "username_tolower" since quite some
  time.</changelog>
<changelog author="rhafer@novell.com" date="1290168000">- Fixed cronjob to include the correct path to ctl_mboxlist
  (bnc#650919)</changelog>
<changelog author="coolo@novell.com" date="1291723200">- remove /var/adm/perl-modules</changelog>
<changelog author="rhafer@suse.de" date="1306152000">- Fixed STARTTLS plaintext command injection vulnerability
  (bnc#694247, cyrus-bug#3425)
- Fixed building against newer perl release (5.14)</changelog>
<changelog author="rhafer@suse.de" date="1308571200">- TLS initialization failures could lead to a bdb resource leak
  resulting lmtpd to stop delivering mails. (bnc#606710,
  cyrus-bug#3252)</changelog>
<changelog author="rhafer@suse.de" date="1314878400">- Fixed a buffer overflow in nntpd (bnc#715251)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="rhafer@suse.de" date="1316606400">- Update to 2.3.17. Only change:
  * includes the nntpd bufferoverflow patch
- Refreshed KOLAB patches
- Fixed a potential DoS bug, when server-side threading is used
  (bnc#718428)</changelog>
<changelog author="meissner@suse.de" date="1317124800">- parallel make is not possible, see openSUSE:Factory:PowerPC build failure.</changelog>
<changelog author="rhafer@suse.de" date="1317816000">- Update to 2.3.18:
  Malicious NNTP clients could bypass the authentication and
  execute commands that normally require authentication.
  (bnc#719998, CVE-2011-3372)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
<changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
<changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
<changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
<changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
<changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.3.19 [boo#945841]
  * Security fix: handle urlfetch range starting outside message range
  * Disable use of SSLv2/SSLv3
  * Support for Berkeley DB 5.x (thanks Ondrej Sury)
  * Support for newer glibc versions (thanks Thomas Jarosch)
  * Fixed bug #3465: support for perl 5.14 (thanks hsk@imb-jena.de)
  * Fixed bug #3640: reject NULL bytes in headers on LMTP delivery (thanks Julien Coloos)
- Rebased the following patch
  * cyrus-imapd-db6.diff as cyrus-imapd-2.3.19-db6.patch
- Removed the following patches (included upstream)
  - cyrus-imapd-perl-5.14.patch</changelog>

</package>
<package pkgid="7a3332fff5825c7e7daff9ec8dadfa048a84b3606c24741c188eeaeeaa19abd6" name="cyrus-imapd" arch="i586">
    <version epoch="0" ver="2.3.19" rel="34.6.1"/>

<changelog author="rhafer@novell.com" date="1285848000">- Check for libdb 4.8 presence</changelog>
<changelog author="rhafer@novell.com" date="1288180800">- removed unneeded authid_normalize.patch the same functionality
  is already available through "username_tolower" since quite some
  time.</changelog>
<changelog author="rhafer@novell.com" date="1290168000">- Fixed cronjob to include the correct path to ctl_mboxlist
  (bnc#650919)</changelog>
<changelog author="coolo@novell.com" date="1291723200">- remove /var/adm/perl-modules</changelog>
<changelog author="rhafer@suse.de" date="1306152000">- Fixed STARTTLS plaintext command injection vulnerability
  (bnc#694247, cyrus-bug#3425)
- Fixed building against newer perl release (5.14)</changelog>
<changelog author="rhafer@suse.de" date="1308571200">- TLS initialization failures could lead to a bdb resource leak
  resulting lmtpd to stop delivering mails. (bnc#606710,
  cyrus-bug#3252)</changelog>
<changelog author="rhafer@suse.de" date="1314878400">- Fixed a buffer overflow in nntpd (bnc#715251)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="rhafer@suse.de" date="1316606400">- Update to 2.3.17. Only change:
  * includes the nntpd bufferoverflow patch
- Refreshed KOLAB patches
- Fixed a potential DoS bug, when server-side threading is used
  (bnc#718428)</changelog>
<changelog author="meissner@suse.de" date="1317124800">- parallel make is not possible, see openSUSE:Factory:PowerPC build failure.</changelog>
<changelog author="rhafer@suse.de" date="1317816000">- Update to 2.3.18:
  Malicious NNTP clients could bypass the authentication and
  execute commands that normally require authentication.
  (bnc#719998, CVE-2011-3372)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
<changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
<changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
<changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
<changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
<changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.3.19 [boo#945841]
  * Security fix: handle urlfetch range starting outside message range
  * Disable use of SSLv2/SSLv3
  * Support for Berkeley DB 5.x (thanks Ondrej Sury)
  * Support for newer glibc versions (thanks Thomas Jarosch)
  * Fixed bug #3465: support for perl 5.14 (thanks hsk@imb-jena.de)
  * Fixed bug #3640: reject NULL bytes in headers on LMTP delivery (thanks Julien Coloos)
- Rebased the following patch
  * cyrus-imapd-db6.diff as cyrus-imapd-2.3.19-db6.patch
- Removed the following patches (included upstream)
  - cyrus-imapd-perl-5.14.patch</changelog>
<changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.3.19-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks</changelog>

</package>
<package pkgid="5d88d01b8ffec188a7374dd8cbffa4be43db539c4dc0017c68aecac7a2de84b1" name="cyrus-imapd" arch="src">
    <version epoch="0" ver="2.3.19" rel="34.3.1"/>

<changelog author="rbos@opensuse.org" date="1276430400">- Define and use _name because the macro expansion is not smart enough.
  Without this construction the name definition of cyrus-imapd-kolab is
  changed to cyrus-imapd.</changelog>
<changelog author="rhafer@novell.com" date="1285848000">- Check for libdb 4.8 presence</changelog>
<changelog author="rhafer@novell.com" date="1288180800">- removed unneeded authid_normalize.patch the same functionality
  is already available through "username_tolower" since quite some
  time.</changelog>
<changelog author="rhafer@novell.com" date="1290168000">- Fixed cronjob to include the correct path to ctl_mboxlist
  (bnc#650919)</changelog>
<changelog author="coolo@novell.com" date="1291723200">- remove /var/adm/perl-modules</changelog>
<changelog author="rhafer@suse.de" date="1306152000">- Fixed STARTTLS plaintext command injection vulnerability
  (bnc#694247, cyrus-bug#3425)
- Fixed building against newer perl release (5.14)</changelog>
<changelog author="rhafer@suse.de" date="1308571200">- TLS initialization failures could lead to a bdb resource leak
  resulting lmtpd to stop delivering mails. (bnc#606710,
  cyrus-bug#3252)</changelog>
<changelog author="rhafer@suse.de" date="1314878400">- Fixed a buffer overflow in nntpd (bnc#715251)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="rhafer@suse.de" date="1316606400">- Update to 2.3.17. Only change:
  * includes the nntpd bufferoverflow patch
- Refreshed KOLAB patches
- Fixed a potential DoS bug, when server-side threading is used
  (bnc#718428)</changelog>
<changelog author="meissner@suse.de" date="1317124800">- parallel make is not possible, see openSUSE:Factory:PowerPC build failure.</changelog>
<changelog author="rhafer@suse.de" date="1317816000">- Update to 2.3.18:
  Malicious NNTP clients could bypass the authentication and
  execute commands that normally require authentication.
  (bnc#719998, CVE-2011-3372)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
<changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
<changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
<changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
<changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
<changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.3.19 [boo#945841]
  * Security fix: handle urlfetch range starting outside message range
  * Disable use of SSLv2/SSLv3
  * Support for Berkeley DB 5.x (thanks Ondrej Sury)
  * Support for newer glibc versions (thanks Thomas Jarosch)
  * Fixed bug #3465: support for perl 5.14 (thanks hsk@imb-jena.de)
  * Fixed bug #3640: reject NULL bytes in headers on LMTP delivery (thanks Julien Coloos)
- Rebased the following patch
  * cyrus-imapd-db6.diff as cyrus-imapd-2.3.19-db6.patch
- Removed the following patches (included upstream)
  - cyrus-imapd-perl-5.14.patch</changelog>

</package>
<package pkgid="e04e0a341f2704ebc97f57c637a5884769c0562c407f4475b505cd97ef782aaa" name="cyrus-imapd" arch="src">
    <version epoch="0" ver="2.3.19" rel="34.6.1"/>

<changelog author="rhafer@novell.com" date="1285848000">- Check for libdb 4.8 presence</changelog>
<changelog author="rhafer@novell.com" date="1288180800">- removed unneeded authid_normalize.patch the same functionality
  is already available through "username_tolower" since quite some
  time.</changelog>
<changelog author="rhafer@novell.com" date="1290168000">- Fixed cronjob to include the correct path to ctl_mboxlist
  (bnc#650919)</changelog>
<changelog author="coolo@novell.com" date="1291723200">- remove /var/adm/perl-modules</changelog>
<changelog author="rhafer@suse.de" date="1306152000">- Fixed STARTTLS plaintext command injection vulnerability
  (bnc#694247, cyrus-bug#3425)
- Fixed building against newer perl release (5.14)</changelog>
<changelog author="rhafer@suse.de" date="1308571200">- TLS initialization failures could lead to a bdb resource leak
  resulting lmtpd to stop delivering mails. (bnc#606710,
  cyrus-bug#3252)</changelog>
<changelog author="rhafer@suse.de" date="1314878400">- Fixed a buffer overflow in nntpd (bnc#715251)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="rhafer@suse.de" date="1316606400">- Update to 2.3.17. Only change:
  * includes the nntpd bufferoverflow patch
- Refreshed KOLAB patches
- Fixed a potential DoS bug, when server-side threading is used
  (bnc#718428)</changelog>
<changelog author="meissner@suse.de" date="1317124800">- parallel make is not possible, see openSUSE:Factory:PowerPC build failure.</changelog>
<changelog author="rhafer@suse.de" date="1317816000">- Update to 2.3.18:
  Malicious NNTP clients could bypass the authentication and
  execute commands that normally require authentication.
  (bnc#719998, CVE-2011-3372)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
<changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
<changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
<changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
<changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
<changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.3.19 [boo#945841]
  * Security fix: handle urlfetch range starting outside message range
  * Disable use of SSLv2/SSLv3
  * Support for Berkeley DB 5.x (thanks Ondrej Sury)
  * Support for newer glibc versions (thanks Thomas Jarosch)
  * Fixed bug #3465: support for perl 5.14 (thanks hsk@imb-jena.de)
  * Fixed bug #3640: reject NULL bytes in headers on LMTP delivery (thanks Julien Coloos)
- Rebased the following patch
  * cyrus-imapd-db6.diff as cyrus-imapd-2.3.19-db6.patch
- Removed the following patches (included upstream)
  - cyrus-imapd-perl-5.14.patch</changelog>
<changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.3.19-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks</changelog>

</package>
<package pkgid="e2727a031937f55e2d63364b8ab89eddee965e082e8245a8ae4d238a2d123fdb" name="cyrus-imapd" arch="x86_64">
    <version epoch="0" ver="2.3.19" rel="34.3.1"/>

<changelog author="rbos@opensuse.org" date="1276430400">- Define and use _name because the macro expansion is not smart enough.
  Without this construction the name definition of cyrus-imapd-kolab is
  changed to cyrus-imapd.</changelog>
<changelog author="rhafer@novell.com" date="1285848000">- Check for libdb 4.8 presence</changelog>
<changelog author="rhafer@novell.com" date="1288180800">- removed unneeded authid_normalize.patch the same functionality
  is already available through "username_tolower" since quite some
  time.</changelog>
<changelog author="rhafer@novell.com" date="1290168000">- Fixed cronjob to include the correct path to ctl_mboxlist
  (bnc#650919)</changelog>
<changelog author="coolo@novell.com" date="1291723200">- remove /var/adm/perl-modules</changelog>
<changelog author="rhafer@suse.de" date="1306152000">- Fixed STARTTLS plaintext command injection vulnerability
  (bnc#694247, cyrus-bug#3425)
- Fixed building against newer perl release (5.14)</changelog>
<changelog author="rhafer@suse.de" date="1308571200">- TLS initialization failures could lead to a bdb resource leak
  resulting lmtpd to stop delivering mails. (bnc#606710,
  cyrus-bug#3252)</changelog>
<changelog author="rhafer@suse.de" date="1314878400">- Fixed a buffer overflow in nntpd (bnc#715251)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="rhafer@suse.de" date="1316606400">- Update to 2.3.17. Only change:
  * includes the nntpd bufferoverflow patch
- Refreshed KOLAB patches
- Fixed a potential DoS bug, when server-side threading is used
  (bnc#718428)</changelog>
<changelog author="meissner@suse.de" date="1317124800">- parallel make is not possible, see openSUSE:Factory:PowerPC build failure.</changelog>
<changelog author="rhafer@suse.de" date="1317816000">- Update to 2.3.18:
  Malicious NNTP clients could bypass the authentication and
  execute commands that normally require authentication.
  (bnc#719998, CVE-2011-3372)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
<changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
<changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
<changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
<changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
<changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.3.19 [boo#945841]
  * Security fix: handle urlfetch range starting outside message range
  * Disable use of SSLv2/SSLv3
  * Support for Berkeley DB 5.x (thanks Ondrej Sury)
  * Support for newer glibc versions (thanks Thomas Jarosch)
  * Fixed bug #3465: support for perl 5.14 (thanks hsk@imb-jena.de)
  * Fixed bug #3640: reject NULL bytes in headers on LMTP delivery (thanks Julien Coloos)
- Rebased the following patch
  * cyrus-imapd-db6.diff as cyrus-imapd-2.3.19-db6.patch
- Removed the following patches (included upstream)
  - cyrus-imapd-perl-5.14.patch</changelog>

</package>
<package pkgid="15ae87b22ba2dadc3f856016853c201e63caff3aeb306018378807b2bbd99a08" name="cyrus-imapd" arch="x86_64">
    <version epoch="0" ver="2.3.19" rel="34.6.1"/>

<changelog author="rhafer@novell.com" date="1285848000">- Check for libdb 4.8 presence</changelog>
<changelog author="rhafer@novell.com" date="1288180800">- removed unneeded authid_normalize.patch the same functionality
  is already available through "username_tolower" since quite some
  time.</changelog>
<changelog author="rhafer@novell.com" date="1290168000">- Fixed cronjob to include the correct path to ctl_mboxlist
  (bnc#650919)</changelog>
<changelog author="coolo@novell.com" date="1291723200">- remove /var/adm/perl-modules</changelog>
<changelog author="rhafer@suse.de" date="1306152000">- Fixed STARTTLS plaintext command injection vulnerability
  (bnc#694247, cyrus-bug#3425)
- Fixed building against newer perl release (5.14)</changelog>
<changelog author="rhafer@suse.de" date="1308571200">- TLS initialization failures could lead to a bdb resource leak
  resulting lmtpd to stop delivering mails. (bnc#606710,
  cyrus-bug#3252)</changelog>
<changelog author="rhafer@suse.de" date="1314878400">- Fixed a buffer overflow in nntpd (bnc#715251)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="rhafer@suse.de" date="1316606400">- Update to 2.3.17. Only change:
  * includes the nntpd bufferoverflow patch
- Refreshed KOLAB patches
- Fixed a potential DoS bug, when server-side threading is used
  (bnc#718428)</changelog>
<changelog author="meissner@suse.de" date="1317124800">- parallel make is not possible, see openSUSE:Factory:PowerPC build failure.</changelog>
<changelog author="rhafer@suse.de" date="1317816000">- Update to 2.3.18:
  Malicious NNTP clients could bypass the authentication and
  execute commands that normally require authentication.
  (bnc#719998, CVE-2011-3372)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
<changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
<changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
<changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
<changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
<changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.3.19 [boo#945841]
  * Security fix: handle urlfetch range starting outside message range
  * Disable use of SSLv2/SSLv3
  * Support for Berkeley DB 5.x (thanks Ondrej Sury)
  * Support for newer glibc versions (thanks Thomas Jarosch)
  * Fixed bug #3465: support for perl 5.14 (thanks hsk@imb-jena.de)
  * Fixed bug #3640: reject NULL bytes in headers on LMTP delivery (thanks Julien Coloos)
- Rebased the following patch
  * cyrus-imapd-db6.diff as cyrus-imapd-2.3.19-db6.patch
- Removed the following patches (included upstream)
  - cyrus-imapd-perl-5.14.patch</changelog>
<changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.3.19-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks</changelog>

</package>
<package pkgid="bdf7df7e5741e76b2b01e6526a0f90aa1879984ed5e0886aebca938007416843" name="cyrus-imapd-devel" arch="i586">
    <version epoch="0" ver="2.3.19" rel="34.3.1"/>

<changelog author="rbos@opensuse.org" date="1276430400">- Define and use _name because the macro expansion is not smart enough.
  Without this construction the name definition of cyrus-imapd-kolab is
  changed to cyrus-imapd.</changelog>
<changelog author="rhafer@novell.com" date="1285848000">- Check for libdb 4.8 presence</changelog>
<changelog author="rhafer@novell.com" date="1288180800">- removed unneeded authid_normalize.patch the same functionality
  is already available through "username_tolower" since quite some
  time.</changelog>
<changelog author="rhafer@novell.com" date="1290168000">- Fixed cronjob to include the correct path to ctl_mboxlist
  (bnc#650919)</changelog>
<changelog author="coolo@novell.com" date="1291723200">- remove /var/adm/perl-modules</changelog>
<changelog author="rhafer@suse.de" date="1306152000">- Fixed STARTTLS plaintext command injection vulnerability
  (bnc#694247, cyrus-bug#3425)
- Fixed building against newer perl release (5.14)</changelog>
<changelog author="rhafer@suse.de" date="1308571200">- TLS initialization failures could lead to a bdb resource leak
  resulting lmtpd to stop delivering mails. (bnc#606710,
  cyrus-bug#3252)</changelog>
<changelog author="rhafer@suse.de" date="1314878400">- Fixed a buffer overflow in nntpd (bnc#715251)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="rhafer@suse.de" date="1316606400">- Update to 2.3.17. Only change:
  * includes the nntpd bufferoverflow patch
- Refreshed KOLAB patches
- Fixed a potential DoS bug, when server-side threading is used
  (bnc#718428)</changelog>
<changelog author="meissner@suse.de" date="1317124800">- parallel make is not possible, see openSUSE:Factory:PowerPC build failure.</changelog>
<changelog author="rhafer@suse.de" date="1317816000">- Update to 2.3.18:
  Malicious NNTP clients could bypass the authentication and
  execute commands that normally require authentication.
  (bnc#719998, CVE-2011-3372)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
<changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
<changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
<changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
<changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
<changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.3.19 [boo#945841]
  * Security fix: handle urlfetch range starting outside message range
  * Disable use of SSLv2/SSLv3
  * Support for Berkeley DB 5.x (thanks Ondrej Sury)
  * Support for newer glibc versions (thanks Thomas Jarosch)
  * Fixed bug #3465: support for perl 5.14 (thanks hsk@imb-jena.de)
  * Fixed bug #3640: reject NULL bytes in headers on LMTP delivery (thanks Julien Coloos)
- Rebased the following patch
  * cyrus-imapd-db6.diff as cyrus-imapd-2.3.19-db6.patch
- Removed the following patches (included upstream)
  - cyrus-imapd-perl-5.14.patch</changelog>

</package>
<package pkgid="17aaea5a9da3e539c01dfdf42d1b1921d91205ec8c2bd835a2e42d0e64787d0c" name="cyrus-imapd-devel" arch="i586">
    <version epoch="0" ver="2.3.19" rel="34.6.1"/>

<changelog author="rhafer@novell.com" date="1285848000">- Check for libdb 4.8 presence</changelog>
<changelog author="rhafer@novell.com" date="1288180800">- removed unneeded authid_normalize.patch the same functionality
  is already available through "username_tolower" since quite some
  time.</changelog>
<changelog author="rhafer@novell.com" date="1290168000">- Fixed cronjob to include the correct path to ctl_mboxlist
  (bnc#650919)</changelog>
<changelog author="coolo@novell.com" date="1291723200">- remove /var/adm/perl-modules</changelog>
<changelog author="rhafer@suse.de" date="1306152000">- Fixed STARTTLS plaintext command injection vulnerability
  (bnc#694247, cyrus-bug#3425)
- Fixed building against newer perl release (5.14)</changelog>
<changelog author="rhafer@suse.de" date="1308571200">- TLS initialization failures could lead to a bdb resource leak
  resulting lmtpd to stop delivering mails. (bnc#606710,
  cyrus-bug#3252)</changelog>
<changelog author="rhafer@suse.de" date="1314878400">- Fixed a buffer overflow in nntpd (bnc#715251)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="rhafer@suse.de" date="1316606400">- Update to 2.3.17. Only change:
  * includes the nntpd bufferoverflow patch
- Refreshed KOLAB patches
- Fixed a potential DoS bug, when server-side threading is used
  (bnc#718428)</changelog>
<changelog author="meissner@suse.de" date="1317124800">- parallel make is not possible, see openSUSE:Factory:PowerPC build failure.</changelog>
<changelog author="rhafer@suse.de" date="1317816000">- Update to 2.3.18:
  Malicious NNTP clients could bypass the authentication and
  execute commands that normally require authentication.
  (bnc#719998, CVE-2011-3372)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
<changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
<changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
<changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
<changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
<changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.3.19 [boo#945841]
  * Security fix: handle urlfetch range starting outside message range
  * Disable use of SSLv2/SSLv3
  * Support for Berkeley DB 5.x (thanks Ondrej Sury)
  * Support for newer glibc versions (thanks Thomas Jarosch)
  * Fixed bug #3465: support for perl 5.14 (thanks hsk@imb-jena.de)
  * Fixed bug #3640: reject NULL bytes in headers on LMTP delivery (thanks Julien Coloos)
- Rebased the following patch
  * cyrus-imapd-db6.diff as cyrus-imapd-2.3.19-db6.patch
- Removed the following patches (included upstream)
  - cyrus-imapd-perl-5.14.patch</changelog>
<changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.3.19-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks</changelog>

</package>
<package pkgid="0bcc69fe0d2e2c5497fbdad772b79113af5bc84794a7b98322a93c91047bc103" name="cyrus-imapd-devel" arch="x86_64">
    <version epoch="0" ver="2.3.19" rel="34.3.1"/>

<changelog author="rbos@opensuse.org" date="1276430400">- Define and use _name because the macro expansion is not smart enough.
  Without this construction the name definition of cyrus-imapd-kolab is
  changed to cyrus-imapd.</changelog>
<changelog author="rhafer@novell.com" date="1285848000">- Check for libdb 4.8 presence</changelog>
<changelog author="rhafer@novell.com" date="1288180800">- removed unneeded authid_normalize.patch the same functionality
  is already available through "username_tolower" since quite some
  time.</changelog>
<changelog author="rhafer@novell.com" date="1290168000">- Fixed cronjob to include the correct path to ctl_mboxlist
  (bnc#650919)</changelog>
<changelog author="coolo@novell.com" date="1291723200">- remove /var/adm/perl-modules</changelog>
<changelog author="rhafer@suse.de" date="1306152000">- Fixed STARTTLS plaintext command injection vulnerability
  (bnc#694247, cyrus-bug#3425)
- Fixed building against newer perl release (5.14)</changelog>
<changelog author="rhafer@suse.de" date="1308571200">- TLS initialization failures could lead to a bdb resource leak
  resulting lmtpd to stop delivering mails. (bnc#606710,
  cyrus-bug#3252)</changelog>
<changelog author="rhafer@suse.de" date="1314878400">- Fixed a buffer overflow in nntpd (bnc#715251)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="rhafer@suse.de" date="1316606400">- Update to 2.3.17. Only change:
  * includes the nntpd bufferoverflow patch
- Refreshed KOLAB patches
- Fixed a potential DoS bug, when server-side threading is used
  (bnc#718428)</changelog>
<changelog author="meissner@suse.de" date="1317124800">- parallel make is not possible, see openSUSE:Factory:PowerPC build failure.</changelog>
<changelog author="rhafer@suse.de" date="1317816000">- Update to 2.3.18:
  Malicious NNTP clients could bypass the authentication and
  execute commands that normally require authentication.
  (bnc#719998, CVE-2011-3372)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
<changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
<changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
<changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
<changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
<changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.3.19 [boo#945841]
  * Security fix: handle urlfetch range starting outside message range
  * Disable use of SSLv2/SSLv3
  * Support for Berkeley DB 5.x (thanks Ondrej Sury)
  * Support for newer glibc versions (thanks Thomas Jarosch)
  * Fixed bug #3465: support for perl 5.14 (thanks hsk@imb-jena.de)
  * Fixed bug #3640: reject NULL bytes in headers on LMTP delivery (thanks Julien Coloos)
- Rebased the following patch
  * cyrus-imapd-db6.diff as cyrus-imapd-2.3.19-db6.patch
- Removed the following patches (included upstream)
  - cyrus-imapd-perl-5.14.patch</changelog>

</package>
<package pkgid="82233f2557a6dcefe3573847997f2939b742fe178a26f45c1fcdaaa736576e5c" name="cyrus-imapd-devel" arch="x86_64">
    <version epoch="0" ver="2.3.19" rel="34.6.1"/>

<changelog author="rhafer@novell.com" date="1285848000">- Check for libdb 4.8 presence</changelog>
<changelog author="rhafer@novell.com" date="1288180800">- removed unneeded authid_normalize.patch the same functionality
  is already available through "username_tolower" since quite some
  time.</changelog>
<changelog author="rhafer@novell.com" date="1290168000">- Fixed cronjob to include the correct path to ctl_mboxlist
  (bnc#650919)</changelog>
<changelog author="coolo@novell.com" date="1291723200">- remove /var/adm/perl-modules</changelog>
<changelog author="rhafer@suse.de" date="1306152000">- Fixed STARTTLS plaintext command injection vulnerability
  (bnc#694247, cyrus-bug#3425)
- Fixed building against newer perl release (5.14)</changelog>
<changelog author="rhafer@suse.de" date="1308571200">- TLS initialization failures could lead to a bdb resource leak
  resulting lmtpd to stop delivering mails. (bnc#606710,
  cyrus-bug#3252)</changelog>
<changelog author="rhafer@suse.de" date="1314878400">- Fixed a buffer overflow in nntpd (bnc#715251)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
<changelog author="rhafer@suse.de" date="1316606400">- Update to 2.3.17. Only change:
  * includes the nntpd bufferoverflow patch
- Refreshed KOLAB patches
- Fixed a potential DoS bug, when server-side threading is used
  (bnc#718428)</changelog>
<changelog author="meissner@suse.de" date="1317124800">- parallel make is not possible, see openSUSE:Factory:PowerPC build failure.</changelog>
<changelog author="rhafer@suse.de" date="1317816000">- Update to 2.3.18:
  Malicious NNTP clients could bypass the authentication and
  execute commands that normally require authentication.
  (bnc#719998, CVE-2011-3372)</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="meissner@suse.com" date="1340107200">- allocate the right size (reported by frerichs@rz.uni-kiel.de)</changelog>
<changelog author="aj@ajaissle.de" date="1360929600">- enable --with-ldap option</changelog>
<changelog author="aj@ajaissle.de" date="1369137600">- Added /var/lib/imap/ptclient to %files section</changelog>
<changelog author="werner@suse.de" date="1369656000">- Package perl-Cyrus-SIEVE-managesieve provides the sieveshell as
  well as the package python-managesieve, therefore make them
  conflicting</changelog>
<changelog author="jengelh@inai.de" date="1371211200">- Add cyrus-imapd-db6.diff to fix compile abort with db &gt;= 5</changelog>
<changelog author="aj@ajaissle.de" date="1371729600">- Move kolab tag from package name to version field</changelog>
<changelog author="aj@ajaissle.de" date="1440331200">- Update to 2.3.19 [boo#945841]
  * Security fix: handle urlfetch range starting outside message range
  * Disable use of SSLv2/SSLv3
  * Support for Berkeley DB 5.x (thanks Ondrej Sury)
  * Support for newer glibc versions (thanks Thomas Jarosch)
  * Fixed bug #3465: support for perl 5.14 (thanks hsk@imb-jena.de)
  * Fixed bug #3640: reject NULL bytes in headers on LMTP delivery (thanks Julien Coloos)
- Rebased the following patch
  * cyrus-imapd-db6.diff as cyrus-imapd-2.3.19-db6.patch
- Removed the following patches (included upstream)
  - cyrus-imapd-perl-5.14.patch</changelog>
<changelog author="aj@ajaissle.de" date="1447588800">- Added cyrus-imapd-2.3.19-CVE-2015-8077.patch:
  boo#954200, CVE-2015-8077: Integer overflow in range checks</changelog>

</package>
<package pkgid="47deb4d5982f9456b0e7a3fdc7b5f2095f6f4b3317e4bdc3bd4bc05d0a167cf6" name="darktable" arch="i586">
    <version epoch="0" ver="1.2.3" rel="2.5.1"/>

<changelog author="fcrozat@suse.com" date="1344168000">- Add update-curves.patch: add additional basecurves for Olympus
  E-M5 and EOS 5D Mark II/III and Nikon Dxxxx (from git)</changelog>
<changelog author="toganm@opensuse.org" date="1349784000">- Add rsvg_cairo.patch: Fixes Build for factory because of deprecated
  use of  librsvg (from git)</changelog>
<changelog author="toganm@opensuse.org" date="1354017600">- Update to release 1.1
  * general
    + new camera support, new whitebalance presets, etc., including
    canon eos m support and samsung nx fix
    + similarity matching search for images that look alike.
    + geotagging, complete with map view
    + a lot of bugfixes (mainly thanks to ulrich for his meticulous
    work)
    + facebook exporter (for those who have an account there)
  * ui
    + reworked the much hated `more plugins' widget
    + image grouping:
    + command line interface!
    + tone and base curves got a new user interface to better
    support fine grained workflow
    + visually low-profile controls with finetuning:
    + color correction module got a GUI update since the blog post
    (two circles indicating shadows and highlights instead of the
    quad).
    + live view for tethered shooting!
  * darkroom
    + extensive use of edge-aware filtering techniques to suppress
    noise, halos and ringing all around darktable:
    + conditional blending, and a lot of goodies around it!
    + magenta highlights: high-contrast edges to overexposed areas
    (should get rid of purple highlights on tiny water waves and
    purple fringes around tree leaves for example)
    + much improved sharpness for both export and darkroom view,
    especially for downsampled images and if you use lens
    corrections or rotations/perspective corrections. check the new
    options in the preferences dialog, also one more than mentioned
    in the blog ("demosaicing for zoomed out darkroom mode" to
    trade performance for even more sharpness):
  * color management
    + improved per-screen color management (should reload the
    screen profile automatically)
    + more compatible embedded color profiles (should fix problems
    on windows viewing our images, if that matters) read embedded
    color profiles from jpg
  * opencl
    + most of our modules now can take advantage of your computer's
    gpu power
    + caching for compiled opencl kernels (even in case the driver
    doesn't do it) for faster startup times
  * translations
    + two new translations (both portuguese.. ;) )
    + well translated: cs de es fr it ja nl pl pt_BR pt_PT sv
    + half translated: ca fi gl ro ru sq th zh_CN
- Packaging related :
  * Provide the pdf documentation
  * Remove backported patches as they are part of the package now
    + rsvg_cairo.patch
    + update-curves.patch
  * provide tool to work with database cleanup
    purge_non_existing_images.sh (placed in documentation
    directory)
  * where possible use pkgconfig variables for buildrequires</changelog>
<changelog author="toganm@opensuse.org" date="1355054400">- Update to release 1.1.1
  * minor reordering of lighttable mode modules (geotagging, keywords
    and recent collections)
  * cleaned up the default visible plugins when first starting
    darktable
  * in most cases raw files will now show thumbnails in the import
    dialog (thanks to Mattias Eriksson)
  * a curve related crash was fixed (#9906 thanks to James C.
    McPherson)
  * comma seperated tags should work everywhere now (#9006 thanks to
    Tobias Ellinghaus)
  * Ulrich pegelow fixed a huge amount of OpenCL related issues,
    particularly for AMD GPUs
  * we now deal better with hybrid GPU machines (#9074 by Ulrich
  Pegelow)
  * a deadlock in the lens correction module was fixed (#9106 thanks to
    Ulrich Pegelow)
  * we don't delete module presets when cancelling the dialog anymore
    (#9108 thanks to Tobias Ellinghaus)
  * we now have better default memory usage settings (which are set
    upon starting darktable the first time)
  * initial support for SONY NEX 5R
  * preliminary/experimental Canon EOS 6D and Sony RX1 support (future
    changes for these camera's may (for the time being) retroactively
    affect your images)
  * Canon EOS 6D white balance presets (thanks to no_maam_)
  * lots of updates for the usermanual (make sure you download a new
    copy)
- Subpackage the user manual
- enable darktable-viewer by adding sdl to buildrequires</changelog>
<changelog author="toganm@opensuse.org" date="1358078400">- Update to release 1.1.2
  * darktable 1.1.2 is mostly a camera support update and bugfix
    release:
  - fix export resolution rounding issue (as in previous version it
    could be off-by-one)
  - correctly set output dimension in exif instead of passing the raw
    resolution verbatim
  - local average green eq was fixed (it now works on high iso images
    as well, and should no longer produce hot pixels)
  - use ordered arrays in xmp files
  - disable export parallelism for flickr/picasa export
  - don't enter tethering mode when there is no camera attached (this
    made darktable look asif it was hung, even though that wasn't the
    case)
  - bring back the pin for map thumbnails
  - improved tiff support
  - vignetting now has a dithering option (to mitigate occasional
    banding)
  - read nikon subject distance properly
  - assorted freebsd fixes
  - various opencl fixes
  - usermanual updates
  * Support for the following camera's with either preliminarily added
    or updated:
  - canon eos 6d
  - canon powershot s110
  - canon powershot g15
  - canon powershot sx50 hs
  - nikon 1 v2
  - nikon d600
  - nikon coolpix p7700
  - olympus e pl5
  - olympus e pm2
  - olympus xz 2
  - panasonic dmc gh3
  - panasonic dmc lx7
  - pentax k5ii
  - samsung ex2f
  - sony rx1
  - sony nex 6
  - sony slt a99
  - sony nex c3 blackpoint/greenshift fix
  * white balance preset updates:
  - canon eos 550d
  - canon eos 5d mark iii
  - olympus xz 1
  - sony nex c3
  - sony slt a57
  - sony nex 5n
  - panasonic dmc-gh3</changelog>
<changelog author="toganm@opensuse.org" date="1360411200">- Update to release 1.13
  * fixes:
    + check (on build) if glib 2.28 or higher is present
    + don't sanatize exif when creating hdr dngs
    + colorpicker now disappears immediately when disabling it
    + lens correction now uses loose lens matching (ivan tarozzi)
    + konica minolta dynax 5d rotation fix
    + removed an outdated assertion which could cause a crash in rare
    cases
    + don't crash when loading half-corrupted xmp's
    + don't crash when an imported file contains incomplete gps
    information
    + libjpeg-turbo workaround (klaus post)
  * camera support:
    + preliminary support for the new nikon d5200
  * white balance presets:
    + sony alpha 700 (update to firmware v4)
    + sony alpha 230 (new)
    + canon eos 650d (new)
    + canon eos rebel t2i (fixed)
    + canon eos m (fixed)
  * enhanced color rendition:
    + konica minolta dynax 5d (wolfgang kuehnel)
    + sony nex 3 (wolfgang kuehnel)
    + sony alpha 230 (wolfgang kuehnel)
    + sony rx100 (josef wells)
- For openSUSE 12.1 added xz to buildrequires</changelog>
<changelog author="fcrozat@suse.com" date="1360497600">- Add 0001-Olympus-E-M5-enhanced-matrix.patch: Enhanced matrix for
  Olympus OM-D E-M5.</changelog>
<changelog author="toganm@opensuse.org" date="1362916800">- Update to release 1.1.4 This is bugfix release no new features
  are introduced.
  * Fix tooltip style definition in darktable.gtkrc.
  * colorspaces: avoid trademark issues
  * colorspaces: workaround horrible brokenness of some printshops
  * colorspaces: actually cprt is a required icc tag
  * thumbs: use mip always &gt; image size, not closest.
  * wb_presets: Nikon D3200 (stolen from UFRaw)
  * wb_presets: SONY SLT-A77V
  * wb_presets: Panasonic DMC-G5 (thanks to thouks)
  * wb_presets: Pentax K-5 II s (thanks to Jack Bowling)
  * wb_presets: Nikon D800(E) update
  * rawspeed: minor fix for LX7 in 3:2 mode
  * rawspeed: support Panasonic DMC-LX7 16:9 and 1:1 aspect ratio modes
  * rawspeed: support Panasonic DMC-LX7 3:2 aspect ratio mode
  * rawspeed: Preliminary support for the PENTAX K-5 II s
  * rawspeed: added Panasonic DMC-G5 1:1/16:9 modes
  * rawspeed: Nikon 1 S1 support
  * rawspeed: Nikon 1 J3 support
  * rawspeed: Nikon Coolpix P7100 blackpoint fix (thanks to nesthib)
  * Fix base curve presets for Canon on Spanish locale
  * Fix #9205: Read metadata from non-dt XMPs
  * blend: fix edge case in color blend mode
  * redraw: remove now obsolete flood stopping.
  * redraw: allow more redraws per second.
  * redraw signal: simplify the locking logic somewhat.
  * pack blendif settings a little bit closer in GUI
  * cache: have full buffers according to potentially exporting  threads
  * lens correction: fix for #9270
  * opencl: work around a bug in some OpenCL drivers
  * exif: return correct buffer length, patch by wolfgang goetz
  * match leica basecurve less selectively
  * Olympus E-M5 enhanced matrix with help from Frederic Crozat
  * ICC profile handling: catch certain mal-formatted profiles
- Added 0001-Fix-svg-uses-premultiplied-alpha-we-didn-t-respect-t.patch
- Remove 0001-Olympus-E-M5-enhanced-matrix.patch as it's upstreamed</changelog>
<changelog author="fcrozat@suse.com" date="1363521600">- Add gtk2-engine-clearlooks as Requires, needed for darktable
  black theme.</changelog>
<changelog author="mrueckert@suse.de" date="1365076800">- update to release 1.2.rc2
  - the changes on top of rc1 are minor, some details:
  - fixed a spurious crash/deadlock when switching images in
    filmstrip mode
  - fixed a couple of exif strings for profiled denoising
  - fixed gcc 4.8.0 build
  - new noise profiles
  - fixed gphoto 2.5 issues
  - updated translations
  - updated user manual!
- additional changes from 1.2.rc1
  - profiled denoising: adapt to the properties of your camera's
    sensor (72 cameras already profiled for you).
  - lightroom import: convert some basic edits from your lightroom
    collection to darktable operations.
  - multi instance support: duplicate your modules and apply them
    more than one time with different settings.
  - improved usability for distorting modules (streamline spot
    removal in the presence of crop/rotate for example).
  - selective copy/paste of image processing.
  - new more intuitive keystone correction tool.
  - jpeg2000 support.
  - graphics magick import (support virtually all input image
    formats).
  - much faster thumbnail loading (if you can live with crappy
    embedded thumbnails).
  - incredibly lengthy list of small bug fixes, performance
    enhancements, and usability improvements.
  - new camera support (decode and color matrices).
  - dithering against banding.
  - sharper thumbnails in lighttable mode.
  - new oauth2 based picasa uploader.
  - and the final release 1.2 will contain a thoroughly overhauled
    user manual, proof read by natives (thanks heaps guys!).
- removed 0001-Fix-svg-uses-premultiplied-alpha-we-didn-t-respect-t.patch
  included upstream
- added BuildRequires for GraphicsMagick and openjpeg</changelog>
<changelog author="mrueckert@suse.de" date="1365076801">- added darktable-1.2.x_update_to_4b856e6ec99035d5a1041db73e2339000d395aa0.patch:
  update to HEAD (4b856e6ec99035d5a1041db73e2339000d395aa0)
  - adobe_coeff: Nikon Coolpix A same as D7000
  - fix-crash-lr-import:
    Proactive fix to avoid a crash trying to dereference a null
    pointer.  If node stEvt:softwareAgent not found, skip as not a
    lightroom xmp.
  - don't crash on malformatted TIFF file
    In case a file was alraedy rejected by GraphicsMagick, it's not
    a good idea to try open it with our handmade imageio routines
    like TIFFOpen().  Let's take GraphicsMagick as a last resort if
    available.
  - usermanual: add missing file lighttable_directory.png
  - Fix: snapshot + gnd, cliping, ... #9329
  - Upgraded and reviewed Spanish translation
    I have fully reviewed the Spanish translation, fixing typos,
    improving grammar and the language used.
  - denoiseprofile: really fix legacy_params
  - denoiseprofile: get param "mode" right when converting params
    from version 2 to 3 fix: denoiseprofile: crash when trying to
    update presets/styles from version 2 to 3 do not try to find
    autodetection for them - would probably be not useful and is
    impossible anyway
  - Merge pull request #206 from bluesceada/denoise-copy-autodetect
    denoiseprofile: copy "profile autodetected" correctly + fix:
    display "found match" also for first profile
  - noise profile: canon eos 1d iv by rene weiss
  - denoiseprofile: only use a[0] = -1.0 to signal autodetection,
    and don't use epsilon for comparisons
  - denoiseprofile: make it possible to copy the information "this
    profile was set automatically" across images with different ISO
    and camera vendor
  - fix: denoiseprofile: also show "found match:" instead of the
    profile name for index 0
  - Preliminary update of the Russian translation
  - Merge branch 'fix-clipping-aspect'
  * fix-clipping-aspect:
    Fix aspect ratio computation.
    It cannot happen in legacy_params() as at this point the size
    of the image is not yet known. We then use a deferred
    circuitry to handle this at the right point in the code.
    Fixes #9320.
  - [l10n] Swedish update</changelog>
<changelog author="toganm@opensuse.org" date="1365249600">- Update to release 1.2
- removed
  darktable-1.2.x_update_to_4b856e6ec99035d5a1041db73e2339000d395aa0.patch
  as it is now included.
- When possible use pkgconfig hence:
  instead of libopenjgeg-devel  used  pkgconfig(libopenjpeg)
  instead of GraphicsMagick-devel used pkgconfig(GraphicsMagick)
- If build is for 12.1 then require gtk2-engines</changelog>
<changelog author="toganm@opensuse.org" date="1366718400">- Fix factory build with OpenEXR-2.0
  added 0001-OpenEXR-2.0-fixes.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366977600">- First set CFLAGS and then CXXFLAGS. Sometimes we need to set
  flags in CXXFLAGS that are not valid CFLAGS.</changelog>
<changelog author="toganm@opensuse.org" date="1369569600">- Update to release 1.2.1
  * New translation: Danish
  * Some translations have been removed from the release due to
    missing strings
  * New noise profiles
    + Canon EOS 450D / Kiss X2
    + Canon EOS 1100D / REBEL T3
    + Canon EOS 1D Mark II
    + Canon EOS 1D Mark III
    + All Canon Model names are now recognized, e.g. Canon EOS 350D
    and Canon EOS 350D DIGITAL and Canon EOS DIGITAL REBEL XT and
    Canon EOS Kiss Digital N point to the same camera.
    + Olympus E-520
    + Olympus E-1
    + Olympus E-3
    + Olympus E-P2
    + Pentax K-30
    + Panasonic GH-2
    + Panasonic DMZ-FZ18
    + Additional data for Pentax K-5 II
    + Nikon D7100
    + Nikon D5200
    + Sony A57
  * White balances, color matrices
    + Fix issues with different camera model names for various Canon
    cameras (see above)
    + White balance for Panasonic DMC-GH2
    + Updates whitebalance list with the latest version of UFRaw's cvs version
    + Whitebalances for Samsung NX5, NX10, NX11 (copied from NX100)
  * Bugfixes
    + new RawSpeed version r537
    + Compatible with openEXR 2.0
    + Facebook export now allows HQ images (up to 2048px)
    + Blend mode "vividlight" should work for NaNs
    + Fix compile issues for OpenBSD
    + Whitebalance is now relative to daylight, not to camera white
    balance (this will not change any processing you have done,
    only the values displayed will differ)
    + Now importing folder via key accelerator is supported.
    + Only one temperature slider in white balance
    + Some fixes to the zoom behaviour in darkroom mode
    + New lensfun geometries now supported (with lensfun &gt;= 0.2.7)
    + More coherent bauhaus UI for the split toning module
    + The color transfer module is now marked as deprecated. Will be
    superseeded by color mapping in the next major release.
    + Fix some possible deadlocks, memory leaks and null pointer dereferences
    + Status message in top bar should be updated more frequently now
    + Some more elaborate status messages if lens/camera not found in the
    lens correction module, if export failed
    + Option for parallel export threads removed from config, too dangerous
    + Option for thumbnail cache now specified in MB
    + Updated purge_non_existing_images.sh script
    + CLI option -d nan gives per-module output of NaN values
    + Some minor renamings, typo fixings...
- Drop 0001--OpenEXR-2.0-fixes.patch since fixed upstream</changelog>
<changelog author="toganm@opensuse.org" date="1370865600">- added backported patch from git master
  0001-fixed-error-handling-for-broken-full-color-images.patch
  fixes bnc#823114</changelog>
<changelog author="toganm@opensuse.org" date="1371729600">-  Remove patented code from the source via
  generate--tarball.sh bnc#824484
  * added backported patch from git master
    0001-thumbnail-compression-make-libsquish-optional
  * Remove pkgconfig(colord) from Build Requires
  Because compression code is disabled previous cache will not
  work. Removing  ~/.cache/darktable/mipmaps is necessary</changelog>
<changelog author="toganm@opensuse.org" date="1372161600">- Update to version 1.2.2
  * updated rawspeed r553. Support for
    + Canon EOS 700D
    + Nikon Coolpix P330
  * New Olymbus base curve
  * Updated Adobe Coeffs
  * Enhanced color matrices:
    + Canon 700D (from Canon 650D)
    + Canon 100D (from Canon 650D)
  * Sony NEX-7
  * White balance presets:
    + Some updates from UFRaw
    + Canon 100D
    + Canon 700D
    + Sony SLT-A37
    + Nikon Coolpix P330
  * Noise profiles:
    + Canon EOS-M
    + Olympus E-600 (from: Olympus E-30)
    + Olympus E-620 (from: Olympus E-30)
    + Samsung WB2000
    + Sony A99v
    + Panasonic DMC-G10 iso 100
    + Nikon D60
  * Bug fixes:
    + 0 star rating working again
    + LT: ctrl+d duplicates per default now
    + Some fixes concerning locale handling
    + double click on film strip jumps to image
    + remember position in collections
    + ctrl+k jumps to previous collection
    + Blending parameters are preserved when module is deactivated
    + In full-preview (alt-1) ratings and labels are only applied to
    + image shown
    + Various OpenCL fixes, e.g. compilation on Mac OS X
    + libsquish compilation now optional
    + dr: deactivate interpolation at 200% zoom
  * Removed backported patches:
  0001-thumbnail-compression-make-libsquish-optional
  0001-fixed-error-handling-for-broken-full-color-images.patch</changelog>
<changelog author="toganm@opensuse.org" date="1378814400">- Update to version 1.2.3
  + Update to RawSpeed r570
  + Canon 70D (preliminary)
  + Olympus E-P5 (incl. preliminary Adobe Coeff.)
  + Samsung NX2000
  + Sony RX100m2
  + Sony SLT-A58 (updated)
  * White Balance Presets:
  + Sony NEX-5R
  + Sony SLT-A58
  + Nikon D3200 (updated)
  + Pentax K20D
  * Enhanced Color Matrix:
  + Pentax K20D
  * Noise Profiles:
  + Canon EOS 1100D == Canon EOS Rebel T3
  + Canon PowerShot S95
  + Canon PowerShot G11
  + Nikon Coolpix P330
  + Sony A580
  + Fuji X10
  + Pentax K20D
  * Fixes and improvements:
  + Increased maximum cache size to 8GB
  + OS X: fix Facebook uploads
  + Adjustments to default lowpass blur settings
  + Adjustments to dithering slider ranges
  + Metadata viewer: fix display of focal length: indicate unit
    and hide  if invalid.
  + Chromatic Aberrations: fix segfault for small buffers
  + Color pickers: fix various issues, e.g. #9482
  + More guides for Crop &amp; Rotate
  + Improve light table usability: when viewing images in
    fullscreen wrap  around at line end when pressing right arrow
    key
  + Soften: massive speed improvements by using SSE and OpenMP
  + Deleting images from camera is not supported anymore for
    safety.
  + Exposure module now supports multiple instances
  + Support for custom meta data burn in (see commit
    6ac7ba055440aa27f79f0a67ac112799a0e7785e)
  + OpenCL support for nVidia GeForce GT330
  + PFM: load timestamp as date &amp; time taken.
  + Fix bug prohibiting image rating by mouse
  + Update Picasa uploader: references Google+ now
  + Some fixes for memory leaks, deadlocks, background jobs
  + Fixes of on-screen handles for Crop&amp;Rotate and GND modules
  + 0 bytes files will no longer be imported but ignored</changelog>
<changelog author="toganm@opensuse.org" date="1387195200">- added patches:
  * 0001-Fix-9720-Don-t-crash-when-kwallet-is-not-running.patch
    backported from git fixes bnc#855442</changelog>

</package>
<package pkgid="87414bf4abb02e018ca8ece9696324972ee83cca9ff11caac1ac4b53d1d241c1" name="darktable" arch="src">
    <version epoch="0" ver="1.2.3" rel="2.5.1"/>

<changelog author="fcrozat@suse.com" date="1344168000">- Add update-curves.patch: add additional basecurves for Olympus
  E-M5 and EOS 5D Mark II/III and Nikon Dxxxx (from git)</changelog>
<changelog author="toganm@opensuse.org" date="1349784000">- Add rsvg_cairo.patch: Fixes Build for factory because of deprecated
  use of  librsvg (from git)</changelog>
<changelog author="toganm@opensuse.org" date="1354017600">- Update to release 1.1
  * general
    + new camera support, new whitebalance presets, etc., including
    canon eos m support and samsung nx fix
    + similarity matching search for images that look alike.
    + geotagging, complete with map view
    + a lot of bugfixes (mainly thanks to ulrich for his meticulous
    work)
    + facebook exporter (for those who have an account there)
  * ui
    + reworked the much hated `more plugins' widget
    + image grouping:
    + command line interface!
    + tone and base curves got a new user interface to better
    support fine grained workflow
    + visually low-profile controls with finetuning:
    + color correction module got a GUI update since the blog post
    (two circles indicating shadows and highlights instead of the
    quad).
    + live view for tethered shooting!
  * darkroom
    + extensive use of edge-aware filtering techniques to suppress
    noise, halos and ringing all around darktable:
    + conditional blending, and a lot of goodies around it!
    + magenta highlights: high-contrast edges to overexposed areas
    (should get rid of purple highlights on tiny water waves and
    purple fringes around tree leaves for example)
    + much improved sharpness for both export and darkroom view,
    especially for downsampled images and if you use lens
    corrections or rotations/perspective corrections. check the new
    options in the preferences dialog, also one more than mentioned
    in the blog ("demosaicing for zoomed out darkroom mode" to
    trade performance for even more sharpness):
  * color management
    + improved per-screen color management (should reload the
    screen profile automatically)
    + more compatible embedded color profiles (should fix problems
    on windows viewing our images, if that matters) read embedded
    color profiles from jpg
  * opencl
    + most of our modules now can take advantage of your computer's
    gpu power
    + caching for compiled opencl kernels (even in case the driver
    doesn't do it) for faster startup times
  * translations
    + two new translations (both portuguese.. ;) )
    + well translated: cs de es fr it ja nl pl pt_BR pt_PT sv
    + half translated: ca fi gl ro ru sq th zh_CN
- Packaging related :
  * Provide the pdf documentation
  * Remove backported patches as they are part of the package now
    + rsvg_cairo.patch
    + update-curves.patch
  * provide tool to work with database cleanup
    purge_non_existing_images.sh (placed in documentation
    directory)
  * where possible use pkgconfig variables for buildrequires</changelog>
<changelog author="toganm@opensuse.org" date="1355054400">- Update to release 1.1.1
  * minor reordering of lighttable mode modules (geotagging, keywords
    and recent collections)
  * cleaned up the default visible plugins when first starting
    darktable
  * in most cases raw files will now show thumbnails in the import
    dialog (thanks to Mattias Eriksson)
  * a curve related crash was fixed (#9906 thanks to James C.
    McPherson)
  * comma seperated tags should work everywhere now (#9006 thanks to
    Tobias Ellinghaus)
  * Ulrich pegelow fixed a huge amount of OpenCL related issues,
    particularly for AMD GPUs
  * we now deal better with hybrid GPU machines (#9074 by Ulrich
  Pegelow)
  * a deadlock in the lens correction module was fixed (#9106 thanks to
    Ulrich Pegelow)
  * we don't delete module presets when cancelling the dialog anymore
    (#9108 thanks to Tobias Ellinghaus)
  * we now have better default memory usage settings (which are set
    upon starting darktable the first time)
  * initial support for SONY NEX 5R
  * preliminary/experimental Canon EOS 6D and Sony RX1 support (future
    changes for these camera's may (for the time being) retroactively
    affect your images)
  * Canon EOS 6D white balance presets (thanks to no_maam_)
  * lots of updates for the usermanual (make sure you download a new
    copy)
- Subpackage the user manual
- enable darktable-viewer by adding sdl to buildrequires</changelog>
<changelog author="toganm@opensuse.org" date="1358078400">- Update to release 1.1.2
  * darktable 1.1.2 is mostly a camera support update and bugfix
    release:
  - fix export resolution rounding issue (as in previous version it
    could be off-by-one)
  - correctly set output dimension in exif instead of passing the raw
    resolution verbatim
  - local average green eq was fixed (it now works on high iso images
    as well, and should no longer produce hot pixels)
  - use ordered arrays in xmp files
  - disable export parallelism for flickr/picasa export
  - don't enter tethering mode when there is no camera attached (this
    made darktable look asif it was hung, even though that wasn't the
    case)
  - bring back the pin for map thumbnails
  - improved tiff support
  - vignetting now has a dithering option (to mitigate occasional
    banding)
  - read nikon subject distance properly
  - assorted freebsd fixes
  - various opencl fixes
  - usermanual updates
  * Support for the following camera's with either preliminarily added
    or updated:
  - canon eos 6d
  - canon powershot s110
  - canon powershot g15
  - canon powershot sx50 hs
  - nikon 1 v2
  - nikon d600
  - nikon coolpix p7700
  - olympus e pl5
  - olympus e pm2
  - olympus xz 2
  - panasonic dmc gh3
  - panasonic dmc lx7
  - pentax k5ii
  - samsung ex2f
  - sony rx1
  - sony nex 6
  - sony slt a99
  - sony nex c3 blackpoint/greenshift fix
  * white balance preset updates:
  - canon eos 550d
  - canon eos 5d mark iii
  - olympus xz 1
  - sony nex c3
  - sony slt a57
  - sony nex 5n
  - panasonic dmc-gh3</changelog>
<changelog author="toganm@opensuse.org" date="1360411200">- Update to release 1.13
  * fixes:
    + check (on build) if glib 2.28 or higher is present
    + don't sanatize exif when creating hdr dngs
    + colorpicker now disappears immediately when disabling it
    + lens correction now uses loose lens matching (ivan tarozzi)
    + konica minolta dynax 5d rotation fix
    + removed an outdated assertion which could cause a crash in rare
    cases
    + don't crash when loading half-corrupted xmp's
    + don't crash when an imported file contains incomplete gps
    information
    + libjpeg-turbo workaround (klaus post)
  * camera support:
    + preliminary support for the new nikon d5200
  * white balance presets:
    + sony alpha 700 (update to firmware v4)
    + sony alpha 230 (new)
    + canon eos 650d (new)
    + canon eos rebel t2i (fixed)
    + canon eos m (fixed)
  * enhanced color rendition:
    + konica minolta dynax 5d (wolfgang kuehnel)
    + sony nex 3 (wolfgang kuehnel)
    + sony alpha 230 (wolfgang kuehnel)
    + sony rx100 (josef wells)
- For openSUSE 12.1 added xz to buildrequires</changelog>
<changelog author="fcrozat@suse.com" date="1360497600">- Add 0001-Olympus-E-M5-enhanced-matrix.patch: Enhanced matrix for
  Olympus OM-D E-M5.</changelog>
<changelog author="toganm@opensuse.org" date="1362916800">- Update to release 1.1.4 This is bugfix release no new features
  are introduced.
  * Fix tooltip style definition in darktable.gtkrc.
  * colorspaces: avoid trademark issues
  * colorspaces: workaround horrible brokenness of some printshops
  * colorspaces: actually cprt is a required icc tag
  * thumbs: use mip always &gt; image size, not closest.
  * wb_presets: Nikon D3200 (stolen from UFRaw)
  * wb_presets: SONY SLT-A77V
  * wb_presets: Panasonic DMC-G5 (thanks to thouks)
  * wb_presets: Pentax K-5 II s (thanks to Jack Bowling)
  * wb_presets: Nikon D800(E) update
  * rawspeed: minor fix for LX7 in 3:2 mode
  * rawspeed: support Panasonic DMC-LX7 16:9 and 1:1 aspect ratio modes
  * rawspeed: support Panasonic DMC-LX7 3:2 aspect ratio mode
  * rawspeed: Preliminary support for the PENTAX K-5 II s
  * rawspeed: added Panasonic DMC-G5 1:1/16:9 modes
  * rawspeed: Nikon 1 S1 support
  * rawspeed: Nikon 1 J3 support
  * rawspeed: Nikon Coolpix P7100 blackpoint fix (thanks to nesthib)
  * Fix base curve presets for Canon on Spanish locale
  * Fix #9205: Read metadata from non-dt XMPs
  * blend: fix edge case in color blend mode
  * redraw: remove now obsolete flood stopping.
  * redraw: allow more redraws per second.
  * redraw signal: simplify the locking logic somewhat.
  * pack blendif settings a little bit closer in GUI
  * cache: have full buffers according to potentially exporting  threads
  * lens correction: fix for #9270
  * opencl: work around a bug in some OpenCL drivers
  * exif: return correct buffer length, patch by wolfgang goetz
  * match leica basecurve less selectively
  * Olympus E-M5 enhanced matrix with help from Frederic Crozat
  * ICC profile handling: catch certain mal-formatted profiles
- Added 0001-Fix-svg-uses-premultiplied-alpha-we-didn-t-respect-t.patch
- Remove 0001-Olympus-E-M5-enhanced-matrix.patch as it's upstreamed</changelog>
<changelog author="fcrozat@suse.com" date="1363521600">- Add gtk2-engine-clearlooks as Requires, needed for darktable
  black theme.</changelog>
<changelog author="mrueckert@suse.de" date="1365076800">- update to release 1.2.rc2
  - the changes on top of rc1 are minor, some details:
  - fixed a spurious crash/deadlock when switching images in
    filmstrip mode
  - fixed a couple of exif strings for profiled denoising
  - fixed gcc 4.8.0 build
  - new noise profiles
  - fixed gphoto 2.5 issues
  - updated translations
  - updated user manual!
- additional changes from 1.2.rc1
  - profiled denoising: adapt to the properties of your camera's
    sensor (72 cameras already profiled for you).
  - lightroom import: convert some basic edits from your lightroom
    collection to darktable operations.
  - multi instance support: duplicate your modules and apply them
    more than one time with different settings.
  - improved usability for distorting modules (streamline spot
    removal in the presence of crop/rotate for example).
  - selective copy/paste of image processing.
  - new more intuitive keystone correction tool.
  - jpeg2000 support.
  - graphics magick import (support virtually all input image
    formats).
  - much faster thumbnail loading (if you can live with crappy
    embedded thumbnails).
  - incredibly lengthy list of small bug fixes, performance
    enhancements, and usability improvements.
  - new camera support (decode and color matrices).
  - dithering against banding.
  - sharper thumbnails in lighttable mode.
  - new oauth2 based picasa uploader.
  - and the final release 1.2 will contain a thoroughly overhauled
    user manual, proof read by natives (thanks heaps guys!).
- removed 0001-Fix-svg-uses-premultiplied-alpha-we-didn-t-respect-t.patch
  included upstream
- added BuildRequires for GraphicsMagick and openjpeg</changelog>
<changelog author="mrueckert@suse.de" date="1365076801">- added darktable-1.2.x_update_to_4b856e6ec99035d5a1041db73e2339000d395aa0.patch:
  update to HEAD (4b856e6ec99035d5a1041db73e2339000d395aa0)
  - adobe_coeff: Nikon Coolpix A same as D7000
  - fix-crash-lr-import:
    Proactive fix to avoid a crash trying to dereference a null
    pointer.  If node stEvt:softwareAgent not found, skip as not a
    lightroom xmp.
  - don't crash on malformatted TIFF file
    In case a file was alraedy rejected by GraphicsMagick, it's not
    a good idea to try open it with our handmade imageio routines
    like TIFFOpen().  Let's take GraphicsMagick as a last resort if
    available.
  - usermanual: add missing file lighttable_directory.png
  - Fix: snapshot + gnd, cliping, ... #9329
  - Upgraded and reviewed Spanish translation
    I have fully reviewed the Spanish translation, fixing typos,
    improving grammar and the language used.
  - denoiseprofile: really fix legacy_params
  - denoiseprofile: get param "mode" right when converting params
    from version 2 to 3 fix: denoiseprofile: crash when trying to
    update presets/styles from version 2 to 3 do not try to find
    autodetection for them - would probably be not useful and is
    impossible anyway
  - Merge pull request #206 from bluesceada/denoise-copy-autodetect
    denoiseprofile: copy "profile autodetected" correctly + fix:
    display "found match" also for first profile
  - noise profile: canon eos 1d iv by rene weiss
  - denoiseprofile: only use a[0] = -1.0 to signal autodetection,
    and don't use epsilon for comparisons
  - denoiseprofile: make it possible to copy the information "this
    profile was set automatically" across images with different ISO
    and camera vendor
  - fix: denoiseprofile: also show "found match:" instead of the
    profile name for index 0
  - Preliminary update of the Russian translation
  - Merge branch 'fix-clipping-aspect'
  * fix-clipping-aspect:
    Fix aspect ratio computation.
    It cannot happen in legacy_params() as at this point the size
    of the image is not yet known. We then use a deferred
    circuitry to handle this at the right point in the code.
    Fixes #9320.
  - [l10n] Swedish update</changelog>
<changelog author="toganm@opensuse.org" date="1365249600">- Update to release 1.2
- removed
  darktable-1.2.x_update_to_4b856e6ec99035d5a1041db73e2339000d395aa0.patch
  as it is now included.
- When possible use pkgconfig hence:
  instead of libopenjgeg-devel  used  pkgconfig(libopenjpeg)
  instead of GraphicsMagick-devel used pkgconfig(GraphicsMagick)
- If build is for 12.1 then require gtk2-engines</changelog>
<changelog author="toganm@opensuse.org" date="1366718400">- Fix factory build with OpenEXR-2.0
  added 0001-OpenEXR-2.0-fixes.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366977600">- First set CFLAGS and then CXXFLAGS. Sometimes we need to set
  flags in CXXFLAGS that are not valid CFLAGS.</changelog>
<changelog author="toganm@opensuse.org" date="1369569600">- Update to release 1.2.1
  * New translation: Danish
  * Some translations have been removed from the release due to
    missing strings
  * New noise profiles
    + Canon EOS 450D / Kiss X2
    + Canon EOS 1100D / REBEL T3
    + Canon EOS 1D Mark II
    + Canon EOS 1D Mark III
    + All Canon Model names are now recognized, e.g. Canon EOS 350D
    and Canon EOS 350D DIGITAL and Canon EOS DIGITAL REBEL XT and
    Canon EOS Kiss Digital N point to the same camera.
    + Olympus E-520
    + Olympus E-1
    + Olympus E-3
    + Olympus E-P2
    + Pentax K-30
    + Panasonic GH-2
    + Panasonic DMZ-FZ18
    + Additional data for Pentax K-5 II
    + Nikon D7100
    + Nikon D5200
    + Sony A57
  * White balances, color matrices
    + Fix issues with different camera model names for various Canon
    cameras (see above)
    + White balance for Panasonic DMC-GH2
    + Updates whitebalance list with the latest version of UFRaw's cvs version
    + Whitebalances for Samsung NX5, NX10, NX11 (copied from NX100)
  * Bugfixes
    + new RawSpeed version r537
    + Compatible with openEXR 2.0
    + Facebook export now allows HQ images (up to 2048px)
    + Blend mode "vividlight" should work for NaNs
    + Fix compile issues for OpenBSD
    + Whitebalance is now relative to daylight, not to camera white
    balance (this will not change any processing you have done,
    only the values displayed will differ)
    + Now importing folder via key accelerator is supported.
    + Only one temperature slider in white balance
    + Some fixes to the zoom behaviour in darkroom mode
    + New lensfun geometries now supported (with lensfun &gt;= 0.2.7)
    + More coherent bauhaus UI for the split toning module
    + The color transfer module is now marked as deprecated. Will be
    superseeded by color mapping in the next major release.
    + Fix some possible deadlocks, memory leaks and null pointer dereferences
    + Status message in top bar should be updated more frequently now
    + Some more elaborate status messages if lens/camera not found in the
    lens correction module, if export failed
    + Option for parallel export threads removed from config, too dangerous
    + Option for thumbnail cache now specified in MB
    + Updated purge_non_existing_images.sh script
    + CLI option -d nan gives per-module output of NaN values
    + Some minor renamings, typo fixings...
- Drop 0001--OpenEXR-2.0-fixes.patch since fixed upstream</changelog>
<changelog author="toganm@opensuse.org" date="1370865600">- added backported patch from git master
  0001-fixed-error-handling-for-broken-full-color-images.patch
  fixes bnc#823114</changelog>
<changelog author="toganm@opensuse.org" date="1371729600">-  Remove patented code from the source via
  generate--tarball.sh bnc#824484
  * added backported patch from git master
    0001-thumbnail-compression-make-libsquish-optional
  * Remove pkgconfig(colord) from Build Requires
  Because compression code is disabled previous cache will not
  work. Removing  ~/.cache/darktable/mipmaps is necessary</changelog>
<changelog author="toganm@opensuse.org" date="1372161600">- Update to version 1.2.2
  * updated rawspeed r553. Support for
    + Canon EOS 700D
    + Nikon Coolpix P330
  * New Olymbus base curve
  * Updated Adobe Coeffs
  * Enhanced color matrices:
    + Canon 700D (from Canon 650D)
    + Canon 100D (from Canon 650D)
  * Sony NEX-7
  * White balance presets:
    + Some updates from UFRaw
    + Canon 100D
    + Canon 700D
    + Sony SLT-A37
    + Nikon Coolpix P330
  * Noise profiles:
    + Canon EOS-M
    + Olympus E-600 (from: Olympus E-30)
    + Olympus E-620 (from: Olympus E-30)
    + Samsung WB2000
    + Sony A99v
    + Panasonic DMC-G10 iso 100
    + Nikon D60
  * Bug fixes:
    + 0 star rating working again
    + LT: ctrl+d duplicates per default now
    + Some fixes concerning locale handling
    + double click on film strip jumps to image
    + remember position in collections
    + ctrl+k jumps to previous collection
    + Blending parameters are preserved when module is deactivated
    + In full-preview (alt-1) ratings and labels are only applied to
    + image shown
    + Various OpenCL fixes, e.g. compilation on Mac OS X
    + libsquish compilation now optional
    + dr: deactivate interpolation at 200% zoom
  * Removed backported patches:
  0001-thumbnail-compression-make-libsquish-optional
  0001-fixed-error-handling-for-broken-full-color-images.patch</changelog>
<changelog author="toganm@opensuse.org" date="1378814400">- Update to version 1.2.3
  + Update to RawSpeed r570
  + Canon 70D (preliminary)
  + Olympus E-P5 (incl. preliminary Adobe Coeff.)
  + Samsung NX2000
  + Sony RX100m2
  + Sony SLT-A58 (updated)
  * White Balance Presets:
  + Sony NEX-5R
  + Sony SLT-A58
  + Nikon D3200 (updated)
  + Pentax K20D
  * Enhanced Color Matrix:
  + Pentax K20D
  * Noise Profiles:
  + Canon EOS 1100D == Canon EOS Rebel T3
  + Canon PowerShot S95
  + Canon PowerShot G11
  + Nikon Coolpix P330
  + Sony A580
  + Fuji X10
  + Pentax K20D
  * Fixes and improvements:
  + Increased maximum cache size to 8GB
  + OS X: fix Facebook uploads
  + Adjustments to default lowpass blur settings
  + Adjustments to dithering slider ranges
  + Metadata viewer: fix display of focal length: indicate unit
    and hide  if invalid.
  + Chromatic Aberrations: fix segfault for small buffers
  + Color pickers: fix various issues, e.g. #9482
  + More guides for Crop &amp; Rotate
  + Improve light table usability: when viewing images in
    fullscreen wrap  around at line end when pressing right arrow
    key
  + Soften: massive speed improvements by using SSE and OpenMP
  + Deleting images from camera is not supported anymore for
    safety.
  + Exposure module now supports multiple instances
  + Support for custom meta data burn in (see commit
    6ac7ba055440aa27f79f0a67ac112799a0e7785e)
  + OpenCL support for nVidia GeForce GT330
  + PFM: load timestamp as date &amp; time taken.
  + Fix bug prohibiting image rating by mouse
  + Update Picasa uploader: references Google+ now
  + Some fixes for memory leaks, deadlocks, background jobs
  + Fixes of on-screen handles for Crop&amp;Rotate and GND modules
  + 0 bytes files will no longer be imported but ignored</changelog>
<changelog author="toganm@opensuse.org" date="1387195200">- added patches:
  * 0001-Fix-9720-Don-t-crash-when-kwallet-is-not-running.patch
    backported from git fixes bnc#855442</changelog>

</package>
<package pkgid="54d36eb6e64d8d2a18c73610d2e59c388482c1e949b16fff4427f5048810e8ca" name="darktable" arch="x86_64">
    <version epoch="0" ver="1.2.3" rel="2.5.1"/>

<changelog author="fcrozat@suse.com" date="1344168000">- Add update-curves.patch: add additional basecurves for Olympus
  E-M5 and EOS 5D Mark II/III and Nikon Dxxxx (from git)</changelog>
<changelog author="toganm@opensuse.org" date="1349784000">- Add rsvg_cairo.patch: Fixes Build for factory because of deprecated
  use of  librsvg (from git)</changelog>
<changelog author="toganm@opensuse.org" date="1354017600">- Update to release 1.1
  * general
    + new camera support, new whitebalance presets, etc., including
    canon eos m support and samsung nx fix
    + similarity matching search for images that look alike.
    + geotagging, complete with map view
    + a lot of bugfixes (mainly thanks to ulrich for his meticulous
    work)
    + facebook exporter (for those who have an account there)
  * ui
    + reworked the much hated `more plugins' widget
    + image grouping:
    + command line interface!
    + tone and base curves got a new user interface to better
    support fine grained workflow
    + visually low-profile controls with finetuning:
    + color correction module got a GUI update since the blog post
    (two circles indicating shadows and highlights instead of the
    quad).
    + live view for tethered shooting!
  * darkroom
    + extensive use of edge-aware filtering techniques to suppress
    noise, halos and ringing all around darktable:
    + conditional blending, and a lot of goodies around it!
    + magenta highlights: high-contrast edges to overexposed areas
    (should get rid of purple highlights on tiny water waves and
    purple fringes around tree leaves for example)
    + much improved sharpness for both export and darkroom view,
    especially for downsampled images and if you use lens
    corrections or rotations/perspective corrections. check the new
    options in the preferences dialog, also one more than mentioned
    in the blog ("demosaicing for zoomed out darkroom mode" to
    trade performance for even more sharpness):
  * color management
    + improved per-screen color management (should reload the
    screen profile automatically)
    + more compatible embedded color profiles (should fix problems
    on windows viewing our images, if that matters) read embedded
    color profiles from jpg
  * opencl
    + most of our modules now can take advantage of your computer's
    gpu power
    + caching for compiled opencl kernels (even in case the driver
    doesn't do it) for faster startup times
  * translations
    + two new translations (both portuguese.. ;) )
    + well translated: cs de es fr it ja nl pl pt_BR pt_PT sv
    + half translated: ca fi gl ro ru sq th zh_CN
- Packaging related :
  * Provide the pdf documentation
  * Remove backported patches as they are part of the package now
    + rsvg_cairo.patch
    + update-curves.patch
  * provide tool to work with database cleanup
    purge_non_existing_images.sh (placed in documentation
    directory)
  * where possible use pkgconfig variables for buildrequires</changelog>
<changelog author="toganm@opensuse.org" date="1355054400">- Update to release 1.1.1
  * minor reordering of lighttable mode modules (geotagging, keywords
    and recent collections)
  * cleaned up the default visible plugins when first starting
    darktable
  * in most cases raw files will now show thumbnails in the import
    dialog (thanks to Mattias Eriksson)
  * a curve related crash was fixed (#9906 thanks to James C.
    McPherson)
  * comma seperated tags should work everywhere now (#9006 thanks to
    Tobias Ellinghaus)
  * Ulrich pegelow fixed a huge amount of OpenCL related issues,
    particularly for AMD GPUs
  * we now deal better with hybrid GPU machines (#9074 by Ulrich
  Pegelow)
  * a deadlock in the lens correction module was fixed (#9106 thanks to
    Ulrich Pegelow)
  * we don't delete module presets when cancelling the dialog anymore
    (#9108 thanks to Tobias Ellinghaus)
  * we now have better default memory usage settings (which are set
    upon starting darktable the first time)
  * initial support for SONY NEX 5R
  * preliminary/experimental Canon EOS 6D and Sony RX1 support (future
    changes for these camera's may (for the time being) retroactively
    affect your images)
  * Canon EOS 6D white balance presets (thanks to no_maam_)
  * lots of updates for the usermanual (make sure you download a new
    copy)
- Subpackage the user manual
- enable darktable-viewer by adding sdl to buildrequires</changelog>
<changelog author="toganm@opensuse.org" date="1358078400">- Update to release 1.1.2
  * darktable 1.1.2 is mostly a camera support update and bugfix
    release:
  - fix export resolution rounding issue (as in previous version it
    could be off-by-one)
  - correctly set output dimension in exif instead of passing the raw
    resolution verbatim
  - local average green eq was fixed (it now works on high iso images
    as well, and should no longer produce hot pixels)
  - use ordered arrays in xmp files
  - disable export parallelism for flickr/picasa export
  - don't enter tethering mode when there is no camera attached (this
    made darktable look asif it was hung, even though that wasn't the
    case)
  - bring back the pin for map thumbnails
  - improved tiff support
  - vignetting now has a dithering option (to mitigate occasional
    banding)
  - read nikon subject distance properly
  - assorted freebsd fixes
  - various opencl fixes
  - usermanual updates
  * Support for the following camera's with either preliminarily added
    or updated:
  - canon eos 6d
  - canon powershot s110
  - canon powershot g15
  - canon powershot sx50 hs
  - nikon 1 v2
  - nikon d600
  - nikon coolpix p7700
  - olympus e pl5
  - olympus e pm2
  - olympus xz 2
  - panasonic dmc gh3
  - panasonic dmc lx7
  - pentax k5ii
  - samsung ex2f
  - sony rx1
  - sony nex 6
  - sony slt a99
  - sony nex c3 blackpoint/greenshift fix
  * white balance preset updates:
  - canon eos 550d
  - canon eos 5d mark iii
  - olympus xz 1
  - sony nex c3
  - sony slt a57
  - sony nex 5n
  - panasonic dmc-gh3</changelog>
<changelog author="toganm@opensuse.org" date="1360411200">- Update to release 1.13
  * fixes:
    + check (on build) if glib 2.28 or higher is present
    + don't sanatize exif when creating hdr dngs
    + colorpicker now disappears immediately when disabling it
    + lens correction now uses loose lens matching (ivan tarozzi)
    + konica minolta dynax 5d rotation fix
    + removed an outdated assertion which could cause a crash in rare
    cases
    + don't crash when loading half-corrupted xmp's
    + don't crash when an imported file contains incomplete gps
    information
    + libjpeg-turbo workaround (klaus post)
  * camera support:
    + preliminary support for the new nikon d5200
  * white balance presets:
    + sony alpha 700 (update to firmware v4)
    + sony alpha 230 (new)
    + canon eos 650d (new)
    + canon eos rebel t2i (fixed)
    + canon eos m (fixed)
  * enhanced color rendition:
    + konica minolta dynax 5d (wolfgang kuehnel)
    + sony nex 3 (wolfgang kuehnel)
    + sony alpha 230 (wolfgang kuehnel)
    + sony rx100 (josef wells)
- For openSUSE 12.1 added xz to buildrequires</changelog>
<changelog author="fcrozat@suse.com" date="1360497600">- Add 0001-Olympus-E-M5-enhanced-matrix.patch: Enhanced matrix for
  Olympus OM-D E-M5.</changelog>
<changelog author="toganm@opensuse.org" date="1362916800">- Update to release 1.1.4 This is bugfix release no new features
  are introduced.
  * Fix tooltip style definition in darktable.gtkrc.
  * colorspaces: avoid trademark issues
  * colorspaces: workaround horrible brokenness of some printshops
  * colorspaces: actually cprt is a required icc tag
  * thumbs: use mip always &gt; image size, not closest.
  * wb_presets: Nikon D3200 (stolen from UFRaw)
  * wb_presets: SONY SLT-A77V
  * wb_presets: Panasonic DMC-G5 (thanks to thouks)
  * wb_presets: Pentax K-5 II s (thanks to Jack Bowling)
  * wb_presets: Nikon D800(E) update
  * rawspeed: minor fix for LX7 in 3:2 mode
  * rawspeed: support Panasonic DMC-LX7 16:9 and 1:1 aspect ratio modes
  * rawspeed: support Panasonic DMC-LX7 3:2 aspect ratio mode
  * rawspeed: Preliminary support for the PENTAX K-5 II s
  * rawspeed: added Panasonic DMC-G5 1:1/16:9 modes
  * rawspeed: Nikon 1 S1 support
  * rawspeed: Nikon 1 J3 support
  * rawspeed: Nikon Coolpix P7100 blackpoint fix (thanks to nesthib)
  * Fix base curve presets for Canon on Spanish locale
  * Fix #9205: Read metadata from non-dt XMPs
  * blend: fix edge case in color blend mode
  * redraw: remove now obsolete flood stopping.
  * redraw: allow more redraws per second.
  * redraw signal: simplify the locking logic somewhat.
  * pack blendif settings a little bit closer in GUI
  * cache: have full buffers according to potentially exporting  threads
  * lens correction: fix for #9270
  * opencl: work around a bug in some OpenCL drivers
  * exif: return correct buffer length, patch by wolfgang goetz
  * match leica basecurve less selectively
  * Olympus E-M5 enhanced matrix with help from Frederic Crozat
  * ICC profile handling: catch certain mal-formatted profiles
- Added 0001-Fix-svg-uses-premultiplied-alpha-we-didn-t-respect-t.patch
- Remove 0001-Olympus-E-M5-enhanced-matrix.patch as it's upstreamed</changelog>
<changelog author="fcrozat@suse.com" date="1363521600">- Add gtk2-engine-clearlooks as Requires, needed for darktable
  black theme.</changelog>
<changelog author="mrueckert@suse.de" date="1365076800">- update to release 1.2.rc2
  - the changes on top of rc1 are minor, some details:
  - fixed a spurious crash/deadlock when switching images in
    filmstrip mode
  - fixed a couple of exif strings for profiled denoising
  - fixed gcc 4.8.0 build
  - new noise profiles
  - fixed gphoto 2.5 issues
  - updated translations
  - updated user manual!
- additional changes from 1.2.rc1
  - profiled denoising: adapt to the properties of your camera's
    sensor (72 cameras already profiled for you).
  - lightroom import: convert some basic edits from your lightroom
    collection to darktable operations.
  - multi instance support: duplicate your modules and apply them
    more than one time with different settings.
  - improved usability for distorting modules (streamline spot
    removal in the presence of crop/rotate for example).
  - selective copy/paste of image processing.
  - new more intuitive keystone correction tool.
  - jpeg2000 support.
  - graphics magick import (support virtually all input image
    formats).
  - much faster thumbnail loading (if you can live with crappy
    embedded thumbnails).
  - incredibly lengthy list of small bug fixes, performance
    enhancements, and usability improvements.
  - new camera support (decode and color matrices).
  - dithering against banding.
  - sharper thumbnails in lighttable mode.
  - new oauth2 based picasa uploader.
  - and the final release 1.2 will contain a thoroughly overhauled
    user manual, proof read by natives (thanks heaps guys!).
- removed 0001-Fix-svg-uses-premultiplied-alpha-we-didn-t-respect-t.patch
  included upstream
- added BuildRequires for GraphicsMagick and openjpeg</changelog>
<changelog author="mrueckert@suse.de" date="1365076801">- added darktable-1.2.x_update_to_4b856e6ec99035d5a1041db73e2339000d395aa0.patch:
  update to HEAD (4b856e6ec99035d5a1041db73e2339000d395aa0)
  - adobe_coeff: Nikon Coolpix A same as D7000
  - fix-crash-lr-import:
    Proactive fix to avoid a crash trying to dereference a null
    pointer.  If node stEvt:softwareAgent not found, skip as not a
    lightroom xmp.
  - don't crash on malformatted TIFF file
    In case a file was alraedy rejected by GraphicsMagick, it's not
    a good idea to try open it with our handmade imageio routines
    like TIFFOpen().  Let's take GraphicsMagick as a last resort if
    available.
  - usermanual: add missing file lighttable_directory.png
  - Fix: snapshot + gnd, cliping, ... #9329
  - Upgraded and reviewed Spanish translation
    I have fully reviewed the Spanish translation, fixing typos,
    improving grammar and the language used.
  - denoiseprofile: really fix legacy_params
  - denoiseprofile: get param "mode" right when converting params
    from version 2 to 3 fix: denoiseprofile: crash when trying to
    update presets/styles from version 2 to 3 do not try to find
    autodetection for them - would probably be not useful and is
    impossible anyway
  - Merge pull request #206 from bluesceada/denoise-copy-autodetect
    denoiseprofile: copy "profile autodetected" correctly + fix:
    display "found match" also for first profile
  - noise profile: canon eos 1d iv by rene weiss
  - denoiseprofile: only use a[0] = -1.0 to signal autodetection,
    and don't use epsilon for comparisons
  - denoiseprofile: make it possible to copy the information "this
    profile was set automatically" across images with different ISO
    and camera vendor
  - fix: denoiseprofile: also show "found match:" instead of the
    profile name for index 0
  - Preliminary update of the Russian translation
  - Merge branch 'fix-clipping-aspect'
  * fix-clipping-aspect:
    Fix aspect ratio computation.
    It cannot happen in legacy_params() as at this point the size
    of the image is not yet known. We then use a deferred
    circuitry to handle this at the right point in the code.
    Fixes #9320.
  - [l10n] Swedish update</changelog>
<changelog author="toganm@opensuse.org" date="1365249600">- Update to release 1.2
- removed
  darktable-1.2.x_update_to_4b856e6ec99035d5a1041db73e2339000d395aa0.patch
  as it is now included.
- When possible use pkgconfig hence:
  instead of libopenjgeg-devel  used  pkgconfig(libopenjpeg)
  instead of GraphicsMagick-devel used pkgconfig(GraphicsMagick)
- If build is for 12.1 then require gtk2-engines</changelog>
<changelog author="toganm@opensuse.org" date="1366718400">- Fix factory build with OpenEXR-2.0
  added 0001-OpenEXR-2.0-fixes.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366977600">- First set CFLAGS and then CXXFLAGS. Sometimes we need to set
  flags in CXXFLAGS that are not valid CFLAGS.</changelog>
<changelog author="toganm@opensuse.org" date="1369569600">- Update to release 1.2.1
  * New translation: Danish
  * Some translations have been removed from the release due to
    missing strings
  * New noise profiles
    + Canon EOS 450D / Kiss X2
    + Canon EOS 1100D / REBEL T3
    + Canon EOS 1D Mark II
    + Canon EOS 1D Mark III
    + All Canon Model names are now recognized, e.g. Canon EOS 350D
    and Canon EOS 350D DIGITAL and Canon EOS DIGITAL REBEL XT and
    Canon EOS Kiss Digital N point to the same camera.
    + Olympus E-520
    + Olympus E-1
    + Olympus E-3
    + Olympus E-P2
    + Pentax K-30
    + Panasonic GH-2
    + Panasonic DMZ-FZ18
    + Additional data for Pentax K-5 II
    + Nikon D7100
    + Nikon D5200
    + Sony A57
  * White balances, color matrices
    + Fix issues with different camera model names for various Canon
    cameras (see above)
    + White balance for Panasonic DMC-GH2
    + Updates whitebalance list with the latest version of UFRaw's cvs version
    + Whitebalances for Samsung NX5, NX10, NX11 (copied from NX100)
  * Bugfixes
    + new RawSpeed version r537
    + Compatible with openEXR 2.0
    + Facebook export now allows HQ images (up to 2048px)
    + Blend mode "vividlight" should work for NaNs
    + Fix compile issues for OpenBSD
    + Whitebalance is now relative to daylight, not to camera white
    balance (this will not change any processing you have done,
    only the values displayed will differ)
    + Now importing folder via key accelerator is supported.
    + Only one temperature slider in white balance
    + Some fixes to the zoom behaviour in darkroom mode
    + New lensfun geometries now supported (with lensfun &gt;= 0.2.7)
    + More coherent bauhaus UI for the split toning module
    + The color transfer module is now marked as deprecated. Will be
    superseeded by color mapping in the next major release.
    + Fix some possible deadlocks, memory leaks and null pointer dereferences
    + Status message in top bar should be updated more frequently now
    + Some more elaborate status messages if lens/camera not found in the
    lens correction module, if export failed
    + Option for parallel export threads removed from config, too dangerous
    + Option for thumbnail cache now specified in MB
    + Updated purge_non_existing_images.sh script
    + CLI option -d nan gives per-module output of NaN values
    + Some minor renamings, typo fixings...
- Drop 0001--OpenEXR-2.0-fixes.patch since fixed upstream</changelog>
<changelog author="toganm@opensuse.org" date="1370865600">- added backported patch from git master
  0001-fixed-error-handling-for-broken-full-color-images.patch
  fixes bnc#823114</changelog>
<changelog author="toganm@opensuse.org" date="1371729600">-  Remove patented code from the source via
  generate--tarball.sh bnc#824484
  * added backported patch from git master
    0001-thumbnail-compression-make-libsquish-optional
  * Remove pkgconfig(colord) from Build Requires
  Because compression code is disabled previous cache will not
  work. Removing  ~/.cache/darktable/mipmaps is necessary</changelog>
<changelog author="toganm@opensuse.org" date="1372161600">- Update to version 1.2.2
  * updated rawspeed r553. Support for
    + Canon EOS 700D
    + Nikon Coolpix P330
  * New Olymbus base curve
  * Updated Adobe Coeffs
  * Enhanced color matrices:
    + Canon 700D (from Canon 650D)
    + Canon 100D (from Canon 650D)
  * Sony NEX-7
  * White balance presets:
    + Some updates from UFRaw
    + Canon 100D
    + Canon 700D
    + Sony SLT-A37
    + Nikon Coolpix P330
  * Noise profiles:
    + Canon EOS-M
    + Olympus E-600 (from: Olympus E-30)
    + Olympus E-620 (from: Olympus E-30)
    + Samsung WB2000
    + Sony A99v
    + Panasonic DMC-G10 iso 100
    + Nikon D60
  * Bug fixes:
    + 0 star rating working again
    + LT: ctrl+d duplicates per default now
    + Some fixes concerning locale handling
    + double click on film strip jumps to image
    + remember position in collections
    + ctrl+k jumps to previous collection
    + Blending parameters are preserved when module is deactivated
    + In full-preview (alt-1) ratings and labels are only applied to
    + image shown
    + Various OpenCL fixes, e.g. compilation on Mac OS X
    + libsquish compilation now optional
    + dr: deactivate interpolation at 200% zoom
  * Removed backported patches:
  0001-thumbnail-compression-make-libsquish-optional
  0001-fixed-error-handling-for-broken-full-color-images.patch</changelog>
<changelog author="toganm@opensuse.org" date="1378814400">- Update to version 1.2.3
  + Update to RawSpeed r570
  + Canon 70D (preliminary)
  + Olympus E-P5 (incl. preliminary Adobe Coeff.)
  + Samsung NX2000
  + Sony RX100m2
  + Sony SLT-A58 (updated)
  * White Balance Presets:
  + Sony NEX-5R
  + Sony SLT-A58
  + Nikon D3200 (updated)
  + Pentax K20D
  * Enhanced Color Matrix:
  + Pentax K20D
  * Noise Profiles:
  + Canon EOS 1100D == Canon EOS Rebel T3
  + Canon PowerShot S95
  + Canon PowerShot G11
  + Nikon Coolpix P330
  + Sony A580
  + Fuji X10
  + Pentax K20D
  * Fixes and improvements:
  + Increased maximum cache size to 8GB
  + OS X: fix Facebook uploads
  + Adjustments to default lowpass blur settings
  + Adjustments to dithering slider ranges
  + Metadata viewer: fix display of focal length: indicate unit
    and hide  if invalid.
  + Chromatic Aberrations: fix segfault for small buffers
  + Color pickers: fix various issues, e.g. #9482
  + More guides for Crop &amp; Rotate
  + Improve light table usability: when viewing images in
    fullscreen wrap  around at line end when pressing right arrow
    key
  + Soften: massive speed improvements by using SSE and OpenMP
  + Deleting images from camera is not supported anymore for
    safety.
  + Exposure module now supports multiple instances
  + Support for custom meta data burn in (see commit
    6ac7ba055440aa27f79f0a67ac112799a0e7785e)
  + OpenCL support for nVidia GeForce GT330
  + PFM: load timestamp as date &amp; time taken.
  + Fix bug prohibiting image rating by mouse
  + Update Picasa uploader: references Google+ now
  + Some fixes for memory leaks, deadlocks, background jobs
  + Fixes of on-screen handles for Crop&amp;Rotate and GND modules
  + 0 bytes files will no longer be imported but ignored</changelog>
<changelog author="toganm@opensuse.org" date="1387195200">- added patches:
  * 0001-Fix-9720-Don-t-crash-when-kwallet-is-not-running.patch
    backported from git fixes bnc#855442</changelog>

</package>
<package pkgid="0adcf80454b80e4e1898b34a393e9b8dca955bb4c1c360ccc1b3627c9d1eb4e3" name="darktable-doc" arch="i586">
    <version epoch="0" ver="1.2.3" rel="2.5.1"/>

<changelog author="fcrozat@suse.com" date="1344168000">- Add update-curves.patch: add additional basecurves for Olympus
  E-M5 and EOS 5D Mark II/III and Nikon Dxxxx (from git)</changelog>
<changelog author="toganm@opensuse.org" date="1349784000">- Add rsvg_cairo.patch: Fixes Build for factory because of deprecated
  use of  librsvg (from git)</changelog>
<changelog author="toganm@opensuse.org" date="1354017600">- Update to release 1.1
  * general
    + new camera support, new whitebalance presets, etc., including
    canon eos m support and samsung nx fix
    + similarity matching search for images that look alike.
    + geotagging, complete with map view
    + a lot of bugfixes (mainly thanks to ulrich for his meticulous
    work)
    + facebook exporter (for those who have an account there)
  * ui
    + reworked the much hated `more plugins' widget
    + image grouping:
    + command line interface!
    + tone and base curves got a new user interface to better
    support fine grained workflow
    + visually low-profile controls with finetuning:
    + color correction module got a GUI update since the blog post
    (two circles indicating shadows and highlights instead of the
    quad).
    + live view for tethered shooting!
  * darkroom
    + extensive use of edge-aware filtering techniques to suppress
    noise, halos and ringing all around darktable:
    + conditional blending, and a lot of goodies around it!
    + magenta highlights: high-contrast edges to overexposed areas
    (should get rid of purple highlights on tiny water waves and
    purple fringes around tree leaves for example)
    + much improved sharpness for both export and darkroom view,
    especially for downsampled images and if you use lens
    corrections or rotations/perspective corrections. check the new
    options in the preferences dialog, also one more than mentioned
    in the blog ("demosaicing for zoomed out darkroom mode" to
    trade performance for even more sharpness):
  * color management
    + improved per-screen color management (should reload the
    screen profile automatically)
    + more compatible embedded color profiles (should fix problems
    on windows viewing our images, if that matters) read embedded
    color profiles from jpg
  * opencl
    + most of our modules now can take advantage of your computer's
    gpu power
    + caching for compiled opencl kernels (even in case the driver
    doesn't do it) for faster startup times
  * translations
    + two new translations (both portuguese.. ;) )
    + well translated: cs de es fr it ja nl pl pt_BR pt_PT sv
    + half translated: ca fi gl ro ru sq th zh_CN
- Packaging related :
  * Provide the pdf documentation
  * Remove backported patches as they are part of the package now
    + rsvg_cairo.patch
    + update-curves.patch
  * provide tool to work with database cleanup
    purge_non_existing_images.sh (placed in documentation
    directory)
  * where possible use pkgconfig variables for buildrequires</changelog>
<changelog author="toganm@opensuse.org" date="1355054400">- Update to release 1.1.1
  * minor reordering of lighttable mode modules (geotagging, keywords
    and recent collections)
  * cleaned up the default visible plugins when first starting
    darktable
  * in most cases raw files will now show thumbnails in the import
    dialog (thanks to Mattias Eriksson)
  * a curve related crash was fixed (#9906 thanks to James C.
    McPherson)
  * comma seperated tags should work everywhere now (#9006 thanks to
    Tobias Ellinghaus)
  * Ulrich pegelow fixed a huge amount of OpenCL related issues,
    particularly for AMD GPUs
  * we now deal better with hybrid GPU machines (#9074 by Ulrich
  Pegelow)
  * a deadlock in the lens correction module was fixed (#9106 thanks to
    Ulrich Pegelow)
  * we don't delete module presets when cancelling the dialog anymore
    (#9108 thanks to Tobias Ellinghaus)
  * we now have better default memory usage settings (which are set
    upon starting darktable the first time)
  * initial support for SONY NEX 5R
  * preliminary/experimental Canon EOS 6D and Sony RX1 support (future
    changes for these camera's may (for the time being) retroactively
    affect your images)
  * Canon EOS 6D white balance presets (thanks to no_maam_)
  * lots of updates for the usermanual (make sure you download a new
    copy)
- Subpackage the user manual
- enable darktable-viewer by adding sdl to buildrequires</changelog>
<changelog author="toganm@opensuse.org" date="1358078400">- Update to release 1.1.2
  * darktable 1.1.2 is mostly a camera support update and bugfix
    release:
  - fix export resolution rounding issue (as in previous version it
    could be off-by-one)
  - correctly set output dimension in exif instead of passing the raw
    resolution verbatim
  - local average green eq was fixed (it now works on high iso images
    as well, and should no longer produce hot pixels)
  - use ordered arrays in xmp files
  - disable export parallelism for flickr/picasa export
  - don't enter tethering mode when there is no camera attached (this
    made darktable look asif it was hung, even though that wasn't the
    case)
  - bring back the pin for map thumbnails
  - improved tiff support
  - vignetting now has a dithering option (to mitigate occasional
    banding)
  - read nikon subject distance properly
  - assorted freebsd fixes
  - various opencl fixes
  - usermanual updates
  * Support for the following camera's with either preliminarily added
    or updated:
  - canon eos 6d
  - canon powershot s110
  - canon powershot g15
  - canon powershot sx50 hs
  - nikon 1 v2
  - nikon d600
  - nikon coolpix p7700
  - olympus e pl5
  - olympus e pm2
  - olympus xz 2
  - panasonic dmc gh3
  - panasonic dmc lx7
  - pentax k5ii
  - samsung ex2f
  - sony rx1
  - sony nex 6
  - sony slt a99
  - sony nex c3 blackpoint/greenshift fix
  * white balance preset updates:
  - canon eos 550d
  - canon eos 5d mark iii
  - olympus xz 1
  - sony nex c3
  - sony slt a57
  - sony nex 5n
  - panasonic dmc-gh3</changelog>
<changelog author="toganm@opensuse.org" date="1360411200">- Update to release 1.13
  * fixes:
    + check (on build) if glib 2.28 or higher is present
    + don't sanatize exif when creating hdr dngs
    + colorpicker now disappears immediately when disabling it
    + lens correction now uses loose lens matching (ivan tarozzi)
    + konica minolta dynax 5d rotation fix
    + removed an outdated assertion which could cause a crash in rare
    cases
    + don't crash when loading half-corrupted xmp's
    + don't crash when an imported file contains incomplete gps
    information
    + libjpeg-turbo workaround (klaus post)
  * camera support:
    + preliminary support for the new nikon d5200
  * white balance presets:
    + sony alpha 700 (update to firmware v4)
    + sony alpha 230 (new)
    + canon eos 650d (new)
    + canon eos rebel t2i (fixed)
    + canon eos m (fixed)
  * enhanced color rendition:
    + konica minolta dynax 5d (wolfgang kuehnel)
    + sony nex 3 (wolfgang kuehnel)
    + sony alpha 230 (wolfgang kuehnel)
    + sony rx100 (josef wells)
- For openSUSE 12.1 added xz to buildrequires</changelog>
<changelog author="fcrozat@suse.com" date="1360497600">- Add 0001-Olympus-E-M5-enhanced-matrix.patch: Enhanced matrix for
  Olympus OM-D E-M5.</changelog>
<changelog author="toganm@opensuse.org" date="1362916800">- Update to release 1.1.4 This is bugfix release no new features
  are introduced.
  * Fix tooltip style definition in darktable.gtkrc.
  * colorspaces: avoid trademark issues
  * colorspaces: workaround horrible brokenness of some printshops
  * colorspaces: actually cprt is a required icc tag
  * thumbs: use mip always &gt; image size, not closest.
  * wb_presets: Nikon D3200 (stolen from UFRaw)
  * wb_presets: SONY SLT-A77V
  * wb_presets: Panasonic DMC-G5 (thanks to thouks)
  * wb_presets: Pentax K-5 II s (thanks to Jack Bowling)
  * wb_presets: Nikon D800(E) update
  * rawspeed: minor fix for LX7 in 3:2 mode
  * rawspeed: support Panasonic DMC-LX7 16:9 and 1:1 aspect ratio modes
  * rawspeed: support Panasonic DMC-LX7 3:2 aspect ratio mode
  * rawspeed: Preliminary support for the PENTAX K-5 II s
  * rawspeed: added Panasonic DMC-G5 1:1/16:9 modes
  * rawspeed: Nikon 1 S1 support
  * rawspeed: Nikon 1 J3 support
  * rawspeed: Nikon Coolpix P7100 blackpoint fix (thanks to nesthib)
  * Fix base curve presets for Canon on Spanish locale
  * Fix #9205: Read metadata from non-dt XMPs
  * blend: fix edge case in color blend mode
  * redraw: remove now obsolete flood stopping.
  * redraw: allow more redraws per second.
  * redraw signal: simplify the locking logic somewhat.
  * pack blendif settings a little bit closer in GUI
  * cache: have full buffers according to potentially exporting  threads
  * lens correction: fix for #9270
  * opencl: work around a bug in some OpenCL drivers
  * exif: return correct buffer length, patch by wolfgang goetz
  * match leica basecurve less selectively
  * Olympus E-M5 enhanced matrix with help from Frederic Crozat
  * ICC profile handling: catch certain mal-formatted profiles
- Added 0001-Fix-svg-uses-premultiplied-alpha-we-didn-t-respect-t.patch
- Remove 0001-Olympus-E-M5-enhanced-matrix.patch as it's upstreamed</changelog>
<changelog author="fcrozat@suse.com" date="1363521600">- Add gtk2-engine-clearlooks as Requires, needed for darktable
  black theme.</changelog>
<changelog author="mrueckert@suse.de" date="1365076800">- update to release 1.2.rc2
  - the changes on top of rc1 are minor, some details:
  - fixed a spurious crash/deadlock when switching images in
    filmstrip mode
  - fixed a couple of exif strings for profiled denoising
  - fixed gcc 4.8.0 build
  - new noise profiles
  - fixed gphoto 2.5 issues
  - updated translations
  - updated user manual!
- additional changes from 1.2.rc1
  - profiled denoising: adapt to the properties of your camera's
    sensor (72 cameras already profiled for you).
  - lightroom import: convert some basic edits from your lightroom
    collection to darktable operations.
  - multi instance support: duplicate your modules and apply them
    more than one time with different settings.
  - improved usability for distorting modules (streamline spot
    removal in the presence of crop/rotate for example).
  - selective copy/paste of image processing.
  - new more intuitive keystone correction tool.
  - jpeg2000 support.
  - graphics magick import (support virtually all input image
    formats).
  - much faster thumbnail loading (if you can live with crappy
    embedded thumbnails).
  - incredibly lengthy list of small bug fixes, performance
    enhancements, and usability improvements.
  - new camera support (decode and color matrices).
  - dithering against banding.
  - sharper thumbnails in lighttable mode.
  - new oauth2 based picasa uploader.
  - and the final release 1.2 will contain a thoroughly overhauled
    user manual, proof read by natives (thanks heaps guys!).
- removed 0001-Fix-svg-uses-premultiplied-alpha-we-didn-t-respect-t.patch
  included upstream
- added BuildRequires for GraphicsMagick and openjpeg</changelog>
<changelog author="mrueckert@suse.de" date="1365076801">- added darktable-1.2.x_update_to_4b856e6ec99035d5a1041db73e2339000d395aa0.patch:
  update to HEAD (4b856e6ec99035d5a1041db73e2339000d395aa0)
  - adobe_coeff: Nikon Coolpix A same as D7000
  - fix-crash-lr-import:
    Proactive fix to avoid a crash trying to dereference a null
    pointer.  If node stEvt:softwareAgent not found, skip as not a
    lightroom xmp.
  - don't crash on malformatted TIFF file
    In case a file was alraedy rejected by GraphicsMagick, it's not
    a good idea to try open it with our handmade imageio routines
    like TIFFOpen().  Let's take GraphicsMagick as a last resort if
    available.
  - usermanual: add missing file lighttable_directory.png
  - Fix: snapshot + gnd, cliping, ... #9329
  - Upgraded and reviewed Spanish translation
    I have fully reviewed the Spanish translation, fixing typos,
    improving grammar and the language used.
  - denoiseprofile: really fix legacy_params
  - denoiseprofile: get param "mode" right when converting params
    from version 2 to 3 fix: denoiseprofile: crash when trying to
    update presets/styles from version 2 to 3 do not try to find
    autodetection for them - would probably be not useful and is
    impossible anyway
  - Merge pull request #206 from bluesceada/denoise-copy-autodetect
    denoiseprofile: copy "profile autodetected" correctly + fix:
    display "found match" also for first profile
  - noise profile: canon eos 1d iv by rene weiss
  - denoiseprofile: only use a[0] = -1.0 to signal autodetection,
    and don't use epsilon for comparisons
  - denoiseprofile: make it possible to copy the information "this
    profile was set automatically" across images with different ISO
    and camera vendor
  - fix: denoiseprofile: also show "found match:" instead of the
    profile name for index 0
  - Preliminary update of the Russian translation
  - Merge branch 'fix-clipping-aspect'
  * fix-clipping-aspect:
    Fix aspect ratio computation.
    It cannot happen in legacy_params() as at this point the size
    of the image is not yet known. We then use a deferred
    circuitry to handle this at the right point in the code.
    Fixes #9320.
  - [l10n] Swedish update</changelog>
<changelog author="toganm@opensuse.org" date="1365249600">- Update to release 1.2
- removed
  darktable-1.2.x_update_to_4b856e6ec99035d5a1041db73e2339000d395aa0.patch
  as it is now included.
- When possible use pkgconfig hence:
  instead of libopenjgeg-devel  used  pkgconfig(libopenjpeg)
  instead of GraphicsMagick-devel used pkgconfig(GraphicsMagick)
- If build is for 12.1 then require gtk2-engines</changelog>
<changelog author="toganm@opensuse.org" date="1366718400">- Fix factory build with OpenEXR-2.0
  added 0001-OpenEXR-2.0-fixes.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366977600">- First set CFLAGS and then CXXFLAGS. Sometimes we need to set
  flags in CXXFLAGS that are not valid CFLAGS.</changelog>
<changelog author="toganm@opensuse.org" date="1369569600">- Update to release 1.2.1
  * New translation: Danish
  * Some translations have been removed from the release due to
    missing strings
  * New noise profiles
    + Canon EOS 450D / Kiss X2
    + Canon EOS 1100D / REBEL T3
    + Canon EOS 1D Mark II
    + Canon EOS 1D Mark III
    + All Canon Model names are now recognized, e.g. Canon EOS 350D
    and Canon EOS 350D DIGITAL and Canon EOS DIGITAL REBEL XT and
    Canon EOS Kiss Digital N point to the same camera.
    + Olympus E-520
    + Olympus E-1
    + Olympus E-3
    + Olympus E-P2
    + Pentax K-30
    + Panasonic GH-2
    + Panasonic DMZ-FZ18
    + Additional data for Pentax K-5 II
    + Nikon D7100
    + Nikon D5200
    + Sony A57
  * White balances, color matrices
    + Fix issues with different camera model names for various Canon
    cameras (see above)
    + White balance for Panasonic DMC-GH2
    + Updates whitebalance list with the latest version of UFRaw's cvs version
    + Whitebalances for Samsung NX5, NX10, NX11 (copied from NX100)
  * Bugfixes
    + new RawSpeed version r537
    + Compatible with openEXR 2.0
    + Facebook export now allows HQ images (up to 2048px)
    + Blend mode "vividlight" should work for NaNs
    + Fix compile issues for OpenBSD
    + Whitebalance is now relative to daylight, not to camera white
    balance (this will not change any processing you have done,
    only the values displayed will differ)
    + Now importing folder via key accelerator is supported.
    + Only one temperature slider in white balance
    + Some fixes to the zoom behaviour in darkroom mode
    + New lensfun geometries now supported (with lensfun &gt;= 0.2.7)
    + More coherent bauhaus UI for the split toning module
    + The color transfer module is now marked as deprecated. Will be
    superseeded by color mapping in the next major release.
    + Fix some possible deadlocks, memory leaks and null pointer dereferences
    + Status message in top bar should be updated more frequently now
    + Some more elaborate status messages if lens/camera not found in the
    lens correction module, if export failed
    + Option for parallel export threads removed from config, too dangerous
    + Option for thumbnail cache now specified in MB
    + Updated purge_non_existing_images.sh script
    + CLI option -d nan gives per-module output of NaN values
    + Some minor renamings, typo fixings...
- Drop 0001--OpenEXR-2.0-fixes.patch since fixed upstream</changelog>
<changelog author="toganm@opensuse.org" date="1370865600">- added backported patch from git master
  0001-fixed-error-handling-for-broken-full-color-images.patch
  fixes bnc#823114</changelog>
<changelog author="toganm@opensuse.org" date="1371729600">-  Remove patented code from the source via
  generate--tarball.sh bnc#824484
  * added backported patch from git master
    0001-thumbnail-compression-make-libsquish-optional
  * Remove pkgconfig(colord) from Build Requires
  Because compression code is disabled previous cache will not
  work. Removing  ~/.cache/darktable/mipmaps is necessary</changelog>
<changelog author="toganm@opensuse.org" date="1372161600">- Update to version 1.2.2
  * updated rawspeed r553. Support for
    + Canon EOS 700D
    + Nikon Coolpix P330
  * New Olymbus base curve
  * Updated Adobe Coeffs
  * Enhanced color matrices:
    + Canon 700D (from Canon 650D)
    + Canon 100D (from Canon 650D)
  * Sony NEX-7
  * White balance presets:
    + Some updates from UFRaw
    + Canon 100D
    + Canon 700D
    + Sony SLT-A37
    + Nikon Coolpix P330
  * Noise profiles:
    + Canon EOS-M
    + Olympus E-600 (from: Olympus E-30)
    + Olympus E-620 (from: Olympus E-30)
    + Samsung WB2000
    + Sony A99v
    + Panasonic DMC-G10 iso 100
    + Nikon D60
  * Bug fixes:
    + 0 star rating working again
    + LT: ctrl+d duplicates per default now
    + Some fixes concerning locale handling
    + double click on film strip jumps to image
    + remember position in collections
    + ctrl+k jumps to previous collection
    + Blending parameters are preserved when module is deactivated
    + In full-preview (alt-1) ratings and labels are only applied to
    + image shown
    + Various OpenCL fixes, e.g. compilation on Mac OS X
    + libsquish compilation now optional
    + dr: deactivate interpolation at 200% zoom
  * Removed backported patches:
  0001-thumbnail-compression-make-libsquish-optional
  0001-fixed-error-handling-for-broken-full-color-images.patch</changelog>
<changelog author="toganm@opensuse.org" date="1378814400">- Update to version 1.2.3
  + Update to RawSpeed r570
  + Canon 70D (preliminary)
  + Olympus E-P5 (incl. preliminary Adobe Coeff.)
  + Samsung NX2000
  + Sony RX100m2
  + Sony SLT-A58 (updated)
  * White Balance Presets:
  + Sony NEX-5R
  + Sony SLT-A58
  + Nikon D3200 (updated)
  + Pentax K20D
  * Enhanced Color Matrix:
  + Pentax K20D
  * Noise Profiles:
  + Canon EOS 1100D == Canon EOS Rebel T3
  + Canon PowerShot S95
  + Canon PowerShot G11
  + Nikon Coolpix P330
  + Sony A580
  + Fuji X10
  + Pentax K20D
  * Fixes and improvements:
  + Increased maximum cache size to 8GB
  + OS X: fix Facebook uploads
  + Adjustments to default lowpass blur settings
  + Adjustments to dithering slider ranges
  + Metadata viewer: fix display of focal length: indicate unit
    and hide  if invalid.
  + Chromatic Aberrations: fix segfault for small buffers
  + Color pickers: fix various issues, e.g. #9482
  + More guides for Crop &amp; Rotate
  + Improve light table usability: when viewing images in
    fullscreen wrap  around at line end when pressing right arrow
    key
  + Soften: massive speed improvements by using SSE and OpenMP
  + Deleting images from camera is not supported anymore for
    safety.
  + Exposure module now supports multiple instances
  + Support for custom meta data burn in (see commit
    6ac7ba055440aa27f79f0a67ac112799a0e7785e)
  + OpenCL support for nVidia GeForce GT330
  + PFM: load timestamp as date &amp; time taken.
  + Fix bug prohibiting image rating by mouse
  + Update Picasa uploader: references Google+ now
  + Some fixes for memory leaks, deadlocks, background jobs
  + Fixes of on-screen handles for Crop&amp;Rotate and GND modules
  + 0 bytes files will no longer be imported but ignored</changelog>
<changelog author="toganm@opensuse.org" date="1387195200">- added patches:
  * 0001-Fix-9720-Don-t-crash-when-kwallet-is-not-running.patch
    backported from git fixes bnc#855442</changelog>

</package>
<package pkgid="3d6864eea21c153ce9880df4194fed5bee7181b3d0c5470283dc0d11a4e8d43d" name="darktable-doc" arch="x86_64">
    <version epoch="0" ver="1.2.3" rel="2.5.1"/>

<changelog author="fcrozat@suse.com" date="1344168000">- Add update-curves.patch: add additional basecurves for Olympus
  E-M5 and EOS 5D Mark II/III and Nikon Dxxxx (from git)</changelog>
<changelog author="toganm@opensuse.org" date="1349784000">- Add rsvg_cairo.patch: Fixes Build for factory because of deprecated
  use of  librsvg (from git)</changelog>
<changelog author="toganm@opensuse.org" date="1354017600">- Update to release 1.1
  * general
    + new camera support, new whitebalance presets, etc., including
    canon eos m support and samsung nx fix
    + similarity matching search for images that look alike.
    + geotagging, complete with map view
    + a lot of bugfixes (mainly thanks to ulrich for his meticulous
    work)
    + facebook exporter (for those who have an account there)
  * ui
    + reworked the much hated `more plugins' widget
    + image grouping:
    + command line interface!
    + tone and base curves got a new user interface to better
    support fine grained workflow
    + visually low-profile controls with finetuning:
    + color correction module got a GUI update since the blog post
    (two circles indicating shadows and highlights instead of the
    quad).
    + live view for tethered shooting!
  * darkroom
    + extensive use of edge-aware filtering techniques to suppress
    noise, halos and ringing all around darktable:
    + conditional blending, and a lot of goodies around it!
    + magenta highlights: high-contrast edges to overexposed areas
    (should get rid of purple highlights on tiny water waves and
    purple fringes around tree leaves for example)
    + much improved sharpness for both export and darkroom view,
    especially for downsampled images and if you use lens
    corrections or rotations/perspective corrections. check the new
    options in the preferences dialog, also one more than mentioned
    in the blog ("demosaicing for zoomed out darkroom mode" to
    trade performance for even more sharpness):
  * color management
    + improved per-screen color management (should reload the
    screen profile automatically)
    + more compatible embedded color profiles (should fix problems
    on windows viewing our images, if that matters) read embedded
    color profiles from jpg
  * opencl
    + most of our modules now can take advantage of your computer's
    gpu power
    + caching for compiled opencl kernels (even in case the driver
    doesn't do it) for faster startup times
  * translations
    + two new translations (both portuguese.. ;) )
    + well translated: cs de es fr it ja nl pl pt_BR pt_PT sv
    + half translated: ca fi gl ro ru sq th zh_CN
- Packaging related :
  * Provide the pdf documentation
  * Remove backported patches as they are part of the package now
    + rsvg_cairo.patch
    + update-curves.patch
  * provide tool to work with database cleanup
    purge_non_existing_images.sh (placed in documentation
    directory)
  * where possible use pkgconfig variables for buildrequires</changelog>
<changelog author="toganm@opensuse.org" date="1355054400">- Update to release 1.1.1
  * minor reordering of lighttable mode modules (geotagging, keywords
    and recent collections)
  * cleaned up the default visible plugins when first starting
    darktable
  * in most cases raw files will now show thumbnails in the import
    dialog (thanks to Mattias Eriksson)
  * a curve related crash was fixed (#9906 thanks to James C.
    McPherson)
  * comma seperated tags should work everywhere now (#9006 thanks to
    Tobias Ellinghaus)
  * Ulrich pegelow fixed a huge amount of OpenCL related issues,
    particularly for AMD GPUs
  * we now deal better with hybrid GPU machines (#9074 by Ulrich
  Pegelow)
  * a deadlock in the lens correction module was fixed (#9106 thanks to
    Ulrich Pegelow)
  * we don't delete module presets when cancelling the dialog anymore
    (#9108 thanks to Tobias Ellinghaus)
  * we now have better default memory usage settings (which are set
    upon starting darktable the first time)
  * initial support for SONY NEX 5R
  * preliminary/experimental Canon EOS 6D and Sony RX1 support (future
    changes for these camera's may (for the time being) retroactively
    affect your images)
  * Canon EOS 6D white balance presets (thanks to no_maam_)
  * lots of updates for the usermanual (make sure you download a new
    copy)
- Subpackage the user manual
- enable darktable-viewer by adding sdl to buildrequires</changelog>
<changelog author="toganm@opensuse.org" date="1358078400">- Update to release 1.1.2
  * darktable 1.1.2 is mostly a camera support update and bugfix
    release:
  - fix export resolution rounding issue (as in previous version it
    could be off-by-one)
  - correctly set output dimension in exif instead of passing the raw
    resolution verbatim
  - local average green eq was fixed (it now works on high iso images
    as well, and should no longer produce hot pixels)
  - use ordered arrays in xmp files
  - disable export parallelism for flickr/picasa export
  - don't enter tethering mode when there is no camera attached (this
    made darktable look asif it was hung, even though that wasn't the
    case)
  - bring back the pin for map thumbnails
  - improved tiff support
  - vignetting now has a dithering option (to mitigate occasional
    banding)
  - read nikon subject distance properly
  - assorted freebsd fixes
  - various opencl fixes
  - usermanual updates
  * Support for the following camera's with either preliminarily added
    or updated:
  - canon eos 6d
  - canon powershot s110
  - canon powershot g15
  - canon powershot sx50 hs
  - nikon 1 v2
  - nikon d600
  - nikon coolpix p7700
  - olympus e pl5
  - olympus e pm2
  - olympus xz 2
  - panasonic dmc gh3
  - panasonic dmc lx7
  - pentax k5ii
  - samsung ex2f
  - sony rx1
  - sony nex 6
  - sony slt a99
  - sony nex c3 blackpoint/greenshift fix
  * white balance preset updates:
  - canon eos 550d
  - canon eos 5d mark iii
  - olympus xz 1
  - sony nex c3
  - sony slt a57
  - sony nex 5n
  - panasonic dmc-gh3</changelog>
<changelog author="toganm@opensuse.org" date="1360411200">- Update to release 1.13
  * fixes:
    + check (on build) if glib 2.28 or higher is present
    + don't sanatize exif when creating hdr dngs
    + colorpicker now disappears immediately when disabling it
    + lens correction now uses loose lens matching (ivan tarozzi)
    + konica minolta dynax 5d rotation fix
    + removed an outdated assertion which could cause a crash in rare
    cases
    + don't crash when loading half-corrupted xmp's
    + don't crash when an imported file contains incomplete gps
    information
    + libjpeg-turbo workaround (klaus post)
  * camera support:
    + preliminary support for the new nikon d5200
  * white balance presets:
    + sony alpha 700 (update to firmware v4)
    + sony alpha 230 (new)
    + canon eos 650d (new)
    + canon eos rebel t2i (fixed)
    + canon eos m (fixed)
  * enhanced color rendition:
    + konica minolta dynax 5d (wolfgang kuehnel)
    + sony nex 3 (wolfgang kuehnel)
    + sony alpha 230 (wolfgang kuehnel)
    + sony rx100 (josef wells)
- For openSUSE 12.1 added xz to buildrequires</changelog>
<changelog author="fcrozat@suse.com" date="1360497600">- Add 0001-Olympus-E-M5-enhanced-matrix.patch: Enhanced matrix for
  Olympus OM-D E-M5.</changelog>
<changelog author="toganm@opensuse.org" date="1362916800">- Update to release 1.1.4 This is bugfix release no new features
  are introduced.
  * Fix tooltip style definition in darktable.gtkrc.
  * colorspaces: avoid trademark issues
  * colorspaces: workaround horrible brokenness of some printshops
  * colorspaces: actually cprt is a required icc tag
  * thumbs: use mip always &gt; image size, not closest.
  * wb_presets: Nikon D3200 (stolen from UFRaw)
  * wb_presets: SONY SLT-A77V
  * wb_presets: Panasonic DMC-G5 (thanks to thouks)
  * wb_presets: Pentax K-5 II s (thanks to Jack Bowling)
  * wb_presets: Nikon D800(E) update
  * rawspeed: minor fix for LX7 in 3:2 mode
  * rawspeed: support Panasonic DMC-LX7 16:9 and 1:1 aspect ratio modes
  * rawspeed: support Panasonic DMC-LX7 3:2 aspect ratio mode
  * rawspeed: Preliminary support for the PENTAX K-5 II s
  * rawspeed: added Panasonic DMC-G5 1:1/16:9 modes
  * rawspeed: Nikon 1 S1 support
  * rawspeed: Nikon 1 J3 support
  * rawspeed: Nikon Coolpix P7100 blackpoint fix (thanks to nesthib)
  * Fix base curve presets for Canon on Spanish locale
  * Fix #9205: Read metadata from non-dt XMPs
  * blend: fix edge case in color blend mode
  * redraw: remove now obsolete flood stopping.
  * redraw: allow more redraws per second.
  * redraw signal: simplify the locking logic somewhat.
  * pack blendif settings a little bit closer in GUI
  * cache: have full buffers according to potentially exporting  threads
  * lens correction: fix for #9270
  * opencl: work around a bug in some OpenCL drivers
  * exif: return correct buffer length, patch by wolfgang goetz
  * match leica basecurve less selectively
  * Olympus E-M5 enhanced matrix with help from Frederic Crozat
  * ICC profile handling: catch certain mal-formatted profiles
- Added 0001-Fix-svg-uses-premultiplied-alpha-we-didn-t-respect-t.patch
- Remove 0001-Olympus-E-M5-enhanced-matrix.patch as it's upstreamed</changelog>
<changelog author="fcrozat@suse.com" date="1363521600">- Add gtk2-engine-clearlooks as Requires, needed for darktable
  black theme.</changelog>
<changelog author="mrueckert@suse.de" date="1365076800">- update to release 1.2.rc2
  - the changes on top of rc1 are minor, some details:
  - fixed a spurious crash/deadlock when switching images in
    filmstrip mode
  - fixed a couple of exif strings for profiled denoising
  - fixed gcc 4.8.0 build
  - new noise profiles
  - fixed gphoto 2.5 issues
  - updated translations
  - updated user manual!
- additional changes from 1.2.rc1
  - profiled denoising: adapt to the properties of your camera's
    sensor (72 cameras already profiled for you).
  - lightroom import: convert some basic edits from your lightroom
    collection to darktable operations.
  - multi instance support: duplicate your modules and apply them
    more than one time with different settings.
  - improved usability for distorting modules (streamline spot
    removal in the presence of crop/rotate for example).
  - selective copy/paste of image processing.
  - new more intuitive keystone correction tool.
  - jpeg2000 support.
  - graphics magick import (support virtually all input image
    formats).
  - much faster thumbnail loading (if you can live with crappy
    embedded thumbnails).
  - incredibly lengthy list of small bug fixes, performance
    enhancements, and usability improvements.
  - new camera support (decode and color matrices).
  - dithering against banding.
  - sharper thumbnails in lighttable mode.
  - new oauth2 based picasa uploader.
  - and the final release 1.2 will contain a thoroughly overhauled
    user manual, proof read by natives (thanks heaps guys!).
- removed 0001-Fix-svg-uses-premultiplied-alpha-we-didn-t-respect-t.patch
  included upstream
- added BuildRequires for GraphicsMagick and openjpeg</changelog>
<changelog author="mrueckert@suse.de" date="1365076801">- added darktable-1.2.x_update_to_4b856e6ec99035d5a1041db73e2339000d395aa0.patch:
  update to HEAD (4b856e6ec99035d5a1041db73e2339000d395aa0)
  - adobe_coeff: Nikon Coolpix A same as D7000
  - fix-crash-lr-import:
    Proactive fix to avoid a crash trying to dereference a null
    pointer.  If node stEvt:softwareAgent not found, skip as not a
    lightroom xmp.
  - don't crash on malformatted TIFF file
    In case a file was alraedy rejected by GraphicsMagick, it's not
    a good idea to try open it with our handmade imageio routines
    like TIFFOpen().  Let's take GraphicsMagick as a last resort if
    available.
  - usermanual: add missing file lighttable_directory.png
  - Fix: snapshot + gnd, cliping, ... #9329
  - Upgraded and reviewed Spanish translation
    I have fully reviewed the Spanish translation, fixing typos,
    improving grammar and the language used.
  - denoiseprofile: really fix legacy_params
  - denoiseprofile: get param "mode" right when converting params
    from version 2 to 3 fix: denoiseprofile: crash when trying to
    update presets/styles from version 2 to 3 do not try to find
    autodetection for them - would probably be not useful and is
    impossible anyway
  - Merge pull request #206 from bluesceada/denoise-copy-autodetect
    denoiseprofile: copy "profile autodetected" correctly + fix:
    display "found match" also for first profile
  - noise profile: canon eos 1d iv by rene weiss
  - denoiseprofile: only use a[0] = -1.0 to signal autodetection,
    and don't use epsilon for comparisons
  - denoiseprofile: make it possible to copy the information "this
    profile was set automatically" across images with different ISO
    and camera vendor
  - fix: denoiseprofile: also show "found match:" instead of the
    profile name for index 0
  - Preliminary update of the Russian translation
  - Merge branch 'fix-clipping-aspect'
  * fix-clipping-aspect:
    Fix aspect ratio computation.
    It cannot happen in legacy_params() as at this point the size
    of the image is not yet known. We then use a deferred
    circuitry to handle this at the right point in the code.
    Fixes #9320.
  - [l10n] Swedish update</changelog>
<changelog author="toganm@opensuse.org" date="1365249600">- Update to release 1.2
- removed
  darktable-1.2.x_update_to_4b856e6ec99035d5a1041db73e2339000d395aa0.patch
  as it is now included.
- When possible use pkgconfig hence:
  instead of libopenjgeg-devel  used  pkgconfig(libopenjpeg)
  instead of GraphicsMagick-devel used pkgconfig(GraphicsMagick)
- If build is for 12.1 then require gtk2-engines</changelog>
<changelog author="toganm@opensuse.org" date="1366718400">- Fix factory build with OpenEXR-2.0
  added 0001-OpenEXR-2.0-fixes.patch</changelog>
<changelog author="mrueckert@suse.de" date="1366977600">- First set CFLAGS and then CXXFLAGS. Sometimes we need to set
  flags in CXXFLAGS that are not valid CFLAGS.</changelog>
<changelog author="toganm@opensuse.org" date="1369569600">- Update to release 1.2.1
  * New translation: Danish
  * Some translations have been removed from the release due to
    missing strings
  * New noise profiles
    + Canon EOS 450D / Kiss X2
    + Canon EOS 1100D / REBEL T3
    + Canon EOS 1D Mark II
    + Canon EOS 1D Mark III
    + All Canon Model names are now recognized, e.g. Canon EOS 350D
    and Canon EOS 350D DIGITAL and Canon EOS DIGITAL REBEL XT and
    Canon EOS Kiss Digital N point to the same camera.
    + Olympus E-520
    + Olympus E-1
    + Olympus E-3
    + Olympus E-P2
    + Pentax K-30
    + Panasonic GH-2
    + Panasonic DMZ-FZ18
    + Additional data for Pentax K-5 II
    + Nikon D7100
    + Nikon D5200
    + Sony A57
  * White balances, color matrices
    + Fix issues with different camera model names for various Canon
    cameras (see above)
    + White balance for Panasonic DMC-GH2
    + Updates whitebalance list with the latest version of UFRaw's cvs version
    + Whitebalances for Samsung NX5, NX10, NX11 (copied from NX100)
  * Bugfixes
    + new RawSpeed version r537
    + Compatible with openEXR 2.0
    + Facebook export now allows HQ images (up to 2048px)
    + Blend mode "vividlight" should work for NaNs
    + Fix compile issues for OpenBSD
    + Whitebalance is now relative to daylight, not to camera white
    balance (this will not change any processing you have done,
    only the values displayed will differ)
    + Now importing folder via key accelerator is supported.
    + Only one temperature slider in white balance
    + Some fixes to the zoom behaviour in darkroom mode
    + New lensfun geometries now supported (with lensfun &gt;= 0.2.7)
    + More coherent bauhaus UI for the split toning module
    + The color transfer module is now marked as deprecated. Will be
    superseeded by color mapping in the next major release.
    + Fix some possible deadlocks, memory leaks and null pointer dereferences
    + Status message in top bar should be updated more frequently now
    + Some more elaborate status messages if lens/camera not found in the
    lens correction module, if export failed
    + Option for parallel export threads removed from config, too dangerous
    + Option for thumbnail cache now specified in MB
    + Updated purge_non_existing_images.sh script
    + CLI option -d nan gives per-module output of NaN values
    + Some minor renamings, typo fixings...
- Drop 0001--OpenEXR-2.0-fixes.patch since fixed upstream</changelog>
<changelog author="toganm@opensuse.org" date="1370865600">- added backported patch from git master
  0001-fixed-error-handling-for-broken-full-color-images.patch
  fixes bnc#823114</changelog>
<changelog author="toganm@opensuse.org" date="1371729600">-  Remove patented code from the source via
  generate--tarball.sh bnc#824484
  * added backported patch from git master
    0001-thumbnail-compression-make-libsquish-optional
  * Remove pkgconfig(colord) from Build Requires
  Because compression code is disabled previous cache will not
  work. Removing  ~/.cache/darktable/mipmaps is necessary</changelog>
<changelog author="toganm@opensuse.org" date="1372161600">- Update to version 1.2.2
  * updated rawspeed r553. Support for
    + Canon EOS 700D
    + Nikon Coolpix P330
  * New Olymbus base curve
  * Updated Adobe Coeffs
  * Enhanced color matrices:
    + Canon 700D (from Canon 650D)
    + Canon 100D (from Canon 650D)
  * Sony NEX-7
  * White balance presets:
    + Some updates from UFRaw
    + Canon 100D
    + Canon 700D
    + Sony SLT-A37
    + Nikon Coolpix P330
  * Noise profiles:
    + Canon EOS-M
    + Olympus E-600 (from: Olympus E-30)
    + Olympus E-620 (from: Olympus E-30)
    + Samsung WB2000
    + Sony A99v
    + Panasonic DMC-G10 iso 100
    + Nikon D60
  * Bug fixes:
    + 0 star rating working again
    + LT: ctrl+d duplicates per default now
    + Some fixes concerning locale handling
    + double click on film strip jumps to image
    + remember position in collections
    + ctrl+k jumps to previous collection
    + Blending parameters are preserved when module is deactivated
    + In full-preview (alt-1) ratings and labels are only applied to
    + image shown
    + Various OpenCL fixes, e.g. compilation on Mac OS X
    + libsquish compilation now optional
    + dr: deactivate interpolation at 200% zoom
  * Removed backported patches:
  0001-thumbnail-compression-make-libsquish-optional
  0001-fixed-error-handling-for-broken-full-color-images.patch</changelog>
<changelog author="toganm@opensuse.org" date="1378814400">- Update to version 1.2.3
  + Update to RawSpeed r570
  + Canon 70D (preliminary)
  + Olympus E-P5 (incl. preliminary Adobe Coeff.)
  + Samsung NX2000
  + Sony RX100m2
  + Sony SLT-A58 (updated)
  * White Balance Presets:
  + Sony NEX-5R
  + Sony SLT-A58
  + Nikon D3200 (updated)
  + Pentax K20D
  * Enhanced Color Matrix:
  + Pentax K20D
  * Noise Profiles:
  + Canon EOS 1100D == Canon EOS Rebel T3
  + Canon PowerShot S95
  + Canon PowerShot G11
  + Nikon Coolpix P330
  + Sony A580
  + Fuji X10
  + Pentax K20D
  * Fixes and improvements:
  + Increased maximum cache size to 8GB
  + OS X: fix Facebook uploads
  + Adjustments to default lowpass blur settings
  + Adjustments to dithering slider ranges
  + Metadata viewer: fix display of focal length: indicate unit
    and hide  if invalid.
  + Chromatic Aberrations: fix segfault for small buffers
  + Color pickers: fix various issues, e.g. #9482
  + More guides for Crop &amp; Rotate
  + Improve light table usability: when viewing images in
    fullscreen wrap  around at line end when pressing right arrow
    key
  + Soften: massive speed improvements by using SSE and OpenMP
  + Deleting images from camera is not supported anymore for
    safety.
  + Exposure module now supports multiple instances
  + Support for custom meta data burn in (see commit
    6ac7ba055440aa27f79f0a67ac112799a0e7785e)
  + OpenCL support for nVidia GeForce GT330
  + PFM: load timestamp as date &amp; time taken.
  + Fix bug prohibiting image rating by mouse
  + Update Picasa uploader: references Google+ now
  + Some fixes for memory leaks, deadlocks, background jobs
  + Fixes of on-screen handles for Crop&amp;Rotate and GND modules
  + 0 bytes files will no longer be imported but ignored</changelog>
<changelog author="toganm@opensuse.org" date="1387195200">- added patches:
  * 0001-Fix-9720-Don-t-crash-when-kwallet-is-not-running.patch
    backported from git fixes bnc#855442</changelog>

</package>
<package pkgid="f901d31a722dc1d81bbcddf4e87be6788cd06ed31d3e9fd3fcb1c3762ddb72dd" name="dateutils" arch="i586">
    <version epoch="0" ver="0.2.6" rel="2.4.1"/>

<changelog author="sweet_f_a@gmx.de" date="1316001600">- initial package datetools 0.1.2</changelog>
<changelog author="sweet_f_a@gmx.de" date="1319198400">- bump version 0.1.6</changelog>
<changelog author="sweet_f_a@gmx.de" date="1319716800">- bump version 0.1.7, this is a bug fix release.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1325592000">- bump version 0.1.8, this is a bug fix release.
  * A bit fiddling bug gave erroneous results in `dconv now'.
  * Furtherly, date expressions (for dgrep et al.) can now be
    arbitrarily joined with conjunctions (&amp;&amp;) and disjunctions (||)
    as well as negations (!).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1328097600">- bump version 0.1.9, this is a bug fix release.
  * The code for date addition is refactored, with it a new
    duration type is introduced, DT_MD, to capture larger month and
    day summands.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1332504000">- bump version 0.1.10, this is a bug fix release.
  * account for big-endian machines
  * GNUisms (mempcpy() and getline()) are removed
  * inf-loop in tseq is fixed (bug #6)
  * nanoseconds are preserved upon time zone conversion
- add byteswap.patch to fix build for old distros</changelog>
<changelog author="sweet_f_a@gmx.de" date="1334059200">- bump version 0.2.0, this is a feature release.
  * The distinction between binaries for date, time and date-time
    processing is cleared up by a unified set of tools, prefixed
    with `d'.
    Thus:
    dadd + tadd -&gt; dadd
    dconv + tconv + dtconv -&gt; dconv
    ddiff + tdiff -&gt; ddiff
    dgrep + tgrep -&gt; dgrep
    dseq + tseq -&gt; dseq
    dtest + ttest -&gt; dtest
  * Furthermore, all tools now fully cope with dates, times and
    date-times.
  * Virtual timezones have been added (use `GPS' or `TAI').
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1340107200">- bump version 0.2.1, this is a bug fix and feature release.
  * The dadd tool now supports mass-adding durations (from stdin).
  * The ddiff tool is now time zone aware.
  * A new tool dround is added to round dates or times or
    date-times to the next occurrence of what's given as
    round-spec.
  * Bug fixes:
  - issue 7: ddiff without arguments does not segfault
  - issue 8: dadd copes with huge summands
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1342785600">- bump version 0.2.2, this is a bug fix and feature release.
  * Olson's zoneinfo database files are checked for at configure
    time
  * leap-aware calculations use shipped leapseconds file
  * ddiff and dadd can take leap-second transitions into account
  * issue 7: ddiff without arguments does not segfault
  * issue 8: dadd copes with huge summands
  * issue 9: dadd stumbles on ymcw dates
  * bug 33104651: bday negative difference A &gt; B ddiff A B -f %db
    is wrong
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1347624000">- bump version 0.2.3, this is a bug fix and feature release.
  * ISO 8601 week dates are now first class objectsi
    (of type DT_YWD)
  * introduce %rY specifier to denote years in calendars that
    deviate from the Gregorian year
  * dgrep accepts short-hand inputs (today, now, etc.) and also
    inputs as specified by -i
  * dadd'ing months and years to YMCW dates works now
  * zoneinfo files with only transitions in the past are handled
    properly (bug #10)
  * dseq with just 1 argument is working properly (story #36051287)
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1360238400">- bump version 0.2.4, this is a bug fix release.
  * added special output format `jdn' and `ldn' for julian/lilian
    day number
  * multiple occurrences of date/times within one line are now all
    processed rather than only the first occurrence
  * zone difference specifier (%Z) is supported for parsing and
    printing
  * matlab zone converter tzconv has been added
  * building with icc 13 works now
  * many gcc warnings are fixed
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1374753600">- bump version 0.2.5, this is a bug fix release.
  * issue 18, long inputs to a short specifier string will yield an
    error
  * consume zone specs (a la +1200) in the input via %Z specifier
  * ddiff's stdin stamps will undergo conversion according to
  - -from-zone
  * clean up dist for inclusion in debian
  * See info page examples and/or README.-</changelog>
<changelog author="sweet_f_a@gmx.de" date="1383048000">- bump version 0.2.6, this is a bug fix release.
  * issue 19, -q|--quiet no longer sends some commands into an
    inf-loop
  * netbsd test failures are fixed (due to missing leap seconds)
  * AIX builds are supported (getopt_long() is part of the code
    now)
  * internally the test harness is migrated to the cli-testing tool
    this fixes an issue when tests are run in directories with odd
    names (spaces, dollar signs, etc. in the path name)
  * See info page examples and/or README.</changelog>

</package>
<package pkgid="f04e1263f13602761c910bbd6939b912979cad9d6254297fad719fc33c811ce7" name="dateutils" arch="src">
    <version epoch="0" ver="0.2.6" rel="2.4.1"/>

<changelog author="sweet_f_a@gmx.de" date="1316001600">- initial package datetools 0.1.2</changelog>
<changelog author="sweet_f_a@gmx.de" date="1319198400">- bump version 0.1.6</changelog>
<changelog author="sweet_f_a@gmx.de" date="1319716800">- bump version 0.1.7, this is a bug fix release.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1325592000">- bump version 0.1.8, this is a bug fix release.
  * A bit fiddling bug gave erroneous results in `dconv now'.
  * Furtherly, date expressions (for dgrep et al.) can now be
    arbitrarily joined with conjunctions (&amp;&amp;) and disjunctions (||)
    as well as negations (!).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1328097600">- bump version 0.1.9, this is a bug fix release.
  * The code for date addition is refactored, with it a new
    duration type is introduced, DT_MD, to capture larger month and
    day summands.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1332504000">- bump version 0.1.10, this is a bug fix release.
  * account for big-endian machines
  * GNUisms (mempcpy() and getline()) are removed
  * inf-loop in tseq is fixed (bug #6)
  * nanoseconds are preserved upon time zone conversion
- add byteswap.patch to fix build for old distros</changelog>
<changelog author="sweet_f_a@gmx.de" date="1334059200">- bump version 0.2.0, this is a feature release.
  * The distinction between binaries for date, time and date-time
    processing is cleared up by a unified set of tools, prefixed
    with `d'.
    Thus:
    dadd + tadd -&gt; dadd
    dconv + tconv + dtconv -&gt; dconv
    ddiff + tdiff -&gt; ddiff
    dgrep + tgrep -&gt; dgrep
    dseq + tseq -&gt; dseq
    dtest + ttest -&gt; dtest
  * Furthermore, all tools now fully cope with dates, times and
    date-times.
  * Virtual timezones have been added (use `GPS' or `TAI').
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1340107200">- bump version 0.2.1, this is a bug fix and feature release.
  * The dadd tool now supports mass-adding durations (from stdin).
  * The ddiff tool is now time zone aware.
  * A new tool dround is added to round dates or times or
    date-times to the next occurrence of what's given as
    round-spec.
  * Bug fixes:
  - issue 7: ddiff without arguments does not segfault
  - issue 8: dadd copes with huge summands
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1342785600">- bump version 0.2.2, this is a bug fix and feature release.
  * Olson's zoneinfo database files are checked for at configure
    time
  * leap-aware calculations use shipped leapseconds file
  * ddiff and dadd can take leap-second transitions into account
  * issue 7: ddiff without arguments does not segfault
  * issue 8: dadd copes with huge summands
  * issue 9: dadd stumbles on ymcw dates
  * bug 33104651: bday negative difference A &gt; B ddiff A B -f %db
    is wrong
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1347624000">- bump version 0.2.3, this is a bug fix and feature release.
  * ISO 8601 week dates are now first class objectsi
    (of type DT_YWD)
  * introduce %rY specifier to denote years in calendars that
    deviate from the Gregorian year
  * dgrep accepts short-hand inputs (today, now, etc.) and also
    inputs as specified by -i
  * dadd'ing months and years to YMCW dates works now
  * zoneinfo files with only transitions in the past are handled
    properly (bug #10)
  * dseq with just 1 argument is working properly (story #36051287)
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1360238400">- bump version 0.2.4, this is a bug fix release.
  * added special output format `jdn' and `ldn' for julian/lilian
    day number
  * multiple occurrences of date/times within one line are now all
    processed rather than only the first occurrence
  * zone difference specifier (%Z) is supported for parsing and
    printing
  * matlab zone converter tzconv has been added
  * building with icc 13 works now
  * many gcc warnings are fixed
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1374753600">- bump version 0.2.5, this is a bug fix release.
  * issue 18, long inputs to a short specifier string will yield an
    error
  * consume zone specs (a la +1200) in the input via %Z specifier
  * ddiff's stdin stamps will undergo conversion according to
  - -from-zone
  * clean up dist for inclusion in debian
  * See info page examples and/or README.-</changelog>
<changelog author="sweet_f_a@gmx.de" date="1383048000">- bump version 0.2.6, this is a bug fix release.
  * issue 19, -q|--quiet no longer sends some commands into an
    inf-loop
  * netbsd test failures are fixed (due to missing leap seconds)
  * AIX builds are supported (getopt_long() is part of the code
    now)
  * internally the test harness is migrated to the cli-testing tool
    this fixes an issue when tests are run in directories with odd
    names (spaces, dollar signs, etc. in the path name)
  * See info page examples and/or README.</changelog>

</package>
<package pkgid="8916054605b82ae7879cc1f2dd444e773f67391e8dbd0815e4ea71e29616385f" name="dateutils" arch="x86_64">
    <version epoch="0" ver="0.2.6" rel="2.4.1"/>

<changelog author="sweet_f_a@gmx.de" date="1316001600">- initial package datetools 0.1.2</changelog>
<changelog author="sweet_f_a@gmx.de" date="1319198400">- bump version 0.1.6</changelog>
<changelog author="sweet_f_a@gmx.de" date="1319716800">- bump version 0.1.7, this is a bug fix release.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1325592000">- bump version 0.1.8, this is a bug fix release.
  * A bit fiddling bug gave erroneous results in `dconv now'.
  * Furtherly, date expressions (for dgrep et al.) can now be
    arbitrarily joined with conjunctions (&amp;&amp;) and disjunctions (||)
    as well as negations (!).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1328097600">- bump version 0.1.9, this is a bug fix release.
  * The code for date addition is refactored, with it a new
    duration type is introduced, DT_MD, to capture larger month and
    day summands.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1332504000">- bump version 0.1.10, this is a bug fix release.
  * account for big-endian machines
  * GNUisms (mempcpy() and getline()) are removed
  * inf-loop in tseq is fixed (bug #6)
  * nanoseconds are preserved upon time zone conversion
- add byteswap.patch to fix build for old distros</changelog>
<changelog author="sweet_f_a@gmx.de" date="1334059200">- bump version 0.2.0, this is a feature release.
  * The distinction between binaries for date, time and date-time
    processing is cleared up by a unified set of tools, prefixed
    with `d'.
    Thus:
    dadd + tadd -&gt; dadd
    dconv + tconv + dtconv -&gt; dconv
    ddiff + tdiff -&gt; ddiff
    dgrep + tgrep -&gt; dgrep
    dseq + tseq -&gt; dseq
    dtest + ttest -&gt; dtest
  * Furthermore, all tools now fully cope with dates, times and
    date-times.
  * Virtual timezones have been added (use `GPS' or `TAI').
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1340107200">- bump version 0.2.1, this is a bug fix and feature release.
  * The dadd tool now supports mass-adding durations (from stdin).
  * The ddiff tool is now time zone aware.
  * A new tool dround is added to round dates or times or
    date-times to the next occurrence of what's given as
    round-spec.
  * Bug fixes:
  - issue 7: ddiff without arguments does not segfault
  - issue 8: dadd copes with huge summands
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1342785600">- bump version 0.2.2, this is a bug fix and feature release.
  * Olson's zoneinfo database files are checked for at configure
    time
  * leap-aware calculations use shipped leapseconds file
  * ddiff and dadd can take leap-second transitions into account
  * issue 7: ddiff without arguments does not segfault
  * issue 8: dadd copes with huge summands
  * issue 9: dadd stumbles on ymcw dates
  * bug 33104651: bday negative difference A &gt; B ddiff A B -f %db
    is wrong
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1347624000">- bump version 0.2.3, this is a bug fix and feature release.
  * ISO 8601 week dates are now first class objectsi
    (of type DT_YWD)
  * introduce %rY specifier to denote years in calendars that
    deviate from the Gregorian year
  * dgrep accepts short-hand inputs (today, now, etc.) and also
    inputs as specified by -i
  * dadd'ing months and years to YMCW dates works now
  * zoneinfo files with only transitions in the past are handled
    properly (bug #10)
  * dseq with just 1 argument is working properly (story #36051287)
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1360238400">- bump version 0.2.4, this is a bug fix release.
  * added special output format `jdn' and `ldn' for julian/lilian
    day number
  * multiple occurrences of date/times within one line are now all
    processed rather than only the first occurrence
  * zone difference specifier (%Z) is supported for parsing and
    printing
  * matlab zone converter tzconv has been added
  * building with icc 13 works now
  * many gcc warnings are fixed
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1374753600">- bump version 0.2.5, this is a bug fix release.
  * issue 18, long inputs to a short specifier string will yield an
    error
  * consume zone specs (a la +1200) in the input via %Z specifier
  * ddiff's stdin stamps will undergo conversion according to
  - -from-zone
  * clean up dist for inclusion in debian
  * See info page examples and/or README.-</changelog>
<changelog author="sweet_f_a@gmx.de" date="1383048000">- bump version 0.2.6, this is a bug fix release.
  * issue 19, -q|--quiet no longer sends some commands into an
    inf-loop
  * netbsd test failures are fixed (due to missing leap seconds)
  * AIX builds are supported (getopt_long() is part of the code
    now)
  * internally the test harness is migrated to the cli-testing tool
    this fixes an issue when tests are run in directories with odd
    names (spaces, dollar signs, etc. in the path name)
  * See info page examples and/or README.</changelog>

</package>
<package pkgid="48cdb1269462f7b2290768ef8bff1458aabcf3922556d1b6179f91fdbdc6dce3" name="dateutils-devel" arch="i586">
    <version epoch="0" ver="0.2.6" rel="2.4.1"/>

<changelog author="sweet_f_a@gmx.de" date="1316001600">- initial package datetools 0.1.2</changelog>
<changelog author="sweet_f_a@gmx.de" date="1319198400">- bump version 0.1.6</changelog>
<changelog author="sweet_f_a@gmx.de" date="1319716800">- bump version 0.1.7, this is a bug fix release.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1325592000">- bump version 0.1.8, this is a bug fix release.
  * A bit fiddling bug gave erroneous results in `dconv now'.
  * Furtherly, date expressions (for dgrep et al.) can now be
    arbitrarily joined with conjunctions (&amp;&amp;) and disjunctions (||)
    as well as negations (!).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1328097600">- bump version 0.1.9, this is a bug fix release.
  * The code for date addition is refactored, with it a new
    duration type is introduced, DT_MD, to capture larger month and
    day summands.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1332504000">- bump version 0.1.10, this is a bug fix release.
  * account for big-endian machines
  * GNUisms (mempcpy() and getline()) are removed
  * inf-loop in tseq is fixed (bug #6)
  * nanoseconds are preserved upon time zone conversion
- add byteswap.patch to fix build for old distros</changelog>
<changelog author="sweet_f_a@gmx.de" date="1334059200">- bump version 0.2.0, this is a feature release.
  * The distinction between binaries for date, time and date-time
    processing is cleared up by a unified set of tools, prefixed
    with `d'.
    Thus:
    dadd + tadd -&gt; dadd
    dconv + tconv + dtconv -&gt; dconv
    ddiff + tdiff -&gt; ddiff
    dgrep + tgrep -&gt; dgrep
    dseq + tseq -&gt; dseq
    dtest + ttest -&gt; dtest
  * Furthermore, all tools now fully cope with dates, times and
    date-times.
  * Virtual timezones have been added (use `GPS' or `TAI').
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1340107200">- bump version 0.2.1, this is a bug fix and feature release.
  * The dadd tool now supports mass-adding durations (from stdin).
  * The ddiff tool is now time zone aware.
  * A new tool dround is added to round dates or times or
    date-times to the next occurrence of what's given as
    round-spec.
  * Bug fixes:
  - issue 7: ddiff without arguments does not segfault
  - issue 8: dadd copes with huge summands
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1342785600">- bump version 0.2.2, this is a bug fix and feature release.
  * Olson's zoneinfo database files are checked for at configure
    time
  * leap-aware calculations use shipped leapseconds file
  * ddiff and dadd can take leap-second transitions into account
  * issue 7: ddiff without arguments does not segfault
  * issue 8: dadd copes with huge summands
  * issue 9: dadd stumbles on ymcw dates
  * bug 33104651: bday negative difference A &gt; B ddiff A B -f %db
    is wrong
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1347624000">- bump version 0.2.3, this is a bug fix and feature release.
  * ISO 8601 week dates are now first class objectsi
    (of type DT_YWD)
  * introduce %rY specifier to denote years in calendars that
    deviate from the Gregorian year
  * dgrep accepts short-hand inputs (today, now, etc.) and also
    inputs as specified by -i
  * dadd'ing months and years to YMCW dates works now
  * zoneinfo files with only transitions in the past are handled
    properly (bug #10)
  * dseq with just 1 argument is working properly (story #36051287)
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1360238400">- bump version 0.2.4, this is a bug fix release.
  * added special output format `jdn' and `ldn' for julian/lilian
    day number
  * multiple occurrences of date/times within one line are now all
    processed rather than only the first occurrence
  * zone difference specifier (%Z) is supported for parsing and
    printing
  * matlab zone converter tzconv has been added
  * building with icc 13 works now
  * many gcc warnings are fixed
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1374753600">- bump version 0.2.5, this is a bug fix release.
  * issue 18, long inputs to a short specifier string will yield an
    error
  * consume zone specs (a la +1200) in the input via %Z specifier
  * ddiff's stdin stamps will undergo conversion according to
  - -from-zone
  * clean up dist for inclusion in debian
  * See info page examples and/or README.-</changelog>
<changelog author="sweet_f_a@gmx.de" date="1383048000">- bump version 0.2.6, this is a bug fix release.
  * issue 19, -q|--quiet no longer sends some commands into an
    inf-loop
  * netbsd test failures are fixed (due to missing leap seconds)
  * AIX builds are supported (getopt_long() is part of the code
    now)
  * internally the test harness is migrated to the cli-testing tool
    this fixes an issue when tests are run in directories with odd
    names (spaces, dollar signs, etc. in the path name)
  * See info page examples and/or README.</changelog>

</package>
<package pkgid="4e3e547d011c8a8649055b424964a4edd6d1730d1b879ea208f17699e8278a53" name="dateutils-devel" arch="x86_64">
    <version epoch="0" ver="0.2.6" rel="2.4.1"/>

<changelog author="sweet_f_a@gmx.de" date="1316001600">- initial package datetools 0.1.2</changelog>
<changelog author="sweet_f_a@gmx.de" date="1319198400">- bump version 0.1.6</changelog>
<changelog author="sweet_f_a@gmx.de" date="1319716800">- bump version 0.1.7, this is a bug fix release.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1325592000">- bump version 0.1.8, this is a bug fix release.
  * A bit fiddling bug gave erroneous results in `dconv now'.
  * Furtherly, date expressions (for dgrep et al.) can now be
    arbitrarily joined with conjunctions (&amp;&amp;) and disjunctions (||)
    as well as negations (!).</changelog>
<changelog author="sweet_f_a@gmx.de" date="1328097600">- bump version 0.1.9, this is a bug fix release.
  * The code for date addition is refactored, with it a new
    duration type is introduced, DT_MD, to capture larger month and
    day summands.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1332504000">- bump version 0.1.10, this is a bug fix release.
  * account for big-endian machines
  * GNUisms (mempcpy() and getline()) are removed
  * inf-loop in tseq is fixed (bug #6)
  * nanoseconds are preserved upon time zone conversion
- add byteswap.patch to fix build for old distros</changelog>
<changelog author="sweet_f_a@gmx.de" date="1334059200">- bump version 0.2.0, this is a feature release.
  * The distinction between binaries for date, time and date-time
    processing is cleared up by a unified set of tools, prefixed
    with `d'.
    Thus:
    dadd + tadd -&gt; dadd
    dconv + tconv + dtconv -&gt; dconv
    ddiff + tdiff -&gt; ddiff
    dgrep + tgrep -&gt; dgrep
    dseq + tseq -&gt; dseq
    dtest + ttest -&gt; dtest
  * Furthermore, all tools now fully cope with dates, times and
    date-times.
  * Virtual timezones have been added (use `GPS' or `TAI').
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1340107200">- bump version 0.2.1, this is a bug fix and feature release.
  * The dadd tool now supports mass-adding durations (from stdin).
  * The ddiff tool is now time zone aware.
  * A new tool dround is added to round dates or times or
    date-times to the next occurrence of what's given as
    round-spec.
  * Bug fixes:
  - issue 7: ddiff without arguments does not segfault
  - issue 8: dadd copes with huge summands
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1342785600">- bump version 0.2.2, this is a bug fix and feature release.
  * Olson's zoneinfo database files are checked for at configure
    time
  * leap-aware calculations use shipped leapseconds file
  * ddiff and dadd can take leap-second transitions into account
  * issue 7: ddiff without arguments does not segfault
  * issue 8: dadd copes with huge summands
  * issue 9: dadd stumbles on ymcw dates
  * bug 33104651: bday negative difference A &gt; B ddiff A B -f %db
    is wrong
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1347624000">- bump version 0.2.3, this is a bug fix and feature release.
  * ISO 8601 week dates are now first class objectsi
    (of type DT_YWD)
  * introduce %rY specifier to denote years in calendars that
    deviate from the Gregorian year
  * dgrep accepts short-hand inputs (today, now, etc.) and also
    inputs as specified by -i
  * dadd'ing months and years to YMCW dates works now
  * zoneinfo files with only transitions in the past are handled
    properly (bug #10)
  * dseq with just 1 argument is working properly (story #36051287)
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1360238400">- bump version 0.2.4, this is a bug fix release.
  * added special output format `jdn' and `ldn' for julian/lilian
    day number
  * multiple occurrences of date/times within one line are now all
    processed rather than only the first occurrence
  * zone difference specifier (%Z) is supported for parsing and
    printing
  * matlab zone converter tzconv has been added
  * building with icc 13 works now
  * many gcc warnings are fixed
  * See info page examples and/or README.</changelog>
<changelog author="sweet_f_a@gmx.de" date="1374753600">- bump version 0.2.5, this is a bug fix release.
  * issue 18, long inputs to a short specifier string will yield an
    error
  * consume zone specs (a la +1200) in the input via %Z specifier
  * ddiff's stdin stamps will undergo conversion according to
  - -from-zone
  * clean up dist for inclusion in debian
  * See info page examples and/or README.-</changelog>
<changelog author="sweet_f_a@gmx.de" date="1383048000">- bump version 0.2.6, this is a bug fix release.
  * issue 19, -q|--quiet no longer sends some commands into an
    inf-loop
  * netbsd test failures are fixed (due to missing leap seconds)
  * AIX builds are supported (getopt_long() is part of the code
    now)
  * internally the test harness is migrated to the cli-testing tool
    this fixes an issue when tests are run in directories with odd
    names (spaces, dollar signs, etc. in the path name)
  * See info page examples and/or README.</changelog>

</package>
<package pkgid="85255bae75b6c7b3e6bf277dc8d83b12d31c098040d33d1208da66d86c2900ba" name="dbus-1" arch="i586">
    <version epoch="0" ver="1.7.4" rel="4.12.2"/>

<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="a3dd3b6e17889ee310628f5ad19974525599c8a901d9083e7163a3076952c909" name="dbus-1" arch="i586">
    <version epoch="0" ver="1.7.4" rel="4.16.2"/>

<changelog author="dimstar@opensuse.org" date="1353067200">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3477 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="0a2f740ff22ca0d36a1a4aa70b8d8a2e6a8f2bb34b4ac68b6c682352f2b819ba" name="dbus-1" arch="i586">
    <version epoch="0" ver="1.7.4" rel="4.8.2"/>

<changelog author="crrodriguez@opensuse.org" date="1351944000">- Fix factory breakage on systemd units directory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>

</package>
<package pkgid="efe6ebf47fe4eaad26ef3128d9fde1ec254fbd289da432967e6d3031632d8392" name="dbus-1" arch="i586">
    <version epoch="0" ver="1.8.10" rel="4.24.2"/>

<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>

</package>
<package pkgid="ae5e8272a0c7da0d25278c7164c5934d04e65c916e7583a7e29d0c44c10ee8da" name="dbus-1" arch="i586">
    <version epoch="0" ver="1.8.12" rel="4.28.2"/>

<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>

</package>
<package pkgid="1ef065f271e1bcfe5caa4ed016377f6023d9f179fc169560f5ae16c68b612697" name="dbus-1" arch="i586">
    <version epoch="0" ver="1.8.14" rel="4.32.3"/>

<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>

</package>
<package pkgid="008c21b793a27e55be62fc6f5a778050ecb88b05dc8ca27ecffa926d41a3e30c" name="dbus-1" arch="i586">
    <version epoch="0" ver="1.8.16" rel="4.36.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>
<changelog author="fstrba@suse.com" date="1423483200">- Update to 1.8.16:
  * Security fixes:
  - Do not allow non-uid-0 processes to send forged
    ActivationFailure messages. On Linux systems with systemd
    activation, this would allow a local denial of service:
    unprivileged processes could flood the bus with these forged
    messages, winning the race with the actual service activation
    and causing an error reply to be sent back when service
    auto-activation was requested. This does not prevent the real
    service from being started, so it only works while the real
    service is not running. (CVE-2015-0245, fdo#88811, bnc#916343;
    Simon McVittie)
  * Other fixes:
  - fix a Windows build failure (fdo#88009, Ralf Habacker)
  - on Windows, allow up to 8K connections to the dbus-daemon
    instead of the previous 64, completing a previous fix which
    only worked under Autotools (fdo#71297, Ralf Habacker)</changelog>

</package>
<package pkgid="9878436e5f7461361583ec8aabcd9dcf77118b1e701c3fa04bb3e2662da10a2c" name="dbus-1" arch="i586">
    <version epoch="0" ver="1.8.8" rel="4.20.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fdo#52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fdo#51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fdo#51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fdo#51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fdo#51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fdo#34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fdo#47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fdo#48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fdo#48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fdo#45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>

</package>
<package pkgid="6df35f46b64d1057b6bb29992b9acaad47330cecff1cb93389b9138287a856cf" name="dbus-1" arch="src">
    <version epoch="0" ver="1.7.4" rel="4.12.1"/>

<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="596d1e4afdd546bd7415045bfc7a1f459fbf73f59b24c7fe9c2ffaba18be7c58" name="dbus-1" arch="src">
    <version epoch="0" ver="1.7.4" rel="4.16.1"/>

<changelog author="dimstar@opensuse.org" date="1353067200">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="60de60500183d9060d528964a1d268a590b54b475623d30a5105ed5ba8b888c1" name="dbus-1" arch="src">
    <version epoch="0" ver="1.7.4" rel="4.8.1"/>

<changelog author="crrodriguez@opensuse.org" date="1351944000">- Fix factory breakage on systemd units directory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>

</package>
<package pkgid="5c6288db38f46d6a9e7f6ba6a37af5d1cba57ecf07e987a047c1d6efe9b653ea" name="dbus-1" arch="src">
    <version epoch="0" ver="1.8.10" rel="4.24.1"/>

<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>

</package>
<package pkgid="07e6d1aae5b186ab4e2d5357fc19e9d9c292340a7514755e770c367cb49aef8e" name="dbus-1" arch="src">
    <version epoch="0" ver="1.8.12" rel="4.28.1"/>

<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>

</package>
<package pkgid="55d9a150a5e6cabe55c30c0c970fefef95afef81415b0384a88b27256c162131" name="dbus-1" arch="src">
    <version epoch="0" ver="1.8.14" rel="4.32.1"/>

<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>

</package>
<package pkgid="25fa38e7757eaa47d21c79b3fce7a0430fd9adc8670c7267d812fd7b99264bf7" name="dbus-1" arch="src">
    <version epoch="0" ver="1.8.16" rel="4.36.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>
<changelog author="fstrba@suse.com" date="1423483200">- Update to 1.8.16:
  * Security fixes:
  - Do not allow non-uid-0 processes to send forged
    ActivationFailure messages. On Linux systems with systemd
    activation, this would allow a local denial of service:
    unprivileged processes could flood the bus with these forged
    messages, winning the race with the actual service activation
    and causing an error reply to be sent back when service
    auto-activation was requested. This does not prevent the real
    service from being started, so it only works while the real
    service is not running. (CVE-2015-0245, fdo#88811, bnc#916343;
    Simon McVittie)
  * Other fixes:
  - fix a Windows build failure (fdo#88009, Ralf Habacker)
  - on Windows, allow up to 8K connections to the dbus-daemon
    instead of the previous 64, completing a previous fix which
    only worked under Autotools (fdo#71297, Ralf Habacker)</changelog>

</package>
<package pkgid="d44bb0b390f3d51f593c1ea99eab13733c030c87d469c4a54e251af0e59e31c0" name="dbus-1" arch="src">
    <version epoch="0" ver="1.8.8" rel="4.20.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fdo#52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fdo#51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fdo#51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fdo#51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fdo#51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fdo#34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fdo#47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fdo#48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fdo#48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fdo#45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>

</package>
<package pkgid="25e9a98956d98398a8d823796ed9907fd7e05821dc9b032914dcc2e0b12cc5bf" name="dbus-1" arch="x86_64">
    <version epoch="0" ver="1.7.4" rel="4.12.2"/>

<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="c125eedeb4205f96be55897ac33f72f1c2f729c6b3da64a6f4082c61bf1dfd2c" name="dbus-1" arch="x86_64">
    <version epoch="0" ver="1.7.4" rel="4.16.2"/>

<changelog author="dimstar@opensuse.org" date="1353067200">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3477 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="2a21096032450c7ab963956d1550b73826d2edcec44b7873bd392cb612362210" name="dbus-1" arch="x86_64">
    <version epoch="0" ver="1.7.4" rel="4.8.2"/>

<changelog author="crrodriguez@opensuse.org" date="1351944000">- Fix factory breakage on systemd units directory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>

</package>
<package pkgid="403a286605b9d10f6b2b4de6ee5a3a11d602fd0234e2354ae0137d42af0ad50e" name="dbus-1" arch="x86_64">
    <version epoch="0" ver="1.8.10" rel="4.24.2"/>

<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>

</package>
<package pkgid="2cbe1eb866f8d4ba02e5ce6f9cd19e1602b9db696c2632f87021803babe2c8d6" name="dbus-1" arch="x86_64">
    <version epoch="0" ver="1.8.12" rel="4.28.2"/>

<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>

</package>
<package pkgid="5f26f01c8fecaaccc495125cbc45ba7584bb063bbb933c12337fc17ed5468ebf" name="dbus-1" arch="x86_64">
    <version epoch="0" ver="1.8.14" rel="4.32.3"/>

<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>

</package>
<package pkgid="571eb5d4a26abae9623344fdeae7b196afcf494a32f09407ae4f7a38a2cc6205" name="dbus-1" arch="x86_64">
    <version epoch="0" ver="1.8.16" rel="4.36.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>
<changelog author="fstrba@suse.com" date="1423483200">- Update to 1.8.16:
  * Security fixes:
  - Do not allow non-uid-0 processes to send forged
    ActivationFailure messages. On Linux systems with systemd
    activation, this would allow a local denial of service:
    unprivileged processes could flood the bus with these forged
    messages, winning the race with the actual service activation
    and causing an error reply to be sent back when service
    auto-activation was requested. This does not prevent the real
    service from being started, so it only works while the real
    service is not running. (CVE-2015-0245, fdo#88811, bnc#916343;
    Simon McVittie)
  * Other fixes:
  - fix a Windows build failure (fdo#88009, Ralf Habacker)
  - on Windows, allow up to 8K connections to the dbus-daemon
    instead of the previous 64, completing a previous fix which
    only worked under Autotools (fdo#71297, Ralf Habacker)</changelog>

</package>
<package pkgid="d408ccdff65cd483899cc3515e4e73f1c2ee48581c8cb260b8810605f0b90e26" name="dbus-1" arch="x86_64">
    <version epoch="0" ver="1.8.8" rel="4.20.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fdo#52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fdo#51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fdo#51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fdo#51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fdo#51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fdo#34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fdo#47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fdo#48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fdo#48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fdo#45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>

</package>
<package pkgid="c452330cd84da5c5a22870117e7301f1d8d9551549ef6bbc9f81c60288631c67" name="dbus-1-devel" arch="i586">
    <version epoch="0" ver="1.7.4" rel="4.12.1"/>

<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="c72f23d72b2673da0b92cd5c8070323a32b523e2c9b7fd541fc219bfcccd5a81" name="dbus-1-devel" arch="i586">
    <version epoch="0" ver="1.7.4" rel="4.16.1"/>

<changelog author="dimstar@opensuse.org" date="1353067200">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="3f74b7577e36baa34003b0e6bed9b7aeccc6f1d61e4b407fd120016269bc2330" name="dbus-1-devel" arch="i586">
    <version epoch="0" ver="1.7.4" rel="4.8.1"/>

<changelog author="crrodriguez@opensuse.org" date="1351944000">- Fix factory breakage on systemd units directory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>

</package>
<package pkgid="e1a92610776ded14907fb8250403a8a46ed18d4f6ea2fab8ae7b6af8e56ad2f3" name="dbus-1-devel" arch="i586">
    <version epoch="0" ver="1.8.10" rel="4.24.1"/>

<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>

</package>
<package pkgid="99679829632a54d940819fc3676bc80b8b8fa2506fd97acdb831c1e759590b4f" name="dbus-1-devel" arch="i586">
    <version epoch="0" ver="1.8.12" rel="4.28.1"/>

<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>

</package>
<package pkgid="8d751e1c8b6911762581f40927688ff2f2c20cdd1071e051963a2618ef01b67a" name="dbus-1-devel" arch="i586">
    <version epoch="0" ver="1.8.14" rel="4.32.1"/>

<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>

</package>
<package pkgid="0236e886aedc03ac162ec6fad0056f0b2f1a9ff81d75749209c163aede24b770" name="dbus-1-devel" arch="i586">
    <version epoch="0" ver="1.8.16" rel="4.36.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>
<changelog author="fstrba@suse.com" date="1423483200">- Update to 1.8.16:
  * Security fixes:
  - Do not allow non-uid-0 processes to send forged
    ActivationFailure messages. On Linux systems with systemd
    activation, this would allow a local denial of service:
    unprivileged processes could flood the bus with these forged
    messages, winning the race with the actual service activation
    and causing an error reply to be sent back when service
    auto-activation was requested. This does not prevent the real
    service from being started, so it only works while the real
    service is not running. (CVE-2015-0245, fdo#88811, bnc#916343;
    Simon McVittie)
  * Other fixes:
  - fix a Windows build failure (fdo#88009, Ralf Habacker)
  - on Windows, allow up to 8K connections to the dbus-daemon
    instead of the previous 64, completing a previous fix which
    only worked under Autotools (fdo#71297, Ralf Habacker)</changelog>

</package>
<package pkgid="e62bb8e868c0c7eec8c8f525c769f48b8835d7392d3126ee8f0d5a75ebe9e95b" name="dbus-1-devel" arch="i586">
    <version epoch="0" ver="1.8.8" rel="4.20.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fdo#52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fdo#51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fdo#51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fdo#51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fdo#51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fdo#34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fdo#47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fdo#48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fdo#48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fdo#45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>

</package>
<package pkgid="5bca326e14b726e7540d9fdf5f72762523a6d7fdbd75a4305d52356e9873bb94" name="dbus-1-devel" arch="x86_64">
    <version epoch="0" ver="1.7.4" rel="4.12.1"/>

<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="b111acfe7b228d952218ce8fe094e57ab56bfffe6c1f748c35e13f1c62d16bf6" name="dbus-1-devel" arch="x86_64">
    <version epoch="0" ver="1.7.4" rel="4.16.1"/>

<changelog author="dimstar@opensuse.org" date="1353067200">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="2c45baa2bb09aec80b705e5592e438b4c6ab1b456609767f04f5d4eba17074fd" name="dbus-1-devel" arch="x86_64">
    <version epoch="0" ver="1.7.4" rel="4.8.1"/>

<changelog author="crrodriguez@opensuse.org" date="1351944000">- Fix factory breakage on systemd units directory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>

</package>
<package pkgid="56045e0213593988837a097a6d2b05969eb0d382376477a0759ccf63e804d0a8" name="dbus-1-devel" arch="x86_64">
    <version epoch="0" ver="1.8.10" rel="4.24.1"/>

<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>

</package>
<package pkgid="50c8c1d1ddcdb47ba10049b43e51d24bf9ae1d4d0b2d987ac0ab80afac70a849" name="dbus-1-devel" arch="x86_64">
    <version epoch="0" ver="1.8.12" rel="4.28.1"/>

<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>

</package>
<package pkgid="d665a945669a6175eb1a18957a059fcdf4a346f0eab0ddc9e1f97857fbeeabaa" name="dbus-1-devel" arch="x86_64">
    <version epoch="0" ver="1.8.14" rel="4.32.1"/>

<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>

</package>
<package pkgid="5a6cf5fdd0a607e6191e32abb1490cce7803a139bb88da3cc4a147e938d48973" name="dbus-1-devel" arch="x86_64">
    <version epoch="0" ver="1.8.16" rel="4.36.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>
<changelog author="fstrba@suse.com" date="1423483200">- Update to 1.8.16:
  * Security fixes:
  - Do not allow non-uid-0 processes to send forged
    ActivationFailure messages. On Linux systems with systemd
    activation, this would allow a local denial of service:
    unprivileged processes could flood the bus with these forged
    messages, winning the race with the actual service activation
    and causing an error reply to be sent back when service
    auto-activation was requested. This does not prevent the real
    service from being started, so it only works while the real
    service is not running. (CVE-2015-0245, fdo#88811, bnc#916343;
    Simon McVittie)
  * Other fixes:
  - fix a Windows build failure (fdo#88009, Ralf Habacker)
  - on Windows, allow up to 8K connections to the dbus-daemon
    instead of the previous 64, completing a previous fix which
    only worked under Autotools (fdo#71297, Ralf Habacker)</changelog>

</package>
<package pkgid="11aa105debd4ac93f2416bc9ed414cf200969ec30b1c74e7b0fe96cacebcb616" name="dbus-1-devel" arch="x86_64">
    <version epoch="0" ver="1.8.8" rel="4.20.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fdo#52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fdo#51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fdo#51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fdo#51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fdo#51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fdo#34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fdo#47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fdo#48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fdo#48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fdo#45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>

</package>
<package pkgid="bed12c46969e5472d736706afef71a3d7e220fc78ff8d7665c64b3ffd718c534" name="dbus-1-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.7.4" rel="4.12.1"/>

<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="57190b0daa1336a27a4dcb4f871dc40c4ed88c5a8d33c335afe0facf4495062a" name="dbus-1-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.7.4" rel="4.16.1"/>

<changelog author="dimstar@opensuse.org" date="1353067200">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="f0460f8276b6c228ab29322b76c49830eb6c1d4648ee87bab8e09b7908d5c6bb" name="dbus-1-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.7.4" rel="4.8.1"/>

<changelog author="crrodriguez@opensuse.org" date="1351944000">- Fix factory breakage on systemd units directory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>

</package>
<package pkgid="6a2fb1f9176ca23ab0841be4a3a4eeab0b1f0dcfa82400cac98c2d1c6b42770a" name="dbus-1-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.8.10" rel="4.24.1"/>

<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>

</package>
<package pkgid="9c66ffdb8a3b6f139c482d9a60f3b0f232424fc53a13941da04505acad33821a" name="dbus-1-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.8.12" rel="4.28.1"/>

<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>

</package>
<package pkgid="0ad006426967d906cf256da123df25d876d3f4da2e07e6da9491b4999830482d" name="dbus-1-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.8.14" rel="4.32.1"/>

<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>

</package>
<package pkgid="a19c2b2fc4aa5dcd5dfecdde5dbeac5d58f474a84c12a6f32601ebfc3e720d8e" name="dbus-1-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.8.16" rel="4.36.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>
<changelog author="fstrba@suse.com" date="1423483200">- Update to 1.8.16:
  * Security fixes:
  - Do not allow non-uid-0 processes to send forged
    ActivationFailure messages. On Linux systems with systemd
    activation, this would allow a local denial of service:
    unprivileged processes could flood the bus with these forged
    messages, winning the race with the actual service activation
    and causing an error reply to be sent back when service
    auto-activation was requested. This does not prevent the real
    service from being started, so it only works while the real
    service is not running. (CVE-2015-0245, fdo#88811, bnc#916343;
    Simon McVittie)
  * Other fixes:
  - fix a Windows build failure (fdo#88009, Ralf Habacker)
  - on Windows, allow up to 8K connections to the dbus-daemon
    instead of the previous 64, completing a previous fix which
    only worked under Autotools (fdo#71297, Ralf Habacker)</changelog>

</package>
<package pkgid="5959c784ab3096690831e3efdfc87e417c94269e6a6d4c03955f3d7447e42c48" name="dbus-1-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.8.8" rel="4.20.1"/>

<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fdo#52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fdo#51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fdo#51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fdo#51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fdo#51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fdo#34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fdo#47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fdo#48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fdo#48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fdo#45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>

</package>
<package pkgid="2606e506fbbf1de04c77aa274959ce99ceb98ffb06d512adc579cb2dc7d1cf31" name="dbus-1-devel-doc" arch="noarch">
    <version epoch="0" ver="1.7.4" rel="4.12.2"/>

<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="e5c6f83e1b8a36ac0d9f0796a697322a6f39ca83226ad3fcc188bb33ee7d8ad8" name="dbus-1-devel-doc" arch="noarch">
    <version epoch="0" ver="1.7.4" rel="4.16.2"/>

<changelog author="dimstar@opensuse.org" date="1353067200">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3477 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="e2774ae5b012b7eb874ff37fd5e4768720da6579ef006a48ceebb98bdf883b19" name="dbus-1-devel-doc" arch="noarch">
    <version epoch="0" ver="1.7.4" rel="4.8.2"/>

<changelog author="crrodriguez@opensuse.org" date="1351944000">- Fix factory breakage on systemd units directory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>

</package>
<package pkgid="f6f35b4de6b286737aa9caf56f22557a10a30050e7934d01ab382013cd4490cd" name="dbus-1-devel-doc" arch="noarch">
    <version epoch="0" ver="1.8.10" rel="4.24.2"/>

<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>

</package>
<package pkgid="942621968ac350e69445fe052334e5b1927003d48211f4c14e83389aae660fe2" name="dbus-1-devel-doc" arch="noarch">
    <version epoch="0" ver="1.8.12" rel="4.28.2"/>

<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>

</package>
<package pkgid="cb353b44e622ab8ce2dd6922ce032679faddfe727def38593039ac96c37a7284" name="dbus-1-devel-doc" arch="noarch">
    <version epoch="0" ver="1.8.14" rel="4.32.3"/>

<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>

</package>
<package pkgid="a467e648cae6a6930111c9605d98b39483066732880f888722fdcc6aa748c3f6" name="dbus-1-devel-doc" arch="noarch">
    <version epoch="0" ver="1.8.16" rel="4.36.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>
<changelog author="fstrba@suse.com" date="1423483200">- Update to 1.8.16:
  * Security fixes:
  - Do not allow non-uid-0 processes to send forged
    ActivationFailure messages. On Linux systems with systemd
    activation, this would allow a local denial of service:
    unprivileged processes could flood the bus with these forged
    messages, winning the race with the actual service activation
    and causing an error reply to be sent back when service
    auto-activation was requested. This does not prevent the real
    service from being started, so it only works while the real
    service is not running. (CVE-2015-0245, fdo#88811, bnc#916343;
    Simon McVittie)
  * Other fixes:
  - fix a Windows build failure (fdo#88009, Ralf Habacker)
  - on Windows, allow up to 8K connections to the dbus-daemon
    instead of the previous 64, completing a previous fix which
    only worked under Autotools (fdo#71297, Ralf Habacker)</changelog>

</package>
<package pkgid="346dc7096f3d8a635372821de6fe2db185467880346d81fdb01ed7cf92b9d91f" name="dbus-1-devel-doc" arch="noarch">
    <version epoch="0" ver="1.8.8" rel="4.20.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fdo#52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fdo#51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fdo#51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fdo#51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fdo#51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fdo#34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fdo#47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fdo#48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fdo#48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fdo#45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>

</package>
<package pkgid="8dda5a1a3ea25f55ed69e6a2b45343c33b8e290dbd8f87183d3cb8593ab6eaba" name="dbus-1-x11" arch="i586">
    <version epoch="0" ver="1.7.4" rel="4.12.2"/>

<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="45edc72eb22d85b69d03a31360dade34b7c77b2bee2e9672030f44a8cb50fae3" name="dbus-1-x11" arch="i586">
    <version epoch="0" ver="1.7.4" rel="4.16.2"/>

<changelog author="dimstar@opensuse.org" date="1353067200">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3477 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="a7563f271f1d871318d2e3546909c0479092139cf1fea218fe0c187d41636096" name="dbus-1-x11" arch="i586">
    <version epoch="0" ver="1.7.4" rel="4.8.2"/>

<changelog author="crrodriguez@opensuse.org" date="1351944000">- Fix factory breakage on systemd units directory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>

</package>
<package pkgid="e38b5a8b58d827019ed9b553e1030874b8c3c56a6e8d834da541729f4040c1ff" name="dbus-1-x11" arch="i586">
    <version epoch="0" ver="1.8.10" rel="4.24.2"/>

<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>

</package>
<package pkgid="5966de7f1dfada7c96ae9672c49cd4a3bf3e5cfd6598251048f42d7e6d787ebc" name="dbus-1-x11" arch="i586">
    <version epoch="0" ver="1.8.12" rel="4.28.2"/>

<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>

</package>
<package pkgid="021fcf86bdaf10c5326aa9e91c2df3110e85d1c49ad7e786fa50788d1a16828f" name="dbus-1-x11" arch="i586">
    <version epoch="0" ver="1.8.14" rel="4.32.3"/>

<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>

</package>
<package pkgid="a2dc0c38222e4583f115a189ce31799b04c070a6681608477390585d3f50a321" name="dbus-1-x11" arch="i586">
    <version epoch="0" ver="1.8.16" rel="4.36.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>
<changelog author="fstrba@suse.com" date="1423483200">- Update to 1.8.16:
  * Security fixes:
  - Do not allow non-uid-0 processes to send forged
    ActivationFailure messages. On Linux systems with systemd
    activation, this would allow a local denial of service:
    unprivileged processes could flood the bus with these forged
    messages, winning the race with the actual service activation
    and causing an error reply to be sent back when service
    auto-activation was requested. This does not prevent the real
    service from being started, so it only works while the real
    service is not running. (CVE-2015-0245, fdo#88811, bnc#916343;
    Simon McVittie)
  * Other fixes:
  - fix a Windows build failure (fdo#88009, Ralf Habacker)
  - on Windows, allow up to 8K connections to the dbus-daemon
    instead of the previous 64, completing a previous fix which
    only worked under Autotools (fdo#71297, Ralf Habacker)</changelog>

</package>
<package pkgid="a88846fd205bf1397224e4f000fe2d0f7bf9cf0068106fd93e1d7d6b19942059" name="dbus-1-x11" arch="i586">
    <version epoch="0" ver="1.8.8" rel="4.20.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fdo#52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fdo#51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fdo#51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fdo#51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fdo#51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fdo#34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fdo#47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fdo#48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fdo#48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fdo#45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>

</package>
<package pkgid="05edbe8748d95d1ce02577762804b2a8097e53f6eaa0b8200d7dedf0a5b63b9f" name="dbus-1-x11" arch="src">
    <version epoch="0" ver="1.7.4" rel="4.12.2"/>

<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="8c36631e46199cd711d25aace4067e4d6ef01a220c671b29396fa17314f8728c" name="dbus-1-x11" arch="src">
    <version epoch="0" ver="1.7.4" rel="4.16.2"/>

<changelog author="dimstar@opensuse.org" date="1353067200">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3477 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="978bb01caa405be55bfe2ecdfbc2f5453e01b827e7d22980f7b2eadd2f76c015" name="dbus-1-x11" arch="src">
    <version epoch="0" ver="1.7.4" rel="4.8.2"/>

<changelog author="crrodriguez@opensuse.org" date="1351944000">- Fix factory breakage on systemd units directory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>

</package>
<package pkgid="ea794a1132f92bb607b89d83bb06e311258ad982a12af76931612131c8994a3b" name="dbus-1-x11" arch="src">
    <version epoch="0" ver="1.8.10" rel="4.24.2"/>

<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>

</package>
<package pkgid="2c06e306500a8a6ae7ee2a96833863b720dbef3cc04499fd46e78391e6a8f583" name="dbus-1-x11" arch="src">
    <version epoch="0" ver="1.8.12" rel="4.28.2"/>

<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>

</package>
<package pkgid="516ca2eaa36899047e3cb6656963256d06e858a67b7592d7e5f0ec171745719f" name="dbus-1-x11" arch="src">
    <version epoch="0" ver="1.8.14" rel="4.32.3"/>

<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>

</package>
<package pkgid="a665759936c6367c835d06d98a5b96f8bb81f98bfe4f15607a5805c070aa6c04" name="dbus-1-x11" arch="src">
    <version epoch="0" ver="1.8.16" rel="4.36.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>
<changelog author="fstrba@suse.com" date="1423483200">- Update to 1.8.16:
  * Security fixes:
  - Do not allow non-uid-0 processes to send forged
    ActivationFailure messages. On Linux systems with systemd
    activation, this would allow a local denial of service:
    unprivileged processes could flood the bus with these forged
    messages, winning the race with the actual service activation
    and causing an error reply to be sent back when service
    auto-activation was requested. This does not prevent the real
    service from being started, so it only works while the real
    service is not running. (CVE-2015-0245, fdo#88811, bnc#916343;
    Simon McVittie)
  * Other fixes:
  - fix a Windows build failure (fdo#88009, Ralf Habacker)
  - on Windows, allow up to 8K connections to the dbus-daemon
    instead of the previous 64, completing a previous fix which
    only worked under Autotools (fdo#71297, Ralf Habacker)</changelog>

</package>
<package pkgid="7d7bc1cc52d3296443b95198b04c6bc4684533306721663f442c9334b54b253b" name="dbus-1-x11" arch="src">
    <version epoch="0" ver="1.8.8" rel="4.20.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fdo#52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fdo#51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fdo#51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fdo#51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fdo#51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fdo#34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fdo#47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fdo#48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fdo#48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fdo#45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>

</package>
<package pkgid="daf50c6b5636e7626b1971bd97f7bf212a78e95a28f1665a0cab0c42c1305767" name="dbus-1-x11" arch="x86_64">
    <version epoch="0" ver="1.7.4" rel="4.12.2"/>

<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="f02a7ceb59272e8365018aff1c0d15a0e285a89e45db63fb22cb18582b01e6ff" name="dbus-1-x11" arch="x86_64">
    <version epoch="0" ver="1.7.4" rel="4.16.2"/>

<changelog author="dimstar@opensuse.org" date="1353067200">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3477 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>

</package>
<package pkgid="5cc68fc71bd8c79047ea4b2502365ead323d83de38a095bdc6c90e4dc80bcb6d" name="dbus-1-x11" arch="x86_64">
    <version epoch="0" ver="1.7.4" rel="4.8.2"/>

<changelog author="crrodriguez@opensuse.org" date="1351944000">- Fix factory breakage on systemd units directory</changelog>
<changelog author="tittiatcoke@gmail.com" date="1352376000">- Link /usr/bin/dbus-send to /bin/dbus-send. Upower uses
  dbus-send to receive signals from systemd regarding resuming,
  however looks for the moment in the wrong directory.</changelog>
<changelog author="fcrozat@suse.com" date="1353067200">- Move default home from /var/run/dbus to /run/dbus
- Fix useradd invocation: -o is useless without -u and newer
  versions of pwdutils/shadowutils fail on this now.</changelog>
<changelog author="dimstar@opensuse.org" date="1353067201">- Enable systemd integration (with_systemd 1): follow the rest of
  the distribution enabling systemd support. As agreed, systemd is
  the main supported way for 12.3.</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fd.o #51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fd.o #51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fd.o #51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fd.o #51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fd.o #34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fd.o #45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo #63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>

</package>
<package pkgid="4233b8d277188ca927101236ba2e5a97535ba52ab2faa01186ad85138cbc719b" name="dbus-1-x11" arch="x86_64">
    <version epoch="0" ver="1.8.10" rel="4.24.2"/>

<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>

</package>
<package pkgid="b9ab61f1991c5fca6aa285f6dbe2cdddc82e5a0b8aa12999596e02c3dcfd6177" name="dbus-1-x11" arch="x86_64">
    <version epoch="0" ver="1.8.12" rel="4.28.2"/>

<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>

</package>
<package pkgid="0ae9f9e206f605a7d631ca1a74218093fda58237d8aeb9e6027abf5497b68566" name="dbus-1-x11" arch="x86_64">
    <version epoch="0" ver="1.8.14" rel="4.32.3"/>

<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>

</package>
<package pkgid="dbe05a8806aff219db67b61b85dd261a2dc3f830717922667bd1b015bfafe64a" name="dbus-1-x11" arch="x86_64">
    <version epoch="0" ver="1.8.16" rel="4.36.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>
<changelog author="fstrba@suse.com" date="1415620800">- Update to 1.8.10:
  * Security fixes:
  - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
    so that CVE-2014-3636 part A cannot exhaust the system bus'
    file descriptors, completing the incomplete fix in 1.8.8.
    (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)</changelog>
<changelog author="fstrba@suse.com" date="1416916800">- Update to 1.8.12:
  * Fixes:
  - Partially revert the CVE-2014-3639 patch by increasing the
    default authentication timeout on the system bus from 5
    seconds back to 30 seconds, since this has been reported to
    cause boot regressions for some users, mostly with parallel
    boot (systemd) on slower hardware.
    On fast systems where local users are considered particularly
    hostile, administrators can return to the 5 second timeout
    (or any other value in milliseconds) by saving this as
    /etc/dbus-1/system-local.conf:
    &lt;busconfig&gt;
    &lt;limit name="auth_timeout"&gt;5000&lt;/limit&gt;
    &lt;/busconfig&gt;
    (fdo#86431, Simon McVittie)
  - Add a message in syslog/the Journal when the auth_timeout is
    exceeded (fdo#86431, Simon McVittie)
  - Send back an AccessDenied error if the addressed recipient is
    not allowed to receive a message (and in builds with
    assertions enabled, don't assert under the same conditions).
    (fdo#86194, Jacek Bukarewicz)</changelog>
<changelog author="fstrba@suse.com" date="1420545600">- Update to 1.8.14
  * Security hardening:
  - Do not allow calls to UpdateActivationEnvironment from uids
    other than the uid of the dbus-daemon. If a system service
    installs unsafe security policy rules that allow arbitrary
    method calls (such as CVE-2014-8148) then this prevents
    memory consumption and possible privilege escalation via
    UpdateActivationEnvironment.
    We believe that in practice, privilege escalation here is
    avoided by dbus-daemon-launch-helper sanitizing its
    environment; but it seems better to be safe.
  - Do not allow calls to UpdateActivationEnvironment or the
    Stats interface on object paths other than
    /org/freedesktop/DBus. Some system services install unsafe
    security policy rules that allow arbitrary method calls to
    any destination, method and interface with a specified object
    path; while less bad than allowing arbitrary method calls,
    these security policies are still harmful, since dbus-daemon
    normally offers the same API on all object paths and other
    system services might behave similarly.
  * Other fixes:
  - Add missing initialization so GetExtendedTcpTable doesn't
    crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)</changelog>
<changelog author="fstrba@suse.com" date="1423483200">- Update to 1.8.16:
  * Security fixes:
  - Do not allow non-uid-0 processes to send forged
    ActivationFailure messages. On Linux systems with systemd
    activation, this would allow a local denial of service:
    unprivileged processes could flood the bus with these forged
    messages, winning the race with the actual service activation
    and causing an error reply to be sent back when service
    auto-activation was requested. This does not prevent the real
    service from being started, so it only works while the real
    service is not running. (CVE-2015-0245, fdo#88811, bnc#916343;
    Simon McVittie)
  * Other fixes:
  - fix a Windows build failure (fdo#88009, Ralf Habacker)
  - on Windows, allow up to 8K connections to the dbus-daemon
    instead of the previous 64, completing a previous fix which
    only worked under Autotools (fdo#71297, Ralf Habacker)</changelog>

</package>
<package pkgid="268cf4873197d633162ea498500396bee2f4960f9808376c1edebb31ecf4b42b" name="dbus-1-x11" arch="x86_64">
    <version epoch="0" ver="1.8.8" rel="4.20.2"/>

<changelog author="hrvoje.senjan@gmail.com" date="1353240000">- Update to 1.6.8
- remove patch dbus-cve-2012-3524.patch as incorporated upstream
  Changes since 1.5.12
  • Follow up to CVE-2012-3524: The additional hardening
  work to use __secure_getenv() as a followup to bug #52202
  broke certain configurations of gnome-keyring.  Given
  the difficulty of making this work without extensive
  changes to gnome-keyring, use of __secure_getenv() is
  deferred.
  • CVE-2012-3524: Don't access environment variables (fdo#52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.
  • Detect that users are "at the console" correctly when configured with
  a non-default path such as --enable-console-auth-dir=/run/console
  (fdo#51521, Dave Reisner)
  • Remove an incorrect assertion from DBusTransport (fdo#51657,
  Simon McVittie)
  • Change how we create /var/lib/dbus so it works under Automake &gt;= 1.11.4
  (fdo#51406, Simon McVittie)
  • Don't return from dbus_pending_call_set_notify with a lock held on OOM
  (fdo#51032, Simon McVittie)
  • Disconnect "developer mode" (assertions, verbose mode etc.) from
  Automake maintainer mode. D-Bus developers should now configure with
  - -enable-developer. Automake maintainer mode is now on by default;
  distributions can disable it with --disable-maintainer-mode.
  (fdo#34671, Simon McVittie)
  • Unix-specific:
  · Check for libpthread under CMake on Unix (fdo#47237, Simon McVittie)
  • New requirements
  · PTHREAD_MUTEX_RECURSIVE on Unix
  · compiler support for 64-bit integers (int64_t or equivalent)
  • D-Bus Specification v0.19
  • New dbus-daemon features
  · &lt;allow own_prefix="com.example.Service"/&gt; rules allow the service to
    own names like com.example.Service.Instance3
  · optional systemd integration when checking at_console policies
  · --nopidfile option, mainly for use by systemd
  · path_namespace and arg0namespace may appear in match rules
  · eavesdropping is disabled unless the match rule contains eavesdrop=true
  • New public API
  · functions to validate various string types (dbus_validate_path() etc.)
  · dbus_type_is_valid()
  · DBusBasicValue, a union of every basic type
  • Bug fixes
  · removed an unsafe reimplementation of recursive mutexes
  · dbus-daemon no longer busy-loops if it has far too many file descriptors
  · dbus-daemon.exe --print-address works on Windows
  · all the other bug fixes from 1.4.20
  • Other major implementation changes
  · on Linux, dbus-daemon uses epoll if supported, for better scalability
  · dbus_threads_init() ignores its argument and behaves like
    dbus_threads_init_default() instead
  · removed the per-connection link cache, improving dbus-daemon performance
  • Developer features
  · optional Valgrind instrumentation (--with-valgrind)
  · optional Stats interface on the dbus-daemon (--enable-stats)
  · optionally abort whenever malloc() fails (--enable-embedded-tests
    and export DBUS_MALLOC_CANNOT_FAIL=1)
  • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fdo#48580, David Zeuthen)
  • Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fdo#48217, Antoine Jacoutot)
  • Add missing commas in some tcp and nonce-tcp addresses, and remove
  an unused duplicate copy of the nonce-tcp transport in Windows builds
  (fdo#45896, Simon McVittie)</changelog>
<changelog author="rmilasan@suse.com" date="1359028800">- Move everything (pid files, lock files, etc.) to /run.
  add: dbus-move-everything-to-run-directory.patch</changelog>
<changelog author="rmilasan@suse.com" date="1361188800">- Revert patch: dbus-move-everything-to-run-directory.patch (bnc#802525).</changelog>
<changelog author="hpj@suse.com" date="1361534400">- Spec file changes moving files from /var/run to /run.
- Add dbus-move-everything-to-run-directory.patch by rmilasan. This
  moves everything (pid files, lock files, etc.) to /run.
- Add dbus-fall-back-to-old-run-directory.patch (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366804800">- Update to 1.6.10
  + Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
    U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fdo#63072)
  + Diagnose incorrect use of dbus_connection_get_data() with negative slot
    (i.e. before allocating the slot) rather than returning junk (fdo#63127)
  + In the activation helper, when compiled for tests, do not reset the system
    bus address, fixing the regression tests. (fdo#52202)
  + Fix building with Valgrind 3.8, at the cost of causing harmless warnings
    with Valgrind 3.6 on some compilers (fdo#55932)
  + Don't leak temporary fds pointing to /dev/null (fdo#56927,)
  + Create session.d, system.d directories under CMake (fdo#41319)
  + Include alloca.h for alloca() if available, fixing compilation on
    Solaris 10 (fdo#63071)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1366891200">- Update to 1.7.2
  + Diagnose incorrect use of dbus_connection_get_data() with negative
    slot (i.e. before allocating the slot) rather than returning junk
    (fdo#63127)
  + The --with-dbus-session-bus-default-address configure option is no
    longer supported
  + Under systemd, log to syslog only, not stderr, avoiding duplication
    (fdo#61399, fdo#39987)
  + Under systemd, remove unnecessary dependency on syslog.socket
    (fdo#63531)
  + Allow use of systemd-logind without the rest of systemd
    (fdo#62585)
- Dropped dbus-move-everything-to-run-directory.patch, since we can
  define location of system pid and socket with configure flags and
  set the flags accordingly
- Added xmlto BuildRequires, it is needed now for man files</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902400">- Remove the override that was added in solving bnc#802525, as it
  causes similar situation when upgrading dbus and systemd
  simultaneously.
- Adjusted rc.boot.dbus script so it uses /run instead of /var/run</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1371902401">- Update to 1.7.4
  + CVE-2013-2168: Fix misuse of va_list that could be used as a
    denial of service for system services.
  + It should now be safe to call dbus_threads_init_default() from
    any thread, at any time
  + In dbus-daemon, don't crash if a .service file starts with
    key=value
  + Fix an assertion failure if we try to activate systemd services
    before systemd connects to the bus (fdo#50199)
- Adjusted dbus-do-autolaunch.patch for this release</changelog>
<changelog author="coolo@suse.com" date="1372161600">- to avoid a cycle with systemd, build the daemon in dbus-x11.spec.
  It would be wise to rename dbus-1.spec to dbus-1-libs.spec and
  dbus-1-x11.spec to dbus-1.spec, but I first wanted to hear feedback</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1378555200">- Added 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  from upstream for resolving fdo#68945, bnc#782909</changelog>
<changelog author="hpj@suse.com" date="1380110400">- Amend dbus-fall-back-to-old-run-directory.patch to prevent a
  new class of hangs while upgrading D-Bus along with other
  services (bnc#802525).</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380456000">- Revert to previous version of dbus-fall-back-to-old-run-directory.patch
  as latest version causes a fallout</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1380888000">- Check for existence of /var/lib/old_run_path: if found, only then
  is dbus ListenStream swapped for old run path. This is done for
  supporting 12.3 to 13.1 upgrade (bnc#802525)
- Fix rpmlint warnings about %verifyscript and %set_permissions</changelog>
<changelog author="fridrich.strba@suse.com" date="1381147200">- Create /var/lib/dbus/machine-id only if there is no /etc/machine-id
  present on the system. Dbus knows how to use the system-wide
  machine-id file and this solves problems where the two files have
  different values (bnc#831626)</changelog>
<changelog author="fridrich.strba@suse.com" date="1389268800">- Try hard to assure that /var/lib/dbus/machine-id and
  /etc/machine-id are the same (bnc#857377)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1389355200">- Make sure that dbus-1 requires libdbus-1-3 during %post (detected
  when built against DBus-less systemd 209)</changelog>
<changelog author="fstrba@suse.com" date="1402488000">- dbus-cve-2014-3477.patch: Add patch for CVE-2014-3477 to fix DoS
  vulnerability in dbus-daemon (bnc#881137)
  * Based on upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302400">- dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to fix
  local denial of service (force system services to exit)
  (fdo#80469, bnc#885241)
  * Upstream provided patch by Simon McVittie
    &lt;simon.mcvittie@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1404302401">- dbus-cve-2014-3532.patch: Add patch for CVE-2014-3532 to fix a
  denial of service attack (fdo#80163, bnc#885241)
  * Upstream provided patch by Alban Crequy
    &lt;alban.crequy@collabora.co.uk&gt;</changelog>
<changelog author="fstrba@suse.com" date="1410955200">- Upgrade to upstream release 1.8.
  * fixing CVE-2014-3635, CVE-2014-3636, CVE-2014-3637, CVE-2014-3638
    and CVE-2014-3639 (bnc#896453)
  * bringing the version of dbus to the latest stable release from an
  unstable snapshot 1.7.4 that is know to have several regressions
- Remove upstreamed patches:
  * 0001-_dbus_babysitter_unref-avoid-infinite-loop-if-waitpi.patch
  * dbus-cve-2014-3477.patch
  * dbus-cve-2014-3533.patch
  * dbus-cve-2014-3532.patch
- Upstream changes since 1.7.4:
  + Security fixes:
  - Do not accept an extra fd in the padding of a cmsg message, which
    could lead to a 4-byte heap buffer overrun. (CVE-2014-3635,
    fdo#83622; Simon McVittie)
  - Reduce default for maximum Unix file descriptors passed per
    message from 1024 to 16, preventing a uid with the default maximum
    number of connections from exhausting the system bus' file
    descriptors under Linux's default rlimit. Distributors or system
    administrators with a  restrictive fd limit may wish to reduce
    these limits further.
    Additionally, on Linux this prevents a second denial of service in
    which the dbus-daemon can be made to exceed the maximum number of
    fds per sendmsg() and disconnect the process that would have
    received them. (CVE-2014-3636, fdo#82820; Alban Crequy)
  - Disconnect connections that still have a fd pending unmarshalling
    after a new configurable limit, pending_fd_timeout (defaulting to
    150 seconds), removing the possibility of creating an abusive
    connection that cannot be disconnected by setting up a circular
    reference to a connection's file descriptor. (CVE-2014-3637,
    fdo#80559; Alban Crequy)
  - Reduce default for maximum pending replies per connection from
    8192 to 128, mitigating an algorithmic complexity
    denial-of-service attack (CVE-2014-3638, fdo#81053; Alban Crequy)
  - Reduce default for authentication timeout on the system bus from
    30 seconds to 5 seconds, avoiding denial of service by using up
    all unauthenticated connection slots; and when all unauthenticated
    connection slots are used up, make new connection attempts block
    instead of disconnecting them. (CVE-2014-3639, fdo#80919;
    Alban Crequy)
  - On Linux &gt;0 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS,
    silently drop the message. This prevents an attack in which a
    malicious client can make dbus-daemon disconnect a system service,
    which is a local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)
  - Track remaining Unix file descriptors correctly when more than one
    message in quick succession contains fds. This prevents another
    attack in which a malicious client can make dbus-daemon disconnect
    a system service. (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro
    Martínez Suárez, Simon McVittie, Alban Crequy)
  - Alban Crequy at Collabora Ltd. discovered and fixed a
    denial-of-service flaw in dbus-daemon, part of the reference
    implementation of D-Bus.
    Additionally, in highly unusual environments the same flaw could
    lead to a side channel between processes that should not be able
    to communicate. (CVE-2014-3477, fdo#78979)
  + Other fixes and enhancements:
  - Check for libsystemd from systemd &gt;= 209, falling back to the
    older separate libraries if not found (Umut Tezduyar Lindskog,
    Simon McVittie)
  - On Linux, use prctl() to disable core dumps from a test executable
    that deliberately raises SIGSEGV to test dbus-daemon's handling
    of that condition (fdo#83772, Simon McVittie)
  - Fix compilation with --enable-stats (fdo#81043, Gentoo #507232;
    Alban Crequy)
  - Improve documentation for running tests on Windows (fdo#41252,
    Ralf Habacker)
  - When dbus-launch --exit-with-session starts a dbus-daemon but then
    cannot attach to a session, kill the dbus-daemon as intended
    (fdo#74698, Роман Донченко)
  - in the CMake build system, add some hints for Linux users
    cross-compiling Windows D-Bus binaries to be able to run tests
    under Wine (fdo#41252, Ralf Habacker)
  - add Documentation key to dbus.service (fdo#77447, Cameron Norman)
  - in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
    to /var/lib/dbus/machine-id instead of generating an entirely new
    ID (fdo#77941, Simon McVittie)
  - if dbus-launch receives an X error very quickly, do not kill
    unrelated processes (fdo#74698, Роман Донченко)
  - on Windows, allow up to 8K connections to the dbus-daemon, instead
    of the previous 64 (fdo#71297; Cristian Onet, Ralf Habacker)
  - cope with \r\n newlines in regression tests, since on Windows,
    dbus-daemon.exe uses text mode (fdo#75863, Руслан Ижбулатов)
  - Enhance the CMake build system to check for GLib and compile/run a
    subset of the regression tests (fdo#41252, fdo#73495;
    Ralf Habacker)
  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fdo#72840,
    Ralf Habacker)
  - fix compilation of systemd journal support on older systemd
    versions where sd-journal.h doesn't include syslog.h (fdo#73455,
    Ralf Habacker)
  - fix compilation on older MSVC versions by including stdlib.h
    (fdo#73455, Ralf Habacker)
  - Allow &lt;allow_anonymous/&gt; to appear in an included configuration
    file (fdo#73475, Matt Hoosier)
  - If the tests crash with an assertion failure, they no longer
    default to blocking for a debugger to be attached. Set
    DBUS_BLOCK_ON_ABORT in the environment if you want the old
    behaviour.
  - To improve debuggability, the dbus-daemon and
    dbus-daemon-eavesdrop tests can be run with an external
    dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the
    environment. Test-cases that require an unusually-configured
    dbus-daemon are skipped.
  - don't require messages with no INTERFACE to be dispatched
    (fdo#68597, Simon McVittie)
  - document "tcp:bind=..." and "nonce-tcp:bind=..." (fdo#72301,
    Chengwei Yang)
  - define "listenable" and "connectable" addresses, and discuss
    the difference (fdo#61303, Simon McVittie)
  - support printing Unix file descriptors in dbus-send, dbus-monitor
    (fdo#70592, Robert Ancell)
  - don't install systemd units if --disable-systemd is given
    (fdo#71818, Chengwei Yang)
  - don't leak memory on out-of-memory while listing activatable or
    active services (fdo#71526, Radoslaw Pajak)
  - fix undefined behaviour in a regression test (fdo#69924, DreamNik)
  - escape Unix socket addresses correctly (fdo#46013, Chengwei Yang)
  - on SELinux systems, don't assume that SECCLASS_DBUS,
    DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically equal to
    their values in the reference policy (fdo#88719, osmond sun)
  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW &lt; 4
    headers (fdo#71366, Matt Fischer)
  - define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h
    and winsock2.h (fdo#71405, Matt Fischer)
  - do not return failure from _dbus_read_nonce() with no error set,
    preventing a potential crash (fdo#72298, Chengwei Yang)
  - on BSD systems, avoid some O(1)-per-process memory and fd leaks in
    kqueue, preventing test failures (fdo#69332, fdo#72213; Chengwei
    Yang)
  - fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix
    sockets, which doesn't do anything anyway on at least Linux and
    FreeBSD (fdo#69492, Simon McVittie)
  - fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL
    from sendmsg() with SCM_CREDS (retrying with plain send()), and
    looking for credentials more correctly (fdo#69492, Simon McVittie)
  - ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
    getting mixed up in XDG/systemd "user sessions" (fdo#61301,
    Simon McVittie)
  - refresh cached policy rules for existing connections when bus
    configuration changes (fdo#39463, Chengwei Yang)
  - If systemd support is enabled, libsystemd-journal is now required.
  - When activating a non-systemd service under systemd, annotate its
    stdout/stderr with its bus name in the Journal. Known limitation:
    because the socket is opened before forking, the process will
    still be logged as if it had dbus-daemon's process ID and user ID.
    (fdo#68559, Chengwei Yang)
  - Document more configuration elements in dbus-daemon(1)
    (fdo#69125, Chengwei Yang)
  - Don't leak string arrays or fds if
    dbus_message_iter_get_args_valist() unpacks them and then
    encounters an error (fdo#21259, Chengwei Yang)
  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
    disallowed method calls to the audit log, fixing a regression in
    1.7.6 (fdo#49062, Colin Walters)
  - path_namespace='/' in match rules incorrectly matched nothing; it
    now matches everything. (fdo#70799, Simon McVittie)
  - Directory change notification via dnotify on Linux is no longer
    supported; it hadn't compiled successfully since 2010 in any case.
    If you don't have inotify (Linux) or kqueue (*BSD), you will need
    to send SIGHUP to the dbus-daemon when its configuration changes.
    (fdo#33001, Chengwei Yang)
  - Compiling with --disable-userdb-cache is no longer supported;
    it didn't work since at least 2008, and would lead to an extremely
    slow dbus-daemon even it worked. (fdo#15589, fdo#17133, fdo#66947;
    Chengwei Yang)
  - The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
    assertions. It has been renamed to DBUS_DISABLE_ASSERT to be
    consistent with the Autotools build system. (fdo#66142, Chengwei
    Yang)
  - --with-valgrind=auto enables Valgrind instrumentation if and only
    if valgrind headers are available. The default is still
  - -with-valgrind=no. (fdo#56925, Simon McVittie)
  - Platforms with no 64-bit integer type are no longer supported.
    (fdo#65429, Simon McVittie)
  - GNU make is now (documented to be) required. (fdo#48277, Simon
    McVittie)
  - Full test coverage no longer requires dbus-glib, although the
    tests do not exercise the shared library (only a static copy) if
    dbus-glib is missing. (fdo#68852, Simon McVittie)
  - D-Bus Specification 0.22
  * Document GetAdtAuditSessionData() and
    GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)
  * Fix example .service file (fdo#66481, Chengwei Yang)
  * Don't claim D-Bus is "low-latency" (lower than what?), just give
    factual statements about it supporting async use (fdo#65141,
    Justin Lee)
  * Document the contents of .service files, and the fact that
    system services' filenames are constrained (fdo#66608; Simon
    McVittie, Chengwei Yang)
  - Be thread-safe by default on all platforms, even if
    dbus_threads_init_default() has not been called. For compatibility
    with older libdbus, library users should continue to call
    dbus_threads_init_default(): it is harmless to do so. (fdo#54972,
    Simon McVittie)
  - Add GetConnectionCredentials() method (fdo#54445, Simon)
  - New API: dbus_setenv(), a simple wrapper around setenv().
    Note that this is not thread-safe. (fdo#39196, Simon)
  - Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer
    connection, like --address=ADDRESS in previous versions) and
    dbus-send --bus=ADDRESS (connect to a given bus, like dbus-monitor
  - -address=ADDRESS). dbus-send --address still exists for backwards
    compatibility, but is no longer documented. (fdo#48816, Andrey
    Mazo)
  - "dbus-daemon --nofork" is allowed on Windows again. (fdo#68852,
    Simon McVittie)
  - Avoid an infinite busy-loop if a signal interrupts waitpid()
    (fdo#68945, Simon McVittie)
  - Clean up memory for parent nodes when objects are unexported
    (fdo#60176, Thomas Fitzsimmons)
  - Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
    documented. Previously, it assumed its second parameter was TRUE.
    (fdo#69165, Chengwei Yang)
  - Escape addresses containing non-ASCII characters correctly
    (fdo#53499, Chengwei Yang)
  - Document &lt;servicedir&gt; search order correctly (fdo#66994, Chengwei
    Yang)
  - Don't crash on "dbus-send --session / x.y.z" which regressed in
    1.7.4. (fdo#65923, Chengwei Yang)
  - If malloc() returns NULL in _dbus_string_init() or similar, don't
    free an invalid pointer if the string is later freed (fdo#65959,
    Chengwei Yang)
  - If malloc() returns NULL in dbus_set_error(), don't va_end() a
    va_list that was never va_start()ed (fdo#66300, Chengwei Yang)
  - fix build failure with --enable-stats (fdo#66004, Chengwei Yang)
  - fix a regression test on platforms with strict alignment
    (fdo#67279, Colin Walters)
  - Avoid calling function parameters "interface" since certain
    Windows headers have a namespace-polluting macro of that name
    (fdo#66493, Ivan Romanov)
  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)
  - Various thread-safety improvements to static variables (fdo#68610,
    Simon McVittie)
  - Make "make -j check" work (fdo#68852, Simon McVittie)
  - Fix a NULL pointer dereference on an unlikely error path
    (fdo#69327, Sviatoslav Chagaev)
  - Improve valgrind memory pool tracking (fdo#69326, Sviatoslav
    Chagaev)
  - Don't over-allocate memory in dbus-monitor (fdo#69329, Sviatoslav
    Chagaev)
  - dbus-monitor can monitor dbus-daemon &lt; 1.5.6 again (fdo#66107,
    Chengwei Yang)
  - If accept4() fails with EINVAL, as it can on older Linux kernels
    with newer glibc, try accept() instead of going into a busy-loop.
    (fdo#69026, Chengwei Yang)
  - If socket() or socketpair() fails with EINVAL or EPROTOTYPE, for
    instance on Hurd or older Linux with a new glibc, try without
    SOCK_CLOEXEC. (fdo#69073; Pino Toscano, Chengwei Yang)
  - Fix a file descriptor leak on an error code path. (fdo#69182,
    Sviatoslav Chagaev)
  - dbus-run-session: clear some unwanted environment variables
    (fdo#39196, Simon)
  - dbus-run-session: compile on FreeBSD (fdo#66197, Chengwei Yang)
  - Don't fail the autolaunch test if there is no DISPLAY (fdo#40352,
    Simon)
  - Use dbus-launch from the builddir for testing, not the installed
    copy (fdo#37849, Chengwei Yang)
  - Fix compilation if writev() is unavailable (fdo#69409, Vasiliy
    Balyasnyy)
  - Remove broken support for LOCAL_CREDS credentials passing, and
    document where each credential-passing scheme is used (fdo#60340,
    Simon McVittie)
  - Make autogen.sh work on *BSD by not assuming GNU coreutils
    functionality fdo#35881, fdo#69787; Chengwei Yang)
  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei Yang)
  - dbus-launch: stop using non-portable asprintf (fdo#37849, Simon)
  - Improve error reporting from the setuid activation helper
    (fdo#66728, Chengwei Yang)
  - Remove unavailable command-line options from 'dbus-daemon --help'
    (fdo#42441, Ralf Habacker)
  - Add support for looking up local TCPv4 clients' credentials on
    Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
    function (fdo#66060, Ralf Habacker)
  - Fix insufficient dependency-tracking (fdo#68505, Simon McVittie)
  - Don't include wspiapi.h, fixing a compiler warning (fdo#68852,
    Simon McVittie)
  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
    conditionals (fdo#66142, Chengwei Yang)
  - improve verbose-mode output (fdo#63047, Colin Walters)
  - consolidate Autotools and CMake build (fdo#64875, Ralf Habacker)
  - fix various unused variables, unusual build configurations
    etc. (fdo#65712, fdo#65990, fdo#66005, fdo#66257, fdo#69165,
    fdo#69410, fdo#70218; Chengwei Yang, Vasiliy Balyasnyy)</changelog>

</package>
<package pkgid="ad4936139e539e398369001fa1c746eb787d6bf37d84a2ff1945fe2ba955b4db" name="dconf" arch="i586">
    <version epoch="0" ver="0.18.0" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1328097600">- Update to version 0.11.3:
  + Require vala 0.15.1
  + Add icon for dconf-editor
- Call %icon_theme_cache_post(un) in %post/%postun of dconf-editor,
  now that there is an icon.
- Drop hack in %install about the Icon key in dconf-editor.desktop:
  there's an icon now.
- Remove installed icons that are using a non-standard size, to
  avoid owning unneeded directories.</changelog>
<changelog author="vuntz@opensuse.org" date="1328616000">- Update to version 0.11.5:
  + Do not install non-standard icon sizes
  + Fix a bug with getting default values when no profile is in use
  + Some general code cleanups on the client side
  + Improve Makefile compatibility: avoid using 'echo -e'
- Drop hack that removed installed icons with non-standard size:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331208000">- Update to version 0.11.6:
  + new DCONF_BLAME mode for debugging spurious dconf writes at
    login
  + stop hardcoding the assumption that there will be exactly one
    user database followed by zero or more system databases
  + allow DCONF_PROFILE to specify a profile file by absolute path
  + dbus-1: fix multiple-key change notifications
  + autogen.sh can now be called from out of tree</changelog>
<changelog author="zaitor@opensuse.org" date="1332158400">- Update to version 0.11.7:
  + engine: Don't leak the lock table if a system database changes
    while a program is running.
  + dbus-1: Call g_slist_remove_link instead of g_slist_remove.
  + editor: Set 'wrap' property on default value label.
  + dconf update:
  - Code cleanup, better error handling.
  - Read keyfiles in a defined order (later files take
    precedence)
  - Don't issue warnings if a key is defined in multiple files.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763200">- Update to version 0.12.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1335873600">- Update to version 0.12.1:
  + dconf CLI: call setlocale() on startup (for proper handling of
    values containing non-ascii characters).</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Change the Requires dconf = %{version} to dconf &gt;= %{version}.
  Whereas '=' might be correct, it will cause issues on later
  updates, when libdconf1 is coming to the distribution.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995201">- Update to version 0.13.0:
  + editor: use GtkApplication and GMenu
  + editor: support searching for keys
  + dconf cli: call setlocale() on startup</changelog>
<changelog author="dimstar@opensuse.org" date="1343995202">- Update to version 0.13.4:
  + extensively refactored
  + API of libdconf has changed; soname bumped to libdconf.so.1
  + installed header layout has changed
  + there are changes to the API used between the client and the
    service.
  + there is a now a fairly decent test suite but it requires a
    full D-Bus environment to run in, so it may make sense to avoid
    'make check' on builders for the time being.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.13.5:
  + the service no longer attempts to migrate the primary dconf
    database from its (years) old path ~/.config/dconf to the new
    ~/.config/dconf/user
  + fixes for profile file parsing problems
  + fix obscure race in GDBus handling code that could result in
    out-of-order message delivery
  + editor:
  - clean up some messages and mark strings for translations
  - enable internationalization
  + add manpages for dconf(7), dconf(1), dconf-service and
    dconf-editor
  + Updated translations.
- Add docbook-xsl-stylesheets, intltool and xsltproc BuildRequires:
  new dependencies.
- Split out a -lang package.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 0.13.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1348660800">- Update to version 0.14.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 0.14.1:
  + Fix a rather substantial memory leak in dconf-service.
  + Fix xinclude issues in docs for srcdir != builddir.
  + Using the g_settings_delay()/g_settings_reset()/
    g_settings_get() trick to read default values is working again
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.15.0:
  + Add --disable-man
  + Fix reading default values in GSettings backend
  + Editor:
  - Support schema overrides
  - Search improvements (search directories, values,
    descriptions)
  - Correctly get text from schema descriptions
  - Only write window state settings on exit and support
    fullscreen state
  + dconf_rebuilder_get_parent: don't leak parent_name
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 0.15.2:
  + Update to the new GVDB API (GBytes based) and refactor a bit
  + Add a new type of "database mode" DConfChangeset and use it
  + The service has been substantially rewritten
  - using gdbus-codegen
  - cache the file contents instead of read/modify/write each
    time
  - new DConfWriter abstraction allows considering support for
    backends
  - uses only POSIX IO (read and write syscalls) for database
    access
  - workaround mmap() bug on OpenBSD
  + Editor:
  - Fix search order of schema dirs
  - Translate summary and description
  + Updated translations.
- Add pkgconfig(glib-2.0) BuildRequires so it can be versioned.</changelog>
<changelog author="dimstar@opensuse.org" date="1360756800">- Update to version 0.15.3:
  + Fix problem related to empty changesets (caused by empty 'dconf
    load', for example).
  + New icons: hicolor icons have been updated and a HighContrast
    set added.
  + Loosen some assertions on the order of messages being returned
    from the service. D-Bus violates this order in the case that
    the service crashes and that's no reason to take the client
    with it as well.
  + Improve autogen.sh non-bash compatibility.
  + Add some backends to the dconf-service: The first backend is a
    null backend that allows for a temporary database tied to the
    lifetime of the session.
  + Also add a new 'keyfile' backend for the service. This is
    primarily intended to be used with NFS (where use of mmap is
    not safe).
  + Add a mkdir() in the case of an empty home directory where
    ~/.config/dconf does not already exist.
  + Fix crashes in the service caused by failures to write
    (including failures caused by the above issue being overlooked)
  + Work around an issue with a testcase hanging and failing due to
    a GLib change to the order in which testcases are run.
  + Running autoreconf on tarballs should now work.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 0.16.0:
  + Set G_LOG_DOMAIN so that 'dconf' shows in GLib log messages.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373630400">- Update to version 0.17.0:
  + Fix some compile warnings.
  + Use gresource.
  + Cancel searches on escape.
  + Bugs fixed: bgo#703073.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 0.17.1:
  + Documentation updates, including better coverage of profiles.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 0.18.0:
  + Updated translations.</changelog>

</package>
<package pkgid="192c518a4cf436669abbf67892005ef7710d76af51a892e846e7a4edea196ab5" name="dconf" arch="src">
    <version epoch="0" ver="0.18.0" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1328097600">- Update to version 0.11.3:
  + Require vala 0.15.1
  + Add icon for dconf-editor
- Call %icon_theme_cache_post(un) in %post/%postun of dconf-editor,
  now that there is an icon.
- Drop hack in %install about the Icon key in dconf-editor.desktop:
  there's an icon now.
- Remove installed icons that are using a non-standard size, to
  avoid owning unneeded directories.</changelog>
<changelog author="vuntz@opensuse.org" date="1328616000">- Update to version 0.11.5:
  + Do not install non-standard icon sizes
  + Fix a bug with getting default values when no profile is in use
  + Some general code cleanups on the client side
  + Improve Makefile compatibility: avoid using 'echo -e'
- Drop hack that removed installed icons with non-standard size:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331208000">- Update to version 0.11.6:
  + new DCONF_BLAME mode for debugging spurious dconf writes at
    login
  + stop hardcoding the assumption that there will be exactly one
    user database followed by zero or more system databases
  + allow DCONF_PROFILE to specify a profile file by absolute path
  + dbus-1: fix multiple-key change notifications
  + autogen.sh can now be called from out of tree</changelog>
<changelog author="zaitor@opensuse.org" date="1332158400">- Update to version 0.11.7:
  + engine: Don't leak the lock table if a system database changes
    while a program is running.
  + dbus-1: Call g_slist_remove_link instead of g_slist_remove.
  + editor: Set 'wrap' property on default value label.
  + dconf update:
  - Code cleanup, better error handling.
  - Read keyfiles in a defined order (later files take
    precedence)
  - Don't issue warnings if a key is defined in multiple files.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763200">- Update to version 0.12.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1335873600">- Update to version 0.12.1:
  + dconf CLI: call setlocale() on startup (for proper handling of
    values containing non-ascii characters).</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Change the Requires dconf = %{version} to dconf &gt;= %{version}.
  Whereas '=' might be correct, it will cause issues on later
  updates, when libdconf1 is coming to the distribution.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995201">- Update to version 0.13.0:
  + editor: use GtkApplication and GMenu
  + editor: support searching for keys
  + dconf cli: call setlocale() on startup</changelog>
<changelog author="dimstar@opensuse.org" date="1343995202">- Update to version 0.13.4:
  + extensively refactored
  + API of libdconf has changed; soname bumped to libdconf.so.1
  + installed header layout has changed
  + there are changes to the API used between the client and the
    service.
  + there is a now a fairly decent test suite but it requires a
    full D-Bus environment to run in, so it may make sense to avoid
    'make check' on builders for the time being.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.13.5:
  + the service no longer attempts to migrate the primary dconf
    database from its (years) old path ~/.config/dconf to the new
    ~/.config/dconf/user
  + fixes for profile file parsing problems
  + fix obscure race in GDBus handling code that could result in
    out-of-order message delivery
  + editor:
  - clean up some messages and mark strings for translations
  - enable internationalization
  + add manpages for dconf(7), dconf(1), dconf-service and
    dconf-editor
  + Updated translations.
- Add docbook-xsl-stylesheets, intltool and xsltproc BuildRequires:
  new dependencies.
- Split out a -lang package.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 0.13.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1348660800">- Update to version 0.14.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 0.14.1:
  + Fix a rather substantial memory leak in dconf-service.
  + Fix xinclude issues in docs for srcdir != builddir.
  + Using the g_settings_delay()/g_settings_reset()/
    g_settings_get() trick to read default values is working again
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.15.0:
  + Add --disable-man
  + Fix reading default values in GSettings backend
  + Editor:
  - Support schema overrides
  - Search improvements (search directories, values,
    descriptions)
  - Correctly get text from schema descriptions
  - Only write window state settings on exit and support
    fullscreen state
  + dconf_rebuilder_get_parent: don't leak parent_name
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 0.15.2:
  + Update to the new GVDB API (GBytes based) and refactor a bit
  + Add a new type of "database mode" DConfChangeset and use it
  + The service has been substantially rewritten
  - using gdbus-codegen
  - cache the file contents instead of read/modify/write each
    time
  - new DConfWriter abstraction allows considering support for
    backends
  - uses only POSIX IO (read and write syscalls) for database
    access
  - workaround mmap() bug on OpenBSD
  + Editor:
  - Fix search order of schema dirs
  - Translate summary and description
  + Updated translations.
- Add pkgconfig(glib-2.0) BuildRequires so it can be versioned.</changelog>
<changelog author="dimstar@opensuse.org" date="1360756800">- Update to version 0.15.3:
  + Fix problem related to empty changesets (caused by empty 'dconf
    load', for example).
  + New icons: hicolor icons have been updated and a HighContrast
    set added.
  + Loosen some assertions on the order of messages being returned
    from the service. D-Bus violates this order in the case that
    the service crashes and that's no reason to take the client
    with it as well.
  + Improve autogen.sh non-bash compatibility.
  + Add some backends to the dconf-service: The first backend is a
    null backend that allows for a temporary database tied to the
    lifetime of the session.
  + Also add a new 'keyfile' backend for the service. This is
    primarily intended to be used with NFS (where use of mmap is
    not safe).
  + Add a mkdir() in the case of an empty home directory where
    ~/.config/dconf does not already exist.
  + Fix crashes in the service caused by failures to write
    (including failures caused by the above issue being overlooked)
  + Work around an issue with a testcase hanging and failing due to
    a GLib change to the order in which testcases are run.
  + Running autoreconf on tarballs should now work.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 0.16.0:
  + Set G_LOG_DOMAIN so that 'dconf' shows in GLib log messages.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373630400">- Update to version 0.17.0:
  + Fix some compile warnings.
  + Use gresource.
  + Cancel searches on escape.
  + Bugs fixed: bgo#703073.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 0.17.1:
  + Documentation updates, including better coverage of profiles.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 0.18.0:
  + Updated translations.</changelog>

</package>
<package pkgid="5e133c393d22c1d08b4892b609feb9f84a7284808319165e6d1d83d6006d68d3" name="dconf" arch="x86_64">
    <version epoch="0" ver="0.18.0" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1328097600">- Update to version 0.11.3:
  + Require vala 0.15.1
  + Add icon for dconf-editor
- Call %icon_theme_cache_post(un) in %post/%postun of dconf-editor,
  now that there is an icon.
- Drop hack in %install about the Icon key in dconf-editor.desktop:
  there's an icon now.
- Remove installed icons that are using a non-standard size, to
  avoid owning unneeded directories.</changelog>
<changelog author="vuntz@opensuse.org" date="1328616000">- Update to version 0.11.5:
  + Do not install non-standard icon sizes
  + Fix a bug with getting default values when no profile is in use
  + Some general code cleanups on the client side
  + Improve Makefile compatibility: avoid using 'echo -e'
- Drop hack that removed installed icons with non-standard size:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331208000">- Update to version 0.11.6:
  + new DCONF_BLAME mode for debugging spurious dconf writes at
    login
  + stop hardcoding the assumption that there will be exactly one
    user database followed by zero or more system databases
  + allow DCONF_PROFILE to specify a profile file by absolute path
  + dbus-1: fix multiple-key change notifications
  + autogen.sh can now be called from out of tree</changelog>
<changelog author="zaitor@opensuse.org" date="1332158400">- Update to version 0.11.7:
  + engine: Don't leak the lock table if a system database changes
    while a program is running.
  + dbus-1: Call g_slist_remove_link instead of g_slist_remove.
  + editor: Set 'wrap' property on default value label.
  + dconf update:
  - Code cleanup, better error handling.
  - Read keyfiles in a defined order (later files take
    precedence)
  - Don't issue warnings if a key is defined in multiple files.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763200">- Update to version 0.12.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1335873600">- Update to version 0.12.1:
  + dconf CLI: call setlocale() on startup (for proper handling of
    values containing non-ascii characters).</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Change the Requires dconf = %{version} to dconf &gt;= %{version}.
  Whereas '=' might be correct, it will cause issues on later
  updates, when libdconf1 is coming to the distribution.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995201">- Update to version 0.13.0:
  + editor: use GtkApplication and GMenu
  + editor: support searching for keys
  + dconf cli: call setlocale() on startup</changelog>
<changelog author="dimstar@opensuse.org" date="1343995202">- Update to version 0.13.4:
  + extensively refactored
  + API of libdconf has changed; soname bumped to libdconf.so.1
  + installed header layout has changed
  + there are changes to the API used between the client and the
    service.
  + there is a now a fairly decent test suite but it requires a
    full D-Bus environment to run in, so it may make sense to avoid
    'make check' on builders for the time being.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.13.5:
  + the service no longer attempts to migrate the primary dconf
    database from its (years) old path ~/.config/dconf to the new
    ~/.config/dconf/user
  + fixes for profile file parsing problems
  + fix obscure race in GDBus handling code that could result in
    out-of-order message delivery
  + editor:
  - clean up some messages and mark strings for translations
  - enable internationalization
  + add manpages for dconf(7), dconf(1), dconf-service and
    dconf-editor
  + Updated translations.
- Add docbook-xsl-stylesheets, intltool and xsltproc BuildRequires:
  new dependencies.
- Split out a -lang package.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 0.13.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1348660800">- Update to version 0.14.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 0.14.1:
  + Fix a rather substantial memory leak in dconf-service.
  + Fix xinclude issues in docs for srcdir != builddir.
  + Using the g_settings_delay()/g_settings_reset()/
    g_settings_get() trick to read default values is working again
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.15.0:
  + Add --disable-man
  + Fix reading default values in GSettings backend
  + Editor:
  - Support schema overrides
  - Search improvements (search directories, values,
    descriptions)
  - Correctly get text from schema descriptions
  - Only write window state settings on exit and support
    fullscreen state
  + dconf_rebuilder_get_parent: don't leak parent_name
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 0.15.2:
  + Update to the new GVDB API (GBytes based) and refactor a bit
  + Add a new type of "database mode" DConfChangeset and use it
  + The service has been substantially rewritten
  - using gdbus-codegen
  - cache the file contents instead of read/modify/write each
    time
  - new DConfWriter abstraction allows considering support for
    backends
  - uses only POSIX IO (read and write syscalls) for database
    access
  - workaround mmap() bug on OpenBSD
  + Editor:
  - Fix search order of schema dirs
  - Translate summary and description
  + Updated translations.
- Add pkgconfig(glib-2.0) BuildRequires so it can be versioned.</changelog>
<changelog author="dimstar@opensuse.org" date="1360756800">- Update to version 0.15.3:
  + Fix problem related to empty changesets (caused by empty 'dconf
    load', for example).
  + New icons: hicolor icons have been updated and a HighContrast
    set added.
  + Loosen some assertions on the order of messages being returned
    from the service. D-Bus violates this order in the case that
    the service crashes and that's no reason to take the client
    with it as well.
  + Improve autogen.sh non-bash compatibility.
  + Add some backends to the dconf-service: The first backend is a
    null backend that allows for a temporary database tied to the
    lifetime of the session.
  + Also add a new 'keyfile' backend for the service. This is
    primarily intended to be used with NFS (where use of mmap is
    not safe).
  + Add a mkdir() in the case of an empty home directory where
    ~/.config/dconf does not already exist.
  + Fix crashes in the service caused by failures to write
    (including failures caused by the above issue being overlooked)
  + Work around an issue with a testcase hanging and failing due to
    a GLib change to the order in which testcases are run.
  + Running autoreconf on tarballs should now work.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 0.16.0:
  + Set G_LOG_DOMAIN so that 'dconf' shows in GLib log messages.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373630400">- Update to version 0.17.0:
  + Fix some compile warnings.
  + Use gresource.
  + Cancel searches on escape.
  + Bugs fixed: bgo#703073.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 0.17.1:
  + Documentation updates, including better coverage of profiles.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 0.18.0:
  + Updated translations.</changelog>

</package>
<package pkgid="10eb79f32bc8fc5fa078ccae49b1504c9b25cfcaa225677b8b36a8b47c75663e" name="dconf-devel" arch="i586">
    <version epoch="0" ver="0.18.0" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1328097600">- Update to version 0.11.3:
  + Require vala 0.15.1
  + Add icon for dconf-editor
- Call %icon_theme_cache_post(un) in %post/%postun of dconf-editor,
  now that there is an icon.
- Drop hack in %install about the Icon key in dconf-editor.desktop:
  there's an icon now.
- Remove installed icons that are using a non-standard size, to
  avoid owning unneeded directories.</changelog>
<changelog author="vuntz@opensuse.org" date="1328616000">- Update to version 0.11.5:
  + Do not install non-standard icon sizes
  + Fix a bug with getting default values when no profile is in use
  + Some general code cleanups on the client side
  + Improve Makefile compatibility: avoid using 'echo -e'
- Drop hack that removed installed icons with non-standard size:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331208000">- Update to version 0.11.6:
  + new DCONF_BLAME mode for debugging spurious dconf writes at
    login
  + stop hardcoding the assumption that there will be exactly one
    user database followed by zero or more system databases
  + allow DCONF_PROFILE to specify a profile file by absolute path
  + dbus-1: fix multiple-key change notifications
  + autogen.sh can now be called from out of tree</changelog>
<changelog author="zaitor@opensuse.org" date="1332158400">- Update to version 0.11.7:
  + engine: Don't leak the lock table if a system database changes
    while a program is running.
  + dbus-1: Call g_slist_remove_link instead of g_slist_remove.
  + editor: Set 'wrap' property on default value label.
  + dconf update:
  - Code cleanup, better error handling.
  - Read keyfiles in a defined order (later files take
    precedence)
  - Don't issue warnings if a key is defined in multiple files.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763200">- Update to version 0.12.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1335873600">- Update to version 0.12.1:
  + dconf CLI: call setlocale() on startup (for proper handling of
    values containing non-ascii characters).</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Change the Requires dconf = %{version} to dconf &gt;= %{version}.
  Whereas '=' might be correct, it will cause issues on later
  updates, when libdconf1 is coming to the distribution.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995201">- Update to version 0.13.0:
  + editor: use GtkApplication and GMenu
  + editor: support searching for keys
  + dconf cli: call setlocale() on startup</changelog>
<changelog author="dimstar@opensuse.org" date="1343995202">- Update to version 0.13.4:
  + extensively refactored
  + API of libdconf has changed; soname bumped to libdconf.so.1
  + installed header layout has changed
  + there are changes to the API used between the client and the
    service.
  + there is a now a fairly decent test suite but it requires a
    full D-Bus environment to run in, so it may make sense to avoid
    'make check' on builders for the time being.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.13.5:
  + the service no longer attempts to migrate the primary dconf
    database from its (years) old path ~/.config/dconf to the new
    ~/.config/dconf/user
  + fixes for profile file parsing problems
  + fix obscure race in GDBus handling code that could result in
    out-of-order message delivery
  + editor:
  - clean up some messages and mark strings for translations
  - enable internationalization
  + add manpages for dconf(7), dconf(1), dconf-service and
    dconf-editor
  + Updated translations.
- Add docbook-xsl-stylesheets, intltool and xsltproc BuildRequires:
  new dependencies.
- Split out a -lang package.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 0.13.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1348660800">- Update to version 0.14.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 0.14.1:
  + Fix a rather substantial memory leak in dconf-service.
  + Fix xinclude issues in docs for srcdir != builddir.
  + Using the g_settings_delay()/g_settings_reset()/
    g_settings_get() trick to read default values is working again
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.15.0:
  + Add --disable-man
  + Fix reading default values in GSettings backend
  + Editor:
  - Support schema overrides
  - Search improvements (search directories, values,
    descriptions)
  - Correctly get text from schema descriptions
  - Only write window state settings on exit and support
    fullscreen state
  + dconf_rebuilder_get_parent: don't leak parent_name
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 0.15.2:
  + Update to the new GVDB API (GBytes based) and refactor a bit
  + Add a new type of "database mode" DConfChangeset and use it
  + The service has been substantially rewritten
  - using gdbus-codegen
  - cache the file contents instead of read/modify/write each
    time
  - new DConfWriter abstraction allows considering support for
    backends
  - uses only POSIX IO (read and write syscalls) for database
    access
  - workaround mmap() bug on OpenBSD
  + Editor:
  - Fix search order of schema dirs
  - Translate summary and description
  + Updated translations.
- Add pkgconfig(glib-2.0) BuildRequires so it can be versioned.</changelog>
<changelog author="dimstar@opensuse.org" date="1360756800">- Update to version 0.15.3:
  + Fix problem related to empty changesets (caused by empty 'dconf
    load', for example).
  + New icons: hicolor icons have been updated and a HighContrast
    set added.
  + Loosen some assertions on the order of messages being returned
    from the service. D-Bus violates this order in the case that
    the service crashes and that's no reason to take the client
    with it as well.
  + Improve autogen.sh non-bash compatibility.
  + Add some backends to the dconf-service: The first backend is a
    null backend that allows for a temporary database tied to the
    lifetime of the session.
  + Also add a new 'keyfile' backend for the service. This is
    primarily intended to be used with NFS (where use of mmap is
    not safe).
  + Add a mkdir() in the case of an empty home directory where
    ~/.config/dconf does not already exist.
  + Fix crashes in the service caused by failures to write
    (including failures caused by the above issue being overlooked)
  + Work around an issue with a testcase hanging and failing due to
    a GLib change to the order in which testcases are run.
  + Running autoreconf on tarballs should now work.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 0.16.0:
  + Set G_LOG_DOMAIN so that 'dconf' shows in GLib log messages.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373630400">- Update to version 0.17.0:
  + Fix some compile warnings.
  + Use gresource.
  + Cancel searches on escape.
  + Bugs fixed: bgo#703073.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 0.17.1:
  + Documentation updates, including better coverage of profiles.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 0.18.0:
  + Updated translations.</changelog>

</package>
<package pkgid="ee96b72fc8e21a3b246881a09ed46e3a9e7a4cc7fc1f23da30d9eefbd1ceea57" name="dconf-devel" arch="x86_64">
    <version epoch="0" ver="0.18.0" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1328097600">- Update to version 0.11.3:
  + Require vala 0.15.1
  + Add icon for dconf-editor
- Call %icon_theme_cache_post(un) in %post/%postun of dconf-editor,
  now that there is an icon.
- Drop hack in %install about the Icon key in dconf-editor.desktop:
  there's an icon now.
- Remove installed icons that are using a non-standard size, to
  avoid owning unneeded directories.</changelog>
<changelog author="vuntz@opensuse.org" date="1328616000">- Update to version 0.11.5:
  + Do not install non-standard icon sizes
  + Fix a bug with getting default values when no profile is in use
  + Some general code cleanups on the client side
  + Improve Makefile compatibility: avoid using 'echo -e'
- Drop hack that removed installed icons with non-standard size:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331208000">- Update to version 0.11.6:
  + new DCONF_BLAME mode for debugging spurious dconf writes at
    login
  + stop hardcoding the assumption that there will be exactly one
    user database followed by zero or more system databases
  + allow DCONF_PROFILE to specify a profile file by absolute path
  + dbus-1: fix multiple-key change notifications
  + autogen.sh can now be called from out of tree</changelog>
<changelog author="zaitor@opensuse.org" date="1332158400">- Update to version 0.11.7:
  + engine: Don't leak the lock table if a system database changes
    while a program is running.
  + dbus-1: Call g_slist_remove_link instead of g_slist_remove.
  + editor: Set 'wrap' property on default value label.
  + dconf update:
  - Code cleanup, better error handling.
  - Read keyfiles in a defined order (later files take
    precedence)
  - Don't issue warnings if a key is defined in multiple files.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763200">- Update to version 0.12.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1335873600">- Update to version 0.12.1:
  + dconf CLI: call setlocale() on startup (for proper handling of
    values containing non-ascii characters).</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Change the Requires dconf = %{version} to dconf &gt;= %{version}.
  Whereas '=' might be correct, it will cause issues on later
  updates, when libdconf1 is coming to the distribution.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995201">- Update to version 0.13.0:
  + editor: use GtkApplication and GMenu
  + editor: support searching for keys
  + dconf cli: call setlocale() on startup</changelog>
<changelog author="dimstar@opensuse.org" date="1343995202">- Update to version 0.13.4:
  + extensively refactored
  + API of libdconf has changed; soname bumped to libdconf.so.1
  + installed header layout has changed
  + there are changes to the API used between the client and the
    service.
  + there is a now a fairly decent test suite but it requires a
    full D-Bus environment to run in, so it may make sense to avoid
    'make check' on builders for the time being.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.13.5:
  + the service no longer attempts to migrate the primary dconf
    database from its (years) old path ~/.config/dconf to the new
    ~/.config/dconf/user
  + fixes for profile file parsing problems
  + fix obscure race in GDBus handling code that could result in
    out-of-order message delivery
  + editor:
  - clean up some messages and mark strings for translations
  - enable internationalization
  + add manpages for dconf(7), dconf(1), dconf-service and
    dconf-editor
  + Updated translations.
- Add docbook-xsl-stylesheets, intltool and xsltproc BuildRequires:
  new dependencies.
- Split out a -lang package.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 0.13.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1348660800">- Update to version 0.14.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 0.14.1:
  + Fix a rather substantial memory leak in dconf-service.
  + Fix xinclude issues in docs for srcdir != builddir.
  + Using the g_settings_delay()/g_settings_reset()/
    g_settings_get() trick to read default values is working again
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.15.0:
  + Add --disable-man
  + Fix reading default values in GSettings backend
  + Editor:
  - Support schema overrides
  - Search improvements (search directories, values,
    descriptions)
  - Correctly get text from schema descriptions
  - Only write window state settings on exit and support
    fullscreen state
  + dconf_rebuilder_get_parent: don't leak parent_name
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 0.15.2:
  + Update to the new GVDB API (GBytes based) and refactor a bit
  + Add a new type of "database mode" DConfChangeset and use it
  + The service has been substantially rewritten
  - using gdbus-codegen
  - cache the file contents instead of read/modify/write each
    time
  - new DConfWriter abstraction allows considering support for
    backends
  - uses only POSIX IO (read and write syscalls) for database
    access
  - workaround mmap() bug on OpenBSD
  + Editor:
  - Fix search order of schema dirs
  - Translate summary and description
  + Updated translations.
- Add pkgconfig(glib-2.0) BuildRequires so it can be versioned.</changelog>
<changelog author="dimstar@opensuse.org" date="1360756800">- Update to version 0.15.3:
  + Fix problem related to empty changesets (caused by empty 'dconf
    load', for example).
  + New icons: hicolor icons have been updated and a HighContrast
    set added.
  + Loosen some assertions on the order of messages being returned
    from the service. D-Bus violates this order in the case that
    the service crashes and that's no reason to take the client
    with it as well.
  + Improve autogen.sh non-bash compatibility.
  + Add some backends to the dconf-service: The first backend is a
    null backend that allows for a temporary database tied to the
    lifetime of the session.
  + Also add a new 'keyfile' backend for the service. This is
    primarily intended to be used with NFS (where use of mmap is
    not safe).
  + Add a mkdir() in the case of an empty home directory where
    ~/.config/dconf does not already exist.
  + Fix crashes in the service caused by failures to write
    (including failures caused by the above issue being overlooked)
  + Work around an issue with a testcase hanging and failing due to
    a GLib change to the order in which testcases are run.
  + Running autoreconf on tarballs should now work.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 0.16.0:
  + Set G_LOG_DOMAIN so that 'dconf' shows in GLib log messages.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373630400">- Update to version 0.17.0:
  + Fix some compile warnings.
  + Use gresource.
  + Cancel searches on escape.
  + Bugs fixed: bgo#703073.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 0.17.1:
  + Documentation updates, including better coverage of profiles.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 0.18.0:
  + Updated translations.</changelog>

</package>
<package pkgid="b9cee19f449d70ffb80d7079aa4ce1988880daf18ab776dc2fdde90da589e491" name="dconf-editor" arch="i586">
    <version epoch="0" ver="0.18.0" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1328097600">- Update to version 0.11.3:
  + Require vala 0.15.1
  + Add icon for dconf-editor
- Call %icon_theme_cache_post(un) in %post/%postun of dconf-editor,
  now that there is an icon.
- Drop hack in %install about the Icon key in dconf-editor.desktop:
  there's an icon now.
- Remove installed icons that are using a non-standard size, to
  avoid owning unneeded directories.</changelog>
<changelog author="vuntz@opensuse.org" date="1328616000">- Update to version 0.11.5:
  + Do not install non-standard icon sizes
  + Fix a bug with getting default values when no profile is in use
  + Some general code cleanups on the client side
  + Improve Makefile compatibility: avoid using 'echo -e'
- Drop hack that removed installed icons with non-standard size:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331208000">- Update to version 0.11.6:
  + new DCONF_BLAME mode for debugging spurious dconf writes at
    login
  + stop hardcoding the assumption that there will be exactly one
    user database followed by zero or more system databases
  + allow DCONF_PROFILE to specify a profile file by absolute path
  + dbus-1: fix multiple-key change notifications
  + autogen.sh can now be called from out of tree</changelog>
<changelog author="zaitor@opensuse.org" date="1332158400">- Update to version 0.11.7:
  + engine: Don't leak the lock table if a system database changes
    while a program is running.
  + dbus-1: Call g_slist_remove_link instead of g_slist_remove.
  + editor: Set 'wrap' property on default value label.
  + dconf update:
  - Code cleanup, better error handling.
  - Read keyfiles in a defined order (later files take
    precedence)
  - Don't issue warnings if a key is defined in multiple files.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763200">- Update to version 0.12.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1335873600">- Update to version 0.12.1:
  + dconf CLI: call setlocale() on startup (for proper handling of
    values containing non-ascii characters).</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Change the Requires dconf = %{version} to dconf &gt;= %{version}.
  Whereas '=' might be correct, it will cause issues on later
  updates, when libdconf1 is coming to the distribution.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995201">- Update to version 0.13.0:
  + editor: use GtkApplication and GMenu
  + editor: support searching for keys
  + dconf cli: call setlocale() on startup</changelog>
<changelog author="dimstar@opensuse.org" date="1343995202">- Update to version 0.13.4:
  + extensively refactored
  + API of libdconf has changed; soname bumped to libdconf.so.1
  + installed header layout has changed
  + there are changes to the API used between the client and the
    service.
  + there is a now a fairly decent test suite but it requires a
    full D-Bus environment to run in, so it may make sense to avoid
    'make check' on builders for the time being.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.13.5:
  + the service no longer attempts to migrate the primary dconf
    database from its (years) old path ~/.config/dconf to the new
    ~/.config/dconf/user
  + fixes for profile file parsing problems
  + fix obscure race in GDBus handling code that could result in
    out-of-order message delivery
  + editor:
  - clean up some messages and mark strings for translations
  - enable internationalization
  + add manpages for dconf(7), dconf(1), dconf-service and
    dconf-editor
  + Updated translations.
- Add docbook-xsl-stylesheets, intltool and xsltproc BuildRequires:
  new dependencies.
- Split out a -lang package.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 0.13.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1348660800">- Update to version 0.14.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 0.14.1:
  + Fix a rather substantial memory leak in dconf-service.
  + Fix xinclude issues in docs for srcdir != builddir.
  + Using the g_settings_delay()/g_settings_reset()/
    g_settings_get() trick to read default values is working again
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.15.0:
  + Add --disable-man
  + Fix reading default values in GSettings backend
  + Editor:
  - Support schema overrides
  - Search improvements (search directories, values,
    descriptions)
  - Correctly get text from schema descriptions
  - Only write window state settings on exit and support
    fullscreen state
  + dconf_rebuilder_get_parent: don't leak parent_name
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 0.15.2:
  + Update to the new GVDB API (GBytes based) and refactor a bit
  + Add a new type of "database mode" DConfChangeset and use it
  + The service has been substantially rewritten
  - using gdbus-codegen
  - cache the file contents instead of read/modify/write each
    time
  - new DConfWriter abstraction allows considering support for
    backends
  - uses only POSIX IO (read and write syscalls) for database
    access
  - workaround mmap() bug on OpenBSD
  + Editor:
  - Fix search order of schema dirs
  - Translate summary and description
  + Updated translations.
- Add pkgconfig(glib-2.0) BuildRequires so it can be versioned.</changelog>
<changelog author="dimstar@opensuse.org" date="1360756800">- Update to version 0.15.3:
  + Fix problem related to empty changesets (caused by empty 'dconf
    load', for example).
  + New icons: hicolor icons have been updated and a HighContrast
    set added.
  + Loosen some assertions on the order of messages being returned
    from the service. D-Bus violates this order in the case that
    the service crashes and that's no reason to take the client
    with it as well.
  + Improve autogen.sh non-bash compatibility.
  + Add some backends to the dconf-service: The first backend is a
    null backend that allows for a temporary database tied to the
    lifetime of the session.
  + Also add a new 'keyfile' backend for the service. This is
    primarily intended to be used with NFS (where use of mmap is
    not safe).
  + Add a mkdir() in the case of an empty home directory where
    ~/.config/dconf does not already exist.
  + Fix crashes in the service caused by failures to write
    (including failures caused by the above issue being overlooked)
  + Work around an issue with a testcase hanging and failing due to
    a GLib change to the order in which testcases are run.
  + Running autoreconf on tarballs should now work.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 0.16.0:
  + Set G_LOG_DOMAIN so that 'dconf' shows in GLib log messages.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373630400">- Update to version 0.17.0:
  + Fix some compile warnings.
  + Use gresource.
  + Cancel searches on escape.
  + Bugs fixed: bgo#703073.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 0.17.1:
  + Documentation updates, including better coverage of profiles.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 0.18.0:
  + Updated translations.</changelog>

</package>
<package pkgid="8b32dd9bcfb8f569e0f9cf438b62c1467b00b54a49871cd11de3d3ac5db8516d" name="dconf-editor" arch="x86_64">
    <version epoch="0" ver="0.18.0" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1328097600">- Update to version 0.11.3:
  + Require vala 0.15.1
  + Add icon for dconf-editor
- Call %icon_theme_cache_post(un) in %post/%postun of dconf-editor,
  now that there is an icon.
- Drop hack in %install about the Icon key in dconf-editor.desktop:
  there's an icon now.
- Remove installed icons that are using a non-standard size, to
  avoid owning unneeded directories.</changelog>
<changelog author="vuntz@opensuse.org" date="1328616000">- Update to version 0.11.5:
  + Do not install non-standard icon sizes
  + Fix a bug with getting default values when no profile is in use
  + Some general code cleanups on the client side
  + Improve Makefile compatibility: avoid using 'echo -e'
- Drop hack that removed installed icons with non-standard size:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331208000">- Update to version 0.11.6:
  + new DCONF_BLAME mode for debugging spurious dconf writes at
    login
  + stop hardcoding the assumption that there will be exactly one
    user database followed by zero or more system databases
  + allow DCONF_PROFILE to specify a profile file by absolute path
  + dbus-1: fix multiple-key change notifications
  + autogen.sh can now be called from out of tree</changelog>
<changelog author="zaitor@opensuse.org" date="1332158400">- Update to version 0.11.7:
  + engine: Don't leak the lock table if a system database changes
    while a program is running.
  + dbus-1: Call g_slist_remove_link instead of g_slist_remove.
  + editor: Set 'wrap' property on default value label.
  + dconf update:
  - Code cleanup, better error handling.
  - Read keyfiles in a defined order (later files take
    precedence)
  - Don't issue warnings if a key is defined in multiple files.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763200">- Update to version 0.12.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1335873600">- Update to version 0.12.1:
  + dconf CLI: call setlocale() on startup (for proper handling of
    values containing non-ascii characters).</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Change the Requires dconf = %{version} to dconf &gt;= %{version}.
  Whereas '=' might be correct, it will cause issues on later
  updates, when libdconf1 is coming to the distribution.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995201">- Update to version 0.13.0:
  + editor: use GtkApplication and GMenu
  + editor: support searching for keys
  + dconf cli: call setlocale() on startup</changelog>
<changelog author="dimstar@opensuse.org" date="1343995202">- Update to version 0.13.4:
  + extensively refactored
  + API of libdconf has changed; soname bumped to libdconf.so.1
  + installed header layout has changed
  + there are changes to the API used between the client and the
    service.
  + there is a now a fairly decent test suite but it requires a
    full D-Bus environment to run in, so it may make sense to avoid
    'make check' on builders for the time being.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.13.5:
  + the service no longer attempts to migrate the primary dconf
    database from its (years) old path ~/.config/dconf to the new
    ~/.config/dconf/user
  + fixes for profile file parsing problems
  + fix obscure race in GDBus handling code that could result in
    out-of-order message delivery
  + editor:
  - clean up some messages and mark strings for translations
  - enable internationalization
  + add manpages for dconf(7), dconf(1), dconf-service and
    dconf-editor
  + Updated translations.
- Add docbook-xsl-stylesheets, intltool and xsltproc BuildRequires:
  new dependencies.
- Split out a -lang package.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 0.13.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1348660800">- Update to version 0.14.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 0.14.1:
  + Fix a rather substantial memory leak in dconf-service.
  + Fix xinclude issues in docs for srcdir != builddir.
  + Using the g_settings_delay()/g_settings_reset()/
    g_settings_get() trick to read default values is working again
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.15.0:
  + Add --disable-man
  + Fix reading default values in GSettings backend
  + Editor:
  - Support schema overrides
  - Search improvements (search directories, values,
    descriptions)
  - Correctly get text from schema descriptions
  - Only write window state settings on exit and support
    fullscreen state
  + dconf_rebuilder_get_parent: don't leak parent_name
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 0.15.2:
  + Update to the new GVDB API (GBytes based) and refactor a bit
  + Add a new type of "database mode" DConfChangeset and use it
  + The service has been substantially rewritten
  - using gdbus-codegen
  - cache the file contents instead of read/modify/write each
    time
  - new DConfWriter abstraction allows considering support for
    backends
  - uses only POSIX IO (read and write syscalls) for database
    access
  - workaround mmap() bug on OpenBSD
  + Editor:
  - Fix search order of schema dirs
  - Translate summary and description
  + Updated translations.
- Add pkgconfig(glib-2.0) BuildRequires so it can be versioned.</changelog>
<changelog author="dimstar@opensuse.org" date="1360756800">- Update to version 0.15.3:
  + Fix problem related to empty changesets (caused by empty 'dconf
    load', for example).
  + New icons: hicolor icons have been updated and a HighContrast
    set added.
  + Loosen some assertions on the order of messages being returned
    from the service. D-Bus violates this order in the case that
    the service crashes and that's no reason to take the client
    with it as well.
  + Improve autogen.sh non-bash compatibility.
  + Add some backends to the dconf-service: The first backend is a
    null backend that allows for a temporary database tied to the
    lifetime of the session.
  + Also add a new 'keyfile' backend for the service. This is
    primarily intended to be used with NFS (where use of mmap is
    not safe).
  + Add a mkdir() in the case of an empty home directory where
    ~/.config/dconf does not already exist.
  + Fix crashes in the service caused by failures to write
    (including failures caused by the above issue being overlooked)
  + Work around an issue with a testcase hanging and failing due to
    a GLib change to the order in which testcases are run.
  + Running autoreconf on tarballs should now work.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 0.16.0:
  + Set G_LOG_DOMAIN so that 'dconf' shows in GLib log messages.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373630400">- Update to version 0.17.0:
  + Fix some compile warnings.
  + Use gresource.
  + Cancel searches on escape.
  + Bugs fixed: bgo#703073.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 0.17.1:
  + Documentation updates, including better coverage of profiles.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 0.18.0:
  + Updated translations.</changelog>

</package>
<package pkgid="bdc41d814f4b3eb921532a48bbc9018c82364b9021749ba85181beb7dce8f66d" name="dconf-lang" arch="noarch">
    <version epoch="0" ver="0.18.0" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1328097600">- Update to version 0.11.3:
  + Require vala 0.15.1
  + Add icon for dconf-editor
- Call %icon_theme_cache_post(un) in %post/%postun of dconf-editor,
  now that there is an icon.
- Drop hack in %install about the Icon key in dconf-editor.desktop:
  there's an icon now.
- Remove installed icons that are using a non-standard size, to
  avoid owning unneeded directories.</changelog>
<changelog author="vuntz@opensuse.org" date="1328616000">- Update to version 0.11.5:
  + Do not install non-standard icon sizes
  + Fix a bug with getting default values when no profile is in use
  + Some general code cleanups on the client side
  + Improve Makefile compatibility: avoid using 'echo -e'
- Drop hack that removed installed icons with non-standard size:
  fixed upstream.</changelog>
<changelog author="vuntz@opensuse.org" date="1331208000">- Update to version 0.11.6:
  + new DCONF_BLAME mode for debugging spurious dconf writes at
    login
  + stop hardcoding the assumption that there will be exactly one
    user database followed by zero or more system databases
  + allow DCONF_PROFILE to specify a profile file by absolute path
  + dbus-1: fix multiple-key change notifications
  + autogen.sh can now be called from out of tree</changelog>
<changelog author="zaitor@opensuse.org" date="1332158400">- Update to version 0.11.7:
  + engine: Don't leak the lock table if a system database changes
    while a program is running.
  + dbus-1: Call g_slist_remove_link instead of g_slist_remove.
  + editor: Set 'wrap' property on default value label.
  + dconf update:
  - Code cleanup, better error handling.
  - Read keyfiles in a defined order (later files take
    precedence)
  - Don't issue warnings if a key is defined in multiple files.</changelog>
<changelog author="vuntz@opensuse.org" date="1332763200">- Update to version 0.12.0:
  + No changes.</changelog>
<changelog author="dimstar@opensuse.org" date="1335873600">- Update to version 0.12.1:
  + dconf CLI: call setlocale() on startup (for proper handling of
    values containing non-ascii characters).</changelog>
<changelog author="dimstar@opensuse.org" date="1343995200">- Change the Requires dconf = %{version} to dconf &gt;= %{version}.
  Whereas '=' might be correct, it will cause issues on later
  updates, when libdconf1 is coming to the distribution.</changelog>
<changelog author="dimstar@opensuse.org" date="1343995201">- Update to version 0.13.0:
  + editor: use GtkApplication and GMenu
  + editor: support searching for keys
  + dconf cli: call setlocale() on startup</changelog>
<changelog author="dimstar@opensuse.org" date="1343995202">- Update to version 0.13.4:
  + extensively refactored
  + API of libdconf has changed; soname bumped to libdconf.so.1
  + installed header layout has changed
  + there are changes to the API used between the client and the
    service.
  + there is a now a fairly decent test suite but it requires a
    full D-Bus environment to run in, so it may make sense to avoid
    'make check' on builders for the time being.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 0.13.5:
  + the service no longer attempts to migrate the primary dconf
    database from its (years) old path ~/.config/dconf to the new
    ~/.config/dconf/user
  + fixes for profile file parsing problems
  + fix obscure race in GDBus handling code that could result in
    out-of-order message delivery
  + editor:
  - clean up some messages and mark strings for translations
  - enable internationalization
  + add manpages for dconf(7), dconf(1), dconf-service and
    dconf-editor
  + Updated translations.
- Add docbook-xsl-stylesheets, intltool and xsltproc BuildRequires:
  new dependencies.
- Split out a -lang package.</changelog>
<changelog author="dimstar@opensuse.org" date="1345550400">- Update to version 0.13.90:
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1348660800">- Update to version 0.14.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352808000">- Update to version 0.14.1:
  + Fix a rather substantial memory leak in dconf-service.
  + Fix xinclude issues in docs for srcdir != builddir.
  + Using the g_settings_delay()/g_settings_reset()/
    g_settings_get() trick to read default values is working again
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 0.15.0:
  + Add --disable-man
  + Fix reading default values in GSettings backend
  + Editor:
  - Support schema overrides
  - Search improvements (search directories, values,
    descriptions)
  - Correctly get text from schema descriptions
  - Only write window state settings on exit and support
    fullscreen state
  + dconf_rebuilder_get_parent: don't leak parent_name
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1353758400">- Update to version 0.15.2:
  + Update to the new GVDB API (GBytes based) and refactor a bit
  + Add a new type of "database mode" DConfChangeset and use it
  + The service has been substantially rewritten
  - using gdbus-codegen
  - cache the file contents instead of read/modify/write each
    time
  - new DConfWriter abstraction allows considering support for
    backends
  - uses only POSIX IO (read and write syscalls) for database
    access
  - workaround mmap() bug on OpenBSD
  + Editor:
  - Fix search order of schema dirs
  - Translate summary and description
  + Updated translations.
- Add pkgconfig(glib-2.0) BuildRequires so it can be versioned.</changelog>
<changelog author="dimstar@opensuse.org" date="1360756800">- Update to version 0.15.3:
  + Fix problem related to empty changesets (caused by empty 'dconf
    load', for example).
  + New icons: hicolor icons have been updated and a HighContrast
    set added.
  + Loosen some assertions on the order of messages being returned
    from the service. D-Bus violates this order in the case that
    the service crashes and that's no reason to take the client
    with it as well.
  + Improve autogen.sh non-bash compatibility.
  + Add some backends to the dconf-service: The first backend is a
    null backend that allows for a temporary database tied to the
    lifetime of the session.
  + Also add a new 'keyfile' backend for the service. This is
    primarily intended to be used with NFS (where use of mmap is
    not safe).
  + Add a mkdir() in the case of an empty home directory where
    ~/.config/dconf does not already exist.
  + Fix crashes in the service caused by failures to write
    (including failures caused by the above issue being overlooked)
  + Work around an issue with a testcase hanging and failing due to
    a GLib change to the order in which testcases are run.
  + Running autoreconf on tarballs should now work.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 0.16.0:
  + Set G_LOG_DOMAIN so that 'dconf' shows in GLib log messages.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373630400">- Update to version 0.17.0:
  + Fix some compile warnings.
  + Use gresource.
  + Cancel searches on escape.
  + Bugs fixed: bgo#703073.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 0.17.1:
  + Documentation updates, including better coverage of profiles.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1380024000">- Update to version 0.18.0:
  + Updated translations.</changelog>

</package>
<package pkgid="c4d50863d5ab71e8e1040d9838a4ca8a75e82108ba7fd2e1314847c0922cbd35" name="ddclient" arch="noarch">
    <version epoch="0" ver="3.8.2" rel="10.3.1"/>

<changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
<changelog author="coolo@novell.com" date="1251633600">- use %patch0</changelog>
<changelog author="chris@computersalat.de" date="1251806400">- rework config patch
  o now one patch
  o merged
  - ddclient-3.6.3-config.patch
  - ddclient-3.7.1-config.patch
  - ddclient-3.7.1-sysconfig.patch
    to ddclient-3.8.0-config.patch
  o defaults for ppp0
- added update_nic.patch
  * opt('use') should have priority to global-defaults
- init script
  o beautify
  o should start rp-pppoe
  o ppp0 as a "use=" default if not set in ddclient.conf
- sysconfig
  o added argument list for DDCLIENT_OPTIONS
- cleanup spec</changelog>
<changelog author="ro@suse.de" date="1314619200">- work on init-script so that start/status/stop at least work
  (bnc#267306)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
<changelog author="ro@suse.de" date="1318680000">- upgrade Suggests for perl-IO-Socket-SSL to Recommends
  (bnc#723688)</changelog>
<changelog author="ro@suse.de" date="1319025600">- remove leftover debug line in init script</changelog>
<changelog author="chris@computersalat.de" date="1326110400">- update to 3.8.1
  * Fixing #28: FreeDNS.afraid.org changed api slightly
  * Added dtdns-support
  * Added support for longer password
  * Added cisco-asa patch
  * Added support for LoopiaDNS
- rebase patches</changelog>
<changelog author="binli@opensuse.org" date="1348574400">- Update ddclient-3.8.1-config.patch to check the configuraton file
  from /etc instead of /etc/ddclient (bnc#781699).</changelog>
<changelog author="chris@computersalat.de" date="1351080000">- rework config patch
  * ddclient.conf: add example for selfhost (http://selfhost.de)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1368619200">- fix init script: start ddclient with "/usr/bin/perl ddclient",
  otherwise startproc will falsely report that starting failed.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1368705600">- more init-script fixes:
  - startproc now needs the pidfile parameter (or it woulld look
    for "perl.pid". Sorry, should have run more tests.
  - while I'm at it, get the pidfile from the config file in case
    the user would have changed it</changelog>
<changelog author="p.drouand@gmail.com" date="1382875200">- Improve systemd support for openSUSE &gt;= 12.3</changelog>
<changelog author="seife+obs@b1-systems.com" date="1386158400">- fix the breakage from last submission:
  * service file was put into tmpfiles.d
  * tmpfiles config was put into systemd service dir
  * rcddclient link was broken (pointed to "service" file)
- fix rpmlint warnings, also introduced by last submission:
  * service files and tmpdir config are neither config files nor
    should be executable
- package is noarch, mark it as such
- documentation should not have executable bit set</changelog>
<changelog author="benoit.monin@gmx.fr" date="1388491200">- update to 3.8.2
  * adding support by ChangeIP
  * sha-1 patch  to allow Digest::SHA
  * allow reuse of use
  * preventing deep sleep - see bug #46
  * Fallback to iproute if ifconfig doesn't work
- drop ddclient-3.8.1-update_nic.patch: upstream changed the "use"
  logic
- move all sample-* to examples under the documentation directory
- update source url on sourceforge</changelog>
<changelog author="jsegitz@novell.com" date="1400587200">- ensure proper handling of .service files with %service_add_pre</changelog>
<changelog author="chris@computersalat.de" date="1400760000">- update systemd stuff
  * add {?has_systemd} to fix build for Systems using init scripts
- spec cleanup
  * add missing BuildRoot</changelog>
<changelog author="stefan.fent@suse.com" date="1403092800">- fix pidfile path in /etc/ddclient.conf and set ownership to ddclient
- create user and group ddclient (bnc#881520)
- create /run/ddclient/ with user and group ddclient if not yet
  available in %pre</changelog>
<changelog author="pth@suse.de" date="1404129600">- Use perl_requires instead of harcoding a value.</changelog>
<changelog author="chris@computersalat.de" date="1452254400">- fix for boo#903588
- revert patch change
- recover deleted changes (rev34)
- systemd fix
  * conf file must be accessible only by its owner</changelog>

</package>
<package pkgid="e7e220b8e15dcdffb89aa54a4ea49c9c6a748409bfa8fd5bb66de6a8a200b35e" name="ddclient" arch="noarch">
    <version epoch="0" ver="3.8.2" rel="10.6.1"/>

<changelog author="coolo@novell.com" date="1251633600">- use %patch0</changelog>
<changelog author="chris@computersalat.de" date="1251806400">- rework config patch
  o now one patch
  o merged
  - ddclient-3.6.3-config.patch
  - ddclient-3.7.1-config.patch
  - ddclient-3.7.1-sysconfig.patch
    to ddclient-3.8.0-config.patch
  o defaults for ppp0
- added update_nic.patch
  * opt('use') should have priority to global-defaults
- init script
  o beautify
  o should start rp-pppoe
  o ppp0 as a "use=" default if not set in ddclient.conf
- sysconfig
  o added argument list for DDCLIENT_OPTIONS
- cleanup spec</changelog>
<changelog author="ro@suse.de" date="1314619200">- work on init-script so that start/status/stop at least work
  (bnc#267306)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
<changelog author="ro@suse.de" date="1318680000">- upgrade Suggests for perl-IO-Socket-SSL to Recommends
  (bnc#723688)</changelog>
<changelog author="ro@suse.de" date="1319025600">- remove leftover debug line in init script</changelog>
<changelog author="chris@computersalat.de" date="1326110400">- update to 3.8.1
  * Fixing #28: FreeDNS.afraid.org changed api slightly
  * Added dtdns-support
  * Added support for longer password
  * Added cisco-asa patch
  * Added support for LoopiaDNS
- rebase patches</changelog>
<changelog author="binli@opensuse.org" date="1348574400">- Update ddclient-3.8.1-config.patch to check the configuraton file
  from /etc instead of /etc/ddclient (bnc#781699).</changelog>
<changelog author="chris@computersalat.de" date="1351080000">- rework config patch
  * ddclient.conf: add example for selfhost (http://selfhost.de)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1368619200">- fix init script: start ddclient with "/usr/bin/perl ddclient",
  otherwise startproc will falsely report that starting failed.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1368705600">- more init-script fixes:
  - startproc now needs the pidfile parameter (or it woulld look
    for "perl.pid". Sorry, should have run more tests.
  - while I'm at it, get the pidfile from the config file in case
    the user would have changed it</changelog>
<changelog author="p.drouand@gmail.com" date="1382875200">- Improve systemd support for openSUSE &gt;= 12.3</changelog>
<changelog author="seife+obs@b1-systems.com" date="1386158400">- fix the breakage from last submission:
  * service file was put into tmpfiles.d
  * tmpfiles config was put into systemd service dir
  * rcddclient link was broken (pointed to "service" file)
- fix rpmlint warnings, also introduced by last submission:
  * service files and tmpdir config are neither config files nor
    should be executable
- package is noarch, mark it as such
- documentation should not have executable bit set</changelog>
<changelog author="benoit.monin@gmx.fr" date="1388491200">- update to 3.8.2
  * adding support by ChangeIP
  * sha-1 patch  to allow Digest::SHA
  * allow reuse of use
  * preventing deep sleep - see bug #46
  * Fallback to iproute if ifconfig doesn't work
- drop ddclient-3.8.1-update_nic.patch: upstream changed the "use"
  logic
- move all sample-* to examples under the documentation directory
- update source url on sourceforge</changelog>
<changelog author="jsegitz@novell.com" date="1400587200">- ensure proper handling of .service files with %service_add_pre</changelog>
<changelog author="chris@computersalat.de" date="1400760000">- update systemd stuff
  * add {?has_systemd} to fix build for Systems using init scripts
- spec cleanup
  * add missing BuildRoot</changelog>
<changelog author="stefan.fent@suse.com" date="1403092800">- fix pidfile path in /etc/ddclient.conf and set ownership to ddclient
- create user and group ddclient (bnc#881520)
- create /run/ddclient/ with user and group ddclient if not yet
  available in %pre</changelog>
<changelog author="pth@suse.de" date="1404129600">- Use perl_requires instead of harcoding a value.</changelog>
<changelog author="chris@computersalat.de" date="1452254400">- fix for boo#903588
- revert patch change
- recover deleted changes (rev34)
- systemd fix
  * conf file must be accessible only by its owner</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="3a26aa281ebf51de26b1c7d61b656ec1edba8297dddeb5b99cc199cb5632a3f7" name="ddclient" arch="src">
    <version epoch="0" ver="3.8.2" rel="10.3.1"/>

<changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
<changelog author="coolo@novell.com" date="1251633600">- use %patch0</changelog>
<changelog author="chris@computersalat.de" date="1251806400">- rework config patch
  o now one patch
  o merged
  - ddclient-3.6.3-config.patch
  - ddclient-3.7.1-config.patch
  - ddclient-3.7.1-sysconfig.patch
    to ddclient-3.8.0-config.patch
  o defaults for ppp0
- added update_nic.patch
  * opt('use') should have priority to global-defaults
- init script
  o beautify
  o should start rp-pppoe
  o ppp0 as a "use=" default if not set in ddclient.conf
- sysconfig
  o added argument list for DDCLIENT_OPTIONS
- cleanup spec</changelog>
<changelog author="ro@suse.de" date="1314619200">- work on init-script so that start/status/stop at least work
  (bnc#267306)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
<changelog author="ro@suse.de" date="1318680000">- upgrade Suggests for perl-IO-Socket-SSL to Recommends
  (bnc#723688)</changelog>
<changelog author="ro@suse.de" date="1319025600">- remove leftover debug line in init script</changelog>
<changelog author="chris@computersalat.de" date="1326110400">- update to 3.8.1
  * Fixing #28: FreeDNS.afraid.org changed api slightly
  * Added dtdns-support
  * Added support for longer password
  * Added cisco-asa patch
  * Added support for LoopiaDNS
- rebase patches</changelog>
<changelog author="binli@opensuse.org" date="1348574400">- Update ddclient-3.8.1-config.patch to check the configuraton file
  from /etc instead of /etc/ddclient (bnc#781699).</changelog>
<changelog author="chris@computersalat.de" date="1351080000">- rework config patch
  * ddclient.conf: add example for selfhost (http://selfhost.de)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1368619200">- fix init script: start ddclient with "/usr/bin/perl ddclient",
  otherwise startproc will falsely report that starting failed.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1368705600">- more init-script fixes:
  - startproc now needs the pidfile parameter (or it woulld look
    for "perl.pid". Sorry, should have run more tests.
  - while I'm at it, get the pidfile from the config file in case
    the user would have changed it</changelog>
<changelog author="p.drouand@gmail.com" date="1382875200">- Improve systemd support for openSUSE &gt;= 12.3</changelog>
<changelog author="seife+obs@b1-systems.com" date="1386158400">- fix the breakage from last submission:
  * service file was put into tmpfiles.d
  * tmpfiles config was put into systemd service dir
  * rcddclient link was broken (pointed to "service" file)
- fix rpmlint warnings, also introduced by last submission:
  * service files and tmpdir config are neither config files nor
    should be executable
- package is noarch, mark it as such
- documentation should not have executable bit set</changelog>
<changelog author="benoit.monin@gmx.fr" date="1388491200">- update to 3.8.2
  * adding support by ChangeIP
  * sha-1 patch  to allow Digest::SHA
  * allow reuse of use
  * preventing deep sleep - see bug #46
  * Fallback to iproute if ifconfig doesn't work
- drop ddclient-3.8.1-update_nic.patch: upstream changed the "use"
  logic
- move all sample-* to examples under the documentation directory
- update source url on sourceforge</changelog>
<changelog author="jsegitz@novell.com" date="1400587200">- ensure proper handling of .service files with %service_add_pre</changelog>
<changelog author="chris@computersalat.de" date="1400760000">- update systemd stuff
  * add {?has_systemd} to fix build for Systems using init scripts
- spec cleanup
  * add missing BuildRoot</changelog>
<changelog author="stefan.fent@suse.com" date="1403092800">- fix pidfile path in /etc/ddclient.conf and set ownership to ddclient
- create user and group ddclient (bnc#881520)
- create /run/ddclient/ with user and group ddclient if not yet
  available in %pre</changelog>
<changelog author="pth@suse.de" date="1404129600">- Use perl_requires instead of harcoding a value.</changelog>
<changelog author="chris@computersalat.de" date="1452254400">- fix for boo#903588
- revert patch change
- recover deleted changes (rev34)
- systemd fix
  * conf file must be accessible only by its owner</changelog>

</package>
<package pkgid="ddb4b5dd7138672f412963e7cd20273b946667df0b83102d39c11aad664a1eb1" name="ddclient" arch="src">
    <version epoch="0" ver="3.8.2" rel="10.6.1"/>

<changelog author="coolo@novell.com" date="1251633600">- use %patch0</changelog>
<changelog author="chris@computersalat.de" date="1251806400">- rework config patch
  o now one patch
  o merged
  - ddclient-3.6.3-config.patch
  - ddclient-3.7.1-config.patch
  - ddclient-3.7.1-sysconfig.patch
    to ddclient-3.8.0-config.patch
  o defaults for ppp0
- added update_nic.patch
  * opt('use') should have priority to global-defaults
- init script
  o beautify
  o should start rp-pppoe
  o ppp0 as a "use=" default if not set in ddclient.conf
- sysconfig
  o added argument list for DDCLIENT_OPTIONS
- cleanup spec</changelog>
<changelog author="ro@suse.de" date="1314619200">- work on init-script so that start/status/stop at least work
  (bnc#267306)</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
<changelog author="ro@suse.de" date="1318680000">- upgrade Suggests for perl-IO-Socket-SSL to Recommends
  (bnc#723688)</changelog>
<changelog author="ro@suse.de" date="1319025600">- remove leftover debug line in init script</changelog>
<changelog author="chris@computersalat.de" date="1326110400">- update to 3.8.1
  * Fixing #28: FreeDNS.afraid.org changed api slightly
  * Added dtdns-support
  * Added support for longer password
  * Added cisco-asa patch
  * Added support for LoopiaDNS
- rebase patches</changelog>
<changelog author="binli@opensuse.org" date="1348574400">- Update ddclient-3.8.1-config.patch to check the configuraton file
  from /etc instead of /etc/ddclient (bnc#781699).</changelog>
<changelog author="chris@computersalat.de" date="1351080000">- rework config patch
  * ddclient.conf: add example for selfhost (http://selfhost.de)</changelog>
<changelog author="seife+obs@b1-systems.com" date="1368619200">- fix init script: start ddclient with "/usr/bin/perl ddclient",
  otherwise startproc will falsely report that starting failed.</changelog>
<changelog author="seife+obs@b1-systems.com" date="1368705600">- more init-script fixes:
  - startproc now needs the pidfile parameter (or it woulld look
    for "perl.pid". Sorry, should have run more tests.
  - while I'm at it, get the pidfile from the config file in case
    the user would have changed it</changelog>
<changelog author="p.drouand@gmail.com" date="1382875200">- Improve systemd support for openSUSE &gt;= 12.3</changelog>
<changelog author="seife+obs@b1-systems.com" date="1386158400">- fix the breakage from last submission:
  * service file was put into tmpfiles.d
  * tmpfiles config was put into systemd service dir
  * rcddclient link was broken (pointed to "service" file)
- fix rpmlint warnings, also introduced by last submission:
  * service files and tmpdir config are neither config files nor
    should be executable
- package is noarch, mark it as such
- documentation should not have executable bit set</changelog>
<changelog author="benoit.monin@gmx.fr" date="1388491200">- update to 3.8.2
  * adding support by ChangeIP
  * sha-1 patch  to allow Digest::SHA
  * allow reuse of use
  * preventing deep sleep - see bug #46
  * Fallback to iproute if ifconfig doesn't work
- drop ddclient-3.8.1-update_nic.patch: upstream changed the "use"
  logic
- move all sample-* to examples under the documentation directory
- update source url on sourceforge</changelog>
<changelog author="jsegitz@novell.com" date="1400587200">- ensure proper handling of .service files with %service_add_pre</changelog>
<changelog author="chris@computersalat.de" date="1400760000">- update systemd stuff
  * add {?has_systemd} to fix build for Systems using init scripts
- spec cleanup
  * add missing BuildRoot</changelog>
<changelog author="stefan.fent@suse.com" date="1403092800">- fix pidfile path in /etc/ddclient.conf and set ownership to ddclient
- create user and group ddclient (bnc#881520)
- create /run/ddclient/ with user and group ddclient if not yet
  available in %pre</changelog>
<changelog author="pth@suse.de" date="1404129600">- Use perl_requires instead of harcoding a value.</changelog>
<changelog author="chris@computersalat.de" date="1452254400">- fix for boo#903588
- revert patch change
- recover deleted changes (rev34)
- systemd fix
  * conf file must be accessible only by its owner</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="00013d6e234afd25f89d2343d0a5bfde045f38a2f2773806d40e21cd7aab2aa9" name="devhelp" arch="i586">
    <version epoch="0" ver="3.10.2" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1324382400">- Update to version 3.3.3:
  + Bugs fixed:
  - bgo#456282: Add globbing/wildcards to search fields
  - bgo#646398, bgo#649064, bgo#652999, bgo#663789, bgo#666446.
  + Updated translations.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Remove libwnck-devel BuildRequires: removed upstream.
- Drop devhelp-fix-multiple-gdk-backends.patch: fixed upstream.
  Also remove gnome-common BuildRequires and call to
  gnome-autogen.sh that were needed for the patch.
- Update descriptions of packages.
- Update Url tag.</changelog>
<changelog author="vuntz@opensuse.org" date="1330948800">- Update to version 3.3.91:
  + Optional port to WebKit2 (pass --with-webkit2 to configure).
  + Bugs fixed: bgo#647383, bgo#669696.
  + Updated translations.
- Remove xz BuildRequires now that it comes for free in the build
  system.
- Note that we don't build with WebKit2 at the moment, as WebKit2
  is still considered experimental. We'll switch to it when it will
  be the default.</changelog>
<changelog author="vuntz@opensuse.org" date="1332849600">- Update to version 3.4.0:
  + bgo#671256: Fix compilation warnings with
  - Wunused-but-set-variable
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 3.5.5:
  + Implement application menu (bgo#677927)
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Upadted translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 3.6.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 3.6.1:
  + Fix Ctrl-C to copy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1357646400">- Update to version 3.7.3:
  + bgo#646402: port devhelp to gsettings
  + bgo#683882: Can't Ctrl+C to copy
  + bgo#687607: add keywords to the desktop file
  + bgo#688919: devhelp fails to build with GNU gold due to
    underlinking
- Changes from version 3.7.1:
  + bgo#685710: Switch to WebKit2 by default for 3.7.x
  + Updated translatons.
- Replace pkgconfig(webkitgtk-3.0) BuildRequires with
  pkgconfig(webkit2gtk-3.0), following upstreams move to WebKit2.
- Replace gconf schema handling with gsettings equivalents.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 3.7.5:
  + This release sees a revamp of the UI according to match
    GNOME 3 applications.
  + Bugs fixed: bgo#569021, bgo#646402, bgo#664080, bgo#671907,
    bgo#679955, bgo#679956, bgo#688955, bgo#690599, bgo#690980,
    bgo#692242, bgo#692732, bgo#693017, bgo#693023.
  + Updated translations.
- Drop gconf2-devel BuildRequires: no longer needed after the port
  to GSettings.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 3.7.91:
  + Bugs fixed: bgo#569021, bgo#600309, bgo#640567, bgo#665531,
    bgo#671907, bgo#673320, bgo#693237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Bugs fixed: bgo#696367, bgo#695455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 3.8.1:
  + Font size is too small by default and don't match system font
    size (bgo#697026).
  + Changing preferences crashes/fails after closing one of
    multiple windows (bgo#697541).</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 3.8.2:
  + Disconnect signals when preferences dialog is shutdown.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 3.9.4:
  + Bugs fixed: bgo#665531, bgo#695758, bgo#696922, bgo#700430.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Bugs fixed: bgo#703609, bgo#704752, bgo#704805.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 3.9.90:
  + Ported to GtkHeaderBar, GtkSearchBar, and more.
  + Bugs fixed: bgo#700588.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1378209600">- Update to version 3.9.91:
  + Bugs fixed: bgo#700588, bgo#706498.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + bgo#707490: Don't use AM_GNU_GETTEXT.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Updated translations.</changelog>

</package>
<package pkgid="0749125f41d469ba067b5a18f5b00e565c017ce555060dc54354cc8841fee68c" name="devhelp" arch="src">
    <version epoch="0" ver="3.10.2" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1324382400">- Update to version 3.3.3:
  + Bugs fixed:
  - bgo#456282: Add globbing/wildcards to search fields
  - bgo#646398, bgo#649064, bgo#652999, bgo#663789, bgo#666446.
  + Updated translations.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Remove libwnck-devel BuildRequires: removed upstream.
- Drop devhelp-fix-multiple-gdk-backends.patch: fixed upstream.
  Also remove gnome-common BuildRequires and call to
  gnome-autogen.sh that were needed for the patch.
- Update descriptions of packages.
- Update Url tag.</changelog>
<changelog author="vuntz@opensuse.org" date="1330948800">- Update to version 3.3.91:
  + Optional port to WebKit2 (pass --with-webkit2 to configure).
  + Bugs fixed: bgo#647383, bgo#669696.
  + Updated translations.
- Remove xz BuildRequires now that it comes for free in the build
  system.
- Note that we don't build with WebKit2 at the moment, as WebKit2
  is still considered experimental. We'll switch to it when it will
  be the default.</changelog>
<changelog author="vuntz@opensuse.org" date="1332849600">- Update to version 3.4.0:
  + bgo#671256: Fix compilation warnings with
  - Wunused-but-set-variable
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 3.5.5:
  + Implement application menu (bgo#677927)
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Upadted translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 3.6.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 3.6.1:
  + Fix Ctrl-C to copy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1357646400">- Update to version 3.7.3:
  + bgo#646402: port devhelp to gsettings
  + bgo#683882: Can't Ctrl+C to copy
  + bgo#687607: add keywords to the desktop file
  + bgo#688919: devhelp fails to build with GNU gold due to
    underlinking
- Changes from version 3.7.1:
  + bgo#685710: Switch to WebKit2 by default for 3.7.x
  + Updated translatons.
- Replace pkgconfig(webkitgtk-3.0) BuildRequires with
  pkgconfig(webkit2gtk-3.0), following upstreams move to WebKit2.
- Replace gconf schema handling with gsettings equivalents.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 3.7.5:
  + This release sees a revamp of the UI according to match
    GNOME 3 applications.
  + Bugs fixed: bgo#569021, bgo#646402, bgo#664080, bgo#671907,
    bgo#679955, bgo#679956, bgo#688955, bgo#690599, bgo#690980,
    bgo#692242, bgo#692732, bgo#693017, bgo#693023.
  + Updated translations.
- Drop gconf2-devel BuildRequires: no longer needed after the port
  to GSettings.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 3.7.91:
  + Bugs fixed: bgo#569021, bgo#600309, bgo#640567, bgo#665531,
    bgo#671907, bgo#673320, bgo#693237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Bugs fixed: bgo#696367, bgo#695455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 3.8.1:
  + Font size is too small by default and don't match system font
    size (bgo#697026).
  + Changing preferences crashes/fails after closing one of
    multiple windows (bgo#697541).</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 3.8.2:
  + Disconnect signals when preferences dialog is shutdown.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 3.9.4:
  + Bugs fixed: bgo#665531, bgo#695758, bgo#696922, bgo#700430.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Bugs fixed: bgo#703609, bgo#704752, bgo#704805.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 3.9.90:
  + Ported to GtkHeaderBar, GtkSearchBar, and more.
  + Bugs fixed: bgo#700588.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1378209600">- Update to version 3.9.91:
  + Bugs fixed: bgo#700588, bgo#706498.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + bgo#707490: Don't use AM_GNU_GETTEXT.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Updated translations.</changelog>

</package>
<package pkgid="a32a4267173fae6553280f3497aacfaced51af87f31af3c522b436437a80e2fc" name="devhelp" arch="x86_64">
    <version epoch="0" ver="3.10.2" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1324382400">- Update to version 3.3.3:
  + Bugs fixed:
  - bgo#456282: Add globbing/wildcards to search fields
  - bgo#646398, bgo#649064, bgo#652999, bgo#663789, bgo#666446.
  + Updated translations.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Remove libwnck-devel BuildRequires: removed upstream.
- Drop devhelp-fix-multiple-gdk-backends.patch: fixed upstream.
  Also remove gnome-common BuildRequires and call to
  gnome-autogen.sh that were needed for the patch.
- Update descriptions of packages.
- Update Url tag.</changelog>
<changelog author="vuntz@opensuse.org" date="1330948800">- Update to version 3.3.91:
  + Optional port to WebKit2 (pass --with-webkit2 to configure).
  + Bugs fixed: bgo#647383, bgo#669696.
  + Updated translations.
- Remove xz BuildRequires now that it comes for free in the build
  system.
- Note that we don't build with WebKit2 at the moment, as WebKit2
  is still considered experimental. We'll switch to it when it will
  be the default.</changelog>
<changelog author="vuntz@opensuse.org" date="1332849600">- Update to version 3.4.0:
  + bgo#671256: Fix compilation warnings with
  - Wunused-but-set-variable
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 3.5.5:
  + Implement application menu (bgo#677927)
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Upadted translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 3.6.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 3.6.1:
  + Fix Ctrl-C to copy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1357646400">- Update to version 3.7.3:
  + bgo#646402: port devhelp to gsettings
  + bgo#683882: Can't Ctrl+C to copy
  + bgo#687607: add keywords to the desktop file
  + bgo#688919: devhelp fails to build with GNU gold due to
    underlinking
- Changes from version 3.7.1:
  + bgo#685710: Switch to WebKit2 by default for 3.7.x
  + Updated translatons.
- Replace pkgconfig(webkitgtk-3.0) BuildRequires with
  pkgconfig(webkit2gtk-3.0), following upstreams move to WebKit2.
- Replace gconf schema handling with gsettings equivalents.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 3.7.5:
  + This release sees a revamp of the UI according to match
    GNOME 3 applications.
  + Bugs fixed: bgo#569021, bgo#646402, bgo#664080, bgo#671907,
    bgo#679955, bgo#679956, bgo#688955, bgo#690599, bgo#690980,
    bgo#692242, bgo#692732, bgo#693017, bgo#693023.
  + Updated translations.
- Drop gconf2-devel BuildRequires: no longer needed after the port
  to GSettings.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 3.7.91:
  + Bugs fixed: bgo#569021, bgo#600309, bgo#640567, bgo#665531,
    bgo#671907, bgo#673320, bgo#693237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Bugs fixed: bgo#696367, bgo#695455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 3.8.1:
  + Font size is too small by default and don't match system font
    size (bgo#697026).
  + Changing preferences crashes/fails after closing one of
    multiple windows (bgo#697541).</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 3.8.2:
  + Disconnect signals when preferences dialog is shutdown.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 3.9.4:
  + Bugs fixed: bgo#665531, bgo#695758, bgo#696922, bgo#700430.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Bugs fixed: bgo#703609, bgo#704752, bgo#704805.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 3.9.90:
  + Ported to GtkHeaderBar, GtkSearchBar, and more.
  + Bugs fixed: bgo#700588.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1378209600">- Update to version 3.9.91:
  + Bugs fixed: bgo#700588, bgo#706498.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + bgo#707490: Don't use AM_GNU_GETTEXT.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Updated translations.</changelog>

</package>
<package pkgid="92b36d075957914f9ea1957d1d7505514f9c95da2c0cc6ec112d25786f03822f" name="devhelp-devel" arch="i586">
    <version epoch="0" ver="3.10.2" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1324382400">- Update to version 3.3.3:
  + Bugs fixed:
  - bgo#456282: Add globbing/wildcards to search fields
  - bgo#646398, bgo#649064, bgo#652999, bgo#663789, bgo#666446.
  + Updated translations.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Remove libwnck-devel BuildRequires: removed upstream.
- Drop devhelp-fix-multiple-gdk-backends.patch: fixed upstream.
  Also remove gnome-common BuildRequires and call to
  gnome-autogen.sh that were needed for the patch.
- Update descriptions of packages.
- Update Url tag.</changelog>
<changelog author="vuntz@opensuse.org" date="1330948800">- Update to version 3.3.91:
  + Optional port to WebKit2 (pass --with-webkit2 to configure).
  + Bugs fixed: bgo#647383, bgo#669696.
  + Updated translations.
- Remove xz BuildRequires now that it comes for free in the build
  system.
- Note that we don't build with WebKit2 at the moment, as WebKit2
  is still considered experimental. We'll switch to it when it will
  be the default.</changelog>
<changelog author="vuntz@opensuse.org" date="1332849600">- Update to version 3.4.0:
  + bgo#671256: Fix compilation warnings with
  - Wunused-but-set-variable
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 3.5.5:
  + Implement application menu (bgo#677927)
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Upadted translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 3.6.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 3.6.1:
  + Fix Ctrl-C to copy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1357646400">- Update to version 3.7.3:
  + bgo#646402: port devhelp to gsettings
  + bgo#683882: Can't Ctrl+C to copy
  + bgo#687607: add keywords to the desktop file
  + bgo#688919: devhelp fails to build with GNU gold due to
    underlinking
- Changes from version 3.7.1:
  + bgo#685710: Switch to WebKit2 by default for 3.7.x
  + Updated translatons.
- Replace pkgconfig(webkitgtk-3.0) BuildRequires with
  pkgconfig(webkit2gtk-3.0), following upstreams move to WebKit2.
- Replace gconf schema handling with gsettings equivalents.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 3.7.5:
  + This release sees a revamp of the UI according to match
    GNOME 3 applications.
  + Bugs fixed: bgo#569021, bgo#646402, bgo#664080, bgo#671907,
    bgo#679955, bgo#679956, bgo#688955, bgo#690599, bgo#690980,
    bgo#692242, bgo#692732, bgo#693017, bgo#693023.
  + Updated translations.
- Drop gconf2-devel BuildRequires: no longer needed after the port
  to GSettings.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 3.7.91:
  + Bugs fixed: bgo#569021, bgo#600309, bgo#640567, bgo#665531,
    bgo#671907, bgo#673320, bgo#693237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Bugs fixed: bgo#696367, bgo#695455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 3.8.1:
  + Font size is too small by default and don't match system font
    size (bgo#697026).
  + Changing preferences crashes/fails after closing one of
    multiple windows (bgo#697541).</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 3.8.2:
  + Disconnect signals when preferences dialog is shutdown.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 3.9.4:
  + Bugs fixed: bgo#665531, bgo#695758, bgo#696922, bgo#700430.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Bugs fixed: bgo#703609, bgo#704752, bgo#704805.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 3.9.90:
  + Ported to GtkHeaderBar, GtkSearchBar, and more.
  + Bugs fixed: bgo#700588.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1378209600">- Update to version 3.9.91:
  + Bugs fixed: bgo#700588, bgo#706498.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + bgo#707490: Don't use AM_GNU_GETTEXT.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Updated translations.</changelog>

</package>
<package pkgid="c84fd11e33c62ca068488845944378ae942220ded4a34fd445b711267b8d418c" name="devhelp-devel" arch="x86_64">
    <version epoch="0" ver="3.10.2" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1324382400">- Update to version 3.3.3:
  + Bugs fixed:
  - bgo#456282: Add globbing/wildcards to search fields
  - bgo#646398, bgo#649064, bgo#652999, bgo#663789, bgo#666446.
  + Updated translations.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Remove libwnck-devel BuildRequires: removed upstream.
- Drop devhelp-fix-multiple-gdk-backends.patch: fixed upstream.
  Also remove gnome-common BuildRequires and call to
  gnome-autogen.sh that were needed for the patch.
- Update descriptions of packages.
- Update Url tag.</changelog>
<changelog author="vuntz@opensuse.org" date="1330948800">- Update to version 3.3.91:
  + Optional port to WebKit2 (pass --with-webkit2 to configure).
  + Bugs fixed: bgo#647383, bgo#669696.
  + Updated translations.
- Remove xz BuildRequires now that it comes for free in the build
  system.
- Note that we don't build with WebKit2 at the moment, as WebKit2
  is still considered experimental. We'll switch to it when it will
  be the default.</changelog>
<changelog author="vuntz@opensuse.org" date="1332849600">- Update to version 3.4.0:
  + bgo#671256: Fix compilation warnings with
  - Wunused-but-set-variable
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 3.5.5:
  + Implement application menu (bgo#677927)
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Upadted translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 3.6.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 3.6.1:
  + Fix Ctrl-C to copy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1357646400">- Update to version 3.7.3:
  + bgo#646402: port devhelp to gsettings
  + bgo#683882: Can't Ctrl+C to copy
  + bgo#687607: add keywords to the desktop file
  + bgo#688919: devhelp fails to build with GNU gold due to
    underlinking
- Changes from version 3.7.1:
  + bgo#685710: Switch to WebKit2 by default for 3.7.x
  + Updated translatons.
- Replace pkgconfig(webkitgtk-3.0) BuildRequires with
  pkgconfig(webkit2gtk-3.0), following upstreams move to WebKit2.
- Replace gconf schema handling with gsettings equivalents.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 3.7.5:
  + This release sees a revamp of the UI according to match
    GNOME 3 applications.
  + Bugs fixed: bgo#569021, bgo#646402, bgo#664080, bgo#671907,
    bgo#679955, bgo#679956, bgo#688955, bgo#690599, bgo#690980,
    bgo#692242, bgo#692732, bgo#693017, bgo#693023.
  + Updated translations.
- Drop gconf2-devel BuildRequires: no longer needed after the port
  to GSettings.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 3.7.91:
  + Bugs fixed: bgo#569021, bgo#600309, bgo#640567, bgo#665531,
    bgo#671907, bgo#673320, bgo#693237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Bugs fixed: bgo#696367, bgo#695455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 3.8.1:
  + Font size is too small by default and don't match system font
    size (bgo#697026).
  + Changing preferences crashes/fails after closing one of
    multiple windows (bgo#697541).</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 3.8.2:
  + Disconnect signals when preferences dialog is shutdown.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 3.9.4:
  + Bugs fixed: bgo#665531, bgo#695758, bgo#696922, bgo#700430.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Bugs fixed: bgo#703609, bgo#704752, bgo#704805.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 3.9.90:
  + Ported to GtkHeaderBar, GtkSearchBar, and more.
  + Bugs fixed: bgo#700588.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1378209600">- Update to version 3.9.91:
  + Bugs fixed: bgo#700588, bgo#706498.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + bgo#707490: Don't use AM_GNU_GETTEXT.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Updated translations.</changelog>

</package>
<package pkgid="91bdb5b0de7e4130cd4a42f00432490c279ede99923cc9705960bf0d784feb7d" name="devhelp-lang" arch="noarch">
    <version epoch="0" ver="3.10.2" rel="12.2"/>

<changelog author="vuntz@opensuse.org" date="1324382400">- Update to version 3.3.3:
  + Bugs fixed:
  - bgo#456282: Add globbing/wildcards to search fields
  - bgo#646398, bgo#649064, bgo#652999, bgo#663789, bgo#666446.
  + Updated translations.
- Add xz BuildRequires because we can't build a package for a
  xz-compressed tarball without explicitly specifying that... See
  bnc#697467 for more details.
- Remove libwnck-devel BuildRequires: removed upstream.
- Drop devhelp-fix-multiple-gdk-backends.patch: fixed upstream.
  Also remove gnome-common BuildRequires and call to
  gnome-autogen.sh that were needed for the patch.
- Update descriptions of packages.
- Update Url tag.</changelog>
<changelog author="vuntz@opensuse.org" date="1330948800">- Update to version 3.3.91:
  + Optional port to WebKit2 (pass --with-webkit2 to configure).
  + Bugs fixed: bgo#647383, bgo#669696.
  + Updated translations.
- Remove xz BuildRequires now that it comes for free in the build
  system.
- Note that we don't build with WebKit2 at the moment, as WebKit2
  is still considered experimental. We'll switch to it when it will
  be the default.</changelog>
<changelog author="vuntz@opensuse.org" date="1332849600">- Update to version 3.4.0:
  + bgo#671256: Fix compilation warnings with
  - Wunused-but-set-variable
  + Updated translations.</changelog>
<changelog author="vuntz@opensuse.org" date="1334664000">- Update to version 3.4.1:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1344340800">- Update to version 3.5.5:
  + Implement application menu (bgo#677927)
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1347883200">- Update to version 3.5.92:
  + Upadted translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1348488000">- Update to version 3.6.0:
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1352894400">- Update to version 3.6.1:
  + Fix Ctrl-C to copy.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1357646400">- Update to version 3.7.3:
  + bgo#646402: port devhelp to gsettings
  + bgo#683882: Can't Ctrl+C to copy
  + bgo#687607: add keywords to the desktop file
  + bgo#688919: devhelp fails to build with GNU gold due to
    underlinking
- Changes from version 3.7.1:
  + bgo#685710: Switch to WebKit2 by default for 3.7.x
  + Updated translatons.
- Replace pkgconfig(webkitgtk-3.0) BuildRequires with
  pkgconfig(webkit2gtk-3.0), following upstreams move to WebKit2.
- Replace gconf schema handling with gsettings equivalents.</changelog>
<changelog author="dimstar@opensuse.org" date="1360065600">- Update to version 3.7.5:
  + This release sees a revamp of the UI according to match
    GNOME 3 applications.
  + Bugs fixed: bgo#569021, bgo#646402, bgo#664080, bgo#671907,
    bgo#679955, bgo#679956, bgo#688955, bgo#690599, bgo#690980,
    bgo#692242, bgo#692732, bgo#693017, bgo#693023.
  + Updated translations.
- Drop gconf2-devel BuildRequires: no longer needed after the port
  to GSettings.</changelog>
<changelog author="dimstar@opensuse.org" date="1362484800">- Update to version 3.7.91:
  + Bugs fixed: bgo#569021, bgo#600309, bgo#640567, bgo#665531,
    bgo#671907, bgo#673320, bgo#693237.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1364212800">- Update to version 3.8.0:
  + Bugs fixed: bgo#696367, bgo#695455.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1366200000">- Update to version 3.8.1:
  + Font size is too small by default and don't match system font
    size (bgo#697026).
  + Changing preferences crashes/fails after closing one of
    multiple windows (bgo#697541).</changelog>
<changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 3.8.2:
  + Disconnect signals when preferences dialog is shutdown.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1373284800">- Update to version 3.9.4:
  + Bugs fixed: bgo#665531, bgo#695758, bgo#696922, bgo#700430.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1375185600">- Update to version 3.9.5:
  + Bugs fixed: bgo#703609, bgo#704752, bgo#704805.</changelog>
<changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 3.9.90:
  + Ported to GtkHeaderBar, GtkSearchBar, and more.
  + Bugs fixed: bgo#700588.
  + Updated translations.</changelog>
<changelog author="zaitor@opensuse.org" date="1378209600">- Update to version 3.9.91:
  + Bugs fixed: bgo#700588, bgo#706498.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 3.10.0:
  + bgo#707490: Don't use AM_GNU_GETTEXT.
  + Updated translations.</changelog>
<changelog author="dimstar@opensuse.org" date="1384171200">- Update to version 3.10.2 (bnc#849913):
  + Updated translations.</changelog>

</package>
<package pkgid="090c3cfa9d3c88105aee68cec77118a82d2572015dc8d7cfc14db8acc4e03992" name="dhcp" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.17.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>
<changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.</changelog>

</package>
<package pkgid="3768558e654e821682eab5793fe94e9c0ecbba9054d32d5209c23757011b31be" name="dhcp" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.5.1"/>

<changelog author="mt@suse.com" date="1314792000">- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES
  variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there
  are well-defined directories expected to contain additional config
  files (bnc#690585).</changelog>
<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>

</package>
<package pkgid="056a4812eddafafc6b4529d9a4bd715e39e8463d94f907993821c43abac20dd1" name="dhcp" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.9.1"/>

<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>

</package>
<package pkgid="6049bdf02b28f3107a8495b631a89c474c81359dfc4e28c3d1de1fa198c27a35" name="dhcp" arch="src">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.17.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>
<changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.</changelog>

</package>
<package pkgid="2e1d638f6f4d840dbf6355c017c32e7b13908633cdcbccffa8c270b5fb292e08" name="dhcp" arch="src">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.5.1"/>

<changelog author="mt@suse.com" date="1314792000">- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES
  variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there
  are well-defined directories expected to contain additional config
  files (bnc#690585).</changelog>
<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>

</package>
<package pkgid="b68172f606754fdf5d2af323b1f9445fb9a8946c13a837e5cc1d85bb57bdd6ea" name="dhcp" arch="src">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.9.1"/>

<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>

</package>
<package pkgid="3fe62aca92f9afcc0604976052b400036977995fa4a7a0dce6b7bca1ffcc1d8c" name="dhcp" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.17.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>
<changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.</changelog>

</package>
<package pkgid="fd6ed52b967e34f63c95c807d7c05a10c2a8b33018800b665216de5648a8db94" name="dhcp" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.5.1"/>

<changelog author="mt@suse.com" date="1314792000">- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES
  variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there
  are well-defined directories expected to contain additional config
  files (bnc#690585).</changelog>
<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>

</package>
<package pkgid="e802ebb8bdf8210c6403bf7d13d204d0c48e255f7b495f32828abe15095b4a27" name="dhcp" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.9.1"/>

<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>

</package>
<package pkgid="24b0feb1fd75ec5702e5440a147979ed6e6d13f36c957c759ecc49a50b593079" name="dhcp-client" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.17.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>
<changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.</changelog>

</package>
<package pkgid="3d5061dc4c35b5c9a872e7d2723310d8abd9364a446de8ae5ecf8bb9db831880" name="dhcp-client" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.5.1"/>

<changelog author="mt@suse.com" date="1314792000">- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES
  variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there
  are well-defined directories expected to contain additional config
  files (bnc#690585).</changelog>
<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>

</package>
<package pkgid="0cbcfe458d94281cc16cccade0de9075640efc3838bb89b3e861699c0bc71cfc" name="dhcp-client" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.9.1"/>

<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>

</package>
<package pkgid="5b0fbf78cc43c880702ae2225ac7aa8451dab0e9755a5f27f8f383d66f902468" name="dhcp-client" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.17.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>
<changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.</changelog>

</package>
<package pkgid="08286a434e7ce7ec36d6744c7d442a8a280389f5c18e7375426d777fb786d376" name="dhcp-client" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.5.1"/>

<changelog author="mt@suse.com" date="1314792000">- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES
  variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there
  are well-defined directories expected to contain additional config
  files (bnc#690585).</changelog>
<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>

</package>
<package pkgid="e015097e9aa1c63388f9c2e081d8b14c07e828dff4fabf1b08e63e41cf02b745" name="dhcp-client" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.9.1"/>

<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>

</package>
<package pkgid="2c3ff19aff359ef878b9e59ae97b96b2015e6c54786b741cd04a340a0591b442" name="dhcp-devel" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.17.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>
<changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.</changelog>

</package>
<package pkgid="878d6fb50ca5dc7488871243c6cdd2a17eced0a83fa020bcd30d5378f70b4f95" name="dhcp-devel" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.5.1"/>

<changelog author="mt@suse.com" date="1314792000">- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES
  variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there
  are well-defined directories expected to contain additional config
  files (bnc#690585).</changelog>
<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>

</package>
<package pkgid="db65c8d1ddfbb22857046d399215a77f80e7e6a4bbf6c46a06d63c572eb0881f" name="dhcp-devel" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.9.1"/>

<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>

</package>
<package pkgid="752ad41f9c0cfde9f08304f4a64255256002c6efadcfc6ba7e5742c5bb37e225" name="dhcp-devel" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.17.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>
<changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.</changelog>

</package>
<package pkgid="f11eaa110d7dad4207e8d6fe18d026bcce7adba2e4b75a3188f91e0287ae8f05" name="dhcp-devel" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.5.1"/>

<changelog author="mt@suse.com" date="1314792000">- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES
  variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there
  are well-defined directories expected to contain additional config
  files (bnc#690585).</changelog>
<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>

</package>
<package pkgid="0c24fc2a49eb31b2d12c7b0b78fab61cb0886fa51c0d434aac2aaef9d510ea9d" name="dhcp-devel" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.9.1"/>

<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>

</package>
<package pkgid="a2f4ce0bb841b190de73210da365adfb3c59cd2650bc506eb3348b5b9e36d647" name="dhcp-doc" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.17.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>
<changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.</changelog>

</package>
<package pkgid="0b4bbb723e9937a4011940c88b3fad26c4341be3c07491d31617a91e6e56238b" name="dhcp-doc" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.5.1"/>

<changelog author="mt@suse.com" date="1314792000">- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES
  variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there
  are well-defined directories expected to contain additional config
  files (bnc#690585).</changelog>
<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>

</package>
<package pkgid="cc86075630a1459a52a215e89ec6de684a10e349f3f1ca61349bd75e15ed8a1e" name="dhcp-doc" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.9.1"/>

<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>

</package>
<package pkgid="4e372a7803ee8b3baa97235b801e7fa6d44586616f36ae2836484350ceae42ce" name="dhcp-doc" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.17.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>
<changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.</changelog>

</package>
<package pkgid="e7fbb5bce93418ef0303ab77dbae06336fe591b7c09c2a36ad3303d154938f85" name="dhcp-doc" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.5.1"/>

<changelog author="mt@suse.com" date="1314792000">- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES
  variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there
  are well-defined directories expected to contain additional config
  files (bnc#690585).</changelog>
<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>

</package>
<package pkgid="04bd3f297ae5ccba7f96adc4c38aa62d60fff9787fa28bdd657ed793a2823573" name="dhcp-doc" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.9.1"/>

<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>

</package>
<package pkgid="070a439748ab97d335f238fa352878b634fccc69b9f0221f2eec78ea1691f5aa" name="dhcp-relay" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.17.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>
<changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.</changelog>

</package>
<package pkgid="b2a0a3b4655035cae535ff367bc283b498be150837bef7d66fe0da33a1497b74" name="dhcp-relay" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.5.1"/>

<changelog author="mt@suse.com" date="1314792000">- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES
  variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there
  are well-defined directories expected to contain additional config
  files (bnc#690585).</changelog>
<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>

</package>
<package pkgid="5034ae99ee7f459c66d32e43e3b89e10d2e9bc430adee987f67f902a62084911" name="dhcp-relay" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.9.1"/>

<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>

</package>
<package pkgid="4b670912c743418e1d1e92df13757d7a502d1b71f4fb66f6b5007a723be38d48" name="dhcp-relay" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.17.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>
<changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.</changelog>

</package>
<package pkgid="0db2103d694b42432985486d038a7afe24a638001c961f990c2cc7c232054738" name="dhcp-relay" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.5.1"/>

<changelog author="mt@suse.com" date="1314792000">- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES
  variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there
  are well-defined directories expected to contain additional config
  files (bnc#690585).</changelog>
<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>

</package>
<package pkgid="53ff92405d3e4369072ea9ae07fd136bfca7fe47282bd8b1baba409d140ea337" name="dhcp-relay" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.9.1"/>

<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>

</package>
<package pkgid="da51df0ba6df61f1f33a87f4b577db921a33692b0ddc9aec2c6ced79ab9acc89" name="dhcp-server" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.17.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>
<changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.</changelog>

</package>
<package pkgid="fba7e3ec755f61844db08b1526b18b391b1a068f7c0351c696b8cd884534dcca" name="dhcp-server" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.5.1"/>

<changelog author="mt@suse.com" date="1314792000">- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES
  variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there
  are well-defined directories expected to contain additional config
  files (bnc#690585).</changelog>
<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>

</package>
<package pkgid="c60d41ff93afdf22ee33e5002cedebd4ac0de2f7cdf1a1e54d5805eaada0fb1e" name="dhcp-server" arch="i586">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.9.1"/>

<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>

</package>
<package pkgid="584d694396134b020dd25fd476958c5aa5913aa9aa283d6fee2c65c39569cfc5" name="dhcp-server" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.17.1"/>

<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>
<changelog author="mt@suse.de" date="1416484800">- Applied contrib/ldap/dhcpd-conf-to-ldap patch by Ales Novak to
  reorder config to add all global options or option declarations
  to the dhcpService object instead to create new service object
  (bsc#886094,ISC-Bugs#37876).
  [+ dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch]
- Applied an upstream patch by Thomas Markwalder adding missed
  mapping of SHA TSIG algorithm names to their constants to enable
  hmac-sha1, hmac_sha224, hmac_sha256, hmac_sha384 and hmac_sha512
  authenticated dynamic DNS updates (bsc#890731, ISC-Bugs#36947).
  [+ dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch]
- Decline IPv6 addresses on Duplicate Address Detection failure
  and stop client message exchanges on reached MRD rather than
  at some point after it. Applied fedora patches by Jiri Popelka
  and added DAD reporting via exit 3 to the dhclient-script and
  a fix to use correct address variables in the DEPREF6 action
  (bsc#872609,ISC-Bugs#26735,ISC-Bugs#21238).
  [+ dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch]
- Applied backport patch by William Preston avoiding to bind ddns
  socket in the server when ddns-update-style is none (bsc#891655).
  [+ dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Applied patch for the contrib/ldap/dhcpd-conf-to-ldap script
  fixing subclass statement handling (bnc#878846,[ISC-Bugs #36409])
  [+ dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch]
- Updated licence statement and FSF address in our scripts.</changelog>

</package>
<package pkgid="27225d9ae3131dec8407cac140d2682ee77ea2f4352d45bda5aefad567535ddf" name="dhcp-server" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.5.1"/>

<changelog author="mt@suse.com" date="1314792000">- Set the DHCPD_CONF_INCLUDE_FILES and the DHCPD6_CONF_INCLUDE_FILES
  variables to /etc/dhcpd.d and /etc/dhcpd6.d by default, so there
  are well-defined directories expected to contain additional config
  files (bnc#690585).</changelog>
<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>

</package>
<package pkgid="eab00c1583ad0da7da9c9342cdb2c24d60cc149805e5ebfdf3a16e47f75deba6" name="dhcp-server" arch="x86_64">
    <version epoch="0" ver="4.2.5.P1" rel="0.6.9.1"/>

<changelog author="mt@suse.com" date="1315310400">- Commented out all configuration examples in /etc/dhcpd.conf and
  dhcp6.conf (bnc#715473).
- Enabled dhcp6.rapid-commit in /etc/dhclient6.conf config file.
- Removed useless provides/obsoletes from spec file.</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="mt@suse.com" date="1323432000">- Updated to ISC dhcp-4.2.3-P1 release, providing security fix for
  a DoS due to processing certain regular expressions (bnc#735610)
  and several important DDNS related fixes:
  * Add a check for a null pointer before calling the regexec function.
    Without out this check we could, under some circumstances, pass
    a null pointer to the regexec function causing it to segfault.
    Thanks to a report from BlueCat Networks. [ISC-Bugs #26704]
    CVE-2011-4539.
  * Fix the code that checks for an existing DDNS transaction to
    cancel when removing DDNS information, so that we will continue
    with the processing if we have a lease even if it doesn't have an
    outstanding transaction.  [ISC-Bugs #24682]
  * Add AM_MAINTAINER_MODE to configure.ac to avoid rebuilding
    configuration files.  [ISC-Bugs #24107]
  * Add support for passing DDNS information to a DNS server over
    an IPv6 address.  [ISC-Bugs #22647]
  * Enhanced patch for 23595 to handle IPv4 fixed addresses more
    cleanly.  [ISC-Bugs #23595]
- Refreshed ldap patch</changelog>
<changelog author="mt@suse.com" date="1326456000">- Updated to ISC dhcp-4.2.3-P2 release, providing a DDNS security fix:
  Modify the DDNS handling code. In a previous patch we added logging
  code to the DDNS handling.  This code included a bug that caused it
  to attempt to dereference a NULL pointer and eventually segfault.
  While reviewing the code as we addressed this problem, we determined
  that some of the updates to the lease structures would not work as
  planned since the structures being updated were in the process of
  being freed: these updates were removed.  In addition we removed an
  incorrect call to the DDNS removal function that could cause a failure
  during the removal of DDNS information from the DNS server.
  Thanks to Jasper Jongmans for reporting this issue.
  ([ISC-Bugs #27078], CVE: CVE-2011-4868, bnc#741239)
- Fixed close-on-exec patch to not set it on stderr (bnc#732910)
- Fixed incorrect "a" array type option parsing causing to discard
  e.g. classless static routes from lease file [reported as ISC-Bug
  27289] and zero-length option parsing such as dhcp6.rapid-commit
  in dhclient6 [reported as ISC-Bug 27314] (bnc#739696).
- Fixed dhclient to include its pid number in syslog messages.
- Fixed to use P2 in the spec version, not in the release tag.</changelog>
<changelog author="mt@suse.com" date="1332158400">- dhcp-server: fixed to escape all values used in constructed
  ldap filters as a DN may contain e.g. asterisks (bnc#721829,
  [ISC-Bugs #28545]).</changelog>
<changelog author="mt@suse.com" date="1332936000">- Added RFC 4833 TimeZone PosixString and Name declarations to
  server and client configs [not used yet].</changelog>
<changelog author="mt@suse.com" date="1340107200">- Update to ISC dhcp-4.2.4 release, fixing a dhcpv6 server assert
  crash while accessing lease on heap (bnc#767661) and providing
  the following fixes:
  - Rotate the lease file when running in v6 mode.
    Thanks to Christoph Moench-Tegeder at Astaro for the
    report and the first version of the patch. [ISC-Bugs #24887]
  - Fixed the code that checks if an address the server is planning
    to hand out is in a reserved range.  This would appear as the
    server being out of addresses in pools with particular ranges.
    [ISC-Bugs #26498]
  - In the DDNS code handle error conditions more gracefully and
    add more logging code. The major change is to handle unexpected
    cancel events from the DNS client code. [ISC-Bugs #26287]
  - Tidy up the receive calls and eliminate the need for found_pkt.
    [ISC-Bugs #25066]
  - Add support for Infiniband over sockets to the server and
    relay code.  We've tested this on Solaris and hope to expand
    support for Infiniband in the future.  This patch also corrects
    some issues we found in the socket code. [ISC-Bugs #24245]
  - Add a compile time check for the presence of the noreturn attribute
    and use it for log_fatal if it's available.  This will help code
    checking programs to eliminate false positives. [ISC-Bugs #27539]
  - Fixed many compilation problems ("set, but not used" warnings) for
    gcc 4.6 that may affect Ubuntu 11.10 users. [ISC-Bugs #27588]
  - Modify the code that determines if an outstanding DDNS request
    should be cancelled.  This patch results in cancelling the
    outstanding request less often.  It fixes the problem caused
    by a client doing a release where  the TXT and PTR records
    weren't removed from the DNS. [ISC-BUGS #27858]
  - Use offsetof() instead of sizeof() to get the sizes for
    dhcpv6_relay_packet and dhcpv6_packet in several more places.
    Thanks to a report from Bruno Verstuyft and Vincent Demaertelaere
    of Excentis. [ISC-Bugs #27941]
  - Remove outdated note in the description of the bootp keyword about
    the option not satisfying the requirement of failover peers for
    denying dynamic bootp clients. [ISC-bugs #28574]
  - Multiple items to clean up IPv6 address processing. When processing
    an IA that we've seen check to see if the addresses are usable
    (not in use by somebody else) before handing it out.
    When reading in leases from the file discard expired addresses.
    When picking an address for a client include the IA ID in
    addition to the client ID to generally pick different addresses
    for different IAs. [ISC-Bugs #23138] [ISC-Bugs #27945]
    [ISC-Bugs #25586] [ISC-Bugs #27684]
  - Remove unnecessary checks in the lease query code and clean up
    several compiler issues (some dereferences of NULL and treating
    an int as a boolean). [ISC-Bugs #26203]
  - Fix the NA and PD allocation code to handle the case where a client
    provides a preference and the server doesn't have any addresses or
    prefixes available.  Previoulsy the server ignored the request with
    this patch it replies with a NoAddrsAvail or NoPrefixAvail response.
    By default the code performs according to the errata of August 2010
    for RFC 3315 section 17.2.2; to enable the previous style see the
    section on RFC3315_PRE_ERRATA_2010_08 in includes/site.h.
    This option may be removed in the future. Thanks to Jiri Popelka at
    Red Hat for the patch. [ISC-Bugs #22676]
  - Fix up some issues found by static analysis. A potential memory leak
    and NULL dereference in omapi. The use of a boolean test instead of
    a bitwise test in dst. [ISC-Bugs #28941]
- Replaced our patches with a complete and upstream verified patch:
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #27314] - properly parse a zero length option from
    a lease file.
    [ISC-Bugs #22796] - properly determine if we parsed a 16 or
    32 bit value in evaluate_numeric_expression (extract-int).
    [ISC-Bugs #22625] - properly print options that have several
    fields followed by an array of something for example "fIa"
    [ISC-Bugs #27289] - properly parse options in declarations
    that have several fields followed by an array of something
    for example "fIa"
  This patch obsoletes the following (bnc#739696) patches:
  - dhclient: parse_option_param: Bad format a
  - zero-length option lease parse error in dhclient6
- Merged ldap and options check patches for the new version
- Fixed dhcp-server init script to check syntax and fail while
  force-reload and restart to avoid stopping of running daemon
  followed by start failure (bnc#762108). Added libgcc_s.so to
  chroot, so the server can report assert/crash line.</changelog>
<changelog author="mt@suse.com" date="1343217600">- Update to ISC dhcp-4.2.4-P1 release, providing following security
  fixes (bnc#772924):
  - Previously the server code was relaxed to allow packets with zero
    length client ids to be processed.  Under some situations use of
    zero length client ids can cause the server to go into an infinite
    loop. As such ids are not valid according to RFC 2132 section 9.14
    the server no longer accepts them.  Client ids with a length of 1
    are also invalid but the server still accepts them in order to
    minimize disruption.  The restriction will likely be tightened in
    the future to disallow ids with a length of 1.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29851] CVE: CVE-2012-3571
  - When attempting to convert a DUID from a client id option
    into a hardware address handle unexpected client ids properly.
    Thanks to Markus Hietava of Codenomicon CROSS project for the
    finding this issue and CERT-FI for vulnerability coordination.
    [ISC-Bugs #29852] CVE: CVE-2012-3570
  - A pair of memory leaks were found and fixed.  Thanks to Glen
    Eustace of Massey University, New Zealand for finding this issue.
    [ISC-Bugs #30024] CVE: CVE-2012-3954
- Moved lease file check to a separate action so it is not used in
  restart -- it can fail when the daemon rewrites the lease causing
  a restart failure then (bnc#762108 regression).
- Request dhcp6.sntp-servers in /etc/dhclient6.conf and forward to
  netconfig for processing (bnc#770236).
- Removed RFC 4833 TZ options from client requests [unused].</changelog>
<changelog author="mt@suse.com" date="1348142400">- Update to ISC dhcp-4.2.4-P2 release, providing a security fix for
  an issue with the use of lease times was found and fixed.  Making
  certain changes to the end time of an IPv6 lease could cause the
  server to abort.  Thanks to Glen Eustace of Massey University,
  New Zealand for finding this issue.
  ([ISC-Bugs #30281], CVE: CVE-2012-3955, bnc#780167)</changelog>
<changelog author="mt@suse.com" date="1357905600">- Update to ISC dhcp-4.2.5 release. See RELNOTES file for the
  complete list of changes -- digest of fixes not in dhcp-4.2.4-P2:
  - Correct code to calculate rebind timing values in client
    [ISC-Bugs #29062]
  - Fix some issues in the code for parsing and printing options.
    [ISC-Bugs #22625,#27289,#27296,#27314]
  - Update the memory leakage debug code to work with v6.
    [ISC-Bugs #30297]
  - Relax the requirements for deleting an A or AAAA record.
    This relaxation was codified in RFC 4703. [ISC-Bugs #30734]
  - Modify the failover code to handle incorrect peer names better.
    [ISC-Bugs #30320]
  - Fix a set of issues that were discovered via a code inspection
    tool. [ISC-Bugs #23833]
  - Parsing unquoted base64 strings improved. [ISC-Bugs #23048]
  - The client now passes information about the options it requested
    from the server to the script code via environment variables.
    These variables are of the form requested_&lt;option_name&gt;=1 with
    the option name being the same as used in the new_* and old_*
    variables. [ISC-Bugs #29068]
  - Check the status value when trying to read from a connection to
    see if it may have been closed.  If it appears closed don't try
    to read from it again.  This avoids a potential busy-wait like
    loop when the peer names are mismatched. [ISC-Bugs #31231]
  - Remove an unused variable to keep compilers happy.
    [ISC-Bugs #31983]
- Removed obsolete parsing and printing option patch
  [dhcp-4.2.4-parsing-and-printing-options.patch]
- Merged dhcp-4.2.2-dhclient-send-hostname-rml.diff
  [dhcp-4.2.5-dhclient-send-hostname-rml.patch]
- Fixed discovery of interfaces, which have only addresses with
  a label assigned (linux 2.0 "alias interfaces" compatibility)
  by switching to use the getifaddrs() as on BSD (bnc#791289,
  reported upstream as [ISC-Bugs #31992]).
  [dhcp-4.2.4-interface-discovery-using-getifaddrs.patch]
- Applied a patch to ignore SIGPIPE instead to die in socket code
  before the errno==EPIPE checks are reached (bnc#794578, upstream
  report [ISC-Bugs #32222])
  [dhcp-4.2.4-P2-do-not-die-on-sigpipe.patch]
- Updated ldap patch to 4.2.5-ldap-mt01 providing following fixes:
  - Fixed parse buffer handling code to not avoid truncation of
    config &gt; ~8k from bigger ldap objects. Fixed to free the ldap
    config buffer passed to the config parser and append new config,
    while the parser is in saved state (bnc#788787).
  - Fixed subclass name-ref and data quoting/escaping (bnc#788787).
  - Fixed memory leaks on ldap_read_config errors (bnc#788787).
  - Fixed a memleak while subnet range processing, fixed to reset
    bufix variable in ldap_read_function to 0 and to set buflen to
    the complete length (do not discard last character, usually \n).
    This caused a parsing error at further run of the function,
    e.g. while processing the second dhcpService container that the
    dhcpServer object may refer to (bnc#784640).
  [dhcp-4.2.5-ldap-mt01.patch.bz2]
- Fixed dhclient-script to discard MTU lower-equal 576 rather
  than lower-than (bnc#791280).
- Verify GPG source archive signatures.</changelog>
<changelog author="schwab@suse.de" date="1362312000">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
<changelog author="mt@suse.com" date="1363089600">- Added dhcp6-server service template for SuSEfirewall2 (bnc#783002)</changelog>
<changelog author="mt@suse.com" date="1364385600">- Update to ISC dhcp-4.2.5-P1 release, which contains updated
  bind-9.8.4-P2 sources with removed regex.h check in configure
  (bnc#811934, CVE-2013-2266).
- Changed spec make the bind export library build output visible.</changelog>
<changelog author="mt@suse.com" date="1364472000">- Use manual patch command for config-guess-sub-update.patch
  again as patch macro does not work on older distributions.</changelog>
<changelog author="mt@suse.com" date="1364904000">- Install missed bind include files and libraries in dhcp-devel;
  conflicts to bind-devel providing different versions (bnc#805162).</changelog>
<changelog author="mmeister@suse.com" date="1366977600">- Added autoreconf -i option to fix build for the new automake</changelog>
<changelog author="mt@suse.com" date="1378814400">- Fixed to reload syslog on hostname changes using systemctl as
  there is no /etc/init.d/syslog script since syslog-service-2.0
  (bnc#830467).</changelog>
<changelog author="mt@suse.com" date="1380283200">- Added /etc/bindresvport.blacklist to dhcp server chroot file
  lists as it seems to block its start in some cases (bnc#842360).</changelog>
<changelog author="mt@suse.com" date="1384776000">- Fixed path to systemctl in dhclient-script (bnc#847778).</changelog>
<changelog author="mt@suse.de" date="1402401600">- Fixed dhcp server start script to use correct libdir (bnc#868250)
- Fixed dhcp server to chown leases to run user at start (bnc#868253)
  [+ dhcp-4.2.x-chown-server-leases.bnc868253.patch]</changelog>

</package>
<package pkgid="9ce13158c4d3937acd7d3309e609a044c8ad07c1138455440d17c035638e8f03" name="digikam" arch="i586">
    <version epoch="0" ver="3.5.0" rel="7.3"/>

<changelog author="nico.kruber@gmail.com" date="1353931200">- Update to 3.0.0-beta3:
  digikam:
  - Libkipi:
  * All kipi-plugins actions can be pluged to tools bar.
  * Usability improvements in plugins configuration dialog.
  - Libkdcraw:
  * Update internal Libraw version 0.15.0 Alpha2 to support
    new RAW cameras :
  * Adobe DNG: Fast Load and lossy-compressed DNG
    (LightRoom 4.x)
  * Canon    : G1 X, SX220 HS, EOS 5D Mark III, EOS 650D,
    EOS 1D-X
  * Casio    : EX-Z8
  * Fujifilm : X-S1, HS30EXR, X1-Pro
  * Nikon    : D4, D3200, D800, D800E
  * Olympus  : E-M5
  * Panasonic: DMC-GF5
  * Samsung  : NX20, NX210, NX100, NX-1000
  * Sigma    : SD15,SD1, SD1 Merill, DP1, DP1S, DP1X, DP2,
    DP2S, DP2X
  * Sony     : NEX-F3, SLT-A37, SLT-A57, DSC-RX100
  - ImportUI: Port icon-view to Qt4 model/View.
  - ImportUI: Labels and Tags pre-assignation.
  - ImportUI: Pipelined post download operations.
  - ImportUI: Preview items during downloading.
  - Metadata: Video files metadata support
    (through Exiv2 project).
  - 54 fixed bugs.
  kipi-plugins:
  - General: New tool to export Collection to DLNA device.
  - General: New tool to make video slideshow.
  - General: Port all plugins to KDE XML-GUI framework.
  - 18 fixed bugs.</changelog>
<changelog author="nico.kruber@gmail.com" date="1354017600">- enabled compilation of the VideoSlideshow kipi plugin</changelog>
<changelog author="nico.kruber@gmail.com" date="1357041600">- Update to 3.0.0-rc:
  digikam:
  - General: Add new Noise Estimation feature to Wavelets Noise
    Reduction tools.
  - BatchQueueManager: Add Color Effect tool support.
  - BatchQueueManager: Multicore CPU support to process items
    in parallel.
  - BatchQueueManager: Add Raw Demosaicing settings in Queue
    Qettings.
  - BatchQueueManager: Add new behavior options about RAW file
    loading (extract preview or perform
    demosaicing).
  - BatchQueueManager: Add the capability to assign more than
    one time a tool to a queue.
  - BatchQueueManager: Add the capability to put target file
    processed from queue to source album.
  - BatchQueueManager: Add concept of Workflow dedicated to save
    and restore between sessions Queue Settings
    including Assigned Batch Tools list.
  - 18 fixed bugs.
  kipi-plugins:
  - 2 fixed bugs.
- Added patch (digikam-3.0.0-rc.no-kdcraw.version-check.patch) to
  temporarily disabled libkdcraw version check (does not work any more)</changelog>
<changelog author="toddrme2178@gmail.com" date="1357387200">- Link rawconverter icon to the hicolor theme so it can be safely
  used as an application icon (needed by kphotoalbum)</changelog>
<changelog author="nico.kruber@gmail.com" date="1360584000">- Update to 3.0.0 (final):
  digikam:
  - General: Remove internal LensFun library code and xml lens
    database. Set only an optional and external
    dependency to last 0.2.6 release.
  - BatchQueueManager: Add new tool to crop image.
  - 51 fixed bugs.
  kipi-plugins:
  - Panorama: New parser using GNU Flex and GNU Bison instead of
    Boost::spirit
  - Panorama: Manual cropping of the final result
  - 10 fixed bugs.
- drop fix-broken-icon-reference.diff (fixed upstream)
- update digikam-3.0.0-rc.no-kdcraw.version-check.patch
  (rename to digikam-3.0.0.no-kdcraw.version-check.patch)</changelog>
<changelog author="wstephenson@suse.com" date="1360756800">- Remove spurious bison/flex dependencies</changelog>
<changelog author="nico.kruber@gmail.com" date="1363176000">- Update to 3.1.0 (bnc#816693):
  digikam:
  - General: Remove internal lqr-1 library code. Set only an
    optional and external dependency.
  - 14 fixed bugs.
  kipi-plugins:
  - 7 fixed bugs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1366027200">- Added patch digikam-patch78541.diff from upstream to fix
  detection of certain cameras (bnc#814622, kde#311393)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1368014400">- Add patch commit-006b3f4.diff from upstream to build
  htmlexport again (bnc#816041)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1368532800">- Update to 3.2.0:
  digikam:
  - General:      Remove internal clapack library code.
    Set only an optional and external dependency to
    eigen3.
  - General:      New tool to Auto-Crop image based on black hole
    borders detection.
  - AlbumGUI:     New "Table-View" view mode dedicated to show
    album items in a list view.
  - AlbumGUI:     New Aspect-Ratio information displayed in
    icon-view and tooltips.
  - AlbumGUI:     New filter based on Aspect-Ratio information.
  - Searches:     New search tool to find images based on
    Aspect-Ratio Information.
  - Searches:     New search tool to find videos based on shot
    properties.
  - 46 fixed bugs.
  kipi-plugins:
  - FacebookExport: add new option to create private album.
  - JAlbumExport:   New too to export items to JAblum
  - 10 fixed bugs.
- Drop patches included upstream: commit-006b3f4.diff and
  digikam-patch78541.diff</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1370088000">- Pass the correct ImageMagick cmake flag for &gt;= 13.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370865600">- Added libeigen3-devel and libkqoauth-devel as build requirements.
- Replaced ImageMagick with ImageMagick-devel as build requirement (since
  "mogrify" is no longer needed to fix the icon sizes).
- Removed support for openSUSE &lt;= 11.4 for KDE:UpdatedApps (not needed).
- Removed support for openSUSE 11.3.
- Fix rawconverter icon links (links were pointing to rawconverter.* instead of
  rawconverter.png or rawconverter.svgz).</changelog>
<changelog author="nico.kruber@gmail.com" date="1375790400">- Update to 3.3.0:
  digikam:
  - Faces Managament: Better management of Picasa Face Tags
    import/export through metadata.
  - Faces Management: New Face Recognition engine based on
    OpenTLD.
  - 37 fixed bugs.
  kipi-plugins:
  - 5 fixed bugs.
- Drop patch included upstream: non-executable-script.patch</changelog>
<changelog author="nico.kruber@gmail.com" date="1375790401">- fix libkface package not named after .so name</changelog>
<changelog author="jslaby@suse.com" date="1376568000">- rajceexport-stop-crashing-when-uploaded-nothing.patch: rajceexport:
  stop crashing when uploaded nothing (bnc#835021)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377691200">- Dropped desktop-files.diff, it's no longer needed and AcquireImages
  is missing it's icon due to it (bnc#835989)</changelog>
<changelog author="dmitry_r@opensuse.org" date="1378468800">- Update to 3.4.0:
  digikam
  - General         : Add interroperabilty with Capture NX about
    Color Labels support.
  - MaintenanceTool : add new options to select Albums and Tags
    to process.
  - MaintenanceTool : add multi-threading and multi-core CPU
    support for Metadata Synchronizer, Thumbs
    Generator, and Fingerprint Generator tools.
  - 9 fixed bugs.</changelog>
<changelog author="nico.kruber@gmail.com" date="1381492800">- Update to 3.5.0:
  digikam:
  - General         : new RAW cameras supported : Richon GR,
    Panasonic LF1, Canon EOS 70D, Sony RX100II,
    Sony RX1R, Olympus E-P5.
  - 5 fixed bugs
    (kde#324349, kde#323648, kde#325111, kde#325264, kde#325309)
  kipi-plugins:
  - Panorama        : Autocrop. Cropping area defaults to the
    maximum inner rectangle of the panorama.
  - 1 fixed bug (kde#324239)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Bump minimal opencv-devel BuildRequires to 2.4.5 as per CMakeLists</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1408449600">- Added flickr_ssl.patch: use SSL URL for flickr,
  kde#336835, bnc#891629</changelog>

</package>
<package pkgid="08f6384b415557dd5b71c91f3865f2f0c60f23003516a16b50ccfee7434f16cd" name="digikam" arch="src">
    <version epoch="0" ver="3.5.0" rel="7.3"/>

<changelog author="nico.kruber@gmail.com" date="1353931200">- Update to 3.0.0-beta3:
  digikam:
  - Libkipi:
  * All kipi-plugins actions can be pluged to tools bar.
  * Usability improvements in plugins configuration dialog.
  - Libkdcraw:
  * Update internal Libraw version 0.15.0 Alpha2 to support
    new RAW cameras :
  * Adobe DNG: Fast Load and lossy-compressed DNG
    (LightRoom 4.x)
  * Canon    : G1 X, SX220 HS, EOS 5D Mark III, EOS 650D,
    EOS 1D-X
  * Casio    : EX-Z8
  * Fujifilm : X-S1, HS30EXR, X1-Pro
  * Nikon    : D4, D3200, D800, D800E
  * Olympus  : E-M5
  * Panasonic: DMC-GF5
  * Samsung  : NX20, NX210, NX100, NX-1000
  * Sigma    : SD15,SD1, SD1 Merill, DP1, DP1S, DP1X, DP2,
    DP2S, DP2X
  * Sony     : NEX-F3, SLT-A37, SLT-A57, DSC-RX100
  - ImportUI: Port icon-view to Qt4 model/View.
  - ImportUI: Labels and Tags pre-assignation.
  - ImportUI: Pipelined post download operations.
  - ImportUI: Preview items during downloading.
  - Metadata: Video files metadata support
    (through Exiv2 project).
  - 54 fixed bugs.
  kipi-plugins:
  - General: New tool to export Collection to DLNA device.
  - General: New tool to make video slideshow.
  - General: Port all plugins to KDE XML-GUI framework.
  - 18 fixed bugs.</changelog>
<changelog author="nico.kruber@gmail.com" date="1354017600">- enabled compilation of the VideoSlideshow kipi plugin</changelog>
<changelog author="nico.kruber@gmail.com" date="1357041600">- Update to 3.0.0-rc:
  digikam:
  - General: Add new Noise Estimation feature to Wavelets Noise
    Reduction tools.
  - BatchQueueManager: Add Color Effect tool support.
  - BatchQueueManager: Multicore CPU support to process items
    in parallel.
  - BatchQueueManager: Add Raw Demosaicing settings in Queue
    Qettings.
  - BatchQueueManager: Add new behavior options about RAW file
    loading (extract preview or perform
    demosaicing).
  - BatchQueueManager: Add the capability to assign more than
    one time a tool to a queue.
  - BatchQueueManager: Add the capability to put target file
    processed from queue to source album.
  - BatchQueueManager: Add concept of Workflow dedicated to save
    and restore between sessions Queue Settings
    including Assigned Batch Tools list.
  - 18 fixed bugs.
  kipi-plugins:
  - 2 fixed bugs.
- Added patch (digikam-3.0.0-rc.no-kdcraw.version-check.patch) to
  temporarily disabled libkdcraw version check (does not work any more)</changelog>
<changelog author="toddrme2178@gmail.com" date="1357387200">- Link rawconverter icon to the hicolor theme so it can be safely
  used as an application icon (needed by kphotoalbum)</changelog>
<changelog author="nico.kruber@gmail.com" date="1360584000">- Update to 3.0.0 (final):
  digikam:
  - General: Remove internal LensFun library code and xml lens
    database. Set only an optional and external
    dependency to last 0.2.6 release.
  - BatchQueueManager: Add new tool to crop image.
  - 51 fixed bugs.
  kipi-plugins:
  - Panorama: New parser using GNU Flex and GNU Bison instead of
    Boost::spirit
  - Panorama: Manual cropping of the final result
  - 10 fixed bugs.
- drop fix-broken-icon-reference.diff (fixed upstream)
- update digikam-3.0.0-rc.no-kdcraw.version-check.patch
  (rename to digikam-3.0.0.no-kdcraw.version-check.patch)</changelog>
<changelog author="wstephenson@suse.com" date="1360756800">- Remove spurious bison/flex dependencies</changelog>
<changelog author="nico.kruber@gmail.com" date="1363176000">- Update to 3.1.0 (bnc#816693):
  digikam:
  - General: Remove internal lqr-1 library code. Set only an
    optional and external dependency.
  - 14 fixed bugs.
  kipi-plugins:
  - 7 fixed bugs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1366027200">- Added patch digikam-patch78541.diff from upstream to fix
  detection of certain cameras (bnc#814622, kde#311393)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1368014400">- Add patch commit-006b3f4.diff from upstream to build
  htmlexport again (bnc#816041)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1368532800">- Update to 3.2.0:
  digikam:
  - General:      Remove internal clapack library code.
    Set only an optional and external dependency to
    eigen3.
  - General:      New tool to Auto-Crop image based on black hole
    borders detection.
  - AlbumGUI:     New "Table-View" view mode dedicated to show
    album items in a list view.
  - AlbumGUI:     New Aspect-Ratio information displayed in
    icon-view and tooltips.
  - AlbumGUI:     New filter based on Aspect-Ratio information.
  - Searches:     New search tool to find images based on
    Aspect-Ratio Information.
  - Searches:     New search tool to find videos based on shot
    properties.
  - 46 fixed bugs.
  kipi-plugins:
  - FacebookExport: add new option to create private album.
  - JAlbumExport:   New too to export items to JAblum
  - 10 fixed bugs.
- Drop patches included upstream: commit-006b3f4.diff and
  digikam-patch78541.diff</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1370088000">- Pass the correct ImageMagick cmake flag for &gt;= 13.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370865600">- Added libeigen3-devel and libkqoauth-devel as build requirements.
- Replaced ImageMagick with ImageMagick-devel as build requirement (since
  "mogrify" is no longer needed to fix the icon sizes).
- Removed support for openSUSE &lt;= 11.4 for KDE:UpdatedApps (not needed).
- Removed support for openSUSE 11.3.
- Fix rawconverter icon links (links were pointing to rawconverter.* instead of
  rawconverter.png or rawconverter.svgz).</changelog>
<changelog author="nico.kruber@gmail.com" date="1375790400">- Update to 3.3.0:
  digikam:
  - Faces Managament: Better management of Picasa Face Tags
    import/export through metadata.
  - Faces Management: New Face Recognition engine based on
    OpenTLD.
  - 37 fixed bugs.
  kipi-plugins:
  - 5 fixed bugs.
- Drop patch included upstream: non-executable-script.patch</changelog>
<changelog author="nico.kruber@gmail.com" date="1375790401">- fix libkface package not named after .so name</changelog>
<changelog author="jslaby@suse.com" date="1376568000">- rajceexport-stop-crashing-when-uploaded-nothing.patch: rajceexport:
  stop crashing when uploaded nothing (bnc#835021)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377691200">- Dropped desktop-files.diff, it's no longer needed and AcquireImages
  is missing it's icon due to it (bnc#835989)</changelog>
<changelog author="dmitry_r@opensuse.org" date="1378468800">- Update to 3.4.0:
  digikam
  - General         : Add interroperabilty with Capture NX about
    Color Labels support.
  - MaintenanceTool : add new options to select Albums and Tags
    to process.
  - MaintenanceTool : add multi-threading and multi-core CPU
    support for Metadata Synchronizer, Thumbs
    Generator, and Fingerprint Generator tools.
  - 9 fixed bugs.</changelog>
<changelog author="nico.kruber@gmail.com" date="1381492800">- Update to 3.5.0:
  digikam:
  - General         : new RAW cameras supported : Richon GR,
    Panasonic LF1, Canon EOS 70D, Sony RX100II,
    Sony RX1R, Olympus E-P5.
  - 5 fixed bugs
    (kde#324349, kde#323648, kde#325111, kde#325264, kde#325309)
  kipi-plugins:
  - Panorama        : Autocrop. Cropping area defaults to the
    maximum inner rectangle of the panorama.
  - 1 fixed bug (kde#324239)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Bump minimal opencv-devel BuildRequires to 2.4.5 as per CMakeLists</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1408449600">- Added flickr_ssl.patch: use SSL URL for flickr,
  kde#336835, bnc#891629</changelog>

</package>
<package pkgid="9361a54efb85e6703dae17b52876b7e1d8d857b4f6e4cb9d4c6862e35d0b6e76" name="digikam" arch="x86_64">
    <version epoch="0" ver="3.5.0" rel="7.3"/>

<changelog author="nico.kruber@gmail.com" date="1353931200">- Update to 3.0.0-beta3:
  digikam:
  - Libkipi:
  * All kipi-plugins actions can be pluged to tools bar.
  * Usability improvements in plugins configuration dialog.
  - Libkdcraw:
  * Update internal Libraw version 0.15.0 Alpha2 to support
    new RAW cameras :
  * Adobe DNG: Fast Load and lossy-compressed DNG
    (LightRoom 4.x)
  * Canon    : G1 X, SX220 HS, EOS 5D Mark III, EOS 650D,
    EOS 1D-X
  * Casio    : EX-Z8
  * Fujifilm : X-S1, HS30EXR, X1-Pro
  * Nikon    : D4, D3200, D800, D800E
  * Olympus  : E-M5
  * Panasonic: DMC-GF5
  * Samsung  : NX20, NX210, NX100, NX-1000
  * Sigma    : SD15,SD1, SD1 Merill, DP1, DP1S, DP1X, DP2,
    DP2S, DP2X
  * Sony     : NEX-F3, SLT-A37, SLT-A57, DSC-RX100
  - ImportUI: Port icon-view to Qt4 model/View.
  - ImportUI: Labels and Tags pre-assignation.
  - ImportUI: Pipelined post download operations.
  - ImportUI: Preview items during downloading.
  - Metadata: Video files metadata support
    (through Exiv2 project).
  - 54 fixed bugs.
  kipi-plugins:
  - General: New tool to export Collection to DLNA device.
  - General: New tool to make video slideshow.
  - General: Port all plugins to KDE XML-GUI framework.
  - 18 fixed bugs.</changelog>
<changelog author="nico.kruber@gmail.com" date="1354017600">- enabled compilation of the VideoSlideshow kipi plugin</changelog>
<changelog author="nico.kruber@gmail.com" date="1357041600">- Update to 3.0.0-rc:
  digikam:
  - General: Add new Noise Estimation feature to Wavelets Noise
    Reduction tools.
  - BatchQueueManager: Add Color Effect tool support.
  - BatchQueueManager: Multicore CPU support to process items
    in parallel.
  - BatchQueueManager: Add Raw Demosaicing settings in Queue
    Qettings.
  - BatchQueueManager: Add new behavior options about RAW file
    loading (extract preview or perform
    demosaicing).
  - BatchQueueManager: Add the capability to assign more than
    one time a tool to a queue.
  - BatchQueueManager: Add the capability to put target file
    processed from queue to source album.
  - BatchQueueManager: Add concept of Workflow dedicated to save
    and restore between sessions Queue Settings
    including Assigned Batch Tools list.
  - 18 fixed bugs.
  kipi-plugins:
  - 2 fixed bugs.
- Added patch (digikam-3.0.0-rc.no-kdcraw.version-check.patch) to
  temporarily disabled libkdcraw version check (does not work any more)</changelog>
<changelog author="toddrme2178@gmail.com" date="1357387200">- Link rawconverter icon to the hicolor theme so it can be safely
  used as an application icon (needed by kphotoalbum)</changelog>
<changelog author="nico.kruber@gmail.com" date="1360584000">- Update to 3.0.0 (final):
  digikam:
  - General: Remove internal LensFun library code and xml lens
    database. Set only an optional and external
    dependency to last 0.2.6 release.
  - BatchQueueManager: Add new tool to crop image.
  - 51 fixed bugs.
  kipi-plugins:
  - Panorama: New parser using GNU Flex and GNU Bison instead of
    Boost::spirit
  - Panorama: Manual cropping of the final result
  - 10 fixed bugs.
- drop fix-broken-icon-reference.diff (fixed upstream)
- update digikam-3.0.0-rc.no-kdcraw.version-check.patch
  (rename to digikam-3.0.0.no-kdcraw.version-check.patch)</changelog>
<changelog author="wstephenson@suse.com" date="1360756800">- Remove spurious bison/flex dependencies</changelog>
<changelog author="nico.kruber@gmail.com" date="1363176000">- Update to 3.1.0 (bnc#816693):
  digikam:
  - General: Remove internal lqr-1 library code. Set only an
    optional and external dependency.
  - 14 fixed bugs.
  kipi-plugins:
  - 7 fixed bugs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1366027200">- Added patch digikam-patch78541.diff from upstream to fix
  detection of certain cameras (bnc#814622, kde#311393)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1368014400">- Add patch commit-006b3f4.diff from upstream to build
  htmlexport again (bnc#816041)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1368532800">- Update to 3.2.0:
  digikam:
  - General:      Remove internal clapack library code.
    Set only an optional and external dependency to
    eigen3.
  - General:      New tool to Auto-Crop image based on black hole
    borders detection.
  - AlbumGUI:     New "Table-View" view mode dedicated to show
    album items in a list view.
  - AlbumGUI:     New Aspect-Ratio information displayed in
    icon-view and tooltips.
  - AlbumGUI:     New filter based on Aspect-Ratio information.
  - Searches:     New search tool to find images based on
    Aspect-Ratio Information.
  - Searches:     New search tool to find videos based on shot
    properties.
  - 46 fixed bugs.
  kipi-plugins:
  - FacebookExport: add new option to create private album.
  - JAlbumExport:   New too to export items to JAblum
  - 10 fixed bugs.
- Drop patches included upstream: commit-006b3f4.diff and
  digikam-patch78541.diff</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1370088000">- Pass the correct ImageMagick cmake flag for &gt;= 13.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370865600">- Added libeigen3-devel and libkqoauth-devel as build requirements.
- Replaced ImageMagick with ImageMagick-devel as build requirement (since
  "mogrify" is no longer needed to fix the icon sizes).
- Removed support for openSUSE &lt;= 11.4 for KDE:UpdatedApps (not needed).
- Removed support for openSUSE 11.3.
- Fix rawconverter icon links (links were pointing to rawconverter.* instead of
  rawconverter.png or rawconverter.svgz).</changelog>
<changelog author="nico.kruber@gmail.com" date="1375790400">- Update to 3.3.0:
  digikam:
  - Faces Managament: Better management of Picasa Face Tags
    import/export through metadata.
  - Faces Management: New Face Recognition engine based on
    OpenTLD.
  - 37 fixed bugs.
  kipi-plugins:
  - 5 fixed bugs.
- Drop patch included upstream: non-executable-script.patch</changelog>
<changelog author="nico.kruber@gmail.com" date="1375790401">- fix libkface package not named after .so name</changelog>
<changelog author="jslaby@suse.com" date="1376568000">- rajceexport-stop-crashing-when-uploaded-nothing.patch: rajceexport:
  stop crashing when uploaded nothing (bnc#835021)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377691200">- Dropped desktop-files.diff, it's no longer needed and AcquireImages
  is missing it's icon due to it (bnc#835989)</changelog>
<changelog author="dmitry_r@opensuse.org" date="1378468800">- Update to 3.4.0:
  digikam
  - General         : Add interroperabilty with Capture NX about
    Color Labels support.
  - MaintenanceTool : add new options to select Albums and Tags
    to process.
  - MaintenanceTool : add multi-threading and multi-core CPU
    support for Metadata Synchronizer, Thumbs
    Generator, and Fingerprint Generator tools.
  - 9 fixed bugs.</changelog>
<changelog author="nico.kruber@gmail.com" date="1381492800">- Update to 3.5.0:
  digikam:
  - General         : new RAW cameras supported : Richon GR,
    Panasonic LF1, Canon EOS 70D, Sony RX100II,
    Sony RX1R, Olympus E-P5.
  - 5 fixed bugs
    (kde#324349, kde#323648, kde#325111, kde#325264, kde#325309)
  kipi-plugins:
  - Panorama        : Autocrop. Cropping area defaults to the
    maximum inner rectangle of the panorama.
  - 1 fixed bug (kde#324239)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Bump minimal opencv-devel BuildRequires to 2.4.5 as per CMakeLists</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1408449600">- Added flickr_ssl.patch: use SSL URL for flickr,
  kde#336835, bnc#891629</changelog>

</package>
<package pkgid="2d80da3305e9a8638fc3be62e149b6081359b03fe3b425fbc3dec7400f8f11a3" name="digikam-doc" arch="noarch">
    <version epoch="0" ver="3.5.0" rel="7.3"/>

<changelog author="nico.kruber@gmail.com" date="1353931200">- Update to 3.0.0-beta3:
  digikam:
  - Libkipi:
  * All kipi-plugins actions can be pluged to tools bar.
  * Usability improvements in plugins configuration dialog.
  - Libkdcraw:
  * Update internal Libraw version 0.15.0 Alpha2 to support
    new RAW cameras :
  * Adobe DNG: Fast Load and lossy-compressed DNG
    (LightRoom 4.x)
  * Canon    : G1 X, SX220 HS, EOS 5D Mark III, EOS 650D,
    EOS 1D-X
  * Casio    : EX-Z8
  * Fujifilm : X-S1, HS30EXR, X1-Pro
  * Nikon    : D4, D3200, D800, D800E
  * Olympus  : E-M5
  * Panasonic: DMC-GF5
  * Samsung  : NX20, NX210, NX100, NX-1000
  * Sigma    : SD15,SD1, SD1 Merill, DP1, DP1S, DP1X, DP2,
    DP2S, DP2X
  * Sony     : NEX-F3, SLT-A37, SLT-A57, DSC-RX100
  - ImportUI: Port icon-view to Qt4 model/View.
  - ImportUI: Labels and Tags pre-assignation.
  - ImportUI: Pipelined post download operations.
  - ImportUI: Preview items during downloading.
  - Metadata: Video files metadata support
    (through Exiv2 project).
  - 54 fixed bugs.
  kipi-plugins:
  - General: New tool to export Collection to DLNA device.
  - General: New tool to make video slideshow.
  - General: Port all plugins to KDE XML-GUI framework.
  - 18 fixed bugs.</changelog>
<changelog author="nico.kruber@gmail.com" date="1354017600">- enabled compilation of the VideoSlideshow kipi plugin</changelog>
<changelog author="nico.kruber@gmail.com" date="1357041600">- Update to 3.0.0-rc:
  digikam:
  - General: Add new Noise Estimation feature to Wavelets Noise
    Reduction tools.
  - BatchQueueManager: Add Color Effect tool support.
  - BatchQueueManager: Multicore CPU support to process items
    in parallel.
  - BatchQueueManager: Add Raw Demosaicing settings in Queue
    Qettings.
  - BatchQueueManager: Add new behavior options about RAW file
    loading (extract preview or perform
    demosaicing).
  - BatchQueueManager: Add the capability to assign more than
    one time a tool to a queue.
  - BatchQueueManager: Add the capability to put target file
    processed from queue to source album.
  - BatchQueueManager: Add concept of Workflow dedicated to save
    and restore between sessions Queue Settings
    including Assigned Batch Tools list.
  - 18 fixed bugs.
  kipi-plugins:
  - 2 fixed bugs.
- Added patch (digikam-3.0.0-rc.no-kdcraw.version-check.patch) to
  temporarily disabled libkdcraw version check (does not work any more)</changelog>
<changelog author="toddrme2178@gmail.com" date="1357387200">- Link rawconverter icon to the hicolor theme so it can be safely
  used as an application icon (needed by kphotoalbum)</changelog>
<changelog author="nico.kruber@gmail.com" date="1360584000">- Update to 3.0.0 (final):
  digikam:
  - General: Remove internal LensFun library code and xml lens
    database. Set only an optional and external
    dependency to last 0.2.6 release.
  - BatchQueueManager: Add new tool to crop image.
  - 51 fixed bugs.
  kipi-plugins:
  - Panorama: New parser using GNU Flex and GNU Bison instead of
    Boost::spirit
  - Panorama: Manual cropping of the final result
  - 10 fixed bugs.
- drop fix-broken-icon-reference.diff (fixed upstream)
- update digikam-3.0.0-rc.no-kdcraw.version-check.patch
  (rename to digikam-3.0.0.no-kdcraw.version-check.patch)</changelog>
<changelog author="wstephenson@suse.com" date="1360756800">- Remove spurious bison/flex dependencies</changelog>
<changelog author="nico.kruber@gmail.com" date="1363176000">- Update to 3.1.0 (bnc#816693):
  digikam:
  - General: Remove internal lqr-1 library code. Set only an
    optional and external dependency.
  - 14 fixed bugs.
  kipi-plugins:
  - 7 fixed bugs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1366027200">- Added patch digikam-patch78541.diff from upstream to fix
  detection of certain cameras (bnc#814622, kde#311393)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1368014400">- Add patch commit-006b3f4.diff from upstream to build
  htmlexport again (bnc#816041)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1368532800">- Update to 3.2.0:
  digikam:
  - General:      Remove internal clapack library code.
    Set only an optional and external dependency to
    eigen3.
  - General:      New tool to Auto-Crop image based on black hole
    borders detection.
  - AlbumGUI:     New "Table-View" view mode dedicated to show
    album items in a list view.
  - AlbumGUI:     New Aspect-Ratio information displayed in
    icon-view and tooltips.
  - AlbumGUI:     New filter based on Aspect-Ratio information.
  - Searches:     New search tool to find images based on
    Aspect-Ratio Information.
  - Searches:     New search tool to find videos based on shot
    properties.
  - 46 fixed bugs.
  kipi-plugins:
  - FacebookExport: add new option to create private album.
  - JAlbumExport:   New too to export items to JAblum
  - 10 fixed bugs.
- Drop patches included upstream: commit-006b3f4.diff and
  digikam-patch78541.diff</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1370088000">- Pass the correct ImageMagick cmake flag for &gt;= 13.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370865600">- Added libeigen3-devel and libkqoauth-devel as build requirements.
- Replaced ImageMagick with ImageMagick-devel as build requirement (since
  "mogrify" is no longer needed to fix the icon sizes).
- Removed support for openSUSE &lt;= 11.4 for KDE:UpdatedApps (not needed).
- Removed support for openSUSE 11.3.
- Fix rawconverter icon links (links were pointing to rawconverter.* instead of
  rawconverter.png or rawconverter.svgz).</changelog>
<changelog author="nico.kruber@gmail.com" date="1375790400">- Update to 3.3.0:
  digikam:
  - Faces Managament: Better management of Picasa Face Tags
    import/export through metadata.
  - Faces Management: New Face Recognition engine based on
    OpenTLD.
  - 37 fixed bugs.
  kipi-plugins:
  - 5 fixed bugs.
- Drop patch included upstream: non-executable-script.patch</changelog>
<changelog author="nico.kruber@gmail.com" date="1375790401">- fix libkface package not named after .so name</changelog>
<changelog author="jslaby@suse.com" date="1376568000">- rajceexport-stop-crashing-when-uploaded-nothing.patch: rajceexport:
  stop crashing when uploaded nothing (bnc#835021)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377691200">- Dropped desktop-files.diff, it's no longer needed and AcquireImages
  is missing it's icon due to it (bnc#835989)</changelog>
<changelog author="dmitry_r@opensuse.org" date="1378468800">- Update to 3.4.0:
  digikam
  - General         : Add interroperabilty with Capture NX about
    Color Labels support.
  - MaintenanceTool : add new options to select Albums and Tags
    to process.
  - MaintenanceTool : add multi-threading and multi-core CPU
    support for Metadata Synchronizer, Thumbs
    Generator, and Fingerprint Generator tools.
  - 9 fixed bugs.</changelog>
<changelog author="nico.kruber@gmail.com" date="1381492800">- Update to 3.5.0:
  digikam:
  - General         : new RAW cameras supported : Richon GR,
    Panasonic LF1, Canon EOS 70D, Sony RX100II,
    Sony RX1R, Olympus E-P5.
  - 5 fixed bugs
    (kde#324349, kde#323648, kde#325111, kde#325264, kde#325309)
  kipi-plugins:
  - Panorama        : Autocrop. Cropping area defaults to the
    maximum inner rectangle of the panorama.
  - 1 fixed bug (kde#324239)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Bump minimal opencv-devel BuildRequires to 2.4.5 as per CMakeLists</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1408449600">- Added flickr_ssl.patch: use SSL URL for flickr,
  kde#336835, bnc#891629</changelog>

</package>
<package pkgid="b35c4caf7c07e7ea1726d44ba67eda7565c4eb85cf3f456a69d9ad23c347f972" name="digikam-lang" arch="noarch">
    <version epoch="0" ver="3.5.0" rel="7.3"/>

<changelog author="nico.kruber@gmail.com" date="1353931200">- Update to 3.0.0-beta3:
  digikam:
  - Libkipi:
  * All kipi-plugins actions can be pluged to tools bar.
  * Usability improvements in plugins configuration dialog.
  - Libkdcraw:
  * Update internal Libraw version 0.15.0 Alpha2 to support
    new RAW cameras :
  * Adobe DNG: Fast Load and lossy-compressed DNG
    (LightRoom 4.x)
  * Canon    : G1 X, SX220 HS, EOS 5D Mark III, EOS 650D,
    EOS 1D-X
  * Casio    : EX-Z8
  * Fujifilm : X-S1, HS30EXR, X1-Pro
  * Nikon    : D4, D3200, D800, D800E
  * Olympus  : E-M5
  * Panasonic: DMC-GF5
  * Samsung  : NX20, NX210, NX100, NX-1000
  * Sigma    : SD15,SD1, SD1 Merill, DP1, DP1S, DP1X, DP2,
    DP2S, DP2X
  * Sony     : NEX-F3, SLT-A37, SLT-A57, DSC-RX100
  - ImportUI: Port icon-view to Qt4 model/View.
  - ImportUI: Labels and Tags pre-assignation.
  - ImportUI: Pipelined post download operations.
  - ImportUI: Preview items during downloading.
  - Metadata: Video files metadata support
    (through Exiv2 project).
  - 54 fixed bugs.
  kipi-plugins:
  - General: New tool to export Collection to DLNA device.
  - General: New tool to make video slideshow.
  - General: Port all plugins to KDE XML-GUI framework.
  - 18 fixed bugs.</changelog>
<changelog author="nico.kruber@gmail.com" date="1354017600">- enabled compilation of the VideoSlideshow kipi plugin</changelog>
<changelog author="nico.kruber@gmail.com" date="1357041600">- Update to 3.0.0-rc:
  digikam:
  - General: Add new Noise Estimation feature to Wavelets Noise
    Reduction tools.
  - BatchQueueManager: Add Color Effect tool support.
  - BatchQueueManager: Multicore CPU support to process items
    in parallel.
  - BatchQueueManager: Add Raw Demosaicing settings in Queue
    Qettings.
  - BatchQueueManager: Add new behavior options about RAW file
    loading (extract preview or perform
    demosaicing).
  - BatchQueueManager: Add the capability to assign more than
    one time a tool to a queue.
  - BatchQueueManager: Add the capability to put target file
    processed from queue to source album.
  - BatchQueueManager: Add concept of Workflow dedicated to save
    and restore between sessions Queue Settings
    including Assigned Batch Tools list.
  - 18 fixed bugs.
  kipi-plugins:
  - 2 fixed bugs.
- Added patch (digikam-3.0.0-rc.no-kdcraw.version-check.patch) to
  temporarily disabled libkdcraw version check (does not work any more)</changelog>
<changelog author="toddrme2178@gmail.com" date="1357387200">- Link rawconverter icon to the hicolor theme so it can be safely
  used as an application icon (needed by kphotoalbum)</changelog>
<changelog author="nico.kruber@gmail.com" date="1360584000">- Update to 3.0.0 (final):
  digikam:
  - General: Remove internal LensFun library code and xml lens
    database. Set only an optional and external
    dependency to last 0.2.6 release.
  - BatchQueueManager: Add new tool to crop image.
  - 51 fixed bugs.
  kipi-plugins:
  - Panorama: New parser using GNU Flex and GNU Bison instead of
    Boost::spirit
  - Panorama: Manual cropping of the final result
  - 10 fixed bugs.
- drop fix-broken-icon-reference.diff (fixed upstream)
- update digikam-3.0.0-rc.no-kdcraw.version-check.patch
  (rename to digikam-3.0.0.no-kdcraw.version-check.patch)</changelog>
<changelog author="wstephenson@suse.com" date="1360756800">- Remove spurious bison/flex dependencies</changelog>
<changelog author="nico.kruber@gmail.com" date="1363176000">- Update to 3.1.0 (bnc#816693):
  digikam:
  - General: Remove internal lqr-1 library code. Set only an
    optional and external dependency.
  - 14 fixed bugs.
  kipi-plugins:
  - 7 fixed bugs.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1366027200">- Added patch digikam-patch78541.diff from upstream to fix
  detection of certain cameras (bnc#814622, kde#311393)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1368014400">- Add patch commit-006b3f4.diff from upstream to build
  htmlexport again (bnc#816041)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1368532800">- Update to 3.2.0:
  digikam:
  - General:      Remove internal clapack library code.
    Set only an optional and external dependency to
    eigen3.
  - General:      New tool to Auto-Crop image based on black hole
    borders detection.
  - AlbumGUI:     New "Table-View" view mode dedicated to show
    album items in a list view.
  - AlbumGUI:     New Aspect-Ratio information displayed in
    icon-view and tooltips.
  - AlbumGUI:     New filter based on Aspect-Ratio information.
  - Searches:     New search tool to find images based on
    Aspect-Ratio Information.
  - Searches:     New search tool to find videos based on shot
    properties.
  - 46 fixed bugs.
  kipi-plugins:
  - FacebookExport: add new option to create private album.
  - JAlbumExport:   New too to export items to JAblum
  - 10 fixed bugs.
- Drop patches included upstream: commit-006b3f4.diff and
  digikam-patch78541.diff</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1370088000">- Pass the correct ImageMagick cmake flag for &gt;= 13.1</changelog>
<changelog author="asterios.dramis@gmail.com" date="1370865600">- Added libeigen3-devel and libkqoauth-devel as build requirements.
- Replaced ImageMagick with ImageMagick-devel as build requirement (since
  "mogrify" is no longer needed to fix the icon sizes).
- Removed support for openSUSE &lt;= 11.4 for KDE:UpdatedApps (not needed).
- Removed support for openSUSE 11.3.
- Fix rawconverter icon links (links were pointing to rawconverter.* instead of
  rawconverter.png or rawconverter.svgz).</changelog>
<changelog author="nico.kruber@gmail.com" date="1375790400">- Update to 3.3.0:
  digikam:
  - Faces Managament: Better management of Picasa Face Tags
    import/export through metadata.
  - Faces Management: New Face Recognition engine based on
    OpenTLD.
  - 37 fixed bugs.
  kipi-plugins:
  - 5 fixed bugs.
- Drop patch included upstream: non-executable-script.patch</changelog>
<changelog author="nico.kruber@gmail.com" date="1375790401">- fix libkface package not named after .so name</changelog>
<changelog author="jslaby@suse.com" date="1376568000">- rajceexport-stop-crashing-when-uploaded-nothing.patch: rajceexport:
  stop crashing when uploaded nothing (bnc#835021)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377691200">- Dropped desktop-files.diff, it's no longer needed and AcquireImages
  is missing it's icon due to it (bnc#835989)</changelog>
<changelog author="dmitry_r@opensuse.org" date="1378468800">- Update to 3.4.0:
  digikam
  - General         : Add interroperabilty with Capture NX about
    Color Labels support.
  - MaintenanceTool : add new options to select Albums and Tags
    to process.
  - MaintenanceTool : add multi-threading and multi-core CPU
    support for Metadata Synchronizer, Thumbs
    Generator, and Fingerprint Generator tools.
  - 9 fixed bugs.</changelog>
<changelog author="nico.kruber@gmail.com" date="1381492800">- Update to 3.5.0:
  digikam:
  - General         : new RAW cameras supported : Richon GR,
    Panasonic LF1, Canon EOS 70D, Sony RX100II,
    Sony RX1R, Olympus E-P5.
  - 5 fixed bugs
    (kde#324349, kde#323648, kde#325111, kde#325264, kde#325309)
  kipi-plugins:
  - Panorama        : Autocrop. Cropping area defaults to the
    maximum inner rectangle of the panorama.
  - 1 fixed bug (kde#324239)</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1382097600">- Bump minimal opencv-devel BuildRequires to 2.4.5 as per CMakeLists</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1408449600">- Added flickr_ssl.patch: use SSL URL for flickr,
  kde#336835, bnc#891629</changelog>

</package>
<package pkgid="d695a0995715c6d44ae74b2aee75454de9437b63db9a802b3cd390724a5b2bc3" name="dirac" arch="i586">
    <version epoch="0" ver="1.0.2" rel="27.4.1"/>

<changelog author="sbrabec@suse.cz" date="1241006400">- Worked around internal compiler error on 11.0-x86_64.</changelog>
<changelog author="sbrabec@suse.cz" date="1246449600">- Updated to version 1.0.2:
  * minor release complying with the latest Dirac Bytestream
    Specification 2.2.3.
  * Improved compression performance for small picture sizes.
  * Improved compression performance at low bit-rates.
  * Included macros to check the API version.
  * Improved motion estimation.
  * New 422 &lt;-&gt; 420 conversion utilities for interlaced video.
  * New functionality added to encoder API.
  * Fixed bugs in handling DC subband.</changelog>
<changelog author="coolo@novell.com" date="1247400000">- fix build in disabling as-needed</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- exclude valgrind-devel on SPARC</changelog>
<changelog author="davejplater@gmail.com" date="1273406400">- Fixed factory build with patch from git dirac-1.0.2-gcc45.patch</changelog>
<changelog author="davejplater@gmail.com" date="1274702400">- Added Provides: and Obsoletes: for packman libdirac-devel
- Included patch from dirac git to fix uninitialised memory read
  that causes the encoder to crash when using non-overlapping blocks.</changelog>
<changelog author="davejplater@gmail.com" date="1274702401">- Split off doc subpackage</changelog>
<changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add dirac-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
<changelog author="ro@suse.de" date="1356004800">- buildrequire pkg-config regardless of build-architecture</changelog>
<changelog author="adrian@suse.de" date="1385553600">- fix build for aarch64, no valgrind there</changelog>

</package>
<package pkgid="b337dfa2adb88ff2124565a00aebcc7792e2459f958734bea9ea44a7a432c6e9" name="dirac" arch="src">
    <version epoch="0" ver="1.0.2" rel="27.4.1"/>

<changelog author="sbrabec@suse.cz" date="1225972800">- New SuSE package (bnc#441855).</changelog>
<changelog author="ro@suse.de" date="1227614400">- do not buildrequire valgrind on ia64 s390 s390x
  (does not exist on these platforms)</changelog>
<changelog author="sbrabec@suse.cz" date="1241006400">- Worked around internal compiler error on 11.0-x86_64.</changelog>
<changelog author="sbrabec@suse.cz" date="1246449600">- Updated to version 1.0.2:
  * minor release complying with the latest Dirac Bytestream
    Specification 2.2.3.
  * Improved compression performance for small picture sizes.
  * Improved compression performance at low bit-rates.
  * Included macros to check the API version.
  * Improved motion estimation.
  * New 422 &lt;-&gt; 420 conversion utilities for interlaced video.
  * New functionality added to encoder API.
  * Fixed bugs in handling DC subband.</changelog>
<changelog author="coolo@novell.com" date="1247400000">- fix build in disabling as-needed</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- exclude valgrind-devel on SPARC</changelog>
<changelog author="davejplater@gmail.com" date="1273406400">- Fixed factory build with patch from git dirac-1.0.2-gcc45.patch</changelog>
<changelog author="davejplater@gmail.com" date="1274702400">- Added Provides: and Obsoletes: for packman libdirac-devel
- Included patch from dirac git to fix uninitialised memory read
  that causes the encoder to crash when using non-overlapping blocks.</changelog>
<changelog author="davejplater@gmail.com" date="1274702401">- Split off doc subpackage</changelog>
<changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add dirac-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
<changelog author="ro@suse.de" date="1356004800">- buildrequire pkg-config regardless of build-architecture</changelog>
<changelog author="adrian@suse.de" date="1385553600">- fix build for aarch64, no valgrind there</changelog>

</package>
<package pkgid="f7ae8eba647e8799ba50cf14d0547789eecd8b3b920331ac5333211dd3ed7596" name="dirac" arch="x86_64">
    <version epoch="0" ver="1.0.2" rel="27.4.1"/>

<changelog author="sbrabec@suse.cz" date="1241006400">- Worked around internal compiler error on 11.0-x86_64.</changelog>
<changelog author="sbrabec@suse.cz" date="1246449600">- Updated to version 1.0.2:
  * minor release complying with the latest Dirac Bytestream
    Specification 2.2.3.
  * Improved compression performance for small picture sizes.
  * Improved compression performance at low bit-rates.
  * Included macros to check the API version.
  * Improved motion estimation.
  * New 422 &lt;-&gt; 420 conversion utilities for interlaced video.
  * New functionality added to encoder API.
  * Fixed bugs in handling DC subband.</changelog>
<changelog author="coolo@novell.com" date="1247400000">- fix build in disabling as-needed</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- exclude valgrind-devel on SPARC</changelog>
<changelog author="davejplater@gmail.com" date="1273406400">- Fixed factory build with patch from git dirac-1.0.2-gcc45.patch</changelog>
<changelog author="davejplater@gmail.com" date="1274702400">- Added Provides: and Obsoletes: for packman libdirac-devel
- Included patch from dirac git to fix uninitialised memory read
  that causes the encoder to crash when using non-overlapping blocks.</changelog>
<changelog author="davejplater@gmail.com" date="1274702401">- Split off doc subpackage</changelog>
<changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add dirac-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
<changelog author="ro@suse.de" date="1356004800">- buildrequire pkg-config regardless of build-architecture</changelog>
<changelog author="adrian@suse.de" date="1385553600">- fix build for aarch64, no valgrind there</changelog>

</package>
<package pkgid="53c0ac3336b48cfd1df261e94e36c86586e0c1bceb734d1d6345ab70a06248bd" name="dirac-devel" arch="i586">
    <version epoch="0" ver="1.0.2" rel="27.4.1"/>

<changelog author="sbrabec@suse.cz" date="1241006400">- Worked around internal compiler error on 11.0-x86_64.</changelog>
<changelog author="sbrabec@suse.cz" date="1246449600">- Updated to version 1.0.2:
  * minor release complying with the latest Dirac Bytestream
    Specification 2.2.3.
  * Improved compression performance for small picture sizes.
  * Improved compression performance at low bit-rates.
  * Included macros to check the API version.
  * Improved motion estimation.
  * New 422 &lt;-&gt; 420 conversion utilities for interlaced video.
  * New functionality added to encoder API.
  * Fixed bugs in handling DC subband.</changelog>
<changelog author="coolo@novell.com" date="1247400000">- fix build in disabling as-needed</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- exclude valgrind-devel on SPARC</changelog>
<changelog author="davejplater@gmail.com" date="1273406400">- Fixed factory build with patch from git dirac-1.0.2-gcc45.patch</changelog>
<changelog author="davejplater@gmail.com" date="1274702400">- Added Provides: and Obsoletes: for packman libdirac-devel
- Included patch from dirac git to fix uninitialised memory read
  that causes the encoder to crash when using non-overlapping blocks.</changelog>
<changelog author="davejplater@gmail.com" date="1274702401">- Split off doc subpackage</changelog>
<changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add dirac-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
<changelog author="ro@suse.de" date="1356004800">- buildrequire pkg-config regardless of build-architecture</changelog>
<changelog author="adrian@suse.de" date="1385553600">- fix build for aarch64, no valgrind there</changelog>

</package>
<package pkgid="bbe9e08f04b4e70238a99799e62bdaf503a38218db360276d605066db2a82ce0" name="dirac-devel" arch="x86_64">
    <version epoch="0" ver="1.0.2" rel="27.4.1"/>

<changelog author="sbrabec@suse.cz" date="1241006400">- Worked around internal compiler error on 11.0-x86_64.</changelog>
<changelog author="sbrabec@suse.cz" date="1246449600">- Updated to version 1.0.2:
  * minor release complying with the latest Dirac Bytestream
    Specification 2.2.3.
  * Improved compression performance for small picture sizes.
  * Improved compression performance at low bit-rates.
  * Included macros to check the API version.
  * Improved motion estimation.
  * New 422 &lt;-&gt; 420 conversion utilities for interlaced video.
  * New functionality added to encoder API.
  * Fixed bugs in handling DC subband.</changelog>
<changelog author="coolo@novell.com" date="1247400000">- fix build in disabling as-needed</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- exclude valgrind-devel on SPARC</changelog>
<changelog author="davejplater@gmail.com" date="1273406400">- Fixed factory build with patch from git dirac-1.0.2-gcc45.patch</changelog>
<changelog author="davejplater@gmail.com" date="1274702400">- Added Provides: and Obsoletes: for packman libdirac-devel
- Included patch from dirac git to fix uninitialised memory read
  that causes the encoder to crash when using non-overlapping blocks.</changelog>
<changelog author="davejplater@gmail.com" date="1274702401">- Split off doc subpackage</changelog>
<changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add dirac-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
<changelog author="ro@suse.de" date="1356004800">- buildrequire pkg-config regardless of build-architecture</changelog>
<changelog author="adrian@suse.de" date="1385553600">- fix build for aarch64, no valgrind there</changelog>

</package>
<package pkgid="48e2406650e249e63dc760da54346e3e073067ba65d7e1e9ccd351d216b47228" name="dirac-devel-32bit" arch="x86_64">
    <version epoch="0" ver="1.0.2" rel="27.4.1"/>

<changelog author="sbrabec@suse.cz" date="1241006400">- Worked around internal compiler error on 11.0-x86_64.</changelog>
<changelog author="sbrabec@suse.cz" date="1246449600">- Updated to version 1.0.2:
  * minor release complying with the latest Dirac Bytestream
    Specification 2.2.3.
  * Improved compression performance for small picture sizes.
  * Improved compression performance at low bit-rates.
  * Included macros to check the API version.
  * Improved motion estimation.
  * New 422 &lt;-&gt; 420 conversion utilities for interlaced video.
  * New functionality added to encoder API.
  * Fixed bugs in handling DC subband.</changelog>
<changelog author="coolo@novell.com" date="1247400000">- fix build in disabling as-needed</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- exclude valgrind-devel on SPARC</changelog>
<changelog author="davejplater@gmail.com" date="1273406400">- Fixed factory build with patch from git dirac-1.0.2-gcc45.patch</changelog>
<changelog author="davejplater@gmail.com" date="1274702400">- Added Provides: and Obsoletes: for packman libdirac-devel
- Included patch from dirac git to fix uninitialised memory read
  that causes the encoder to crash when using non-overlapping blocks.</changelog>
<changelog author="davejplater@gmail.com" date="1274702401">- Split off doc subpackage</changelog>
<changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add dirac-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
<changelog author="ro@suse.de" date="1356004800">- buildrequire pkg-config regardless of build-architecture</changelog>
<changelog author="adrian@suse.de" date="1385553600">- fix build for aarch64, no valgrind there</changelog>

</package>
<package pkgid="41f3feb0035407c617f1144dc75a8c4e05844d832866376fd579ceb1988c7e69" name="dirac-doc" arch="noarch">
    <version epoch="0" ver="1.0.2" rel="27.4.1"/>

<changelog author="sbrabec@suse.cz" date="1241006400">- Worked around internal compiler error on 11.0-x86_64.</changelog>
<changelog author="sbrabec@suse.cz" date="1246449600">- Updated to version 1.0.2:
  * minor release complying with the latest Dirac Bytestream
    Specification 2.2.3.
  * Improved compression performance for small picture sizes.
  * Improved compression performance at low bit-rates.
  * Included macros to check the API version.
  * Improved motion estimation.
  * New 422 &lt;-&gt; 420 conversion utilities for interlaced video.
  * New functionality added to encoder API.
  * Fixed bugs in handling DC subband.</changelog>
<changelog author="coolo@novell.com" date="1247400000">- fix build in disabling as-needed</changelog>
<changelog author="jengelh@medozas.de" date="1261137600">- exclude valgrind-devel on SPARC</changelog>
<changelog author="davejplater@gmail.com" date="1273406400">- Fixed factory build with patch from git dirac-1.0.2-gcc45.patch</changelog>
<changelog author="davejplater@gmail.com" date="1274702400">- Added Provides: and Obsoletes: for packman libdirac-devel
- Included patch from dirac git to fix uninitialised memory read
  that causes the encoder to crash when using non-overlapping blocks.</changelog>
<changelog author="davejplater@gmail.com" date="1274702401">- Split off doc subpackage</changelog>
<changelog author="toddrme2178@gmail.com" date="1302782400">- added 32bit compatibility libraries</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build
- Add dirac-devel to baselibs</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="coolo@suse.com" date="1323432000">- fix license to be in spdx.org format</changelog>
<changelog author="ro@suse.de" date="1356004800">- buildrequire pkg-config regardless of build-architecture</changelog>
<changelog author="adrian@suse.de" date="1385553600">- fix build for aarch64, no valgrind there</changelog>

</package>
<package pkgid="ea4ad7c0be7e0f25cdf86268db1452b5b7fa92171e23eedbf3cc1ac1d99260ec" name="dnsmasq" arch="i586">
    <version epoch="0" ver="2.65" rel="7.3.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322136000">- Add systemd startup script</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322136001">- Must be of type forking and change uid to dnsmasq</changelog>
<changelog author="ug@suse.de" date="1322222400">- removed systemd config for pre-12.1</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326888000">- dnsmasq has dbus support, use it for systemd service.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326974400">- --enable-dbus must be explicit in systemd unit
- default user is provided in config file or takes defaults on
  group_and_isc.diff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328529600">- Use systemd macros correctly
- build with PIE and full RELRO.</changelog>
<changelog author="ug@suse.de" date="1328702400">- added correct group for tftp
  (bnc#738905)</changelog>
<changelog author="ug@suse.de" date="1331035200">- some dhcp fixes
- Add Lua integration
- Set TOS on DHCP sockets
- Improve start-up speed when reading large hosts files
- Fix problem if dnsmasq is started without the stdin
- Allow the TFP server or boot server in --pxe-service
- Support DHCPv6. Support is there for the sort of things
  the existing v4 server does, including tags, options,
  static addresses and relay support
- Support IPv6 router advertisements
- Fix long-standing wrinkle with --localise-queries that
  could result in wrong answers when DNS packets arrive
  via an interface other than the expected one
- 2.60</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1335700800">- update to 2.61:
  * add ra-names, ra-stateless and slaac keywords for DHCPv6: dnsmasq can now
    synthesise AAAA records for dual-stack hosts which get IPv6 addresses via
    SLAAC; it is also now possible to use SLAAC and stateless DHCPv6, and to
    tell clients to use SLAAC addresses as well as DHCP ones
  * add --dhcp-duid to allow DUID-EN uids to be used
  * explicity send DHCPv6 replies to the correct port, instead of relying on
    clients to send requests with the correct source address, since at least
    one client in the wild gets this wrong
  * send a preference value of 255 in DHCPv6 replies when --dhcp-authoritative
    is in effect: his tells clients not to wait around for other DHCP servers
  * better logging of DHCPv6 options
  * add --host-record
  * invoke the DHCP script with action "tftp" when a TFTP file transfer
    completes: the size of the file, address to which it was sent and complete
    pathname are supplied; note that version 2.60 introduced some script
    incompatibilties associated with DHCPv6, and this is a further change; to
    be safe, scripts should ignore unknown actions, and if not IPv6-aware,
    should exit if the environment variable DNSMASQ_IAID is set; the use-case
    for this is to track netboot/install
  * update contrib/port-forward/dnsmasq-portforward to reflect the above
  * set the environment variable DNSMASQ_LOG_DHCP when running the script id
  - -log-dhcp is in effect, so that script can taylor their logging verbosity
  * arrange that addresses specified with --listen-address work even if there
    is no interface carrying the address; this is chiefly useful for IPv4
    loopback addresses, where any address in 127.0.0.0/8 is a valid loopback
    address, but normally only 127.0.0.1 appears on the lo interface
  * fix crash, introduced in 2.60, when a DHCPINFORM is received from a network
    which has no valid dhcp-range
  * add a new DHCP lease time keyword, "deprecated" for --dhcp-range: this is
    only valid for IPv6, and sets the preffered lease time for both DHCP and RA
    to zero; the effect is that clients can continue to use the address for
    existing connections, but new connections will use other addresses, if they
    exist; this makes hitless renumbering at least possible
  * fix bug in address6_available() which caused DHCPv6 lease aquistion to fail
    if more than one dhcp-range in use
  * provide RDNSS and DNSSL data in router advertisements, using the settings
    provided for DHCP options option6:domain-search and option6:dns-server
  * don't cache data from non-recursive nameservers, since it may erroneously
    look like a valid CNAME to a non-exitant name
  * call SO_BINDTODEVICE on the DHCP socket(s) when doing DHCP on exacly one
    interface and --bind-interfaces is set; this makes the OpenStack use-case
    of one dnsmasq per virtual interface work
  * give correct from-cache answers to explict CNAME queries
  * add --tftp-lowercase option
  * ensure that the DBus DhcpLeaseUpdated events are generated when a lease
    goes through INIT_REBOOT state, even if the dhcp-script is not in use</changelog>
<changelog author="crrodriguez@opensuse.org" date="1340452800">- The default cache size is way too small (150 entries) use a sane
  default of 2000 as used in *WRT embeeded routers which is still
  very conservative for a desktop/server machine.
- use async logging</changelog>
<changelog author="crrodriguez@opensuse.org" date="1340539200">- Update to version 2.62, misc bugfixes
- Fix CFLAGS/LDFLAGS usage
- fix the small cache size problem in a different way by tweaking
  the build config instead.</changelog>
<changelog author="cfarrell@suse.com" date="1349352000">- license update: GPL-2.0
  Most of the source code files give a choice of either GPL-2.0 or GPL-3.0
  (not GPL-2.0+). The website states that the COPYING file in the
  distribution is the official license - in this case it is GPL-2.0. This
  is consistent with what Fedora state about the package. Accordingly, I^d
  be ok with License: GPL-2.0 or License: (GPL-2.0 or GPL-3.0) but not
  License: GPL-2.0+</changelog>
<changelog author="toganm@opensuse.org" date="1355486400">- Update to version 2.65. For other changes relating to other
  versions in between please see the  CHANGELOG
  * Fix regression which broke forwarding orgf queries sent via
    TCP which are not for A and AAAA and which were directed to
    non-default servers. Thanks to Niax for the bug reportst.
    Fix failure to build with DHCP support excluded. Thanks to
    Gustavo Zacarias for the patch.
    Fix nasty regression in 27.64 which completely broke cacheing.
- renamed group_and_isc.diff to group_and_isc.patch rebasinp to -p1
  level as outlined in the documentation at
  http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines</changelog>
<changelog author="rmilasan@suse.com" date="1361534400">- Install dnsmasq.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="vuntz@suse.com" date="1363089600">- Create a utils subpackage to include DHCP lease management utils
  (that are living in contrib/wrt):
  + Explicitly build them in %build and install the files in
    %install.
  + Summary and description of the new subpackage are taken from
    Fedora.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364990400">- remove all sysvinit support</changelog>
<changelog author="coolo@suse.com" date="1365854400">- sync /srv/tftpboot directory attributes with atftp package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1366459200">- Do not order after syslog.target which it is neither
  required not recommended and currently no longer even exists.</changelog>
<changelog author="meissner@suse.com" date="1366632000">- reintroduced /sbin/rcdnsmasq as /sbin/service link.</changelog>
<changelog author="max@suse.com" date="1430222400">- Fix unchecked return value of the setup_reply() function
  (bsc#928867, CVE-2015-3294).</changelog>

</package>
<package pkgid="12efa831ff40578c2571ec3addda2d41711081498967c1dadbcf1ef26c9b1050" name="dnsmasq" arch="src">
    <version epoch="0" ver="2.65" rel="7.3.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322136000">- Add systemd startup script</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322136001">- Must be of type forking and change uid to dnsmasq</changelog>
<changelog author="ug@suse.de" date="1322222400">- removed systemd config for pre-12.1</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326888000">- dnsmasq has dbus support, use it for systemd service.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326974400">- --enable-dbus must be explicit in systemd unit
- default user is provided in config file or takes defaults on
  group_and_isc.diff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328529600">- Use systemd macros correctly
- build with PIE and full RELRO.</changelog>
<changelog author="ug@suse.de" date="1328702400">- added correct group for tftp
  (bnc#738905)</changelog>
<changelog author="ug@suse.de" date="1331035200">- some dhcp fixes
- Add Lua integration
- Set TOS on DHCP sockets
- Improve start-up speed when reading large hosts files
- Fix problem if dnsmasq is started without the stdin
- Allow the TFP server or boot server in --pxe-service
- Support DHCPv6. Support is there for the sort of things
  the existing v4 server does, including tags, options,
  static addresses and relay support
- Support IPv6 router advertisements
- Fix long-standing wrinkle with --localise-queries that
  could result in wrong answers when DNS packets arrive
  via an interface other than the expected one
- 2.60</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1335700800">- update to 2.61:
  * add ra-names, ra-stateless and slaac keywords for DHCPv6: dnsmasq can now
    synthesise AAAA records for dual-stack hosts which get IPv6 addresses via
    SLAAC; it is also now possible to use SLAAC and stateless DHCPv6, and to
    tell clients to use SLAAC addresses as well as DHCP ones
  * add --dhcp-duid to allow DUID-EN uids to be used
  * explicity send DHCPv6 replies to the correct port, instead of relying on
    clients to send requests with the correct source address, since at least
    one client in the wild gets this wrong
  * send a preference value of 255 in DHCPv6 replies when --dhcp-authoritative
    is in effect: his tells clients not to wait around for other DHCP servers
  * better logging of DHCPv6 options
  * add --host-record
  * invoke the DHCP script with action "tftp" when a TFTP file transfer
    completes: the size of the file, address to which it was sent and complete
    pathname are supplied; note that version 2.60 introduced some script
    incompatibilties associated with DHCPv6, and this is a further change; to
    be safe, scripts should ignore unknown actions, and if not IPv6-aware,
    should exit if the environment variable DNSMASQ_IAID is set; the use-case
    for this is to track netboot/install
  * update contrib/port-forward/dnsmasq-portforward to reflect the above
  * set the environment variable DNSMASQ_LOG_DHCP when running the script id
  - -log-dhcp is in effect, so that script can taylor their logging verbosity
  * arrange that addresses specified with --listen-address work even if there
    is no interface carrying the address; this is chiefly useful for IPv4
    loopback addresses, where any address in 127.0.0.0/8 is a valid loopback
    address, but normally only 127.0.0.1 appears on the lo interface
  * fix crash, introduced in 2.60, when a DHCPINFORM is received from a network
    which has no valid dhcp-range
  * add a new DHCP lease time keyword, "deprecated" for --dhcp-range: this is
    only valid for IPv6, and sets the preffered lease time for both DHCP and RA
    to zero; the effect is that clients can continue to use the address for
    existing connections, but new connections will use other addresses, if they
    exist; this makes hitless renumbering at least possible
  * fix bug in address6_available() which caused DHCPv6 lease aquistion to fail
    if more than one dhcp-range in use
  * provide RDNSS and DNSSL data in router advertisements, using the settings
    provided for DHCP options option6:domain-search and option6:dns-server
  * don't cache data from non-recursive nameservers, since it may erroneously
    look like a valid CNAME to a non-exitant name
  * call SO_BINDTODEVICE on the DHCP socket(s) when doing DHCP on exacly one
    interface and --bind-interfaces is set; this makes the OpenStack use-case
    of one dnsmasq per virtual interface work
  * give correct from-cache answers to explict CNAME queries
  * add --tftp-lowercase option
  * ensure that the DBus DhcpLeaseUpdated events are generated when a lease
    goes through INIT_REBOOT state, even if the dhcp-script is not in use</changelog>
<changelog author="crrodriguez@opensuse.org" date="1340452800">- The default cache size is way too small (150 entries) use a sane
  default of 2000 as used in *WRT embeeded routers which is still
  very conservative for a desktop/server machine.
- use async logging</changelog>
<changelog author="crrodriguez@opensuse.org" date="1340539200">- Update to version 2.62, misc bugfixes
- Fix CFLAGS/LDFLAGS usage
- fix the small cache size problem in a different way by tweaking
  the build config instead.</changelog>
<changelog author="cfarrell@suse.com" date="1349352000">- license update: GPL-2.0
  Most of the source code files give a choice of either GPL-2.0 or GPL-3.0
  (not GPL-2.0+). The website states that the COPYING file in the
  distribution is the official license - in this case it is GPL-2.0. This
  is consistent with what Fedora state about the package. Accordingly, I^d
  be ok with License: GPL-2.0 or License: (GPL-2.0 or GPL-3.0) but not
  License: GPL-2.0+</changelog>
<changelog author="toganm@opensuse.org" date="1355486400">- Update to version 2.65. For other changes relating to other
  versions in between please see the  CHANGELOG
  * Fix regression which broke forwarding orgf queries sent via
    TCP which are not for A and AAAA and which were directed to
    non-default servers. Thanks to Niax for the bug reportst.
    Fix failure to build with DHCP support excluded. Thanks to
    Gustavo Zacarias for the patch.
    Fix nasty regression in 27.64 which completely broke cacheing.
- renamed group_and_isc.diff to group_and_isc.patch rebasinp to -p1
  level as outlined in the documentation at
  http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines</changelog>
<changelog author="rmilasan@suse.com" date="1361534400">- Install dnsmasq.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="vuntz@suse.com" date="1363089600">- Create a utils subpackage to include DHCP lease management utils
  (that are living in contrib/wrt):
  + Explicitly build them in %build and install the files in
    %install.
  + Summary and description of the new subpackage are taken from
    Fedora.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364990400">- remove all sysvinit support</changelog>
<changelog author="coolo@suse.com" date="1365854400">- sync /srv/tftpboot directory attributes with atftp package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1366459200">- Do not order after syslog.target which it is neither
  required not recommended and currently no longer even exists.</changelog>
<changelog author="meissner@suse.com" date="1366632000">- reintroduced /sbin/rcdnsmasq as /sbin/service link.</changelog>
<changelog author="max@suse.com" date="1430222400">- Fix unchecked return value of the setup_reply() function
  (bsc#928867, CVE-2015-3294).</changelog>

</package>
<package pkgid="f1d067fd8939a8c778a436cf435b676904729ed251561bbb82e9fa1924134876" name="dnsmasq" arch="x86_64">
    <version epoch="0" ver="2.65" rel="7.3.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322136000">- Add systemd startup script</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322136001">- Must be of type forking and change uid to dnsmasq</changelog>
<changelog author="ug@suse.de" date="1322222400">- removed systemd config for pre-12.1</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326888000">- dnsmasq has dbus support, use it for systemd service.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326974400">- --enable-dbus must be explicit in systemd unit
- default user is provided in config file or takes defaults on
  group_and_isc.diff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328529600">- Use systemd macros correctly
- build with PIE and full RELRO.</changelog>
<changelog author="ug@suse.de" date="1328702400">- added correct group for tftp
  (bnc#738905)</changelog>
<changelog author="ug@suse.de" date="1331035200">- some dhcp fixes
- Add Lua integration
- Set TOS on DHCP sockets
- Improve start-up speed when reading large hosts files
- Fix problem if dnsmasq is started without the stdin
- Allow the TFP server or boot server in --pxe-service
- Support DHCPv6. Support is there for the sort of things
  the existing v4 server does, including tags, options,
  static addresses and relay support
- Support IPv6 router advertisements
- Fix long-standing wrinkle with --localise-queries that
  could result in wrong answers when DNS packets arrive
  via an interface other than the expected one
- 2.60</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1335700800">- update to 2.61:
  * add ra-names, ra-stateless and slaac keywords for DHCPv6: dnsmasq can now
    synthesise AAAA records for dual-stack hosts which get IPv6 addresses via
    SLAAC; it is also now possible to use SLAAC and stateless DHCPv6, and to
    tell clients to use SLAAC addresses as well as DHCP ones
  * add --dhcp-duid to allow DUID-EN uids to be used
  * explicity send DHCPv6 replies to the correct port, instead of relying on
    clients to send requests with the correct source address, since at least
    one client in the wild gets this wrong
  * send a preference value of 255 in DHCPv6 replies when --dhcp-authoritative
    is in effect: his tells clients not to wait around for other DHCP servers
  * better logging of DHCPv6 options
  * add --host-record
  * invoke the DHCP script with action "tftp" when a TFTP file transfer
    completes: the size of the file, address to which it was sent and complete
    pathname are supplied; note that version 2.60 introduced some script
    incompatibilties associated with DHCPv6, and this is a further change; to
    be safe, scripts should ignore unknown actions, and if not IPv6-aware,
    should exit if the environment variable DNSMASQ_IAID is set; the use-case
    for this is to track netboot/install
  * update contrib/port-forward/dnsmasq-portforward to reflect the above
  * set the environment variable DNSMASQ_LOG_DHCP when running the script id
  - -log-dhcp is in effect, so that script can taylor their logging verbosity
  * arrange that addresses specified with --listen-address work even if there
    is no interface carrying the address; this is chiefly useful for IPv4
    loopback addresses, where any address in 127.0.0.0/8 is a valid loopback
    address, but normally only 127.0.0.1 appears on the lo interface
  * fix crash, introduced in 2.60, when a DHCPINFORM is received from a network
    which has no valid dhcp-range
  * add a new DHCP lease time keyword, "deprecated" for --dhcp-range: this is
    only valid for IPv6, and sets the preffered lease time for both DHCP and RA
    to zero; the effect is that clients can continue to use the address for
    existing connections, but new connections will use other addresses, if they
    exist; this makes hitless renumbering at least possible
  * fix bug in address6_available() which caused DHCPv6 lease aquistion to fail
    if more than one dhcp-range in use
  * provide RDNSS and DNSSL data in router advertisements, using the settings
    provided for DHCP options option6:domain-search and option6:dns-server
  * don't cache data from non-recursive nameservers, since it may erroneously
    look like a valid CNAME to a non-exitant name
  * call SO_BINDTODEVICE on the DHCP socket(s) when doing DHCP on exacly one
    interface and --bind-interfaces is set; this makes the OpenStack use-case
    of one dnsmasq per virtual interface work
  * give correct from-cache answers to explict CNAME queries
  * add --tftp-lowercase option
  * ensure that the DBus DhcpLeaseUpdated events are generated when a lease
    goes through INIT_REBOOT state, even if the dhcp-script is not in use</changelog>
<changelog author="crrodriguez@opensuse.org" date="1340452800">- The default cache size is way too small (150 entries) use a sane
  default of 2000 as used in *WRT embeeded routers which is still
  very conservative for a desktop/server machine.
- use async logging</changelog>
<changelog author="crrodriguez@opensuse.org" date="1340539200">- Update to version 2.62, misc bugfixes
- Fix CFLAGS/LDFLAGS usage
- fix the small cache size problem in a different way by tweaking
  the build config instead.</changelog>
<changelog author="cfarrell@suse.com" date="1349352000">- license update: GPL-2.0
  Most of the source code files give a choice of either GPL-2.0 or GPL-3.0
  (not GPL-2.0+). The website states that the COPYING file in the
  distribution is the official license - in this case it is GPL-2.0. This
  is consistent with what Fedora state about the package. Accordingly, I^d
  be ok with License: GPL-2.0 or License: (GPL-2.0 or GPL-3.0) but not
  License: GPL-2.0+</changelog>
<changelog author="toganm@opensuse.org" date="1355486400">- Update to version 2.65. For other changes relating to other
  versions in between please see the  CHANGELOG
  * Fix regression which broke forwarding orgf queries sent via
    TCP which are not for A and AAAA and which were directed to
    non-default servers. Thanks to Niax for the bug reportst.
    Fix failure to build with DHCP support excluded. Thanks to
    Gustavo Zacarias for the patch.
    Fix nasty regression in 27.64 which completely broke cacheing.
- renamed group_and_isc.diff to group_and_isc.patch rebasinp to -p1
  level as outlined in the documentation at
  http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines</changelog>
<changelog author="rmilasan@suse.com" date="1361534400">- Install dnsmasq.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="vuntz@suse.com" date="1363089600">- Create a utils subpackage to include DHCP lease management utils
  (that are living in contrib/wrt):
  + Explicitly build them in %build and install the files in
    %install.
  + Summary and description of the new subpackage are taken from
    Fedora.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364990400">- remove all sysvinit support</changelog>
<changelog author="coolo@suse.com" date="1365854400">- sync /srv/tftpboot directory attributes with atftp package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1366459200">- Do not order after syslog.target which it is neither
  required not recommended and currently no longer even exists.</changelog>
<changelog author="meissner@suse.com" date="1366632000">- reintroduced /sbin/rcdnsmasq as /sbin/service link.</changelog>
<changelog author="max@suse.com" date="1430222400">- Fix unchecked return value of the setup_reply() function
  (bsc#928867, CVE-2015-3294).</changelog>

</package>
<package pkgid="f4ea9ce96383380350144b57cc12e8da6425c59557a1bd38b15f4af1b38fdbcd" name="dnsmasq-utils" arch="i586">
    <version epoch="0" ver="2.65" rel="7.3.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322136000">- Add systemd startup script</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322136001">- Must be of type forking and change uid to dnsmasq</changelog>
<changelog author="ug@suse.de" date="1322222400">- removed systemd config for pre-12.1</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326888000">- dnsmasq has dbus support, use it for systemd service.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326974400">- --enable-dbus must be explicit in systemd unit
- default user is provided in config file or takes defaults on
  group_and_isc.diff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328529600">- Use systemd macros correctly
- build with PIE and full RELRO.</changelog>
<changelog author="ug@suse.de" date="1328702400">- added correct group for tftp
  (bnc#738905)</changelog>
<changelog author="ug@suse.de" date="1331035200">- some dhcp fixes
- Add Lua integration
- Set TOS on DHCP sockets
- Improve start-up speed when reading large hosts files
- Fix problem if dnsmasq is started without the stdin
- Allow the TFP server or boot server in --pxe-service
- Support DHCPv6. Support is there for the sort of things
  the existing v4 server does, including tags, options,
  static addresses and relay support
- Support IPv6 router advertisements
- Fix long-standing wrinkle with --localise-queries that
  could result in wrong answers when DNS packets arrive
  via an interface other than the expected one
- 2.60</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1335700800">- update to 2.61:
  * add ra-names, ra-stateless and slaac keywords for DHCPv6: dnsmasq can now
    synthesise AAAA records for dual-stack hosts which get IPv6 addresses via
    SLAAC; it is also now possible to use SLAAC and stateless DHCPv6, and to
    tell clients to use SLAAC addresses as well as DHCP ones
  * add --dhcp-duid to allow DUID-EN uids to be used
  * explicity send DHCPv6 replies to the correct port, instead of relying on
    clients to send requests with the correct source address, since at least
    one client in the wild gets this wrong
  * send a preference value of 255 in DHCPv6 replies when --dhcp-authoritative
    is in effect: his tells clients not to wait around for other DHCP servers
  * better logging of DHCPv6 options
  * add --host-record
  * invoke the DHCP script with action "tftp" when a TFTP file transfer
    completes: the size of the file, address to which it was sent and complete
    pathname are supplied; note that version 2.60 introduced some script
    incompatibilties associated with DHCPv6, and this is a further change; to
    be safe, scripts should ignore unknown actions, and if not IPv6-aware,
    should exit if the environment variable DNSMASQ_IAID is set; the use-case
    for this is to track netboot/install
  * update contrib/port-forward/dnsmasq-portforward to reflect the above
  * set the environment variable DNSMASQ_LOG_DHCP when running the script id
  - -log-dhcp is in effect, so that script can taylor their logging verbosity
  * arrange that addresses specified with --listen-address work even if there
    is no interface carrying the address; this is chiefly useful for IPv4
    loopback addresses, where any address in 127.0.0.0/8 is a valid loopback
    address, but normally only 127.0.0.1 appears on the lo interface
  * fix crash, introduced in 2.60, when a DHCPINFORM is received from a network
    which has no valid dhcp-range
  * add a new DHCP lease time keyword, "deprecated" for --dhcp-range: this is
    only valid for IPv6, and sets the preffered lease time for both DHCP and RA
    to zero; the effect is that clients can continue to use the address for
    existing connections, but new connections will use other addresses, if they
    exist; this makes hitless renumbering at least possible
  * fix bug in address6_available() which caused DHCPv6 lease aquistion to fail
    if more than one dhcp-range in use
  * provide RDNSS and DNSSL data in router advertisements, using the settings
    provided for DHCP options option6:domain-search and option6:dns-server
  * don't cache data from non-recursive nameservers, since it may erroneously
    look like a valid CNAME to a non-exitant name
  * call SO_BINDTODEVICE on the DHCP socket(s) when doing DHCP on exacly one
    interface and --bind-interfaces is set; this makes the OpenStack use-case
    of one dnsmasq per virtual interface work
  * give correct from-cache answers to explict CNAME queries
  * add --tftp-lowercase option
  * ensure that the DBus DhcpLeaseUpdated events are generated when a lease
    goes through INIT_REBOOT state, even if the dhcp-script is not in use</changelog>
<changelog author="crrodriguez@opensuse.org" date="1340452800">- The default cache size is way too small (150 entries) use a sane
  default of 2000 as used in *WRT embeeded routers which is still
  very conservative for a desktop/server machine.
- use async logging</changelog>
<changelog author="crrodriguez@opensuse.org" date="1340539200">- Update to version 2.62, misc bugfixes
- Fix CFLAGS/LDFLAGS usage
- fix the small cache size problem in a different way by tweaking
  the build config instead.</changelog>
<changelog author="cfarrell@suse.com" date="1349352000">- license update: GPL-2.0
  Most of the source code files give a choice of either GPL-2.0 or GPL-3.0
  (not GPL-2.0+). The website states that the COPYING file in the
  distribution is the official license - in this case it is GPL-2.0. This
  is consistent with what Fedora state about the package. Accordingly, I^d
  be ok with License: GPL-2.0 or License: (GPL-2.0 or GPL-3.0) but not
  License: GPL-2.0+</changelog>
<changelog author="toganm@opensuse.org" date="1355486400">- Update to version 2.65. For other changes relating to other
  versions in between please see the  CHANGELOG
  * Fix regression which broke forwarding orgf queries sent via
    TCP which are not for A and AAAA and which were directed to
    non-default servers. Thanks to Niax for the bug reportst.
    Fix failure to build with DHCP support excluded. Thanks to
    Gustavo Zacarias for the patch.
    Fix nasty regression in 27.64 which completely broke cacheing.
- renamed group_and_isc.diff to group_and_isc.patch rebasinp to -p1
  level as outlined in the documentation at
  http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines</changelog>
<changelog author="rmilasan@suse.com" date="1361534400">- Install dnsmasq.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="vuntz@suse.com" date="1363089600">- Create a utils subpackage to include DHCP lease management utils
  (that are living in contrib/wrt):
  + Explicitly build them in %build and install the files in
    %install.
  + Summary and description of the new subpackage are taken from
    Fedora.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364990400">- remove all sysvinit support</changelog>
<changelog author="coolo@suse.com" date="1365854400">- sync /srv/tftpboot directory attributes with atftp package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1366459200">- Do not order after syslog.target which it is neither
  required not recommended and currently no longer even exists.</changelog>
<changelog author="meissner@suse.com" date="1366632000">- reintroduced /sbin/rcdnsmasq as /sbin/service link.</changelog>
<changelog author="max@suse.com" date="1430222400">- Fix unchecked return value of the setup_reply() function
  (bsc#928867, CVE-2015-3294).</changelog>

</package>
<package pkgid="e72c3166c130582adbccb978d0560683c529906e9f43b255059405a8ad878e2e" name="dnsmasq-utils" arch="x86_64">
    <version epoch="0" ver="2.65" rel="7.3.1"/>

<changelog author="crrodriguez@opensuse.org" date="1322136000">- Add systemd startup script</changelog>
<changelog author="crrodriguez@opensuse.org" date="1322136001">- Must be of type forking and change uid to dnsmasq</changelog>
<changelog author="ug@suse.de" date="1322222400">- removed systemd config for pre-12.1</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326888000">- dnsmasq has dbus support, use it for systemd service.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1326974400">- --enable-dbus must be explicit in systemd unit
- default user is provided in config file or takes defaults on
  group_and_isc.diff</changelog>
<changelog author="crrodriguez@opensuse.org" date="1328529600">- Use systemd macros correctly
- build with PIE and full RELRO.</changelog>
<changelog author="ug@suse.de" date="1328702400">- added correct group for tftp
  (bnc#738905)</changelog>
<changelog author="ug@suse.de" date="1331035200">- some dhcp fixes
- Add Lua integration
- Set TOS on DHCP sockets
- Improve start-up speed when reading large hosts files
- Fix problem if dnsmasq is started without the stdin
- Allow the TFP server or boot server in --pxe-service
- Support DHCPv6. Support is there for the sort of things
  the existing v4 server does, including tags, options,
  static addresses and relay support
- Support IPv6 router advertisements
- Fix long-standing wrinkle with --localise-queries that
  could result in wrong answers when DNS packets arrive
  via an interface other than the expected one
- 2.60</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1335700800">- update to 2.61:
  * add ra-names, ra-stateless and slaac keywords for DHCPv6: dnsmasq can now
    synthesise AAAA records for dual-stack hosts which get IPv6 addresses via
    SLAAC; it is also now possible to use SLAAC and stateless DHCPv6, and to
    tell clients to use SLAAC addresses as well as DHCP ones
  * add --dhcp-duid to allow DUID-EN uids to be used
  * explicity send DHCPv6 replies to the correct port, instead of relying on
    clients to send requests with the correct source address, since at least
    one client in the wild gets this wrong
  * send a preference value of 255 in DHCPv6 replies when --dhcp-authoritative
    is in effect: his tells clients not to wait around for other DHCP servers
  * better logging of DHCPv6 options
  * add --host-record
  * invoke the DHCP script with action "tftp" when a TFTP file transfer
    completes: the size of the file, address to which it was sent and complete
    pathname are supplied; note that version 2.60 introduced some script
    incompatibilties associated with DHCPv6, and this is a further change; to
    be safe, scripts should ignore unknown actions, and if not IPv6-aware,
    should exit if the environment variable DNSMASQ_IAID is set; the use-case
    for this is to track netboot/install
  * update contrib/port-forward/dnsmasq-portforward to reflect the above
  * set the environment variable DNSMASQ_LOG_DHCP when running the script id
  - -log-dhcp is in effect, so that script can taylor their logging verbosity
  * arrange that addresses specified with --listen-address work even if there
    is no interface carrying the address; this is chiefly useful for IPv4
    loopback addresses, where any address in 127.0.0.0/8 is a valid loopback
    address, but normally only 127.0.0.1 appears on the lo interface
  * fix crash, introduced in 2.60, when a DHCPINFORM is received from a network
    which has no valid dhcp-range
  * add a new DHCP lease time keyword, "deprecated" for --dhcp-range: this is
    only valid for IPv6, and sets the preffered lease time for both DHCP and RA
    to zero; the effect is that clients can continue to use the address for
    existing connections, but new connections will use other addresses, if they
    exist; this makes hitless renumbering at least possible
  * fix bug in address6_available() which caused DHCPv6 lease aquistion to fail
    if more than one dhcp-range in use
  * provide RDNSS and DNSSL data in router advertisements, using the settings
    provided for DHCP options option6:domain-search and option6:dns-server
  * don't cache data from non-recursive nameservers, since it may erroneously
    look like a valid CNAME to a non-exitant name
  * call SO_BINDTODEVICE on the DHCP socket(s) when doing DHCP on exacly one
    interface and --bind-interfaces is set; this makes the OpenStack use-case
    of one dnsmasq per virtual interface work
  * give correct from-cache answers to explict CNAME queries
  * add --tftp-lowercase option
  * ensure that the DBus DhcpLeaseUpdated events are generated when a lease
    goes through INIT_REBOOT state, even if the dhcp-script is not in use</changelog>
<changelog author="crrodriguez@opensuse.org" date="1340452800">- The default cache size is way too small (150 entries) use a sane
  default of 2000 as used in *WRT embeeded routers which is still
  very conservative for a desktop/server machine.
- use async logging</changelog>
<changelog author="crrodriguez@opensuse.org" date="1340539200">- Update to version 2.62, misc bugfixes
- Fix CFLAGS/LDFLAGS usage
- fix the small cache size problem in a different way by tweaking
  the build config instead.</changelog>
<changelog author="cfarrell@suse.com" date="1349352000">- license update: GPL-2.0
  Most of the source code files give a choice of either GPL-2.0 or GPL-3.0
  (not GPL-2.0+). The website states that the COPYING file in the
  distribution is the official license - in this case it is GPL-2.0. This
  is consistent with what Fedora state about the package. Accordingly, I^d
  be ok with License: GPL-2.0 or License: (GPL-2.0 or GPL-3.0) but not
  License: GPL-2.0+</changelog>
<changelog author="toganm@opensuse.org" date="1355486400">- Update to version 2.65. For other changes relating to other
  versions in between please see the  CHANGELOG
  * Fix regression which broke forwarding orgf queries sent via
    TCP which are not for A and AAAA and which were directed to
    non-default servers. Thanks to Niax for the bug reportst.
    Fix failure to build with DHCP support excluded. Thanks to
    Gustavo Zacarias for the patch.
    Fix nasty regression in 27.64 which completely broke cacheing.
- renamed group_and_isc.diff to group_and_isc.patch rebasinp to -p1
  level as outlined in the documentation at
  http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines</changelog>
<changelog author="rmilasan@suse.com" date="1361534400">- Install dnsmasq.service accordingly (/usr/lib/systemd for 12.3
  and up or /lib/systemd for older versions).</changelog>
<changelog author="vuntz@suse.com" date="1363089600">- Create a utils subpackage to include DHCP lease management utils
  (that are living in contrib/wrt):
  + Explicitly build them in %build and install the files in
    %install.
  + Summary and description of the new subpackage are taken from
    Fedora.</changelog>
<changelog author="crrodriguez@opensuse.org" date="1364990400">- remove all sysvinit support</changelog>
<changelog author="coolo@suse.com" date="1365854400">- sync /srv/tftpboot directory attributes with atftp package</changelog>
<changelog author="crrodriguez@opensuse.org" date="1366459200">- Do not order after syslog.target which it is neither
  required not recommended and currently no longer even exists.</changelog>
<changelog author="meissner@suse.com" date="1366632000">- reintroduced /sbin/rcdnsmasq as /sbin/service link.</changelog>
<changelog author="max@suse.com" date="1430222400">- Fix unchecked return value of the setup_reply() function
  (bsc#928867, CVE-2015-3294).</changelog>

</package>
<package pkgid="52f681706893183f15db3f55a53784b4582b82ab2c5380de0f2851bb7476c7d3" name="dolphin" arch="i586">
    <version epoch="0" ver="4.11.3" rel="50.7"/>

<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes
- Added libnpeomukwidgets as buildrequires due to changes in
  dolphin.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="ctrippe@opensuse.org" date="1358856000">- Set icons to align as default for folderview (bnc#327502)
  (added patch folderview_align_to_grid_true.diff)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Drop not needed BuildRequires:
  NetworkManager-devel, bluez-devel, libqimageblitz-devel,
  libraw1394-devel, libusb-devel, pciutils-devel and pkgconfig(libxklavier)
- Drop not needed %verifyscript
- Make konqueror recommends kdebase4-nsplugin</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="wbauer@tmo.at" date="1378382400">- Added konqueror-fix-bookmarks-in-toolbar.diff:
  * Fix toplevel bookmarks not showing in toolbar</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  konqueror-fix-bookmarks-in-toolbar.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383739200">- Added 0001-Revert-Files-passed-as-arguments-Ignore-unsupported-.patch
  for resolving kde#327224</changelog>

</package>
<package pkgid="028f7b54f65f42c9ecd3efd53222bb9cbac8e6dcd6f3fac6e156434949ae43e2" name="dolphin" arch="i586">
    <version epoch="0" ver="4.11.4" rel="460.22"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes
- Added libnpeomukwidgets as buildrequires due to changes in
  dolphin.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="ctrippe@opensuse.org" date="1358856000">- Set icons to align as default for folderview (bnc#327502)
  (added patch folderview_align_to_grid_true.diff)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Drop not needed BuildRequires:
  NetworkManager-devel, bluez-devel, libqimageblitz-devel,
  libraw1394-devel, libusb-devel, pciutils-devel and pkgconfig(libxklavier)
- Drop not needed %verifyscript
- Make konqueror recommends kdebase4-nsplugin</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="wbauer@tmo.at" date="1378382400">- Added konqueror-fix-bookmarks-in-toolbar.diff:
  * Fix toplevel bookmarks not showing in toolbar</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  konqueror-fix-bookmarks-in-toolbar.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383739200">- Added 0001-Revert-Files-passed-as-arguments-Ignore-unsupported-.patch
  for resolving kde#327224</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php
- Drop upstreamed patch:
  * 0001-Revert-Files-passed-as-arguments-Ignore-unsupported-.patch</changelog>

</package>
<package pkgid="db03d0f1a0eb1a0ad6e030f2b3489234a0d6e0879ac11cb0ce91fe7d315a2599" name="dolphin" arch="i586">
    <version epoch="0" ver="4.11.5" rel="474.8"/>

<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="ctrippe@opensuse.org" date="1358856000">- Set icons to align as default for folderview (bnc#327502)
  (added patch folderview_align_to_grid_true.diff)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Drop not needed BuildRequires:
  NetworkManager-devel, bluez-devel, libqimageblitz-devel,
  libraw1394-devel, libusb-devel, pciutils-devel and pkgconfig(libxklavier)
- Drop not needed %verifyscript
- Make konqueror recommends kdebase4-nsplugin</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="wbauer@tmo.at" date="1378382400">- Added konqueror-fix-bookmarks-in-toolbar.diff:
  * Fix toplevel bookmarks not showing in toolbar</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  konqueror-fix-bookmarks-in-toolbar.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383739200">- Added 0001-Revert-Files-passed-as-arguments-Ignore-unsupported-.patch
  for resolving kde#327224</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php
- Drop upstreamed patch:
  * 0001-Revert-Files-passed-as-arguments-Ignore-unsupported-.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="4e1094e21d02bf78a8a714cbc4d8fd8971414be17dadcbbe6749767d6677c161" name="dolphin" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="50.7"/>

<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes
- Added libnpeomukwidgets as buildrequires due to changes in
  dolphin.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="ctrippe@opensuse.org" date="1358856000">- Set icons to align as default for folderview (bnc#327502)
  (added patch folderview_align_to_grid_true.diff)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Drop not needed BuildRequires:
  NetworkManager-devel, bluez-devel, libqimageblitz-devel,
  libraw1394-devel, libusb-devel, pciutils-devel and pkgconfig(libxklavier)
- Drop not needed %verifyscript
- Make konqueror recommends kdebase4-nsplugin</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="wbauer@tmo.at" date="1378382400">- Added konqueror-fix-bookmarks-in-toolbar.diff:
  * Fix toplevel bookmarks not showing in toolbar</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  konqueror-fix-bookmarks-in-toolbar.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383739200">- Added 0001-Revert-Files-passed-as-arguments-Ignore-unsupported-.patch
  for resolving kde#327224</changelog>

</package>
<package pkgid="2d9ca13e5bdd4fe10caa6484f70688fb0e7cd956fd3dc777a984cc521893b3ce" name="dolphin" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="460.22"/>

<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes
- Added libnpeomukwidgets as buildrequires due to changes in
  dolphin.</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="ctrippe@opensuse.org" date="1358856000">- Set icons to align as default for folderview (bnc#327502)
  (added patch folderview_align_to_grid_true.diff)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Drop not needed BuildRequires:
  NetworkManager-devel, bluez-devel, libqimageblitz-devel,
  libraw1394-devel, libusb-devel, pciutils-devel and pkgconfig(libxklavier)
- Drop not needed %verifyscript
- Make konqueror recommends kdebase4-nsplugin</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="wbauer@tmo.at" date="1378382400">- Added konqueror-fix-bookmarks-in-toolbar.diff:
  * Fix toplevel bookmarks not showing in toolbar</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  konqueror-fix-bookmarks-in-toolbar.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383739200">- Added 0001-Revert-Files-passed-as-arguments-Ignore-unsupported-.patch
  for resolving kde#327224</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php
- Drop upstreamed patch:
  * 0001-Revert-Files-passed-as-arguments-Ignore-unsupported-.patch</changelog>

</package>
<package pkgid="b8d8fb6370ffd1c2728a648d80b0884a9f1479c67413c67fdfdf6df454f49519" name="dolphin" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="474.8"/>

<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="ctrippe@opensuse.org" date="1358856000">- Set icons to align as default for folderview (bnc#327502)
  (added patch folderview_align_to_grid_true.diff)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1377172800">- Drop not needed BuildRequires:
  NetworkManager-devel, bluez-devel, libqimageblitz-devel,
  libraw1394-devel, libusb-devel, pciutils-devel and pkgconfig(libxklavier)
- Drop not needed %verifyscript
- Make konqueror recommends kdebase4-nsplugin</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="wbauer@tmo.at" date="1378382400">- Added konqueror-fix-bookmarks-in-toolbar.diff:
  * Fix toplevel bookmarks not showing in toolbar</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php
- Dropped patches due to upstream inclusion:
  konqueror-fix-bookmarks-in-toolbar.diff</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1383739200">- Added 0001-Revert-Files-passed-as-arguments-Ignore-unsupported-.patch
  for resolving kde#327224</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php
- Drop upstreamed patch:
  * 0001-Revert-Files-passed-as-arguments-Ignore-unsupported-.patch</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="84e211b868e7ca9c64ec4f9a4fe093a05485fe6bd7f86b5e34c9d623a02c1115" name="dolphin-plugins" arch="i586">
    <version epoch="0" ver="4.11.2" rel="10.2"/>

<changelog author="tittiatcoke@gmail.com" date="1348920000">- Update to 4.9.2
  * see http://kde.org/announcements/announce-4.9.2.php for details</changelog>
<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>

</package>
<package pkgid="4e36d2e8aa53e3f065f0865f8eea3fb7278b67c5888b974bbba4ebc6027983ed" name="dolphin-plugins" arch="i586">
    <version epoch="0" ver="4.11.4" rel="104.5"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="9fc02e7819760d70fe9c39b9ead85ca9c94672824744ff04c2c066a9fa2d55e5" name="dolphin-plugins" arch="i586">
    <version epoch="0" ver="4.11.5" rel="112.3"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="24b271a03d74ffc37b91228d073f0dcc71276e9ee3db08343fe3cb7387261f46" name="dolphin-plugins" arch="src">
    <version epoch="0" ver="4.11.2" rel="10.2"/>

<changelog author="tittiatcoke@gmail.com" date="1348920000">- Update to 4.9.2
  * see http://kde.org/announcements/announce-4.9.2.php for details</changelog>
<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>

</package>
<package pkgid="27b21cbeb19ebe232accbbc0cb9ae9c134702bdeb05f2315390708223c48e15d" name="dolphin-plugins" arch="src">
    <version epoch="0" ver="4.11.4" rel="104.5"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="0cefe66587da95cf1e8994ac4052ec0a80faa7c3a9507a7e575a7f1ddaaa2afe" name="dolphin-plugins" arch="src">
    <version epoch="0" ver="4.11.5" rel="112.3"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="f19c22b4bf99a1220c579647e970328670fcf9c42ec1a49d567f5bf79a600905" name="dolphin-plugins" arch="x86_64">
    <version epoch="0" ver="4.11.2" rel="10.2"/>

<changelog author="tittiatcoke@gmail.com" date="1348920000">- Update to 4.9.2
  * see http://kde.org/announcements/announce-4.9.2.php for details</changelog>
<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>

</package>
<package pkgid="b13faa8c19881fef4a166d0bc3e9714077d94b0833365bdd39c58c5c876a2486" name="dolphin-plugins" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="104.5"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="48b37c27d7de17350a66402ddce926cf791ff4ed3888b3a72a021c5014680c22" name="dolphin-plugins" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="112.3"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * see http://www.kde.org/announcements/announce-4.10-beta1.php
  * Umbrello:  Line based diagram grid</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1365768000">- Updated Licenses for the packages (bnc#814081)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php
  * Split off from kdesdk4</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372852800">- Update to 4.10.90
  * KDE 4.11 Beta 2 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="26c166ebbb9c2562df0b9d0d6d5045de13193901d37de99eecc815ad0f48dd6e" name="dos2unix" arch="i586">
    <version epoch="0" ver="7.2.2" rel="2.3.1"/>

<changelog author="pth@suse.de" date="1282651200">- Update 5.1.1:
  * Added Dutch translation of the manual
  * Updated German translation</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="coolo@novell.com" date="1289390400">- fix file list</changelog>
<changelog author="coolo@novell.com" date="1295006400">- remove unsupported locales</changelog>
<changelog author="pth@suse.de" date="1296734400">- Update to 5.2:
    ISO conversion mode supports same DOS code pages as SunOS dos2unix does:
    CP437 (US), CP850 (Western European), CP860 (Portuguese),
    CP863 (French Canadian), and CP865 (Nordic).
    ISO conversion mode supports Windows code page CP1252 (Western).
    SunOS compatible options -ascii, -iso, -7, -437, -850, -860, -863, and -865.
    Active code page detection for ISO mode.
    Fixed ISO conversion of non-breaking space (NBSP).
    Treat ASCII Form Feed control characters as valid text.
    Update manual pages.
    Don't include generated documentation files in Unix source package.
- Suffix for HTML pages is .html not .htm</changelog>
<changelog author="pth@suse.de" date="1297771200">- Don't generate ps/pdf documents, thus no need for ghostscript.</changelog>
<changelog author="vlado.paskov@gmail.com" date="1305979200">- Version update to 5.3
  - removed patch dos2unix-no_pdf.patch, this version doesn't
    generate pdf/ps documents.
  - updated dos2unix-correct_ending.patch
  - fixed Url: in the spec file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305979201">- Open all fds with O_CLOEXEC.</changelog>
<changelog author="pth@suse.de" date="1306152000">- Repackage with xz.</changelog>
<changelog author="aj@suse.de" date="1306324800">- Add buildrequire on xz.</changelog>
<changelog author="pth@suse.de" date="1312977600">- Update to 5.3.1:
  * Spanish tranlation of messages and manual.
  * File ownership is maintained in old file mode (Unix only).
  * Dos2unix and Unix2dos share the same language files.
  * Code cleanup.</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
<changelog author="pth@suse.de" date="1327924800">- Update to 5.3.2:
  - Change of hmoepage URL.
  - All other changes are for non Unix platforms.
  - Don't recompress the package anymore.</changelog>
<changelog author="tabraham@novell.com" date="1331553600">- Update to 5.3.3:
  - enabled wildcard expansion
  - small update in RETURN VALUE section of man page
- removed dos2unix-correct_ending.patch (instead pass HTMLEXT="html"
  to make)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1336305600">- update to 6.0:
  * Conversion of Windows UTF-16 files to Unix UTF-8 files
  * Conversion of Unix UTF-8 files to Windows UTF-8 files with byte
    order mark</changelog>
<changelog author="andreas.stieger@gmx.de" date="1342440000">- fix build against openSUSE:Factory / standard: man page paths</changelog>
<changelog author="pth@suse.de" date="1366113600">- Update to 6.0.3. Changes since 6.0:
  - Version 6.0.3
  * Source code compiles with Microsoft Visual C.
  * Print system error when writing output fails.
  - Version 6.0.2
  * The locale encoding detection when NLS was disabled has been fixed.
  * Print line number when a binary symbol is found.
  * Updated makefiles for Watcom C, and added a new one for OS/2.
  - Version 6.0.1
  * Update Spanish translations.
  * Update manual.</changelog>
<changelog author="waterlan@xs4all.nl" date="1432728000">- Update to 7.2.2
  * Fix: Fixed symlink support on FreeBSD.
  * Fix: Skip GB18030 test on FreeBSD.
  * Fix: When conversion of an UTF-16 file with binary symbols was forced,
    null characters were not written in the output.
  * Fix: Check UTF-16 input for invalid surrogate pairs.
- Update to 7.2.1
  * Fix: Skip the GB18030 tests when the system does not support the
    Chinese locale with GB18030 character encoding.
  * Fix: Small corrections in the manual in section GB18030 and OPTIONS -m.
- Update to 7.2
  * New: Japanese translation of the UI messages.
  * New: Support Chinese GB18030 locale.
  * Change: On Unix/Linux convert UTF-16 to the locale encoding. It is
    no longer required that the locale encoding is UTF-8.
- Fixed license type: BSD-2-Clause
- Added missing manual translations: da, fr, pt_BR.
- Update to 7.1:
  * New: Option -i, --info to print file information.
    This new option prints number of DOS, Unix, and Mac line breaks, the byte
    order mark, and if the file is text or binary. And it can print the names
    of files that would be converted.
  Version 7.0
  * New: automated self-tests.
  * New: option -u to keep UTF-16 encoding.
  * New: option -v to print information about BOMs and converted line breaks.
  * Change: stdio mode does not automatically set quiet mode.
  * Change: stdio mode does not automatically force conversion of binaries.
    An error is returned when the stdin stream contains a binary symbol.
  * Bugfix: dos2unix -l created DOS line breaks from Mac line breaks.
  * Bugfix: system error number was not always returned.
  * Bugfix: an Unicode input file disabled 7bit and iso mode for next input files.
  * Bugfix: mac2unix help text, options -b and -r.
  * The code has been cleaned up.
- Update to 6.0.6:
  * Bugfix: mac2unix conversion produced corrupted output from
    UTF-16 input file.
  * New options -b (keep BOM) and -r (remove BOM).
  * New translation of the UI messages: Norwegian Bokmaal.
- Update to 6.0.5
  * Dos2unix is part of the Translation Project (TP).
    All translations go via the Translation Project.
    See http://translationproject.org/
  * New translations of UI messages: Brazilian Portuguese, Chinese (traditional),
    Danish, French, Hungarian, Polish, Serbian, Ukrainian, Vietnamese.
  * New translations of the manual: Brazilian Portuguese, French, German,
    Polish, Ukrainian.
  * Generated man pages are included in the source package to prevent
    compilation problems with very old or very new perl/pod2man versions.
  * Manuals are now generated from gettext PO files with po4a for easier
    translation.
  * All manuals are now in UTF-8 encoding.
  * Skip symbolic links on Windows by default (same as on Unix).
- Update to 6.0.4.
  * New options -ul and -ub to conver UTF-16 files without BOM
  * New Russian translation of the messages
  * Build 32 bit Windows binaries with Large File Support (LFS) by
    using mingw-w64 for 32 bit Windows
  * When a binary symbol is encountered the value is printed</changelog>
<changelog author="waterlan@xs4all.nl" date="1433937600">- bug reference for maintenance update:
  https://bugzilla.suse.com/show_bug.cgi?id=934289</changelog>

</package>
<package pkgid="24262cb6f40aad39303fa974ab89768e6515aad1b5af95b97a11f7b76464b79a" name="dos2unix" arch="src">
    <version epoch="0" ver="7.2.2" rel="2.3.1"/>

<changelog author="pth@suse.de" date="1282651200">- Update 5.1.1:
  * Added Dutch translation of the manual
  * Updated German translation</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="coolo@novell.com" date="1289390400">- fix file list</changelog>
<changelog author="coolo@novell.com" date="1295006400">- remove unsupported locales</changelog>
<changelog author="pth@suse.de" date="1296734400">- Update to 5.2:
    ISO conversion mode supports same DOS code pages as SunOS dos2unix does:
    CP437 (US), CP850 (Western European), CP860 (Portuguese),
    CP863 (French Canadian), and CP865 (Nordic).
    ISO conversion mode supports Windows code page CP1252 (Western).
    SunOS compatible options -ascii, -iso, -7, -437, -850, -860, -863, and -865.
    Active code page detection for ISO mode.
    Fixed ISO conversion of non-breaking space (NBSP).
    Treat ASCII Form Feed control characters as valid text.
    Update manual pages.
    Don't include generated documentation files in Unix source package.
- Suffix for HTML pages is .html not .htm</changelog>
<changelog author="pth@suse.de" date="1297771200">- Don't generate ps/pdf documents, thus no need for ghostscript.</changelog>
<changelog author="vlado.paskov@gmail.com" date="1305979200">- Version update to 5.3
  - removed patch dos2unix-no_pdf.patch, this version doesn't
    generate pdf/ps documents.
  - updated dos2unix-correct_ending.patch
  - fixed Url: in the spec file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305979201">- Open all fds with O_CLOEXEC.</changelog>
<changelog author="pth@suse.de" date="1306152000">- Repackage with xz.</changelog>
<changelog author="aj@suse.de" date="1306324800">- Add buildrequire on xz.</changelog>
<changelog author="pth@suse.de" date="1312977600">- Update to 5.3.1:
  * Spanish tranlation of messages and manual.
  * File ownership is maintained in old file mode (Unix only).
  * Dos2unix and Unix2dos share the same language files.
  * Code cleanup.</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
<changelog author="pth@suse.de" date="1327924800">- Update to 5.3.2:
  - Change of hmoepage URL.
  - All other changes are for non Unix platforms.
  - Don't recompress the package anymore.</changelog>
<changelog author="tabraham@novell.com" date="1331553600">- Update to 5.3.3:
  - enabled wildcard expansion
  - small update in RETURN VALUE section of man page
- removed dos2unix-correct_ending.patch (instead pass HTMLEXT="html"
  to make)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1336305600">- update to 6.0:
  * Conversion of Windows UTF-16 files to Unix UTF-8 files
  * Conversion of Unix UTF-8 files to Windows UTF-8 files with byte
    order mark</changelog>
<changelog author="andreas.stieger@gmx.de" date="1342440000">- fix build against openSUSE:Factory / standard: man page paths</changelog>
<changelog author="pth@suse.de" date="1366113600">- Update to 6.0.3. Changes since 6.0:
  - Version 6.0.3
  * Source code compiles with Microsoft Visual C.
  * Print system error when writing output fails.
  - Version 6.0.2
  * The locale encoding detection when NLS was disabled has been fixed.
  * Print line number when a binary symbol is found.
  * Updated makefiles for Watcom C, and added a new one for OS/2.
  - Version 6.0.1
  * Update Spanish translations.
  * Update manual.</changelog>
<changelog author="waterlan@xs4all.nl" date="1432728000">- Update to 7.2.2
  * Fix: Fixed symlink support on FreeBSD.
  * Fix: Skip GB18030 test on FreeBSD.
  * Fix: When conversion of an UTF-16 file with binary symbols was forced,
    null characters were not written in the output.
  * Fix: Check UTF-16 input for invalid surrogate pairs.
- Update to 7.2.1
  * Fix: Skip the GB18030 tests when the system does not support the
    Chinese locale with GB18030 character encoding.
  * Fix: Small corrections in the manual in section GB18030 and OPTIONS -m.
- Update to 7.2
  * New: Japanese translation of the UI messages.
  * New: Support Chinese GB18030 locale.
  * Change: On Unix/Linux convert UTF-16 to the locale encoding. It is
    no longer required that the locale encoding is UTF-8.
- Fixed license type: BSD-2-Clause
- Added missing manual translations: da, fr, pt_BR.
- Update to 7.1:
  * New: Option -i, --info to print file information.
    This new option prints number of DOS, Unix, and Mac line breaks, the byte
    order mark, and if the file is text or binary. And it can print the names
    of files that would be converted.
  Version 7.0
  * New: automated self-tests.
  * New: option -u to keep UTF-16 encoding.
  * New: option -v to print information about BOMs and converted line breaks.
  * Change: stdio mode does not automatically set quiet mode.
  * Change: stdio mode does not automatically force conversion of binaries.
    An error is returned when the stdin stream contains a binary symbol.
  * Bugfix: dos2unix -l created DOS line breaks from Mac line breaks.
  * Bugfix: system error number was not always returned.
  * Bugfix: an Unicode input file disabled 7bit and iso mode for next input files.
  * Bugfix: mac2unix help text, options -b and -r.
  * The code has been cleaned up.
- Update to 6.0.6:
  * Bugfix: mac2unix conversion produced corrupted output from
    UTF-16 input file.
  * New options -b (keep BOM) and -r (remove BOM).
  * New translation of the UI messages: Norwegian Bokmaal.
- Update to 6.0.5
  * Dos2unix is part of the Translation Project (TP).
    All translations go via the Translation Project.
    See http://translationproject.org/
  * New translations of UI messages: Brazilian Portuguese, Chinese (traditional),
    Danish, French, Hungarian, Polish, Serbian, Ukrainian, Vietnamese.
  * New translations of the manual: Brazilian Portuguese, French, German,
    Polish, Ukrainian.
  * Generated man pages are included in the source package to prevent
    compilation problems with very old or very new perl/pod2man versions.
  * Manuals are now generated from gettext PO files with po4a for easier
    translation.
  * All manuals are now in UTF-8 encoding.
  * Skip symbolic links on Windows by default (same as on Unix).
- Update to 6.0.4.
  * New options -ul and -ub to conver UTF-16 files without BOM
  * New Russian translation of the messages
  * Build 32 bit Windows binaries with Large File Support (LFS) by
    using mingw-w64 for 32 bit Windows
  * When a binary symbol is encountered the value is printed</changelog>
<changelog author="waterlan@xs4all.nl" date="1433937600">- bug reference for maintenance update:
  https://bugzilla.suse.com/show_bug.cgi?id=934289</changelog>

</package>
<package pkgid="e89f5912d760360c8d2475fddce327b6d1bc569fc7d9ab0bfd590edd44ec8416" name="dos2unix" arch="x86_64">
    <version epoch="0" ver="7.2.2" rel="2.3.1"/>

<changelog author="pth@suse.de" date="1282651200">- Update 5.1.1:
  * Added Dutch translation of the manual
  * Updated German translation</changelog>
<changelog author="jengelh@medozas.de" date="1288526400">- Use %_smp_mflags</changelog>
<changelog author="coolo@novell.com" date="1289390400">- fix file list</changelog>
<changelog author="coolo@novell.com" date="1295006400">- remove unsupported locales</changelog>
<changelog author="pth@suse.de" date="1296734400">- Update to 5.2:
    ISO conversion mode supports same DOS code pages as SunOS dos2unix does:
    CP437 (US), CP850 (Western European), CP860 (Portuguese),
    CP863 (French Canadian), and CP865 (Nordic).
    ISO conversion mode supports Windows code page CP1252 (Western).
    SunOS compatible options -ascii, -iso, -7, -437, -850, -860, -863, and -865.
    Active code page detection for ISO mode.
    Fixed ISO conversion of non-breaking space (NBSP).
    Treat ASCII Form Feed control characters as valid text.
    Update manual pages.
    Don't include generated documentation files in Unix source package.
- Suffix for HTML pages is .html not .htm</changelog>
<changelog author="pth@suse.de" date="1297771200">- Don't generate ps/pdf documents, thus no need for ghostscript.</changelog>
<changelog author="vlado.paskov@gmail.com" date="1305979200">- Version update to 5.3
  - removed patch dos2unix-no_pdf.patch, this version doesn't
    generate pdf/ps documents.
  - updated dos2unix-correct_ending.patch
  - fixed Url: in the spec file</changelog>
<changelog author="crrodriguez@opensuse.org" date="1305979201">- Open all fds with O_CLOEXEC.</changelog>
<changelog author="pth@suse.de" date="1306152000">- Repackage with xz.</changelog>
<changelog author="aj@suse.de" date="1306324800">- Add buildrequire on xz.</changelog>
<changelog author="pth@suse.de" date="1312977600">- Update to 5.3.1:
  * Spanish tranlation of messages and manual.
  * File ownership is maintained in old file mode (Unix only).
  * Dos2unix and Unix2dos share the same language files.
  * Code cleanup.</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
<changelog author="pth@suse.de" date="1327924800">- Update to 5.3.2:
  - Change of hmoepage URL.
  - All other changes are for non Unix platforms.
  - Don't recompress the package anymore.</changelog>
<changelog author="tabraham@novell.com" date="1331553600">- Update to 5.3.3:
  - enabled wildcard expansion
  - small update in RETURN VALUE section of man page
- removed dos2unix-correct_ending.patch (instead pass HTMLEXT="html"
  to make)</changelog>
<changelog author="pascal.bleser@opensuse.org" date="1336305600">- update to 6.0:
  * Conversion of Windows UTF-16 files to Unix UTF-8 files
  * Conversion of Unix UTF-8 files to Windows UTF-8 files with byte
    order mark</changelog>
<changelog author="andreas.stieger@gmx.de" date="1342440000">- fix build against openSUSE:Factory / standard: man page paths</changelog>
<changelog author="pth@suse.de" date="1366113600">- Update to 6.0.3. Changes since 6.0:
  - Version 6.0.3
  * Source code compiles with Microsoft Visual C.
  * Print system error when writing output fails.
  - Version 6.0.2
  * The locale encoding detection when NLS was disabled has been fixed.
  * Print line number when a binary symbol is found.
  * Updated makefiles for Watcom C, and added a new one for OS/2.
  - Version 6.0.1
  * Update Spanish translations.
  * Update manual.</changelog>
<changelog author="waterlan@xs4all.nl" date="1432728000">- Update to 7.2.2
  * Fix: Fixed symlink support on FreeBSD.
  * Fix: Skip GB18030 test on FreeBSD.
  * Fix: When conversion of an UTF-16 file with binary symbols was forced,
    null characters were not written in the output.
  * Fix: Check UTF-16 input for invalid surrogate pairs.
- Update to 7.2.1
  * Fix: Skip the GB18030 tests when the system does not support the
    Chinese locale with GB18030 character encoding.
  * Fix: Small corrections in the manual in section GB18030 and OPTIONS -m.
- Update to 7.2
  * New: Japanese translation of the UI messages.
  * New: Support Chinese GB18030 locale.
  * Change: On Unix/Linux convert UTF-16 to the locale encoding. It is
    no longer required that the locale encoding is UTF-8.
- Fixed license type: BSD-2-Clause
- Added missing manual translations: da, fr, pt_BR.
- Update to 7.1:
  * New: Option -i, --info to print file information.
    This new option prints number of DOS, Unix, and Mac line breaks, the byte
    order mark, and if the file is text or binary. And it can print the names
    of files that would be converted.
  Version 7.0
  * New: automated self-tests.
  * New: option -u to keep UTF-16 encoding.
  * New: option -v to print information about BOMs and converted line breaks.
  * Change: stdio mode does not automatically set quiet mode.
  * Change: stdio mode does not automatically force conversion of binaries.
    An error is returned when the stdin stream contains a binary symbol.
  * Bugfix: dos2unix -l created DOS line breaks from Mac line breaks.
  * Bugfix: system error number was not always returned.
  * Bugfix: an Unicode input file disabled 7bit and iso mode for next input files.
  * Bugfix: mac2unix help text, options -b and -r.
  * The code has been cleaned up.
- Update to 6.0.6:
  * Bugfix: mac2unix conversion produced corrupted output from
    UTF-16 input file.
  * New options -b (keep BOM) and -r (remove BOM).
  * New translation of the UI messages: Norwegian Bokmaal.
- Update to 6.0.5
  * Dos2unix is part of the Translation Project (TP).
    All translations go via the Translation Project.
    See http://translationproject.org/
  * New translations of UI messages: Brazilian Portuguese, Chinese (traditional),
    Danish, French, Hungarian, Polish, Serbian, Ukrainian, Vietnamese.
  * New translations of the manual: Brazilian Portuguese, French, German,
    Polish, Ukrainian.
  * Generated man pages are included in the source package to prevent
    compilation problems with very old or very new perl/pod2man versions.
  * Manuals are now generated from gettext PO files with po4a for easier
    translation.
  * All manuals are now in UTF-8 encoding.
  * Skip symbolic links on Windows by default (same as on Unix).
- Update to 6.0.4.
  * New options -ul and -ub to conver UTF-16 files without BOM
  * New Russian translation of the messages
  * Build 32 bit Windows binaries with Large File Support (LFS) by
    using mingw-w64 for 32 bit Windows
  * When a binary symbol is encountered the value is printed</changelog>
<changelog author="waterlan@xs4all.nl" date="1433937600">- bug reference for maintenance update:
  https://bugzilla.suse.com/show_bug.cgi?id=934289</changelog>

</package>
<package pkgid="386ba97dee02ae6546b31c99898612d3fd70381c0c0c1eb15e6b86f11c6e62da" name="dosbox" arch="i586">
    <version epoch="0" ver="0.74" rel="19.4.1"/>

<changelog author="lnussel@suse.de" date="1192449600">- fix build with gcc 4.3</changelog>
<changelog author="lnussel@suse.de" date="1196769600">- fix wrong use of strncat</changelog>
<changelog author="lnussel@suse.de" date="1243512000">- new version 0.73
  * Support for more graphics modes and cards.
  * Improved Vista support.
  * New OPL emulation cores.
  * Sound fixes and improvements for Mac OS X.
  * Lots of compatibility fixes.
  * Lots of cdrom detection improvements.
  * Lots of memory (EMS/XMS) improvements.
  * Various fixes and enhancements for the recompiling core.
  * Support for evdev.
  * Lots of DOS fixes.
  * Slightly faster!
  * More stable.</changelog>
<changelog author="lnussel@suse.de" date="1274270400">- new version 0.74
  * Several small game specific fixes/hacks/support. (Offensive, Roadhog, GTA
    installer, Kingdom O' Magic soundcard detection, Pirate booter, Armored
    Fist installer)
  * Add the S3-specific 640x480 256 color mode. (fixes regression in "Wooden
    Ships and Iron Men" and "I Have No Mouth And I Must Scream")
  * Fix a stack overflow that could crash DOSBox.
  * Add fake microphone input. (fixes Talking Parrot)
  * Modify adlib turn off code, so that it doesn't turn off in cases where the
    same sound is repeated over and over again.
  * Several small fixes to the CDROM audio code.(HOMM2, Redneck Rampage and
    others)
  * Several improvements to the CDROM emulation code. (fixes Alpha Storm and GT
    Racing 97)
  * Some small CPU fixes that might fix something.
  * Handle opcode 0xff subcode 7 as invalid instruction. (fixes dif-2 &amp; others)
  * Some hercules fixes. (Testdrive)
  * Improve support for blanked parts that wrap around to the start of the
    screen. (fixes Magic Circle demo and Sid&amp;Al)
  * Remove old OPL cores as the new ones seem to work very nicely.
  * Modify movie recording code so that the movies aren't corrupt when you exit
    dosbox without stopping the movie.
  * Change RGB3x scaler to look more pretty.
  * Improve initial register values compatility of the GUS.
  * Added autodetection for Gameblaster. (games can find it now)
  * Change render preferences a bit to be more compatible with Windows 7.
  * Add DOS fixes to terminate program. (fixes Fortune Teller)
  * Add FFREEP. (fixes Trucks)
  * Improve FPU ST80 in C mode when writing zero. (fixes Antigok)
  * Add special int10 scanline function. (fixes mz700 and probably lots of
    games that mess with them)
  * Fix scrolling in rarely used video modes. (fixes Orphee)
  * Modify game specific hacks a bit so that Kick off 3 works again.
  * Lots of fixes to the INT10 video parameter table. (Seven spirits of ra and
    others)
  * Add VGA blanking in machine=vgaonly. (used by Alien Carnage)
  * CGA, PCJr, Tandy: Add video blanking, change display start latch timing,
    sync pulse width correction.
  * PCJr, Tandy: implement vertical retrace interrupt.
  * PCJr, CGA: line-by-line video emulation.
  * PCJr: support on-screen change of color modes 4medium to 16low. (used by
    Ghostbusters booter)
  * Hercules: Add green and amber monochrome support.
  * All machines: only update the video timing when needed. (Jungle Hunt,
    others that synchronize to the video screen might profit)
  * Several small DOS fixes.
  * Some UMB related fixes. (The Legacy without UMB)
  * Fix version number of DSP for SB 1.5. (fixes a few games)
  * Several VGA emulation improvements. (Allertone football manager)
  * Some Tandy fixes. (Mech Warrior)
  * Small improvements and fixes to the OPL emulation.
  * Add low level Tandy DAC emulation.
  * Some EMS fixes. (fixes Mortal Kombat and others)
  * Change SoundBlaster DSP reset mechanism, add sb irq acknowledge logic.
    (fixes stmik*based applications)
  * Some interrupt pointer location modifications. (fixes Tinker Tales)
  * Some fixes to the BOOT code. (fixes Last Mission)
  * Respect write-only file information. (fixes Champions of Zulala)
  * Some RTC fix. (fixes Tully Bodine and others)
  * Improve mouse emulation to work better with Water World.
  * Hopefully fix the translation of the configuration file.
  * Speed up and fixes for the recompiler core. (pitfall2 pcjr)
  * Change memory start location. (fixes 7th Guest installer)
  * Several fixes to the batch file handling. (Shift and use the typed first %0
    instead of the parsed %0)
  * Improve file redirection and redirected line ends. (fixes Phantasmagoria 2
    DOS installer)
  * Fix compilation with new MAC os X version.
  * Add 16C550A FIFO support to the serial port emulation.
  * Improve modem emulation to get higher speeds.
  * Change default samplerates to 44100, blocksize to 1024 and prebuffer to 20,
    so that hopefully certain soundcards produce more fluent sound playback.
  * Add some rarely used, but for some games critical flags to the internal
    commands.
  * Add -userconf flag, so that the userspecific configuration can easily be
    used together with *conf configfile.
  * Improve internal timing with repeating timers (especially with the dynamic
    core).</changelog>
<changelog author="ismail@namtrac.org" date="1300276800">- Fix compilation with gcc 4.6</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="idonmez@suse.com" date="1348228800">- Add explicit glu dependency</changelog>
<changelog author="matthias@mailaender.name" date="1349697600">- improved dosbox icon, from wikipedia entry.
- use pkgconfig(sdl) instead of SDL-devel buildrequires</changelog>
<changelog author="martin.jakl@qbicon.cz" date="1387281600">- added missing alsa dependency for midi support (bnc#855514)</changelog>

</package>
<package pkgid="6c7a86bd4330892e098b487d2c0084b7fe44ac851bc0019c51d8dc36ef0571f0" name="dosbox" arch="src">
    <version epoch="0" ver="0.74" rel="19.4.1"/>

<changelog author="lnussel@suse.de" date="1133265600">- add -fno-strict-aliasing
- fix uninitialized variables</changelog>
<changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
<changelog author="lnussel@suse.de" date="1138363200">- add Mesa-devel, libpng-devel and gcc-c++ to BuildRequires</changelog>
<changelog author="lnussel@suse.de" date="1147089600">- new version 0.65
  * 4/15/16/32bpp VESA mode support
  * Lot's of fixes for better vga compatibility
  * Improved CGA composite output
  * Added video capturing to avi
  * Improved screen updating for more speed
  * PCjr machine mode added
  * Speedup cpu cores and fix endian issues
  * FPU core speedup with assembly
  * Improved keyboard and bios handling
  * Lockfree mouse mode added again
  * Improved builtin dos with umbs and better fat support
  * Added VCPI emulation and fixed some issues with ems
  * Improved support for booter games
  * Modem and IPX support improved for multiplayer</changelog>
<changelog author="lnussel@suse.de" date="1151409600">- fix use of uninitialized variables (#188290)</changelog>
<changelog author="lnussel@suse.de" date="1171281600">- fix overflow of a global variable reported by gcc</changelog>
<changelog author="lnussel@suse.de" date="1173096000">- new version 0.70
  * Speed up the dynamic cpu core (certain games get much faster).
  * Added a dynamic fpu on x86 hosts.
  * Improved the cycle guessing code (and make it default).
  * Better and more configurable joystick support.
  * Improved the image and fat drives.
  * Added nullmodem emulation.
  * Various win 3.x enhanchments (video/audio/ems/win32s).
  * Improved CDROM detection and support.
  * Speed up the screen drawing code.
  * Added support for different keyboard layouts.
  * Various fixes to the (C/E/V)GA emulation.
  * Extended and improved all types of emulated memory. (umb/ems/xms)
  * Dynamic core should work on Intel Macs.
  * Various timer related fixes.
  * Added a few more graphic scalers.</changelog>
<changelog author="lnussel@suse.de" date="1180094400">- dont rm -rf %buildroot in %prep</changelog>
<changelog author="lnussel@suse.de" date="1185796800">- new version 0.71
  * Added a new recompiling cpu core which is easier to port!
  * Added a x86_64 and a mipsel_32 recompiling core.
  * Fixed hangups on certain platforms after long gameplay of
    several games.
  * Fix several joystick bugs.
  * Improved cdrom support. (fixes for audio, iso and detection.)
  * Improved SVGA and VESA. (detection and display)
  * Fixed a few textmodes and improved ansi emulation a bit.
  * Fixed pcspeaker and certain types of soundeffects.
  * Added undocumented mousebackdoor.
  * Made mount and imgmount a bit easier to use. (ioctl by default,
    support for ~ and ~username, auto size guessing for images)
  * Fix a few compilation problems on various hosts and a general
    code cleanup.
  * Several small fixes that improve compatibility.</changelog>
<changelog author="lnussel@suse.de" date="1188302400">- new version 0.72
  * Fixed unitialized variable in joystick. (Fixes crashes on Vista and
    Mac OS X)
  * Some bugfixes and speedups to the 64 bit recompiling core.
  * Fixed sign flag on soundblaster dma transfers (Space Quest 6 intro)
  * Fixed a bug in keyboard layout processing code and fixed certain
    layouts.
  * Fixed Dreamweb.
  * Improved speed unlocking when running cycles=max.
  * Fixed a crash related to the tab completion in the shell.
  * Improved aspect correction code. Should now be like how a real monitor
    handles it.
  * Fixed a bug in the xms status report code. (Blake Stone 1.0 shareware)
  * Added a lot more keyboard layouts.
  * Fix crash related to changing the scaler before a screen was created.
  * Hopefully fixed compilation on *bsd.
  * Enabled auto cpu core selection for recompiling core as well.
  * Made the used joystick selectable when 4axis is specified.
  * Added some hints for inexperienced DOS users to the shell.</changelog>
<changelog author="lnussel@suse.de" date="1192449600">- fix build with gcc 4.3</changelog>
<changelog author="lnussel@suse.de" date="1196769600">- fix wrong use of strncat</changelog>
<changelog author="lnussel@suse.de" date="1243512000">- new version 0.73
  * Support for more graphics modes and cards.
  * Improved Vista support.
  * New OPL emulation cores.
  * Sound fixes and improvements for Mac OS X.
  * Lots of compatibility fixes.
  * Lots of cdrom detection improvements.
  * Lots of memory (EMS/XMS) improvements.
  * Various fixes and enhancements for the recompiling core.
  * Support for evdev.
  * Lots of DOS fixes.
  * Slightly faster!
  * More stable.</changelog>
<changelog author="lnussel@suse.de" date="1274270400">- new version 0.74
  * Several small game specific fixes/hacks/support. (Offensive, Roadhog, GTA
    installer, Kingdom O' Magic soundcard detection, Pirate booter, Armored
    Fist installer)
  * Add the S3-specific 640x480 256 color mode. (fixes regression in "Wooden
    Ships and Iron Men" and "I Have No Mouth And I Must Scream")
  * Fix a stack overflow that could crash DOSBox.
  * Add fake microphone input. (fixes Talking Parrot)
  * Modify adlib turn off code, so that it doesn't turn off in cases where the
    same sound is repeated over and over again.
  * Several small fixes to the CDROM audio code.(HOMM2, Redneck Rampage and
    others)
  * Several improvements to the CDROM emulation code. (fixes Alpha Storm and GT
    Racing 97)
  * Some small CPU fixes that might fix something.
  * Handle opcode 0xff subcode 7 as invalid instruction. (fixes dif-2 &amp; others)
  * Some hercules fixes. (Testdrive)
  * Improve support for blanked parts that wrap around to the start of the
    screen. (fixes Magic Circle demo and Sid&amp;Al)
  * Remove old OPL cores as the new ones seem to work very nicely.
  * Modify movie recording code so that the movies aren't corrupt when you exit
    dosbox without stopping the movie.
  * Change RGB3x scaler to look more pretty.
  * Improve initial register values compatility of the GUS.
  * Added autodetection for Gameblaster. (games can find it now)
  * Change render preferences a bit to be more compatible with Windows 7.
  * Add DOS fixes to terminate program. (fixes Fortune Teller)
  * Add FFREEP. (fixes Trucks)
  * Improve FPU ST80 in C mode when writing zero. (fixes Antigok)
  * Add special int10 scanline function. (fixes mz700 and probably lots of
    games that mess with them)
  * Fix scrolling in rarely used video modes. (fixes Orphee)
  * Modify game specific hacks a bit so that Kick off 3 works again.
  * Lots of fixes to the INT10 video parameter table. (Seven spirits of ra and
    others)
  * Add VGA blanking in machine=vgaonly. (used by Alien Carnage)
  * CGA, PCJr, Tandy: Add video blanking, change display start latch timing,
    sync pulse width correction.
  * PCJr, Tandy: implement vertical retrace interrupt.
  * PCJr, CGA: line-by-line video emulation.
  * PCJr: support on-screen change of color modes 4medium to 16low. (used by
    Ghostbusters booter)
  * Hercules: Add green and amber monochrome support.
  * All machines: only update the video timing when needed. (Jungle Hunt,
    others that synchronize to the video screen might profit)
  * Several small DOS fixes.
  * Some UMB related fixes. (The Legacy without UMB)
  * Fix version number of DSP for SB 1.5. (fixes a few games)
  * Several VGA emulation improvements. (Allertone football manager)
  * Some Tandy fixes. (Mech Warrior)
  * Small improvements and fixes to the OPL emulation.
  * Add low level Tandy DAC emulation.
  * Some EMS fixes. (fixes Mortal Kombat and others)
  * Change SoundBlaster DSP reset mechanism, add sb irq acknowledge logic.
    (fixes stmik*based applications)
  * Some interrupt pointer location modifications. (fixes Tinker Tales)
  * Some fixes to the BOOT code. (fixes Last Mission)
  * Respect write-only file information. (fixes Champions of Zulala)
  * Some RTC fix. (fixes Tully Bodine and others)
  * Improve mouse emulation to work better with Water World.
  * Hopefully fix the translation of the configuration file.
  * Speed up and fixes for the recompiler core. (pitfall2 pcjr)
  * Change memory start location. (fixes 7th Guest installer)
  * Several fixes to the batch file handling. (Shift and use the typed first %0
    instead of the parsed %0)
  * Improve file redirection and redirected line ends. (fixes Phantasmagoria 2
    DOS installer)
  * Fix compilation with new MAC os X version.
  * Add 16C550A FIFO support to the serial port emulation.
  * Improve modem emulation to get higher speeds.
  * Change default samplerates to 44100, blocksize to 1024 and prebuffer to 20,
    so that hopefully certain soundcards produce more fluent sound playback.
  * Add some rarely used, but for some games critical flags to the internal
    commands.
  * Add -userconf flag, so that the userspecific configuration can easily be
    used together with *conf configfile.
  * Improve internal timing with repeating timers (especially with the dynamic
    core).</changelog>
<changelog author="ismail@namtrac.org" date="1300276800">- Fix compilation with gcc 4.6</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="idonmez@suse.com" date="1348228800">- Add explicit glu dependency</changelog>
<changelog author="matthias@mailaender.name" date="1349697600">- improved dosbox icon, from wikipedia entry.
- use pkgconfig(sdl) instead of SDL-devel buildrequires</changelog>
<changelog author="martin.jakl@qbicon.cz" date="1387281600">- added missing alsa dependency for midi support (bnc#855514)</changelog>

</package>
<package pkgid="8a8db3b183ae0d6f19aea5c924cf8503d3832c45b135a454efb42a1bbd47e3e3" name="dosbox" arch="x86_64">
    <version epoch="0" ver="0.74" rel="19.4.1"/>

<changelog author="lnussel@suse.de" date="1192449600">- fix build with gcc 4.3</changelog>
<changelog author="lnussel@suse.de" date="1196769600">- fix wrong use of strncat</changelog>
<changelog author="lnussel@suse.de" date="1243512000">- new version 0.73
  * Support for more graphics modes and cards.
  * Improved Vista support.
  * New OPL emulation cores.
  * Sound fixes and improvements for Mac OS X.
  * Lots of compatibility fixes.
  * Lots of cdrom detection improvements.
  * Lots of memory (EMS/XMS) improvements.
  * Various fixes and enhancements for the recompiling core.
  * Support for evdev.
  * Lots of DOS fixes.
  * Slightly faster!
  * More stable.</changelog>
<changelog author="lnussel@suse.de" date="1274270400">- new version 0.74
  * Several small game specific fixes/hacks/support. (Offensive, Roadhog, GTA
    installer, Kingdom O' Magic soundcard detection, Pirate booter, Armored
    Fist installer)
  * Add the S3-specific 640x480 256 color mode. (fixes regression in "Wooden
    Ships and Iron Men" and "I Have No Mouth And I Must Scream")
  * Fix a stack overflow that could crash DOSBox.
  * Add fake microphone input. (fixes Talking Parrot)
  * Modify adlib turn off code, so that it doesn't turn off in cases where the
    same sound is repeated over and over again.
  * Several small fixes to the CDROM audio code.(HOMM2, Redneck Rampage and
    others)
  * Several improvements to the CDROM emulation code. (fixes Alpha Storm and GT
    Racing 97)
  * Some small CPU fixes that might fix something.
  * Handle opcode 0xff subcode 7 as invalid instruction. (fixes dif-2 &amp; others)
  * Some hercules fixes. (Testdrive)
  * Improve support for blanked parts that wrap around to the start of the
    screen. (fixes Magic Circle demo and Sid&amp;Al)
  * Remove old OPL cores as the new ones seem to work very nicely.
  * Modify movie recording code so that the movies aren't corrupt when you exit
    dosbox without stopping the movie.
  * Change RGB3x scaler to look more pretty.
  * Improve initial register values compatility of the GUS.
  * Added autodetection for Gameblaster. (games can find it now)
  * Change render preferences a bit to be more compatible with Windows 7.
  * Add DOS fixes to terminate program. (fixes Fortune Teller)
  * Add FFREEP. (fixes Trucks)
  * Improve FPU ST80 in C mode when writing zero. (fixes Antigok)
  * Add special int10 scanline function. (fixes mz700 and probably lots of
    games that mess with them)
  * Fix scrolling in rarely used video modes. (fixes Orphee)
  * Modify game specific hacks a bit so that Kick off 3 works again.
  * Lots of fixes to the INT10 video parameter table. (Seven spirits of ra and
    others)
  * Add VGA blanking in machine=vgaonly. (used by Alien Carnage)
  * CGA, PCJr, Tandy: Add video blanking, change display start latch timing,
    sync pulse width correction.
  * PCJr, Tandy: implement vertical retrace interrupt.
  * PCJr, CGA: line-by-line video emulation.
  * PCJr: support on-screen change of color modes 4medium to 16low. (used by
    Ghostbusters booter)
  * Hercules: Add green and amber monochrome support.
  * All machines: only update the video timing when needed. (Jungle Hunt,
    others that synchronize to the video screen might profit)
  * Several small DOS fixes.
  * Some UMB related fixes. (The Legacy without UMB)
  * Fix version number of DSP for SB 1.5. (fixes a few games)
  * Several VGA emulation improvements. (Allertone football manager)
  * Some Tandy fixes. (Mech Warrior)
  * Small improvements and fixes to the OPL emulation.
  * Add low level Tandy DAC emulation.
  * Some EMS fixes. (fixes Mortal Kombat and others)
  * Change SoundBlaster DSP reset mechanism, add sb irq acknowledge logic.
    (fixes stmik*based applications)
  * Some interrupt pointer location modifications. (fixes Tinker Tales)
  * Some fixes to the BOOT code. (fixes Last Mission)
  * Respect write-only file information. (fixes Champions of Zulala)
  * Some RTC fix. (fixes Tully Bodine and others)
  * Improve mouse emulation to work better with Water World.
  * Hopefully fix the translation of the configuration file.
  * Speed up and fixes for the recompiler core. (pitfall2 pcjr)
  * Change memory start location. (fixes 7th Guest installer)
  * Several fixes to the batch file handling. (Shift and use the typed first %0
    instead of the parsed %0)
  * Improve file redirection and redirected line ends. (fixes Phantasmagoria 2
    DOS installer)
  * Fix compilation with new MAC os X version.
  * Add 16C550A FIFO support to the serial port emulation.
  * Improve modem emulation to get higher speeds.
  * Change default samplerates to 44100, blocksize to 1024 and prebuffer to 20,
    so that hopefully certain soundcards produce more fluent sound playback.
  * Add some rarely used, but for some games critical flags to the internal
    commands.
  * Add -userconf flag, so that the userspecific configuration can easily be
    used together with *conf configfile.
  * Improve internal timing with repeating timers (especially with the dynamic
    core).</changelog>
<changelog author="ismail@namtrac.org" date="1300276800">- Fix compilation with gcc 4.6</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
<changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
<changelog author="idonmez@suse.com" date="1348228800">- Add explicit glu dependency</changelog>
<changelog author="matthias@mailaender.name" date="1349697600">- improved dosbox icon, from wikipedia entry.
- use pkgconfig(sdl) instead of SDL-devel buildrequires</changelog>
<changelog author="martin.jakl@qbicon.cz" date="1387281600">- added missing alsa dependency for midi support (bnc#855514)</changelog>

</package>
<package pkgid="659c4704ff41930fd0607f8b9459cfa686f628c05d299ab385688f647020e074" name="dosfstools" arch="i586">
    <version epoch="0" ver="3.0.22" rel="2.4.1"/>

<changelog author="pgajdos@suse.cz" date="1265025600">- updated to 3.0.9:
  * A bug in aligning was fixed.</changelog>
<changelog author="pgajdos@suse.cz" date="1284379200">- updated to 3.0.10:
  * LFN handling and false positives with bad filenames were
    corrected.</changelog>
<changelog author="pgajdos@suse.cz" date="1288612800">- fixed:
  * [bnc#639553] -- mkdosfs now detects md raid partition correctly
  * [bnc#649046] -- install dosfslabel
  * spec file cleanup</changelog>
<changelog author="pgajdos@suse.cz" date="1292846400">- fixed dosfslabel crashing and improved label handling in mkdosfs
  and dosfslabel [bnc#657011]</changelog>
<changelog author="pgajdos@suse.cz" date="1299585600">- fixed fsck.vfat crashing [bnc#677236]</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
<changelog author="rschweikert@suse.com" date="1328702400">- place binaries in /usr tree (UsrMerge project)</changelog>
<changelog author="cfarrell@suse.com" date="1348833600">- license update: GPL-3.0+
  No indication that the authors restricted the package to GPL-3.0 (i.e.
  "only"). Accordingly, GPL-3.0+ seems a better choice and is also the
  choice made by Fedora</changelog>
<changelog author="dvaleev@suse.com" date="1351252800">- hack to use just 1 sector for embedded devices. should be made
  into a flag, but this shouldn't break normal systems ...
  lunchpad bug (746262)
- fixes ppc boot from vfat (in case root on raid,lvm,ext4)</changelog>
<changelog author="pgajdos@suse.com" date="1361793600">- update to 3.0.15: bugfixes for device detection, root directory
  allocation, and messages about unicode filenames.
  * dropped dosfstools-filename-buffer-overflow.patch (upstreamed)
  * dropped dosfstools-mdraid-partition.patch (upstreamed)
  * refreshed dosfstools-suse-dirs.patch
  * refreshed ppc-reserved-sectors-fix.patch
    (will be dropped if not upstreamed)
  * dosfstools-label.patch splitted to:
  - dosfstools-create-rootdir-label.patch
  - dosfstools-dosfslabel-forbid-lowercase.patch
  - dosfstools-dosfslabel-from-rootdir.patch
  - dosfstools-fsck-file-name.patch
  - dosfstools-mkdosfs-no-label.patch
  - dosfstools-mkdosfs-uppercase-label.patch
    (will be upstreamed or dropped)</changelog>
<changelog author="pgajdos@suse.com" date="1362398400">- update to 3.0.16: label fixes
  * dropped upstreamed
  - dosfstools-create-rootdir-label.patch
  - dosfstools-dosfslabel-forbid-lowercase.patch
  - dosfstools-dosfslabel-from-rootdir.patch
  - dosfstools-fsck-file-name.patch
  - dosfstools-mkdosfs-no-label.patch
  - dosfstools-mkdosfs-uppercase-label.patch</changelog>
<changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- update to 3.0.17:
  * Fixing segfault in dosfslabel.
  * Allow operation on SH4 CPUs.
  * Finish cleanup of byteswap code.
  * Fix offsetof definition.
  * etc., see ChangeLog
- refreshed ppc-reserved-sectors-fix.patch</changelog>
<changelog author="pgajdos@suse.com" date="1370952000">- update to 3.0.18:
  * Adding initial i18n support for manpages with po4a.
  * Renaming tools to sane namespace and keeping legacy symlinks in place.
    | dosfslabel becomes fatlabel,
    | dosfsck becomes fsck.fat,
    | and mkdosfs becomes mkfs.fat.
  * Correcting spelling typo in boot.c.
  * dosfslabel: Do not read beyond string length (Closes: #709587).
- refreshed both dosfstools-suse-dirs.patch and
  ppc-reserved-sectors-fix.patch
- added dosfstools-system_id-overflow.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- update to 3.0.19:
  * This release fixes  a  segfault with fortify.
- removed dosfstools-system_id-overflow.patch</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 3.0.20
  * This release updates default sectors per cluster for FAT32.
- Remove ppc-reserved-sectors-fix.patch (implemented upstream)
  (use -a switch to disable aligning structures)
- Signature verification; more robust make install call</changelog>
<changelog author="pgajdos@suse.com" date="1374062400">- updated to 3.0.21
  * Minor miscellaneous cleanups.</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 3.0.22:
  * Improved boot compatiblity.</changelog>
<changelog author="pgajdos@suse.com" date="1395057600">- added corrupt-fat.patch [bnc#867122]</changelog>

</package>
<package pkgid="0415c7d4e7dc98007bdfcc48287909051118618ce06fdc61dfb26360e67bf1ef" name="dosfstools" arch="src">
    <version epoch="0" ver="3.0.22" rel="2.4.1"/>

<changelog author="pgajdos@suse.cz" date="1265025600">- updated to 3.0.9:
  * A bug in aligning was fixed.</changelog>
<changelog author="pgajdos@suse.cz" date="1284379200">- updated to 3.0.10:
  * LFN handling and false positives with bad filenames were
    corrected.</changelog>
<changelog author="pgajdos@suse.cz" date="1288612800">- fixed:
  * [bnc#639553] -- mkdosfs now detects md raid partition correctly
  * [bnc#649046] -- install dosfslabel
  * spec file cleanup</changelog>
<changelog author="pgajdos@suse.cz" date="1292846400">- fixed dosfslabel crashing and improved label handling in mkdosfs
  and dosfslabel [bnc#657011]</changelog>
<changelog author="pgajdos@suse.cz" date="1299585600">- fixed fsck.vfat crashing [bnc#677236]</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
<changelog author="rschweikert@suse.com" date="1328702400">- place binaries in /usr tree (UsrMerge project)</changelog>
<changelog author="cfarrell@suse.com" date="1348833600">- license update: GPL-3.0+
  No indication that the authors restricted the package to GPL-3.0 (i.e.
  "only"). Accordingly, GPL-3.0+ seems a better choice and is also the
  choice made by Fedora</changelog>
<changelog author="dvaleev@suse.com" date="1351252800">- hack to use just 1 sector for embedded devices. should be made
  into a flag, but this shouldn't break normal systems ...
  lunchpad bug (746262)
- fixes ppc boot from vfat (in case root on raid,lvm,ext4)</changelog>
<changelog author="pgajdos@suse.com" date="1361793600">- update to 3.0.15: bugfixes for device detection, root directory
  allocation, and messages about unicode filenames.
  * dropped dosfstools-filename-buffer-overflow.patch (upstreamed)
  * dropped dosfstools-mdraid-partition.patch (upstreamed)
  * refreshed dosfstools-suse-dirs.patch
  * refreshed ppc-reserved-sectors-fix.patch
    (will be dropped if not upstreamed)
  * dosfstools-label.patch splitted to:
  - dosfstools-create-rootdir-label.patch
  - dosfstools-dosfslabel-forbid-lowercase.patch
  - dosfstools-dosfslabel-from-rootdir.patch
  - dosfstools-fsck-file-name.patch
  - dosfstools-mkdosfs-no-label.patch
  - dosfstools-mkdosfs-uppercase-label.patch
    (will be upstreamed or dropped)</changelog>
<changelog author="pgajdos@suse.com" date="1362398400">- update to 3.0.16: label fixes
  * dropped upstreamed
  - dosfstools-create-rootdir-label.patch
  - dosfstools-dosfslabel-forbid-lowercase.patch
  - dosfstools-dosfslabel-from-rootdir.patch
  - dosfstools-fsck-file-name.patch
  - dosfstools-mkdosfs-no-label.patch
  - dosfstools-mkdosfs-uppercase-label.patch</changelog>
<changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- update to 3.0.17:
  * Fixing segfault in dosfslabel.
  * Allow operation on SH4 CPUs.
  * Finish cleanup of byteswap code.
  * Fix offsetof definition.
  * etc., see ChangeLog
- refreshed ppc-reserved-sectors-fix.patch</changelog>
<changelog author="pgajdos@suse.com" date="1370952000">- update to 3.0.18:
  * Adding initial i18n support for manpages with po4a.
  * Renaming tools to sane namespace and keeping legacy symlinks in place.
    | dosfslabel becomes fatlabel,
    | dosfsck becomes fsck.fat,
    | and mkdosfs becomes mkfs.fat.
  * Correcting spelling typo in boot.c.
  * dosfslabel: Do not read beyond string length (Closes: #709587).
- refreshed both dosfstools-suse-dirs.patch and
  ppc-reserved-sectors-fix.patch
- added dosfstools-system_id-overflow.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- update to 3.0.19:
  * This release fixes  a  segfault with fortify.
- removed dosfstools-system_id-overflow.patch</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 3.0.20
  * This release updates default sectors per cluster for FAT32.
- Remove ppc-reserved-sectors-fix.patch (implemented upstream)
  (use -a switch to disable aligning structures)
- Signature verification; more robust make install call</changelog>
<changelog author="pgajdos@suse.com" date="1374062400">- updated to 3.0.21
  * Minor miscellaneous cleanups.</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 3.0.22:
  * Improved boot compatiblity.</changelog>
<changelog author="pgajdos@suse.com" date="1395057600">- added corrupt-fat.patch [bnc#867122]</changelog>

</package>
<package pkgid="c91243d7ae90be6167ecc9911964c37c0f674e7f40d44bc8e0ee6831a8f6d5a2" name="dosfstools" arch="x86_64">
    <version epoch="0" ver="3.0.22" rel="2.4.1"/>

<changelog author="pgajdos@suse.cz" date="1265025600">- updated to 3.0.9:
  * A bug in aligning was fixed.</changelog>
<changelog author="pgajdos@suse.cz" date="1284379200">- updated to 3.0.10:
  * LFN handling and false positives with bad filenames were
    corrected.</changelog>
<changelog author="pgajdos@suse.cz" date="1288612800">- fixed:
  * [bnc#639553] -- mkdosfs now detects md raid partition correctly
  * [bnc#649046] -- install dosfslabel
  * spec file cleanup</changelog>
<changelog author="pgajdos@suse.cz" date="1292846400">- fixed dosfslabel crashing and improved label handling in mkdosfs
  and dosfslabel [bnc#657011]</changelog>
<changelog author="pgajdos@suse.cz" date="1299585600">- fixed fsck.vfat crashing [bnc#677236]</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
<changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
<changelog author="rschweikert@suse.com" date="1328702400">- place binaries in /usr tree (UsrMerge project)</changelog>
<changelog author="cfarrell@suse.com" date="1348833600">- license update: GPL-3.0+
  No indication that the authors restricted the package to GPL-3.0 (i.e.
  "only"). Accordingly, GPL-3.0+ seems a better choice and is also the
  choice made by Fedora</changelog>
<changelog author="dvaleev@suse.com" date="1351252800">- hack to use just 1 sector for embedded devices. should be made
  into a flag, but this shouldn't break normal systems ...
  lunchpad bug (746262)
- fixes ppc boot from vfat (in case root on raid,lvm,ext4)</changelog>
<changelog author="pgajdos@suse.com" date="1361793600">- update to 3.0.15: bugfixes for device detection, root directory
  allocation, and messages about unicode filenames.
  * dropped dosfstools-filename-buffer-overflow.patch (upstreamed)
  * dropped dosfstools-mdraid-partition.patch (upstreamed)
  * refreshed dosfstools-suse-dirs.patch
  * refreshed ppc-reserved-sectors-fix.patch
    (will be dropped if not upstreamed)
  * dosfstools-label.patch splitted to:
  - dosfstools-create-rootdir-label.patch
  - dosfstools-dosfslabel-forbid-lowercase.patch
  - dosfstools-dosfslabel-from-rootdir.patch
  - dosfstools-fsck-file-name.patch
  - dosfstools-mkdosfs-no-label.patch
  - dosfstools-mkdosfs-uppercase-label.patch
    (will be upstreamed or dropped)</changelog>
<changelog author="pgajdos@suse.com" date="1362398400">- update to 3.0.16: label fixes
  * dropped upstreamed
  - dosfstools-create-rootdir-label.patch
  - dosfstools-dosfslabel-forbid-lowercase.patch
  - dosfstools-dosfslabel-from-rootdir.patch
  - dosfstools-fsck-file-name.patch
  - dosfstools-mkdosfs-no-label.patch
  - dosfstools-mkdosfs-uppercase-label.patch</changelog>
<changelog author="mmeister@suse.com" date="1364212800">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
<changelog author="pgajdos@suse.com" date="1370260800">- update to 3.0.17:
  * Fixing segfault in dosfslabel.
  * Allow operation on SH4 CPUs.
  * Finish cleanup of byteswap code.
  * Fix offsetof definition.
  * etc., see ChangeLog
- refreshed ppc-reserved-sectors-fix.patch</changelog>
<changelog author="pgajdos@suse.com" date="1370952000">- update to 3.0.18:
  * Adding initial i18n support for manpages with po4a.
  * Renaming tools to sane namespace and keeping legacy symlinks in place.
    | dosfslabel becomes fatlabel,
    | dosfsck becomes fsck.fat,
    | and mkdosfs becomes mkfs.fat.
  * Correcting spelling typo in boot.c.
  * dosfslabel: Do not read beyond string length (Closes: #709587).
- refreshed both dosfstools-suse-dirs.patch and
  ppc-reserved-sectors-fix.patch
- added dosfstools-system_id-overflow.patch</changelog>
<changelog author="pgajdos@suse.com" date="1371038400">- update to 3.0.19:
  * This release fixes  a  segfault with fortify.
- removed dosfstools-system_id-overflow.patch</changelog>
<changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 3.0.20
  * This release updates default sectors per cluster for FAT32.
- Remove ppc-reserved-sectors-fix.patch (implemented upstream)
  (use -a switch to disable aligning structures)
- Signature verification; more robust make install call</changelog>
<changelog author="pgajdos@suse.com" date="1374062400">- updated to 3.0.21
  * Minor miscellaneous cleanups.</changelog>
<changelog author="pgajdos@suse.com" date="1375099200">- updated to 3.0.22:
  * Improved boot compatiblity.</changelog>
<changelog author="pgajdos@suse.com" date="1395057600">- added corrupt-fat.patch [bnc#867122]</changelog>

</package>
<package pkgid="3eda8cdda65335b12743603db972a23cce47e24d43da99833d38869e66c56ae6" name="dpkg" arch="i586">
    <version epoch="0" ver="1.16.16" rel="3.3.1"/>

<changelog author="wolfgang.rosenauer@basyskom.de" date="1280404800">- make 'debcommit -r' work with mercurial 1.6</changelog>
<changelog author="flichtenheld@astaro.com" date="1296216000">- install missing debhelper files
  - install dh
  - install Debian/Debhelper/Buildsystem/*.pm</changelog>
<changelog author="adrian@suse.de" date="1296216001">- fix build on old distros</changelog>
<changelog author="mvyskocil@suse.cz" date="1300276800">- update to dpkg-1.15.8.10
- update to debhelper-7.5.17
- update to devscripts-2.10.71
- see /usr/share/doc/packages/deb/*/changelog for details
- build and install update-alternatives as separate subpackage
- add download urls to source tags
- remove pushd/popd madness in %prep, use only one cd ..
- convert sed archtable hackery to patch and refresh patches
- rewrite a architecture mugging in config.h to be more readable</changelog>
<changelog author="mvyskocil@suse.cz" date="1300363200">- split the u-a to separate spec file to reduce a build cycle</changelog>
<changelog author="flichtenheld@astaro.com" date="1301572800">- Merge openSUSE:Tools changes with system:packagemanager changes</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1322308800">- update to dpkg-1.15.8.11
  * Do not segfault on "dpkg -i --no-act".
  * Fix typo in "dpkg-name --overwrite" argument parsing so that it actually
  works at all. Ubuntu Bug #728708
  * Fix dpkg-split to not corrupt binary part metadata when generating the
  split packages on 32-bit systems.
  * Fix a regression in dpkg-divert where using --rename led to a failure when
  the rename implies crossing file systems.</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1327838400">- update to dpkg-1.15.8.12
  * Do not fail to unpack shared directories missing on the file system
  from packages being replaced by other packages. Debian Bug #631808
  * Defer hardlink renames so that there's never a point were the new
  file contents are accessible from the final path before they have
  been fsync()ed and cannot be executed causing ETXTBSY when trying
  to open the to be installed paths for writing. Debian Bug #635683
  * Add armhf support to ostable and triplettable.
  Debian Bugs #594179, #639674</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1336046400">- install missing parts of devscripts
  * install man pages installed by debian/manpages
  * install symlinks installed by debian/links</changelog>
<changelog author="i@marguerite.su" date="1337601600">- update to dpkg-1.16.3
  * see http://packages.debian.org/changelogs/pool/main/d/dpkg/dpkg_1.16.3/changelog
- update to debhelper 9.20120518
  * Fix versioned dependency on dpkg for xz options. Closes: #672895
  * dh_link: Doc improvement. Closes: #672988
- update to devscripts-2.11.7
  * see http://packages.debian.org/changelogs/pool/main/d/devscripts/devscripts_2.11.7/changelog
- reworked patch. remove version for archtable. for it's universal.
- add dh_make 0.60
  * see http://packages.debian.org/changelogs/pool/main/d/dh-make/dh-make_0.60/changelog
- add dh_autoreconf 6
  * see http://packages.debian.org/changelogs/pool/main/d/dh-autoreconf/dh-autoreconf_6/changelog</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1340712000">- package dpkg separately</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1341576000">- update to dpkg-1.16.7
  * see /usr/share/doc/packages/dpkg/changelog for details
- add Obsoletes and Provides for their deb counterparts
  to dpkg-devel and dpkg-lang. Needed to expand %lang_package
  for that.
- remove SLE10 support from spec, not working anyway</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1348747200">- update to dpkg-1.16.8
  * only translation updates
  * see /usr/share/doc/packages/dpkg/changelog for details
- simplify spec file by removing redundant %if clauses
- only use Supplements: on SUSE, Fedora doesn't know it</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1349956800">- add Recommends on File::FcntlLock, Dpkg::File will
  use it if available</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1364212800">- update to dpkg-1.16.10
  * Add missing @LIBLZMA_LIBS@ to Libs.Private in libdpkg.pc.in
  * Fix OpenPGP armored signature parsing, to be resilient against doctored
  input, including source package control files. deb#695919
  * Fix warning in Dpkg::Source::Archive with «perl -w» due to redefinition
  of getcwd() by removing unused POSIX modules usage. deb#700978
- update to dpkg-1.16.9
  * Fix regression on old-style binNMUs for packages that specify an
  explicit binary version to dpkg-gencontrol, by always fixing up the
  source version. deb#690823
  * Fix dpkg-source regression in "3.0 (quilt)" source packages while
  unapplying patches that remove all files in a directory. deb#683547
  * Fix segfault in field format parsing on empty strings, affecting
  «dpkg-query -W -f ''» and «dpkg-deb -W --showformat=''». lp#1035512
- see /usr/share/doc/packages/dpkg/changelog for details</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1364299200">- Enable test suite
- Fix dpkg-source for SLES 11. Quilt.pm was depending on a
  newer API of File::Path.</changelog>
<changelog author="jengelh@inai.de" date="1372852800">- Add dpkg-sparc.diff to unbreak compilation on sparcv9 build</changelog>
<changelog author="tchvatal@suse.com" date="1433419200">- Version bump to 1.16.16:
  * Various bugfixes all aroud, see changelog file in documentation
  * Fixes CVE-2015-0840 bnc#926749</changelog>

</package>
<package pkgid="1f6bac146f3a41317715166909211e8e790dc125fef921363e40387db496934e" name="dpkg" arch="src">
    <version epoch="0" ver="1.16.16" rel="3.3.1"/>

<changelog author="wolfgang.rosenauer@basyskom.de" date="1280404800">- make 'debcommit -r' work with mercurial 1.6</changelog>
<changelog author="flichtenheld@astaro.com" date="1296216000">- install missing debhelper files
  - install dh
  - install Debian/Debhelper/Buildsystem/*.pm</changelog>
<changelog author="adrian@suse.de" date="1296216001">- fix build on old distros</changelog>
<changelog author="mvyskocil@suse.cz" date="1300276800">- update to dpkg-1.15.8.10
- update to debhelper-7.5.17
- update to devscripts-2.10.71
- see /usr/share/doc/packages/deb/*/changelog for details
- build and install update-alternatives as separate subpackage
- add download urls to source tags
- remove pushd/popd madness in %prep, use only one cd ..
- convert sed archtable hackery to patch and refresh patches
- rewrite a architecture mugging in config.h to be more readable</changelog>
<changelog author="mvyskocil@suse.cz" date="1300363200">- split the u-a to separate spec file to reduce a build cycle</changelog>
<changelog author="flichtenheld@astaro.com" date="1301572800">- Merge openSUSE:Tools changes with system:packagemanager changes</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1322308800">- update to dpkg-1.15.8.11
  * Do not segfault on "dpkg -i --no-act".
  * Fix typo in "dpkg-name --overwrite" argument parsing so that it actually
  works at all. Ubuntu Bug #728708
  * Fix dpkg-split to not corrupt binary part metadata when generating the
  split packages on 32-bit systems.
  * Fix a regression in dpkg-divert where using --rename led to a failure when
  the rename implies crossing file systems.</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1327838400">- update to dpkg-1.15.8.12
  * Do not fail to unpack shared directories missing on the file system
  from packages being replaced by other packages. Debian Bug #631808
  * Defer hardlink renames so that there's never a point were the new
  file contents are accessible from the final path before they have
  been fsync()ed and cannot be executed causing ETXTBSY when trying
  to open the to be installed paths for writing. Debian Bug #635683
  * Add armhf support to ostable and triplettable.
  Debian Bugs #594179, #639674</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1336046400">- install missing parts of devscripts
  * install man pages installed by debian/manpages
  * install symlinks installed by debian/links</changelog>
<changelog author="i@marguerite.su" date="1337601600">- update to dpkg-1.16.3
  * see http://packages.debian.org/changelogs/pool/main/d/dpkg/dpkg_1.16.3/changelog
- update to debhelper 9.20120518
  * Fix versioned dependency on dpkg for xz options. Closes: #672895
  * dh_link: Doc improvement. Closes: #672988
- update to devscripts-2.11.7
  * see http://packages.debian.org/changelogs/pool/main/d/devscripts/devscripts_2.11.7/changelog
- reworked patch. remove version for archtable. for it's universal.
- add dh_make 0.60
  * see http://packages.debian.org/changelogs/pool/main/d/dh-make/dh-make_0.60/changelog
- add dh_autoreconf 6
  * see http://packages.debian.org/changelogs/pool/main/d/dh-autoreconf/dh-autoreconf_6/changelog</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1340712000">- package dpkg separately</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1341576000">- update to dpkg-1.16.7
  * see /usr/share/doc/packages/dpkg/changelog for details
- add Obsoletes and Provides for their deb counterparts
  to dpkg-devel and dpkg-lang. Needed to expand %lang_package
  for that.
- remove SLE10 support from spec, not working anyway</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1348747200">- update to dpkg-1.16.8
  * only translation updates
  * see /usr/share/doc/packages/dpkg/changelog for details
- simplify spec file by removing redundant %if clauses
- only use Supplements: on SUSE, Fedora doesn't know it</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1349956800">- add Recommends on File::FcntlLock, Dpkg::File will
  use it if available</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1364212800">- update to dpkg-1.16.10
  * Add missing @LIBLZMA_LIBS@ to Libs.Private in libdpkg.pc.in
  * Fix OpenPGP armored signature parsing, to be resilient against doctored
  input, including source package control files. deb#695919
  * Fix warning in Dpkg::Source::Archive with «perl -w» due to redefinition
  of getcwd() by removing unused POSIX modules usage. deb#700978
- update to dpkg-1.16.9
  * Fix regression on old-style binNMUs for packages that specify an
  explicit binary version to dpkg-gencontrol, by always fixing up the
  source version. deb#690823
  * Fix dpkg-source regression in "3.0 (quilt)" source packages while
  unapplying patches that remove all files in a directory. deb#683547
  * Fix segfault in field format parsing on empty strings, affecting
  «dpkg-query -W -f ''» and «dpkg-deb -W --showformat=''». lp#1035512
- see /usr/share/doc/packages/dpkg/changelog for details</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1364299200">- Enable test suite
- Fix dpkg-source for SLES 11. Quilt.pm was depending on a
  newer API of File::Path.</changelog>
<changelog author="jengelh@inai.de" date="1372852800">- Add dpkg-sparc.diff to unbreak compilation on sparcv9 build</changelog>
<changelog author="tchvatal@suse.com" date="1433419200">- Version bump to 1.16.16:
  * Various bugfixes all aroud, see changelog file in documentation
  * Fixes CVE-2015-0840 bnc#926749</changelog>

</package>
<package pkgid="11e0beb545f1b4a43a75e97877b8277c751ec004cccdaae0d2ee537257b4b6d1" name="dpkg" arch="x86_64">
    <version epoch="0" ver="1.16.16" rel="3.3.1"/>

<changelog author="wolfgang.rosenauer@basyskom.de" date="1280404800">- make 'debcommit -r' work with mercurial 1.6</changelog>
<changelog author="flichtenheld@astaro.com" date="1296216000">- install missing debhelper files
  - install dh
  - install Debian/Debhelper/Buildsystem/*.pm</changelog>
<changelog author="adrian@suse.de" date="1296216001">- fix build on old distros</changelog>
<changelog author="mvyskocil@suse.cz" date="1300276800">- update to dpkg-1.15.8.10
- update to debhelper-7.5.17
- update to devscripts-2.10.71
- see /usr/share/doc/packages/deb/*/changelog for details
- build and install update-alternatives as separate subpackage
- add download urls to source tags
- remove pushd/popd madness in %prep, use only one cd ..
- convert sed archtable hackery to patch and refresh patches
- rewrite a architecture mugging in config.h to be more readable</changelog>
<changelog author="mvyskocil@suse.cz" date="1300363200">- split the u-a to separate spec file to reduce a build cycle</changelog>
<changelog author="flichtenheld@astaro.com" date="1301572800">- Merge openSUSE:Tools changes with system:packagemanager changes</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1322308800">- update to dpkg-1.15.8.11
  * Do not segfault on "dpkg -i --no-act".
  * Fix typo in "dpkg-name --overwrite" argument parsing so that it actually
  works at all. Ubuntu Bug #728708
  * Fix dpkg-split to not corrupt binary part metadata when generating the
  split packages on 32-bit systems.
  * Fix a regression in dpkg-divert where using --rename led to a failure when
  the rename implies crossing file systems.</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1327838400">- update to dpkg-1.15.8.12
  * Do not fail to unpack shared directories missing on the file system
  from packages being replaced by other packages. Debian Bug #631808
  * Defer hardlink renames so that there's never a point were the new
  file contents are accessible from the final path before they have
  been fsync()ed and cannot be executed causing ETXTBSY when trying
  to open the to be installed paths for writing. Debian Bug #635683
  * Add armhf support to ostable and triplettable.
  Debian Bugs #594179, #639674</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1336046400">- install missing parts of devscripts
  * install man pages installed by debian/manpages
  * install symlinks installed by debian/links</changelog>
<changelog author="i@marguerite.su" date="1337601600">- update to dpkg-1.16.3
  * see http://packages.debian.org/changelogs/pool/main/d/dpkg/dpkg_1.16.3/changelog
- update to debhelper 9.20120518
  * Fix versioned dependency on dpkg for xz options. Closes: #672895
  * dh_link: Doc improvement. Closes: #672988
- update to devscripts-2.11.7
  * see http://packages.debian.org/changelogs/pool/main/d/devscripts/devscripts_2.11.7/changelog
- reworked patch. remove version for archtable. for it's universal.
- add dh_make 0.60
  * see http://packages.debian.org/changelogs/pool/main/d/dh-make/dh-make_0.60/changelog
- add dh_autoreconf 6
  * see http://packages.debian.org/changelogs/pool/main/d/dh-autoreconf/dh-autoreconf_6/changelog</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1340712000">- package dpkg separately</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1341576000">- update to dpkg-1.16.7
  * see /usr/share/doc/packages/dpkg/changelog for details
- add Obsoletes and Provides for their deb counterparts
  to dpkg-devel and dpkg-lang. Needed to expand %lang_package
  for that.
- remove SLE10 support from spec, not working anyway</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1348747200">- update to dpkg-1.16.8
  * only translation updates
  * see /usr/share/doc/packages/dpkg/changelog for details
- simplify spec file by removing redundant %if clauses
- only use Supplements: on SUSE, Fedora doesn't know it</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1349956800">- add Recommends on File::FcntlLock, Dpkg::File will
  use it if available</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1364212800">- update to dpkg-1.16.10
  * Add missing @LIBLZMA_LIBS@ to Libs.Private in libdpkg.pc.in
  * Fix OpenPGP armored signature parsing, to be resilient against doctored
  input, including source package control files. deb#695919
  * Fix warning in Dpkg::Source::Archive with «perl -w» due to redefinition
  of getcwd() by removing unused POSIX modules usage. deb#700978
- update to dpkg-1.16.9
  * Fix regression on old-style binNMUs for packages that specify an
  explicit binary version to dpkg-gencontrol, by always fixing up the
  source version. deb#690823
  * Fix dpkg-source regression in "3.0 (quilt)" source packages while
  unapplying patches that remove all files in a directory. deb#683547
  * Fix segfault in field format parsing on empty strings, affecting
  «dpkg-query -W -f ''» and «dpkg-deb -W --showformat=''». lp#1035512
- see /usr/share/doc/packages/dpkg/changelog for details</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1364299200">- Enable test suite
- Fix dpkg-source for SLES 11. Quilt.pm was depending on a
  newer API of File::Path.</changelog>
<changelog author="jengelh@inai.de" date="1372852800">- Add dpkg-sparc.diff to unbreak compilation on sparcv9 build</changelog>
<changelog author="tchvatal@suse.com" date="1433419200">- Version bump to 1.16.16:
  * Various bugfixes all aroud, see changelog file in documentation
  * Fixes CVE-2015-0840 bnc#926749</changelog>

</package>
<package pkgid="10cef866ad7687ac61e6d166d586646ffbe8869e41bdc44e14eb81416989403a" name="dpkg-devel" arch="i586">
    <version epoch="0" ver="1.16.16" rel="3.3.1"/>

<changelog author="wolfgang.rosenauer@basyskom.de" date="1280404800">- make 'debcommit -r' work with mercurial 1.6</changelog>
<changelog author="flichtenheld@astaro.com" date="1296216000">- install missing debhelper files
  - install dh
  - install Debian/Debhelper/Buildsystem/*.pm</changelog>
<changelog author="adrian@suse.de" date="1296216001">- fix build on old distros</changelog>
<changelog author="mvyskocil@suse.cz" date="1300276800">- update to dpkg-1.15.8.10
- update to debhelper-7.5.17
- update to devscripts-2.10.71
- see /usr/share/doc/packages/deb/*/changelog for details
- build and install update-alternatives as separate subpackage
- add download urls to source tags
- remove pushd/popd madness in %prep, use only one cd ..
- convert sed archtable hackery to patch and refresh patches
- rewrite a architecture mugging in config.h to be more readable</changelog>
<changelog author="mvyskocil@suse.cz" date="1300363200">- split the u-a to separate spec file to reduce a build cycle</changelog>
<changelog author="flichtenheld@astaro.com" date="1301572800">- Merge openSUSE:Tools changes with system:packagemanager changes</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1322308800">- update to dpkg-1.15.8.11
  * Do not segfault on "dpkg -i --no-act".
  * Fix typo in "dpkg-name --overwrite" argument parsing so that it actually
  works at all. Ubuntu Bug #728708
  * Fix dpkg-split to not corrupt binary part metadata when generating the
  split packages on 32-bit systems.
  * Fix a regression in dpkg-divert where using --rename led to a failure when
  the rename implies crossing file systems.</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1327838400">- update to dpkg-1.15.8.12
  * Do not fail to unpack shared directories missing on the file system
  from packages being replaced by other packages. Debian Bug #631808
  * Defer hardlink renames so that there's never a point were the new
  file contents are accessible from the final path before they have
  been fsync()ed and cannot be executed causing ETXTBSY when trying
  to open the to be installed paths for writing. Debian Bug #635683
  * Add armhf support to ostable and triplettable.
  Debian Bugs #594179, #639674</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1336046400">- install missing parts of devscripts
  * install man pages installed by debian/manpages
  * install symlinks installed by debian/links</changelog>
<changelog author="i@marguerite.su" date="1337601600">- update to dpkg-1.16.3
  * see http://packages.debian.org/changelogs/pool/main/d/dpkg/dpkg_1.16.3/changelog
- update to debhelper 9.20120518
  * Fix versioned dependency on dpkg for xz options. Closes: #672895
  * dh_link: Doc improvement. Closes: #672988
- update to devscripts-2.11.7
  * see http://packages.debian.org/changelogs/pool/main/d/devscripts/devscripts_2.11.7/changelog
- reworked patch. remove version for archtable. for it's universal.
- add dh_make 0.60
  * see http://packages.debian.org/changelogs/pool/main/d/dh-make/dh-make_0.60/changelog
- add dh_autoreconf 6
  * see http://packages.debian.org/changelogs/pool/main/d/dh-autoreconf/dh-autoreconf_6/changelog</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1340712000">- package dpkg separately</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1341576000">- update to dpkg-1.16.7
  * see /usr/share/doc/packages/dpkg/changelog for details
- add Obsoletes and Provides for their deb counterparts
  to dpkg-devel and dpkg-lang. Needed to expand %lang_package
  for that.
- remove SLE10 support from spec, not working anyway</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1348747200">- update to dpkg-1.16.8
  * only translation updates
  * see /usr/share/doc/packages/dpkg/changelog for details
- simplify spec file by removing redundant %if clauses
- only use Supplements: on SUSE, Fedora doesn't know it</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1349956800">- add Recommends on File::FcntlLock, Dpkg::File will
  use it if available</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1364212800">- update to dpkg-1.16.10
  * Add missing @LIBLZMA_LIBS@ to Libs.Private in libdpkg.pc.in
  * Fix OpenPGP armored signature parsing, to be resilient against doctored
  input, including source package control files. deb#695919
  * Fix warning in Dpkg::Source::Archive with «perl -w» due to redefinition
  of getcwd() by removing unused POSIX modules usage. deb#700978
- update to dpkg-1.16.9
  * Fix regression on old-style binNMUs for packages that specify an
  explicit binary version to dpkg-gencontrol, by always fixing up the
  source version. deb#690823
  * Fix dpkg-source regression in "3.0 (quilt)" source packages while
  unapplying patches that remove all files in a directory. deb#683547
  * Fix segfault in field format parsing on empty strings, affecting
  «dpkg-query -W -f ''» and «dpkg-deb -W --showformat=''». lp#1035512
- see /usr/share/doc/packages/dpkg/changelog for details</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1364299200">- Enable test suite
- Fix dpkg-source for SLES 11. Quilt.pm was depending on a
  newer API of File::Path.</changelog>
<changelog author="jengelh@inai.de" date="1372852800">- Add dpkg-sparc.diff to unbreak compilation on sparcv9 build</changelog>
<changelog author="tchvatal@suse.com" date="1433419200">- Version bump to 1.16.16:
  * Various bugfixes all aroud, see changelog file in documentation
  * Fixes CVE-2015-0840 bnc#926749</changelog>

</package>
<package pkgid="f2d44373fc218a4ed2dbbfe62e583f1ca3f93a60e19f910e41913ca069bba6ee" name="dpkg-devel" arch="x86_64">
    <version epoch="0" ver="1.16.16" rel="3.3.1"/>

<changelog author="wolfgang.rosenauer@basyskom.de" date="1280404800">- make 'debcommit -r' work with mercurial 1.6</changelog>
<changelog author="flichtenheld@astaro.com" date="1296216000">- install missing debhelper files
  - install dh
  - install Debian/Debhelper/Buildsystem/*.pm</changelog>
<changelog author="adrian@suse.de" date="1296216001">- fix build on old distros</changelog>
<changelog author="mvyskocil@suse.cz" date="1300276800">- update to dpkg-1.15.8.10
- update to debhelper-7.5.17
- update to devscripts-2.10.71
- see /usr/share/doc/packages/deb/*/changelog for details
- build and install update-alternatives as separate subpackage
- add download urls to source tags
- remove pushd/popd madness in %prep, use only one cd ..
- convert sed archtable hackery to patch and refresh patches
- rewrite a architecture mugging in config.h to be more readable</changelog>
<changelog author="mvyskocil@suse.cz" date="1300363200">- split the u-a to separate spec file to reduce a build cycle</changelog>
<changelog author="flichtenheld@astaro.com" date="1301572800">- Merge openSUSE:Tools changes with system:packagemanager changes</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1322308800">- update to dpkg-1.15.8.11
  * Do not segfault on "dpkg -i --no-act".
  * Fix typo in "dpkg-name --overwrite" argument parsing so that it actually
  works at all. Ubuntu Bug #728708
  * Fix dpkg-split to not corrupt binary part metadata when generating the
  split packages on 32-bit systems.
  * Fix a regression in dpkg-divert where using --rename led to a failure when
  the rename implies crossing file systems.</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1327838400">- update to dpkg-1.15.8.12
  * Do not fail to unpack shared directories missing on the file system
  from packages being replaced by other packages. Debian Bug #631808
  * Defer hardlink renames so that there's never a point were the new
  file contents are accessible from the final path before they have
  been fsync()ed and cannot be executed causing ETXTBSY when trying
  to open the to be installed paths for writing. Debian Bug #635683
  * Add armhf support to ostable and triplettable.
  Debian Bugs #594179, #639674</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1336046400">- install missing parts of devscripts
  * install man pages installed by debian/manpages
  * install symlinks installed by debian/links</changelog>
<changelog author="i@marguerite.su" date="1337601600">- update to dpkg-1.16.3
  * see http://packages.debian.org/changelogs/pool/main/d/dpkg/dpkg_1.16.3/changelog
- update to debhelper 9.20120518
  * Fix versioned dependency on dpkg for xz options. Closes: #672895
  * dh_link: Doc improvement. Closes: #672988
- update to devscripts-2.11.7
  * see http://packages.debian.org/changelogs/pool/main/d/devscripts/devscripts_2.11.7/changelog
- reworked patch. remove version for archtable. for it's universal.
- add dh_make 0.60
  * see http://packages.debian.org/changelogs/pool/main/d/dh-make/dh-make_0.60/changelog
- add dh_autoreconf 6
  * see http://packages.debian.org/changelogs/pool/main/d/dh-autoreconf/dh-autoreconf_6/changelog</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1340712000">- package dpkg separately</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1341576000">- update to dpkg-1.16.7
  * see /usr/share/doc/packages/dpkg/changelog for details
- add Obsoletes and Provides for their deb counterparts
  to dpkg-devel and dpkg-lang. Needed to expand %lang_package
  for that.
- remove SLE10 support from spec, not working anyway</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1348747200">- update to dpkg-1.16.8
  * only translation updates
  * see /usr/share/doc/packages/dpkg/changelog for details
- simplify spec file by removing redundant %if clauses
- only use Supplements: on SUSE, Fedora doesn't know it</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1349956800">- add Recommends on File::FcntlLock, Dpkg::File will
  use it if available</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1364212800">- update to dpkg-1.16.10
  * Add missing @LIBLZMA_LIBS@ to Libs.Private in libdpkg.pc.in
  * Fix OpenPGP armored signature parsing, to be resilient against doctored
  input, including source package control files. deb#695919
  * Fix warning in Dpkg::Source::Archive with «perl -w» due to redefinition
  of getcwd() by removing unused POSIX modules usage. deb#700978
- update to dpkg-1.16.9
  * Fix regression on old-style binNMUs for packages that specify an
  explicit binary version to dpkg-gencontrol, by always fixing up the
  source version. deb#690823
  * Fix dpkg-source regression in "3.0 (quilt)" source packages while
  unapplying patches that remove all files in a directory. deb#683547
  * Fix segfault in field format parsing on empty strings, affecting
  «dpkg-query -W -f ''» and «dpkg-deb -W --showformat=''». lp#1035512
- see /usr/share/doc/packages/dpkg/changelog for details</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1364299200">- Enable test suite
- Fix dpkg-source for SLES 11. Quilt.pm was depending on a
  newer API of File::Path.</changelog>
<changelog author="jengelh@inai.de" date="1372852800">- Add dpkg-sparc.diff to unbreak compilation on sparcv9 build</changelog>
<changelog author="tchvatal@suse.com" date="1433419200">- Version bump to 1.16.16:
  * Various bugfixes all aroud, see changelog file in documentation
  * Fixes CVE-2015-0840 bnc#926749</changelog>

</package>
<package pkgid="af43b5bd42f2391077f2895b63e78965335c007f6f6e38a48c94e56a1827fef0" name="dpkg-lang" arch="noarch">
    <version epoch="0" ver="1.16.16" rel="3.3.1"/>

<changelog author="wolfgang.rosenauer@basyskom.de" date="1280404800">- make 'debcommit -r' work with mercurial 1.6</changelog>
<changelog author="flichtenheld@astaro.com" date="1296216000">- install missing debhelper files
  - install dh
  - install Debian/Debhelper/Buildsystem/*.pm</changelog>
<changelog author="adrian@suse.de" date="1296216001">- fix build on old distros</changelog>
<changelog author="mvyskocil@suse.cz" date="1300276800">- update to dpkg-1.15.8.10
- update to debhelper-7.5.17
- update to devscripts-2.10.71
- see /usr/share/doc/packages/deb/*/changelog for details
- build and install update-alternatives as separate subpackage
- add download urls to source tags
- remove pushd/popd madness in %prep, use only one cd ..
- convert sed archtable hackery to patch and refresh patches
- rewrite a architecture mugging in config.h to be more readable</changelog>
<changelog author="mvyskocil@suse.cz" date="1300363200">- split the u-a to separate spec file to reduce a build cycle</changelog>
<changelog author="flichtenheld@astaro.com" date="1301572800">- Merge openSUSE:Tools changes with system:packagemanager changes</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1322308800">- update to dpkg-1.15.8.11
  * Do not segfault on "dpkg -i --no-act".
  * Fix typo in "dpkg-name --overwrite" argument parsing so that it actually
  works at all. Ubuntu Bug #728708
  * Fix dpkg-split to not corrupt binary part metadata when generating the
  split packages on 32-bit systems.
  * Fix a regression in dpkg-divert where using --rename led to a failure when
  the rename implies crossing file systems.</changelog>
<changelog author="coolo@suse.com" date="1324382400">- remove call to suse_update_config (very old work around)</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1327838400">- update to dpkg-1.15.8.12
  * Do not fail to unpack shared directories missing on the file system
  from packages being replaced by other packages. Debian Bug #631808
  * Defer hardlink renames so that there's never a point were the new
  file contents are accessible from the final path before they have
  been fsync()ed and cannot be executed causing ETXTBSY when trying
  to open the to be installed paths for writing. Debian Bug #635683
  * Add armhf support to ostable and triplettable.
  Debian Bugs #594179, #639674</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1336046400">- install missing parts of devscripts
  * install man pages installed by debian/manpages
  * install symlinks installed by debian/links</changelog>
<changelog author="i@marguerite.su" date="1337601600">- update to dpkg-1.16.3
  * see http://packages.debian.org/changelogs/pool/main/d/dpkg/dpkg_1.16.3/changelog
- update to debhelper 9.20120518
  * Fix versioned dependency on dpkg for xz options. Closes: #672895
  * dh_link: Doc improvement. Closes: #672988
- update to devscripts-2.11.7
  * see http://packages.debian.org/changelogs/pool/main/d/devscripts/devscripts_2.11.7/changelog
- reworked patch. remove version for archtable. for it's universal.
- add dh_make 0.60
  * see http://packages.debian.org/changelogs/pool/main/d/dh-make/dh-make_0.60/changelog
- add dh_autoreconf 6
  * see http://packages.debian.org/changelogs/pool/main/d/dh-autoreconf/dh-autoreconf_6/changelog</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1340712000">- package dpkg separately</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1341576000">- update to dpkg-1.16.7
  * see /usr/share/doc/packages/dpkg/changelog for details
- add Obsoletes and Provides for their deb counterparts
  to dpkg-devel and dpkg-lang. Needed to expand %lang_package
  for that.
- remove SLE10 support from spec, not working anyway</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1348747200">- update to dpkg-1.16.8
  * only translation updates
  * see /usr/share/doc/packages/dpkg/changelog for details
- simplify spec file by removing redundant %if clauses
- only use Supplements: on SUSE, Fedora doesn't know it</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1349956800">- add Recommends on File::FcntlLock, Dpkg::File will
  use it if available</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1364212800">- update to dpkg-1.16.10
  * Add missing @LIBLZMA_LIBS@ to Libs.Private in libdpkg.pc.in
  * Fix OpenPGP armored signature parsing, to be resilient against doctored
  input, including source package control files. deb#695919
  * Fix warning in Dpkg::Source::Archive with «perl -w» due to redefinition
  of getcwd() by removing unused POSIX modules usage. deb#700978
- update to dpkg-1.16.9
  * Fix regression on old-style binNMUs for packages that specify an
  explicit binary version to dpkg-gencontrol, by always fixing up the
  source version. deb#690823
  * Fix dpkg-source regression in "3.0 (quilt)" source packages while
  unapplying patches that remove all files in a directory. deb#683547
  * Fix segfault in field format parsing on empty strings, affecting
  «dpkg-query -W -f ''» and «dpkg-deb -W --showformat=''». lp#1035512
- see /usr/share/doc/packages/dpkg/changelog for details</changelog>
<changelog author="frank.lichtenheld@sophos.com" date="1364299200">- Enable test suite
- Fix dpkg-source for SLES 11. Quilt.pm was depending on a
  newer API of File::Path.</changelog>
<changelog author="jengelh@inai.de" date="1372852800">- Add dpkg-sparc.diff to unbreak compilation on sparcv9 build</changelog>
<changelog author="tchvatal@suse.com" date="1433419200">- Version bump to 1.16.16:
  * Various bugfixes all aroud, see changelog file in documentation
  * Fixes CVE-2015-0840 bnc#926749</changelog>

</package>
<package pkgid="ac26c62a7c90f977e7e1fe906288d3c885a9cd9a9ce386b457bfb3a026e2eb6c" name="dragonplayer" arch="i586">
    <version epoch="0" ver="4.11.3" rel="18.1"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="d7b4c7dd46624dda555d29e7d2b7ee025eb8030c220f9490cb24af997b101e75" name="dragonplayer" arch="i586">
    <version epoch="0" ver="4.11.4" rel="186.5"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="9c86774c29335c668c5354f1eef7dc5934e080473d78390eeda6eaf7497b89f6" name="dragonplayer" arch="i586">
    <version epoch="0" ver="4.11.5" rel="196.3"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="d24cd6bd5df2443cff4cc812fa8274d60537e9a7728196aa5bee314297590b92" name="dragonplayer" arch="src">
    <version epoch="0" ver="4.11.3" rel="18.1"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="5beeac10f2ea312c92191bd828d25e19b8266003756c404600b88549b4f12532" name="dragonplayer" arch="src">
    <version epoch="0" ver="4.11.4" rel="186.5"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="972e91fe3a1627d571d39a10c523e62e871a190ecaf4ec0b507a7a34bda3a0d1" name="dragonplayer" arch="src">
    <version epoch="0" ver="4.11.5" rel="196.3"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="7fcc87da9e55609dff12dbd9d66f308043fe1b8c9d57fdb3f6b2c2e8c2643ff7" name="dragonplayer" arch="x86_64">
    <version epoch="0" ver="4.11.3" rel="18.1"/>

<changelog author="tittiatcoke@gmail.com" date="1351857600">- Update to 4.9.3
  * see http://kde.org/announcements/announce-4.9.3.php for details</changelog>
<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>

</package>
<package pkgid="91c744f62fff520bfb36ac1e1b91f0cafc08ff65940e26014583a4e18bfbe126" name="dragonplayer" arch="x86_64">
    <version epoch="0" ver="4.11.4" rel="186.5"/>

<changelog author="nico.kruber@gmail.com" date="1353412800">- Fix the SLES build (%make_install is not expanded on SLES)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>

</package>
<package pkgid="b71d8819ad0c75a42afec56be1e7a6f351d0b5ab5c0a4cb9320621919a302e10" name="dragonplayer" arch="x86_64">
    <version epoch="0" ver="4.11.5" rel="196.3"/>

<changelog author="tittiatcoke@gmail.com" date="1353758400">- Update to 4.9.80
  * See http://www.kde.org/announcements/announce-4.10-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1354363200">- Update to 4.9.90
  * This is the second Beta release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1355918400">- Update to 4.9.95
  * This is the first RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1357214400">- Update to 4.9.97
  * This is the second RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1358424000">- Update to 4.9.98
  * This is the third RC release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1359633600">- Update to 4.10.0
  * This is the final release for 4.10. Contains bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1362225600">- Update to 4.10.1
  * Contains bug fixes. See http://www.kde.org/announcements/
  for more information</changelog>
<changelog author="tittiatcoke@gmail.com" date="1364817600">- Update to 4.10.2 \n  * Bugfixes</changelog>
<changelog author="tittiatcoke@gmail.com" date="1367668800">- Update to 4.10.3
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.3.php
  * resolves bnc#818500</changelog>
<changelog author="tittiatcoke@gmail.com" date="1370088000">- Update to 4.10.4
  * Bugfix release
  * See http://www.kde.org/announcements/announce-4.10.4.php
  * resolves bnc#8122760</changelog>
<changelog author="tittiatcoke@gmail.com" date="1371124800">- Update to 4.10.80
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1372334400">- Update to 4.10.90
  * KDE 4.11 Beta 1 release
  * See http://www.kde.org/announcements/announce-4.11-beta2.php</changelog>
<changelog author="cgiboudeaux@gmx.com" date="1373889600">- Update to 4.10.95
  * KDE 4.11 RC 1 release
  * See http://www.kde.org/announcements/announce-4.11-rc1.php</changelog>
<changelog author="hrvoje.senjan@gmail.com" date="1374753600">- Update to 4.10.97
  * KDE 4.11 RC 2 release
  * See http://www.kde.org/announcements/announce-4.11-rc2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1375963200">- Update to 4.11.0
  * KDE 4.11 Final release
  * See http://www.kde.org/announcements/4.11/</changelog>
<changelog author="tittiatcoke@gmail.com" date="1378036800">- Update to 4.11.1
  * KDE 4.11.1 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.1.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1380369600">- Update to 4.11.2
  * KDE 4.11.2 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.2.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1383393600">- Update to 4.11.3
  * KDE 4.11.3 bugfix release
  * See http://www.kde.org/announcements/announce-4.11.3.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1385899200">- Update to 4.11.4
  * KDE 4.11.4 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.4.php</changelog>
<changelog author="tittiatcoke@gmail.com" date="1388836800">- Update to 4.11.5
  * KDE 4.11.5 maintenance release
  * See http://www.kde.org/announcements/announce-4.11.5.php</changelog>

</package>
<package pkgid="c3866bca2e4159146b9b78e39437b2e9f1397aae461ee020db287a74b40f3f54" name="dropbear" arch="i586">
    <version epoch="0" ver="2013.60" rel="2.4.1"/>

<changelog author="thardeck@suse.com" date="1339588800">- initial version 2012.55</changelog>
<changelog author="thardeck@suse.com" date="1339761600">- updated spec file - changed the group</changelog>
<changelog author="thardeck@suse.com" date="1340107200">- added init daemon with key generation option
- added sysconfig file with default configuration</changelog>
<changelog author="thardeck@suse.com" date="1341057600">- added systemd service files for 12.1 and later
- cleaned up sysconfig and rcdropbear files</changelog>
<changelog author="thardeck@suse.com" date="1341835200">- fixed typo in service file</changelog>
<changelog author="thardeck@suse.com" date="1343908800">- removed PAM dependency since Dropbear should be usable in initrd and PAM wasn't used without an additional patch anyway https://wiki.yoctoproject.org/wiki/PAM_Integration#dropbear</changelog>
<changelog author="thardeck@suse.com" date="1363953600">- imported upstream version 2013.56
  * Allow specifying cipher (-c) and MAC (-m) lists for dbclient
  * Allow using 'none' cipher or MAC (off by default, use options.h). Encryption
  is used during authentication then disabled, similar to OpenSSH HPN mode
  * Allow a user in immediately if the account has a blank password and blank
  passwords are enabled
  * Include a few extra sources of entropy from /proc on Linux, hash private keys
  as well. Dropbear will also write gathered entropy back into /dev/urandom
  * Added hmac-sha2-256 and hmac-sha2-512 support (off by default, use options.h)
  * Don't sent bad address "localhost" for -R forward connections,
  reported by Denis Bider
  * Add "-B" runtime option to allow blank passwords
  * Allow using IPv6 bracket notation for addresses in server "-p" option, from Ben Jencks
  * A few improvements for Android from Reimar Döffinger
  * Fix memory leak for TCP forwarded connections to hosts that timed out,
  reported by Norbert Benczúr. Appears to be a very long-standing bug.
  * Fix "make clean" for out of tree builds
  * Fix compilation when ENABLE_{SVR,CLI}_AGENTFWD are unset</changelog>
<changelog author="thardeck@suse.com" date="1366372800">- imported upstream version 2013.58
  * Fix building with Zlib disabled, thanks to Hans Harder and cuma@freetz
  * Use % as a separator for ports, fixes scp in multihop mode, from Hans Harder
  * Reject logins for other users when running as non-root, from Hans Harder
  * Disable client immediate authentication request by default, it prevents passwordless logins from working</changelog>
<changelog author="thardeck@suse.com" date="1366459200">- reverted init file installation on 12.3</changelog>
<changelog author="thardeck@suse.com" date="1381147200">- imported upstream version 2013.59
  * Fix crash from -J command
    Thanks to Lluís Batlle i Rossell and Arnaud Mouiche for patches
  * Avoid reading too much from /proc/net/rt_cache since that causes
    system slowness.
  * Improve EOF handling for half-closed connections
    Thanks to Catalin Patulea
  * Send a banner message to report PAM error messages intended for the user
    Patch from Martin Donnelly
  * Limit the size of decompressed payloads, avoids memory exhaustion denial
    of service
    Thanks to Logan Lamb for reporting and investigating it
  * Avoid disclosing existence of valid users through inconsistent delays
    Thanks to Logan Lamb for reporting
  * Update config.guess and config.sub for newer architectures
  * Avoid segfault in server for locked accounts
  * "make install" now installs manpages
    dropbearkey.8 has been renamed to dropbearkey.1
    manpage added for dropbearconvert
  * Get rid of one second delay when running non-interactive commands</changelog>
<changelog author="thardeck@suse.com" date="1381406400">- provided links for download sources
- employed gpg-offline - verify sources</changelog>
<changelog author="thardeck@suse.com" date="1382011200">- imported upstream version 2013.60
  * Fix "make install" so that it doesn't always install to /bin and /sbin
  * Fix "make install MULTI=1", installing manpages failed
  * Fix "make install" when scp is included since it has no manpage
  * Make --disable-bundled-libtom work
- used as bug fix release for bnc#845306 - VUL-0: CVE-2013-4421</changelog>

</package>
<package pkgid="879c998a0e97fba865a0275e90cb4a670593cb4696895bd617f1e2bc9ac13d93" name="dropbear" arch="i586">
    <version epoch="0" ver="2016.72" rel="2.7.1"/>

<changelog author="thardeck@suse.com" date="1343908800">- removed PAM dependency since Dropbear should be usable in initrd and PAM wasn't used without an additional patch anyway https://wiki.yoctoproject.org/wiki/PAM_Integration#dropbear</changelog>
<changelog author="thardeck@suse.com" date="1363953600">- imported upstream version 2013.56
  * Allow specifying cipher (-c) and MAC (-m) lists for dbclient
  * Allow using 'none' cipher or MAC (off by default, use options.h). Encryption
  is used during authentication then disabled, similar to OpenSSH HPN mode
  * Allow a user in immediately if the account has a blank password and blank
  passwords are enabled
  * Include a few extra sources of entropy from /proc on Linux, hash private keys
  as well. Dropbear will also write gathered entropy back into /dev/urandom
  * Added hmac-sha2-256 and hmac-sha2-512 support (off by default, use options.h)
  * Don't sent bad address "localhost" for -R forward connections,
  reported by Denis Bider
  * Add "-B" runtime option to allow blank passwords
  * Allow using IPv6 bracket notation for addresses in server "-p" option, from Ben Jencks
  * A few improvements for Android from Reimar Döffinger
  * Fix memory leak for TCP forwarded connections to hosts that timed out,
  reported by Norbert Benczúr. Appears to be a very long-standing bug.
  * Fix "make clean" for out of tree builds
  * Fix compilation when ENABLE_{SVR,CLI}_AGENTFWD are unset</changelog>
<changelog author="thardeck@suse.com" date="1366372800">- imported upstream version 2013.58
  * Fix building with Zlib disabled, thanks to Hans Harder and cuma@freetz
  * Use % as a separator for ports, fixes scp in multihop mode, from Hans Harder
  * Reject logins for other users when running as non-root, from Hans Harder
  * Disable client immediate authentication request by default, it prevents passwordless logins from working</changelog>
<changelog author="thardeck@suse.com" date="1366459200">- reverted init file installation on 12.3</changelog>
<changelog author="thardeck@suse.com" date="1381147200">- imported upstream version 2013.59
  * Fix crash from -J command
    Thanks to Lluís Batlle i Rossell and Arnaud Mouiche for patches
  * Avoid reading too much from /proc/net/rt_cache since that causes
    system slowness.
  * Improve EOF handling for half-closed connections
    Thanks to Catalin Patulea
  * Send a banner message to report PAM error messages intended for the user
    Patch from Martin Donnelly
  * Limit the size of decompressed payloads, avoids memory exhaustion denial
    of service
    Thanks to Logan Lamb for reporting and investigating it
  * Avoid disclosing existence of valid users through inconsistent delays
    Thanks to Logan Lamb for reporting
  * Update config.guess and config.sub for newer architectures
  * Avoid segfault in server for locked accounts
  * "make install" now installs manpages
    dropbearkey.8 has been renamed to dropbearkey.1
    manpage added for dropbearconvert
  * Get rid of one second delay when running non-interactive commands</changelog>
<changelog author="thardeck@suse.com" date="1381406400">- provided links for download sources
- employed gpg-offline - verify sources</changelog>
<changelog author="thardeck@suse.com" date="1382011200">- imported upstream version 2013.60
  * Fix "make install" so that it doesn't always install to /bin and /sbin
  * Fix "make install MULTI=1", installing manpages failed
  * Fix "make install" when scp is included since it has no manpage
  * Make --disable-bundled-libtom work
- used as bug fix release for bnc#845306 - VUL-0: CVE-2013-4421</changelog>
<changelog author="thardeck@suse.com" date="1386158400">- imported upstream version 2013.62
  * Disable "interactive" QoS connection options when a connection doesn't
    have a PTY (eg scp, rsync). Thanks to Catalin Patulea for the patch.
  * Log when a hostkey is generated with -R, fix some bugs in handling server
    hostkey commandline options
  * Fix crash in Dropbearconvert and 521 bit key, reported by NiLuJe
  * Update config.guess and config.sub again
  * ECC (elliptic curve) support. Supports ECDSA hostkeys (requires new keys to
    be generated) and ECDH for setting up encryption keys (no intervention
    required). This is significantly faster.
  * curve25519-sha256@libssh.org support for setting up encryption keys. This is
    another elliptic curve mode with less potential of NSA interference in
    algorithm parameters. curve25519-donna code thanks to Adam Langley
  * -R option to automatically generate hostkeys. This is recommended for
    embedded platforms since it allows the system random number device
    /dev/urandom a longer startup time to generate a secure seed before the
    hostkey is required.
  * Compile fixes for old vendor compilers like Tru64 from Daniel Richard G.
  * Make authorized_keys handling more robust, don't exit encountering
    malformed lines. Thanks to Lorin Hochstein and Mark Stillwell</changelog>
<changelog author="thardeck@suse.com" date="1392811200">- update to upstream version 2014.63
  * Fix ~. to terminate a client interactive session after waking a laptop
  from sleep.
  * Changed port separator syntax again, now using host^port. This is because
  IPv6 link-local addresses use %. Reported by Gui Iribarren
  * Avoid constantly relinking dropbearmulti target, fix "make install"
  for multi target, thanks to Mike Frysinger
  * Avoid getting stuck in a loop writing huge key files, reported by Bruno
  Thomsen
  * Don't link dropbearkey or dropbearconvert to libz or libutil,
  thanks to Nicolas Boos
  * Fix linking -lcrypt on systems without /usr/lib, thanks to Nicolas Boos
  * Avoid crash on exit due to cleaned up keys before last packets are sent,
  debugged by Ronald Wahl
  * Fix a race condition in rekeying where Dropbear would exit if it received a
  still-in-flight packet after initiating rekeying. Reported by Oliver Metz.
  This is a longstanding bug but is triggered more easily since 2013.57
  * [...]
- updated service files and activated building of ecdsa keys
- only package the old init service in distributions without systemd
- adapted spec to follow systemd package guidelines
- cleaned up spec file</changelog>
<changelog author="thardeck@suse.com" date="1392897600">- fixed automatic tarball verfication
- updated regular init script to also create ECDSA keys</changelog>
<changelog author="thardeck@suse.com" date="1406548800">- removed obsolete gpg soure code verifcation workaround
- added missing systemd entries for dropbear-keygen.service
- updated to upstream version 2014.64
  * Fix compiling with ECDSA and DSS disabled
  * Don't exit abruptly if too many outgoing packets are queued for writev(). Patch
    thanks to Ronny Meeus
  * The -K keepalive option now behaves more like OpenSSH's "ServerAliveInterval".
    If no response is received after 3 keepalives then the session is terminated. This
    will close connections faster than waiting for a TCP timeout.
  * Rework TCP priority setting. New settings are
    if (connecting || ptys || x11) tos = LOWDELAY
    else if (tcp_forwards) tos = 0
    else tos = BULK
    Thanks to Catalin Patulea for the suggestion.
  * Improve handling of many concurrent new TCP forwarded connections, should now
    be able to handle as many as MAX_CHANNELS. Thanks to Eduardo Silva for reporting
    and investigating it.
  * Make sure that exit messages from the client are printed, regression in 2013.57
  * Use monotonic clock where available, timeouts won't be affected by system time
    changes
  * Add -V for version</changelog>
<changelog author="thardeck@suse.com" date="1407758400">- updated to upstream version 2014.65
  * Fix 2014.64 regression, server session hang on exit with scp (and probably
    others), thanks to NiLuJe for tracking it down
  * Fix 2014.64 regression, clock_gettime() error handling which broke on older
    Linux kernels, reported by NiLuJe
  * Fix 2014.64 regression, writev() could occassionally fail with EAGAIN which
    wasn't caught
  * Avoid error message when trying to set QoS on proxycommand or multihop pipes
  * Use /usr/bin/xauth, thanks to Mike Frysinger
  * Don't exit the client if the local user entry can't be found, thanks to iquaba</changelog>
<changelog author="thardeck@suse.com" date="1414152000">- updated to upstream version 2014.66
  * Use the same keepalive handling behaviour as OpenSSH. This will work better
    with some SSH implementations that have different behaviour with unknown
    message types.
  * Don't reply with SSH_MSG_UNIMPLEMENTED when we receive a reply to our own
    keepalive message
  * Set $SSH_CLIENT to keep bash happy, patch from Ryan Cleere
  * Fix wtmp which broke since 2013.62, patch from Whoopie</changelog>
<changelog author="thardeck@suse.com" date="1417694400">- replaced deprecated gpg-offline check by obs-service-source_validator</changelog>
<changelog author="thardeck@suse.com" date="1422446400">- updated to upstream version 2015.67
  * Call fsync() after generating private keys to ensure they aren't lost if a
    reboot occurs. Thanks to Peter Korsgaard
  * Disable non-delayed zlib compression by default on the server. Can be
    enabled if required for old clients with DROPBEAR_SERVER_DELAY_ZLIB
  * Default client key path ~/.ssh/id_dropbear
  * Prefer stronger algorithms by default, from Fedor Brunner.
    AES256 over 3DES
    Diffie-hellman group14 over group1
  * Add option to disable CBC ciphers.
  * Disable twofish in default options.h
  * Enable sha2 HMAC algorithms by default, the code was already required
    for ECC key exchange. sha1 is the first preference still for performance.
  * Fix installing dropbear.8 in a separate build directory, from Like Ma
  * Allow configure to succeed if libtomcrypt/libtommath are missing, from Elan Ruusamäe
  * Don't crash if ssh-agent provides an unknown type of key. From Catalin Patulea
  * Minor bug fixes, a few issues found by Coverity scan</changelog>
<changelog author="thardeck@suse.com" date="1423137600">- fixed checksum URL</changelog>
<changelog author="thardeck@suse.com" date="1439208000">- updated to upstream version 2015.68
  * Reduce local data copying for improved efficiency. Measured 30%
    increase in throughput for connections to localhost
  * Forwarded TCP ports connect asynchronously and try all available addresses
    (IPv4, IPv6, round robin DNS)
  * Fix all compile warnings, many patches from Gaël Portay
    Note that configure with -Werror may not be successful on some platforms (OS X)
    and some configuration options may still result in unused variable
    warnings.
  * Use TCP Fast Open on Linux if available. Saves a round trip at connection
    to hosts that have previously been connected.
    Needs a recent Linux kernel and possibly "sysctl -w net.ipv4.tcp_fastopen=3"
    Client side is disabled by default pending further compatibility testing
    with networks and systems.
  * Increase maximum command length to 9000 bytes
  * Free memory before exiting, patch from Thorsten Horstmann. Useful for
    Dropbear ports to embedded systems and for checking memory leaks
    with valgrind. Only partially implemented for dbclient.
    This is disabled by default, enable with DROPBEAR_CLEANUP in sysoptions.h
  * DROPBEAR_DEFAULT_CLI_AUTHKEY setting now always prepends home directory unless
    there is a leading slash (~ isn't treated specially)
  * Fix small ECC memory leaks
  * Tighten validation of Diffie-Hellman parameters, from Florent Daigniere of
    Matta Consulting. Odds of bad values are around 2**-512 -- improbable.
  * Twofish-ctr cipher is supported though disabled by default
  * Fix pre-authentication timeout when waiting for client SSH-2.0 banner, thanks
    to CL Ouyang
  * Fix null pointer crash with restrictions in authorized_keys without a command, patch from
    Guilhem Moulin
  * Ensure authentication timeout is handled while reading the initial banner,
    thanks to CL Ouyang for finding it.
  * Fix null pointer crash when handling bad ECC keys. Found by afl-fuzz</changelog>
<changelog author="thardeck@suse.com" date="1448539200">- updated to upstream version 2015.70
  * Fix server password authentication on Linux, broke in 2015.69
  * Fix crash when forwarded TCP connections fail to connect (bug introduced in 2015.68)
  * Avoid hang on session close when multiple sessions are started, affects Qt Creator
    Patch from Andrzej Szombierski
  * Reduce per-channel memory consumption in common case, increase default
    channel limit from 100 to 1000 which should improve SOCKS forwarding for modern
    webpages
  * Handle multiple command line arguments in a single flag, thanks to Guilhem Moulin
  * Manpage improvements from Guilhem Moulin
  * Build fixes for Android from Mike Frysinger
  * Don't display the MOTD when an explicit command is run from Guilhem Moulin
  * Check curve25519 shared secret isn't zero</changelog>
<changelog author="thardeck@suse.com" date="1449230400">- updated to upstream version 2015.71
  * Fix "bad buf_incrpos" when data is transferred, broke in 2015.69
  * Fix crash on exit when -p address:port is used, broke in 2015.68
  * Fix building with only ENABLE_CLI_REMOTETCPFWD given, patch from Konstantin Tokarev
  * Fix bad configure script test which didn't work with dash shell, patch from Juergen Daubert,
    broke in 2015.70
  * Fix server race condition that could cause sessions to hang on exit,
    https://github.com/robotframework/SSHLibrary/issues/128</changelog>
<changelog author="thardeck@suse.com" date="1457697600">- updated to upstream version 2016.72
  * Validate X11 forwarding input. Could allow bypass of authorized_keys command= restrictions,
    found by github.com/tintinweb. Thanks for Damien Miller for a patch.
- used as bug fix release for bnc#970633 - VUL-0: CVE-2016-3116</changelog>

</package>
<package pkgid="d395737957cfdb3d2929e2d4c1920df8dc23bd4f41e455aa863972d5c43ba5b7" name="dropbear" arch="src">
    <version epoch="0" ver="2013.60" rel="2.4.1"/>

<changelog author="thardeck@suse.com" date="1339588800">- initial version 2012.55</changelog>
<changelog author="thardeck@suse.com" date="1339761600">- updated spec file - changed the group</changelog>
<changelog author="thardeck@suse.com" date="1340107200">- added init daemon with key generation option
- added sysconfig file with default configuration</changelog>
<changelog author="thardeck@suse.com" date="1341057600">- added systemd service files for 12.1 and later
- cleaned up sysconfig and rcdropbear files</changelog>
<changelog author="thardeck@suse.com" date="1341835200">- fixed typo in service file</changelog>
<changelog author="thardeck@suse.com" date="1343908800">- removed PAM dependency since Dropbear should be usable in initrd and PAM wasn't used without an additional patch anyway https://wiki.yoctoproject.org/wiki/PAM_Integration#dropbear</changelog>
<changelog author="thardeck@suse.com" date="1363953600">- imported upstream version 2013.56
  * Allow specifying cipher (-c) and MAC (-m) lists for dbclient
  * Allow using 'none' cipher or MAC (off by default, use options.h). Encryption
  is used during authentication then disabled, similar to OpenSSH HPN mode
  * Allow a user in immediately if the account has a blank password and blank
  passwords are enabled
  * Include a few extra sources of entropy from /proc on Linux, hash private keys
  as well. Dropbear will also write gathered entropy back into /dev/urandom
  * Added hmac-sha2-256 and hmac-sha2-512 support (off by default, use options.h)
  * Don't sent bad address "localhost" for -R forward connections,
  reported by Denis Bider
  * Add "-B" runtime option to allow blank passwords
  * Allow using IPv6 bracket notation for addresses in server "-p" option, from Ben Jencks
  * A few improvements for Android from Reimar Döffinger
  * Fix memory leak for TCP forwarded connections to hosts that timed out,
  reported by Norbert Benczúr. Appears to be a very long-standing bug.
  * Fix "make clean" for out of tree builds
  * Fix compilation when ENABLE_{SVR,CLI}_AGENTFWD are unset</changelog>
<changelog author="thardeck@suse.com" date="1366372800">- imported upstream version 2013.58
  * Fix building with Zlib disabled, thanks to Hans Harder and cuma@freetz
  * Use % as a separator for ports, fixes scp in multihop mode, from Hans Harder
  * Reject logins for other users when running as non-root, from Hans Harder
  * Disable client immediate authentication request by default, it prevents passwordless logins from working</changelog>
<changelog author="thardeck@suse.com" date="1366459200">- reverted init file installation on 12.3</changelog>
<changelog author="thardeck@suse.com" date="1381147200">- imported upstream version 2013.59
  * Fix crash from -J command
    Thanks to Lluís Batlle i Rossell and Arnaud Mouiche for patches
  * Avoid reading too much from /proc/net/rt_cache since that causes
    system slowness.
  * Improve EOF handling for half-closed connections
    Thanks to Catalin Patulea
  * Send a banner message to report PAM error messages intended for the user
    Patch from Martin Donnelly
  * Limit the size of decompressed payloads, avoids memory exhaustion denial
    of service
    Thanks to Logan Lamb for reporting and investigating it
  * Avoid disclosing existence of valid users through inconsistent delays
    Thanks to Logan Lamb for reporting
  * Update config.guess and config.sub for newer architectures
  * Avoid segfault in server for locked accounts
  * "make install" now installs manpages
    dropbearkey.8 has been renamed to dropbearkey.1
    manpage added for dropbearconvert
  * Get rid of one second delay when running non-interactive commands</changelog>
<changelog author="thardeck@suse.com" date="1381406400">- provided links for download sources
- employed gpg-offline - verify sources</changelog>
<changelog author="thardeck@suse.com" date="1382011200">- imported upstream version 2013.60
  * Fix "make install" so that it doesn't always install to /bin and /sbin
  * Fix "make install MULTI=1", installing manpages failed
  * Fix "make install" when scp is included since it has no manpage
  * Make --disable-bundled-libtom work
- used as bug fix release for bnc#845306 - VUL-0: CVE-2013-4421</changelog>

</package>
<package pkgid="2b42b6433c688315c1e7fff278f8966ba7a5f07405d89ae5dd827993252cef26" name="dropbear" arch="src">
    <version epoch="0" ver="2016.72" rel="2.7.1"/>

<changelog author="thardeck@suse.com" date="1343908800">- removed PAM dependency since Dropbear should be usable in initrd and PAM wasn't used without an additional patch anyway https://wiki.yoctoproject.org/wiki/PAM_Integration#dropbear</changelog>
<changelog author="thardeck@suse.com" date="1363953600">- imported upstream version 2013.56
  * Allow specifying cipher (-c) and MAC (-m) lists for dbclient
  * Allow using 'none' cipher or MAC (off by default, use options.h). Encryption
  is used during authentication then disabled, similar to OpenSSH HPN mode
  * Allow a user in immediately if the account has a blank password and blank
  passwords are enabled
  * Include a few extra sources of entropy from /proc on Linux, hash private keys
  as well. Dropbear will also write gathered entropy back into /dev/urandom
  * Added hmac-sha2-256 and hmac-sha2-512 support (off by default, use options.h)
  * Don't sent bad address "localhost" for -R forward connections,
  reported by Denis Bider
  * Add "-B" runtime option to allow blank passwords
  * Allow using IPv6 bracket notation for addresses in server "-p" option, from Ben Jencks
  * A few improvements for Android from Reimar Döffinger
  * Fix memory leak for TCP forwarded connections to hosts that timed out,
  reported by Norbert Benczúr. Appears to be a very long-standing bug.
  * Fix "make clean" for out of tree builds
  * Fix compilation when ENABLE_{SVR,CLI}_AGENTFWD are unset</changelog>
<changelog author="thardeck@suse.com" date="1366372800">- imported upstream version 2013.58
  * Fix building with Zlib disabled, thanks to Hans Harder and cuma@freetz
  * Use % as a separator for ports, fixes scp in multihop mode, from Hans Harder
  * Reject logins for other users when running as non-root, from Hans Harder
  * Disable client immediate authentication request by default, it prevents passwordless logins from working</changelog>
<changelog author="thardeck@suse.com" date="1366459200">- reverted init file installation on 12.3</changelog>
<changelog author="thardeck@suse.com" date="1381147200">- imported upstream version 2013.59
  * Fix crash from -J command
    Thanks to Lluís Batlle i Rossell and Arnaud Mouiche for patches
  * Avoid reading too much from /proc/net/rt_cache since that causes
    system slowness.
  * Improve EOF handling for half-closed connections
    Thanks to Catalin Patulea
  * Send a banner message to report PAM error messages intended for the user
    Patch from Martin Donnelly
  * Limit the size of decompressed payloads, avoids memory exhaustion denial
    of service
    Thanks to Logan Lamb for reporting and investigating it
  * Avoid disclosing existence of valid users through inconsistent delays
    Thanks to Logan Lamb for reporting
  * Update config.guess and config.sub for newer architectures
  * Avoid segfault in server for locked accounts
  * "make install" now installs manpages
    dropbearkey.8 has been renamed to dropbearkey.1
    manpage added for dropbearconvert
  * Get rid of one second delay when running non-interactive commands</changelog>
<changelog author="thardeck@suse.com" date="1381406400">- provided links for download sources
- employed gpg-offline - verify sources</changelog>
<changelog author="thardeck@suse.com" date="1382011200">- imported upstream version 2013.60
  * Fix "make install" so that it doesn't always install to /bin and /sbin
  * Fix "make install MULTI=1", installing manpages failed
  * Fix "make install" when scp is included since it has no manpage
  * Make --disable-bundled-libtom work
- used as bug fix release for bnc#845306 - VUL-0: CVE-2013-4421</changelog>
<changelog author="thardeck@suse.com" date="1386158400">- imported upstream version 2013.62
  * Disable "interactive" QoS connection options when a connection doesn't
    have a PTY (eg scp, rsync). Thanks to Catalin Patulea for the patch.
  * Log when a hostkey is generated with -R, fix some bugs in handling server
    hostkey commandline options
  * Fix crash in Dropbearconvert and 521 bit key, reported by NiLuJe
  * Update config.guess and config.sub again
  * ECC (elliptic curve) support. Supports ECDSA hostkeys (requires new keys to
    be generated) and ECDH for setting up encryption keys (no intervention
    required). This is significantly faster.
  * curve25519-sha256@libssh.org support for setting up encryption keys. This is
    another elliptic curve mode with less potential of NSA interference in
    algorithm parameters. curve25519-donna code thanks to Adam Langley
  * -R option to automatically generate hostkeys. This is recommended for
    embedded platforms since it allows the system random number device
    /dev/urandom a longer startup time to generate a secure seed before the
    hostkey is required.
  * Compile fixes for old vendor compilers like Tru64 from Daniel Richard G.
  * Make authorized_keys handling more robust, don't exit encountering
    malformed lines. Thanks to Lorin Hochstein and Mark Stillwell</changelog>
<changelog author="thardeck@suse.com" date="1392811200">- update to upstream version 2014.63
  * Fix ~. to terminate a client interactive session after waking a laptop
  from sleep.
  * Changed port separator syntax again, now using host^port. This is because
  IPv6 link-local addresses use %. Reported by Gui Iribarren
  * Avoid constantly relinking dropbearmulti target, fix "make install"
  for multi target, thanks to Mike Frysinger
  * Avoid getting stuck in a loop writing huge key files, reported by Bruno
  Thomsen
  * Don't link dropbearkey or dropbearconvert to libz or libutil,
  thanks to Nicolas Boos
  * Fix linking -lcrypt on systems without /usr/lib, thanks to Nicolas Boos
  * Avoid crash on exit due to cleaned up keys before last packets are sent,
  debugged by Ronald Wahl
  * Fix a race condition in rekeying where Dropbear would exit if it received a
  still-in-flight packet after initiating rekeying. Reported by Oliver Metz.
  This is a longstanding bug but is triggered more easily since 2013.57
  * [...]
- updated service files and activated building of ecdsa keys
- only package the old init service in distributions without systemd
- adapted spec to follow systemd package guidelines
- cleaned up spec file</changelog>
<changelog author="thardeck@suse.com" date="1392897600">- fixed automatic tarball verfication
- updated regular init script to also create ECDSA keys</changelog>
<changelog author="thardeck@suse.com" date="1406548800">- removed obsolete gpg soure code verifcation workaround
- added missing systemd entries for dropbear-keygen.service
- updated to upstream version 2014.64
  * Fix compiling with ECDSA and DSS disabled
  * Don't exit abruptly if too many outgoing packets are queued for writev(). Patch
    thanks to Ronny Meeus
  * The -K keepalive option now behaves more like OpenSSH's "ServerAliveInterval".
    If no response is received after 3 keepalives then the session is terminated. This
    will close connections faster than waiting for a TCP timeout.
  * Rework TCP priority setting. New settings are
    if (connecting || ptys || x11) tos = LOWDELAY
    else if (tcp_forwards) tos = 0
    else tos = BULK
    Thanks to Catalin Patulea for the suggestion.
  * Improve handling of many concurrent new TCP forwarded connections, should now
    be able to handle as many as MAX_CHANNELS. Thanks to Eduardo Silva for reporting
    and investigating it.
  * Make sure that exit messages from the client are printed, regression in 2013.57
  * Use monotonic clock where available, timeouts won't be affected by system time
    changes
  * Add -V for version</changelog>
<changelog author="thardeck@suse.com" date="1407758400">- updated to upstream version 2014.65
  * Fix 2014.64 regression, server session hang on exit with scp (and probably
    others), thanks to NiLuJe for tracking it down
  * Fix 2014.64 regression, clock_gettime() error handling which broke on older
    Linux kernels, reported by NiLuJe
  * Fix 2014.64 regression, writev() could occassionally fail with EAGAIN which
    wasn't caught
  * Avoid error message when trying to set QoS on proxycommand or multihop pipes
  * Use /usr/bin/xauth, thanks to Mike Frysinger
  * Don't exit the client if the local user entry can't be found, thanks to iquaba</changelog>
<changelog author="thardeck@suse.com" date="1414152000">- updated to upstream version 2014.66
  * Use the same keepalive handling behaviour as OpenSSH. This will work better
    with some SSH implementations that have different behaviour with unknown
    message types.
  * Don't reply with SSH_MSG_UNIMPLEMENTED when we receive a reply to our own
    keepalive message
  * Set $SSH_CLIENT to keep bash happy, patch from Ryan Cleere
  * Fix wtmp which broke since 2013.62, patch from Whoopie</changelog>
<changelog author="thardeck@suse.com" date="1417694400">- replaced deprecated gpg-offline check by obs-service-source_validator</changelog>
<changelog author="thardeck@suse.com" date="1422446400">- updated to upstream version 2015.67
  * Call fsync() after generating private keys to ensure they aren't lost if a
    reboot occurs. Thanks to Peter Korsgaard
  * Disable non-delayed zlib compression by default on the server. Can be
    enabled if required for old clients with DROPBEAR_SERVER_DELAY_ZLIB
  * Default client key path ~/.ssh/id_dropbear
  * Prefer stronger algorithms by default, from Fedor Brunner.
    AES256 over 3DES
    Diffie-hellman group14 over group1
  * Add option to disable CBC ciphers.
  * Disable twofish in default options.h
  * Enable sha2 HMAC algorithms by default, the code was already required
    for ECC key exchange. sha1 is the first preference still for performance.
  * Fix installing dropbear.8 in a separate build directory, from Like Ma
  * Allow configure to succeed if libtomcrypt/libtommath are missing, from Elan Ruusamäe
  * Don't crash if ssh-agent provides an unknown type of key. From Catalin Patulea
  * Minor bug fixes, a few issues found by Coverity scan</changelog>
<changelog author="thardeck@suse.com" date="1423137600">- fixed checksum URL</changelog>
<changelog author="thardeck@suse.com" date="1439208000">- updated to upstream version 2015.68
  * Reduce local data copying for improved efficiency. Measured 30%
    increase in throughput for connections to localhost
  * Forwarded TCP ports connect asynchronously and try all available addresses
    (IPv4, IPv6, round robin DNS)
  * Fix all compile warnings, many patches from Gaël Portay
    Note that configure with -Werror may not be successful on some platforms (OS X)
    and some configuration options may still result in unused variable
    warnings.
  * Use TCP Fast Open on Linux if available. Saves a round trip at connection
    to hosts that have previously been connected.
    Needs a recent Linux kernel and possibly "sysctl -w net.ipv4.tcp_fastopen=3"
    Client side is disabled by default pending further compatibility testing
    with networks and systems.
  * Increase maximum command length to 9000 bytes
  * Free memory before exiting, patch from Thorsten Horstmann. Useful for
    Dropbear ports to embedded systems and for checking memory leaks
    with valgrind. Only partially implemented for dbclient.
    This is disabled by default, enable with DROPBEAR_CLEANUP in sysoptions.h
  * DROPBEAR_DEFAULT_CLI_AUTHKEY setting now always prepends home directory unless
    there is a leading slash (~ isn't treated specially)
  * Fix small ECC memory leaks
  * Tighten validation of Diffie-Hellman parameters, from Florent Daigniere of
    Matta Consulting. Odds of bad values are around 2**-512 -- improbable.
  * Twofish-ctr cipher is supported though disabled by default
  * Fix pre-authentication timeout when waiting for client SSH-2.0 banner, thanks
    to CL Ouyang
  * Fix null pointer crash with restrictions in authorized_keys without a command, patch from
    Guilhem Moulin
  * Ensure authentication timeout is handled while reading the initial banner,
    thanks to CL Ouyang for finding it.
  * Fix null pointer crash when handling bad ECC keys. Found by afl-fuzz</changelog>
<changelog author="thardeck@suse.com" date="1448539200">- updated to upstream version 2015.70
  * Fix server password authentication on Linux, broke in 2015.69
  * Fix crash when forwarded TCP connections fail to connect (bug introduced in 2015.68)
  * Avoid hang on session close when multiple sessions are started, affects Qt Creator
    Patch from Andrzej Szombierski
  * Reduce per-channel memory consumption in common case, increase default
    channel limit from 100 to 1000 which should improve SOCKS forwarding for modern
    webpages
  * Handle multiple command line arguments in a single flag, thanks to Guilhem Moulin
  * Manpage improvements from Guilhem Moulin
  * Build fixes for Android from Mike Frysinger
  * Don't display the MOTD when an explicit command is run from Guilhem Moulin
  * Check curve25519 shared secret isn't zero</changelog>
<changelog author="thardeck@suse.com" date="1449230400">- updated to upstream version 2015.71
  * Fix "bad buf_incrpos" when data is transferred, broke in 2015.69
  * Fix crash on exit when -p address:port is used, broke in 2015.68
  * Fix building with only ENABLE_CLI_REMOTETCPFWD given, patch from Konstantin Tokarev
  * Fix bad configure script test which didn't work with dash shell, patch from Juergen Daubert,
    broke in 2015.70
  * Fix server race condition that could cause sessions to hang on exit,
    https://github.com/robotframework/SSHLibrary/issues/128</changelog>
<changelog author="thardeck@suse.com" date="1457697600">- updated to upstream version 2016.72
  * Validate X11 forwarding input. Could allow bypass of authorized_keys command= restrictions,
    found by github.com/tintinweb. Thanks for Damien Miller for a patch.
- used as bug fix release for bnc#970633 - VUL-0: CVE-2016-3116</changelog>

</package>
<package pkgid="8da0e6373eccaeaf2a4ceaf91863548c37bbd46458e30e0b3ec759f44f8c38ca" name="dropbear" arch="x86_64">
    <version epoch="0" ver="2013.60" rel="2.4.1"/>

<changelog author="thardeck@suse.com" date="1339588800">- initial version 2012.55</changelog>
<changelog author="thardeck@suse.com" date="1339761600">- updated spec file - changed the group</changelog>
<changelog author="thardeck@suse.com" date="1340107200">- added init daemon with key generation option
- added sysconfig file with default configuration</changelog>
<changelog author="thardeck@suse.com" date="1341057600">- added systemd service files for 12.1 and later
- cleaned up sysconfig and rcdropbear files</changelog>
<changelog author="thardeck@suse.com" date="1341835200">- fixed typo in service file</changelog>
<changelog author="thardeck@suse.com" date="1343908800">- removed PAM dependency since Dropbear should be usable in initrd and PAM wasn't used without an additional patch anyway https://wiki.yoctoproject.org/wiki/PAM_Integration#dropbear</changelog>
<changelog author="thardeck@suse.com" date="1363953600">- imported upstream version 2013.56
  * Allow specifying cipher (-c) and MAC (-m) lists for dbclient
  * Allow using 'none' cipher or MAC (off by default, use options.h). Encryption
  is used during authentication then disabled, similar to OpenSSH HPN mode
  * Allow a user in immediately if the account has a blank password and blank
  passwords are enabled
  * Include a few extra sources of entropy from /proc on Linux, hash private keys
  as well. Dropbear will also write gathered entropy back into /dev/urandom
  * Added hmac-sha2-256 and hmac-sha2-512 support (off by default, use options.h)
  * Don't sent bad address "localhost" for -R forward connections,
  reported by Denis Bider
  * Add "-B" runtime option to allow blank passwords
  * Allow using IPv6 bracket notation for addresses in server "-p" option, from Ben Jencks
  * A few improvements for Android from Reimar Döffinger
  * Fix memory leak for TCP forwarded connections to hosts that timed out,
  reported by Norbert Benczúr. Appears to be a very long-standing bug.
  * Fix "make clean" for out of tree builds
  * Fix compilation when ENABLE_{SVR,CLI}_AGENTFWD are unset</changelog>
<changelog author="thardeck@suse.com" date="1366372800">- imported upstream version 2013.58
  * Fix building with Zlib disabled, thanks to Hans Harder and cuma@freetz
  * Use % as a separator for ports, fixes scp in multihop mode, from Hans Harder
  * Reject logins for other users when running as non-root, from Hans Harder
  * Disable client immediate authentication request by default, it prevents passwordless logins from working</changelog>
<changelog author="thardeck@suse.com" date="1366459200">- reverted init file installation on 12.3</changelog>
<changelog author="thardeck@suse.com" date="1381147200">- imported upstream version 2013.59
  * Fix crash from -J command
    Thanks to Lluís Batlle i Rossell and Arnaud Mouiche for patches
  * Avoid reading too much from /proc/net/rt_cache since that causes
    system slowness.
  * Improve EOF handling for half-closed connections
    Thanks to Catalin Patulea
  * Send a banner message to report PAM error messages intended for the user
    Patch from Martin Donnelly
  * Limit the size of decompressed payloads, avoids memory exhaustion denial
    of service
    Thanks to Logan Lamb for reporting and investigating it
  * Avoid disclosing existence of valid users through inconsistent delays
    Thanks to Logan Lamb for reporting
  * Update config.guess and config.sub for newer architectures
  * Avoid segfault in server for locked accounts
  * "make install" now installs manpages
    dropbearkey.8 has been renamed to dropbearkey.1
    manpage added for dropbearconvert
  * Get rid of one second delay when running non-interactive commands</changelog>
<changelog author="thardeck@suse.com" date="1381406400">- provided links for download sources
- employed gpg-offline - verify sources</changelog>
<changelog author="thardeck@suse.com" date="1382011200">- imported upstream version 2013.60
  * Fix "make install" so that it doesn't always install to /bin and /sbin
  * Fix "make install MULTI=1", installing manpages failed
  * Fix "make install" when scp is included since it has no manpage
  * Make --disable-bundled-libtom work
- used as bug fix release for bnc#845306 - VUL-0: CVE-2013-4421</changelog>

</package>
<package pkgid="f74b178fa8fc0bfb881b73ff543ef5af2902b8974180cf23d0981d21bf535c3b" name="dropbear" arch="x86_64">
    <version epoch="0" ver="2016.72" rel="2.7.1"/>

<changelog author="thardeck@suse.com" date="1343908800">- removed PAM dependency since Dropbear should be usable in initrd and PAM wasn't used without an additional patch anyway https://wiki.yoctoproject.org/wiki/PAM_Integration#dropbear</changelog>
<changelog author="thardeck@suse.com" date="1363953600">- imported upstream version 2013.56
  * Allow specifying cipher (-c) and MAC (-m) lists for dbclient
  * Allow using 'none' cipher or MAC (off by default, use options.h). Encryption
  is used during authentication then disabled, similar to OpenSSH HPN mode
  * Allow a user in immediately if the account has a blank password and blank
  passwords are enabled
  * Include a few extra sources of entropy from /proc on Linux, hash private keys
  as well. Dropbear will also write gathered entropy back into /dev/urandom
  * Added hmac-sha2-256 and hmac-sha2-512 support (off by default, use options.h)
  * Don't sent bad address "localhost" for -R forward connections,
  reported by Denis Bider
  * Add "-B" runtime option to allow blank passwords
  * Allow using IPv6 bracket notation for addresses in server "-p" option, from Ben Jencks
  * A few improvements for Android from Reimar Döffinger
  * Fix memory leak for TCP forwarded connections to hosts that timed out,
  reported by Norbert Benczúr. Appears to be a very long-standing bug.
  * Fix "make clean" for out of tree builds
  * Fix compilation when ENABLE_{SVR,CLI}_AGENTFWD are unset</changelog>
<changelog author="thardeck@suse.com" date="1366372800">- imported upstream version 2013.58
  * Fix building with Zlib disabled, thanks to Hans Harder and cuma@freetz
  * Use % as a separator for ports, fixes scp in multihop mode, from Hans Harder
  * Reject logins for other users when running as non-root, from Hans Harder
  * Disable client immediate authentication request by default, it prevents passwordless logins from working</changelog>
<changelog author="thardeck@suse.com" date="1366459200">- reverted init file installation on 12.3</changelog>
<changelog author="thardeck@suse.com" date="1381147200">- imported upstream version 2013.59
  * Fix crash from -J command
    Thanks to Lluís Batlle i Rossell and Arnaud Mouiche for patches
  * Avoid reading too much from /proc/net/rt_cache since that causes
    system slowness.
  * Improve EOF handling for half-closed connections
    Thanks to Catalin Patulea
  * Send a banner message to report PAM error messages intended for the user
    Patch from Martin Donnelly
  * Limit the size of decompressed payloads, avoids memory exhaustion denial
    of service
    Thanks to Logan Lamb for reporting and investigating it
  * Avoid disclosing existence of valid users through inconsistent delays
    Thanks to Logan Lamb for reporting
  * Update config.guess and config.sub for newer architectures
  * Avoid segfault in server for locked accounts
  * "make install" now installs manpages
    dropbearkey.8 has been renamed to dropbearkey.1
    manpage added for dropbearconvert
  * Get rid of one second delay when running non-interactive commands</changelog>
<changelog author="thardeck@suse.com" date="1381406400">- provided links for download sources
- employed gpg-offline - verify sources</changelog>
<changelog author="thardeck@suse.com" date="1382011200">- imported upstream version 2013.60
  * Fix "make install" so that it doesn't always install to /bin and /sbin
  * Fix "make install MULTI=1", installing manpages failed
  * Fix "make install" when scp is included since it has no manpage
  * Make --disable-bundled-libtom work
- used as bug fix release for bnc#845306 - VUL-0: CVE-2013-4421</changelog>
<changelog author="thardeck@suse.com" date="1386158400">- imported upstream version 2013.62
  * Disable "interactive" QoS connection options when a connection doesn't
    have a PTY (eg scp, rsync). Thanks to Catalin Patulea for the patch.
  * Log when a hostkey is generated with -R, fix some bugs in handling server
    hostkey commandline options
  * Fix crash in Dropbearconvert and 521 bit key, reported by NiLuJe
  * Update config.guess and config.sub again
  * ECC (elliptic curve) support. Supports ECDSA hostkeys (requires new keys to
    be generated) and ECDH for setting up encryption keys (no intervention
    required). This is significantly faster.
  * curve25519-sha256@libssh.org support for setting up encryption keys. This is
    another elliptic curve mode with less potential of NSA interference in
    algorithm parameters. curve25519-donna code thanks to Adam Langley
  * -R option to automatically generate hostkeys. This is recommended for
    embedded platforms since it allows the system random number device
    /dev/urandom a longer startup time to generate a secure seed before the
    hostkey is required.
  * Compile fixes for old vendor compilers like Tru64 from Daniel Richard G.
  * Make authorized_keys handling more robust, don't exit encountering
    malformed lines. Thanks to Lorin Hochstein and Mark Stillwell</changelog>
<changelog author="thardeck@suse.com" date="1392811200">- update to upstream version 2014.63
  * Fix ~. to terminate a client interactive session after waking a laptop
  from sleep.
  * Changed port separator syntax again, now using host^port. This is because
  IPv6 link-local addresses use %. Reported by Gui Iribarren
  * Avoid constantly relinking dropbearmulti target, fix "make install"
  for multi target, thanks to Mike Frysinger
  * Avoid getting stuck in a loop writing huge key files, reported by Bruno
  Thomsen
  * Don't link dropbearkey or dropbearconvert to libz or libutil,
  thanks to Nicolas Boos
  * Fix linking -lcrypt on systems without /usr/lib, thanks to Nicolas Boos
  * Avoid crash on exit due to cleaned up keys before last packets are sent,
  debugged by Ronald Wahl
  * Fix a race condition in rekeying where Dropbear would exit if it received a
  still-in-flight packet after initiating rekeying. Reported by Oliver Metz.
  This is a longstanding bug but is triggered more easily since 2013.57
  * [...]
- updated service files and activated building of ecdsa keys
- only package the old init service in distributions without systemd
- adapted spec to follow systemd package guidelines
- cleaned up spec file</changelog>
<changelog author="thardeck@suse.com" date="1392897600">- fixed automatic tarball verfication
- updated regular init script to also create ECDSA keys</changelog>
<changelog author="thardeck@suse.com" date="1406548800">- removed obsolete gpg soure code verifcation workaround
- added missing systemd entries for dropbear-keygen.service
- updated to upstream version 2014.64
  * Fix compiling with ECDSA and DSS disabled
  * Don't exit abruptly if too many outgoing packets are queued for writev(). Patch
    thanks to Ronny Meeus
  * The -K keepalive option now behaves more like OpenSSH's "ServerAliveInterval".
    If no response is received after 3 keepalives then the session is terminated. This
    will close connections faster than waiting for a TCP timeout.
  * Rework TCP priority setting. New settings are
    if (connecting || ptys || x11) tos = LOWDELAY
    else if (tcp_forwards) tos = 0
    else tos = BULK
    Thanks to Catalin Patulea for the suggestion.
  * Improve handling of many concurrent new TCP forwarded connections, should now
    be able to handle as many as MAX_CHANNELS. Thanks to Eduardo Silva for reporting
    and investigating it.
  * Make sure that exit messages from the client are printed, regression in 2013.57
  * Use monotonic clock where available, timeouts won't be affected by system time
    changes
  * Add -V for version</changelog>
<changelog author="thardeck@suse.com" date="1407758400">- updated to upstream version 2014.65
  * Fix 2014.64 regression, server session hang on exit with scp (and probably
    others), thanks to NiLuJe for tracking it down
  * Fix 2014.64 regression, clock_gettime() error handling which broke on older
    Linux kernels, reported by NiLuJe
  * Fix 2014.64 regression, writev() could occassionally fail with EAGAIN which
    wasn't caught
  * Avoid error message when trying to set QoS on proxycommand or multihop pipes
  * Use /usr/bin/xauth, thanks to Mike Frysinger
  * Don't exit the client if the local user entry can't be found, thanks to iquaba</changelog>
<changelog author="thardeck@suse.com" date="1414152000">- updated to upstream version 2014.66
  * Use the same keepalive handling behaviour as OpenSSH. This will work better
    with some SSH implementations that have different behaviour with unknown
    message types.
  * Don't reply with SSH_MSG_UNIMPLEMENTED when we receive a reply to our own
    keepalive message
  * Set $SSH_CLIENT to keep bash happy, patch from Ryan Cleere
  * Fix wtmp which broke since 2013.62, patch from Whoopie</changelog>
<changelog author="thardeck@suse.com" date="1417694400">- replaced deprecated gpg-offline check by obs-service-source_validator</changelog>
<changelog author="thardeck@suse.com" date="1422446400">- updated to upstream version 2015.67
  * Call fsync() after generating private keys to ensure they aren't lost if a
    reboot occurs. Thanks to Peter Korsgaard
  * Disable non-delayed zlib compression by default on the server. Can be
    enabled if required for old clients with DROPBEAR_SERVER_DELAY_ZLIB
  * Default client key path ~/.ssh/id_dropbear
  * Prefer stronger algorithms by default, from Fedor Brunner.
    AES256 over 3DES
    Diffie-hellman group14 over group1
  * Add option to disable CBC ciphers.
  * Disable twofish in default options.h
  * Enable sha2 HMAC algorithms by default, the code was already required
    for ECC key exchange. sha1 is the first preference still for performance.
  * Fix installing dropbear.8 in a separate build directory, from Like Ma
  * Allow configure to succeed if libtomcrypt/libtommath are missing, from Elan Ruusamäe
  * Don't crash if ssh-agent provides an unknown type of key. From Catalin Patulea
  * Minor bug fixes, a few issues found by Coverity scan</changelog>
<changelog author="thardeck@suse.com" date="1423137600">- fixed checksum URL</changelog>
<changelog author="thardeck@suse.com" date="1439208000">- updated to upstream version 2015.68
  * Reduce local data copying for improved efficiency. Measured 30%
    increase in throughput for connections to localhost
  * Forwarded TCP ports connect asynchronously and try all available addresses
    (IPv4, IPv6, round robin DNS)
  * Fix all compile warnings, many patches from Gaël Portay
    Note that configure with -Werror may not be successful on some platforms (OS X)
    and some configuration options may still result in unused variable
    warnings.
  * Use TCP Fast Open on Linux if available. Saves a round trip at connection
    to hosts that have previously been connected.
    Needs a recent Linux kernel and possibly "sysctl -w net.ipv4.tcp_fastopen=3"
    Client side is disabled by default pending further compatibility testing
    with networks and systems.
  * Increase maximum command length to 9000 bytes
  * Free memory before exiting, patch from Thorsten Horstmann. Useful for
    Dropbear ports to embedded systems and for checking memory leaks
    with valgrind. Only partially implemented for dbclient.
    This is disabled by default, enable with DROPBEAR_CLEANUP in sysoptions.h
  * DROPBEAR_DEFAULT_CLI_AUTHKEY setting now always prepends home directory unless
    there is a leading slash (~ isn't treated specially)
  * Fix small ECC memory leaks
  * Tighten validation of Diffie-Hellman parameters, from Florent Daigniere of
    Matta Consulting. Odds of bad values are around 2**-512 -- improbable.
  * Twofish-ctr cipher is supported though disabled by default
  * Fix pre-authentication timeout when waiting for client SSH-2.0 banner, thanks
    to CL Ouyang
  * Fix null pointer crash with restrictions in authorized_keys without a command, patch from
    Guilhem Moulin
  * Ensure authentication timeout is handled while reading the initial banner,
    thanks to CL Ouyang for finding it.
  * Fix null pointer crash when handling bad ECC keys. Found by afl-fuzz</changelog>
<changelog author="thardeck@suse.com" date="1448539200">- updated to upstream version 2015.70
  * Fix server password authentication on Linux, broke in 2015.69
  * Fix crash when forwarded TCP connections fail to connect (bug introduced in 2015.68)
  * Avoid hang on session close when multiple sessions are started, affects Qt Creator
    Patch from Andrzej Szombierski
  * Reduce per-channel memory consumption in common case, increase default
    channel limit from 100 to 1000 which should improve SOCKS forwarding for modern
    webpages
  * Handle multiple command line arguments in a single flag, thanks to Guilhem Moulin
  * Manpage improvements from Guilhem Moulin
  * Build fixes for Android from Mike Frysinger
  * Don't display the MOTD when an explicit command is run from Guilhem Moulin
  * Check curve25519 shared secret isn't zero</changelog>
<changelog author="thardeck@suse.com" date="1449230400">- updated to upstream version 2015.71
  * Fix "bad buf_incrpos" when data is transferred, broke in 2015.69
  * Fix crash on exit when -p address:port is used, broke in 2015.68
  * Fix building with only ENABLE_CLI_REMOTETCPFWD given, patch from Konstantin Tokarev
  * Fix bad configure script test which didn't work with dash shell, patch from Juergen Daubert,
    broke in 2015.70
  * Fix server race condition that could cause sessions to hang on exit,
    https://github.com/robotframework/SSHLibrary/issues/128</changelog>
<changelog author="thardeck@suse.com" date="1457697600">- updated to upstream version 2016.72
  * Validate X11 forwarding input. Could allow bypass of authorized_keys command= restrictions,
    found by github.com/tintinweb. Thanks for Damien Miller for a patch.
- used as bug fix release for bnc#970633 - VUL-0: CVE-2016-3116</changelog>

</package>
<package pkgid="2fe1314551811e60af5191d9b8ea518da58358c1460b8208e4302575e5c99537" name="dynamic-wallpaper-branding-basedonopensuse" arch="i586">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="f3417ce78f8df1c7cee1d69bdad1235b85401542d68a03048c18c43b329108af" name="dynamic-wallpaper-branding-basedonopensuse" arch="x86_64">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="ae262c0bd8b5460b8a56c63f1facb95453f4d829a2f33a7c94377fa5fb6d30d4" name="e17-branding-basedonopensuse" arch="i586">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="0a067c0b6d83e91f22074ec1919cdba0d6f3eb9193244205bd79760dfc8516d7" name="e17-branding-basedonopensuse" arch="x86_64">
    <version epoch="0" ver="13.1" rel="3.4.2"/>

<changelog author="coolo@suse.com" date="1317816000">- require branding-basedonopensuse to avoid an accidental
  branding switch</changelog>
<changelog author="coolo@suse.com" date="1318420800">- fix build</changelog>
<changelog author="coolo@suse.com" date="1318852800">- use latest branding packages too</changelog>
<changelog author="coolo@suse.com" date="1318852801">- add relaxed versions of branding-openSUSE's requires to basedonopensuse</changelog>
<changelog author="coolo@suse.com" date="1318939200">- use a branch of the 12.1 artwork</changelog>
<changelog author="coolo@suse.com" date="1322568000">- bump version</changelog>
<changelog author="coolo@suse.com" date="1323172800">- catch %ghost files</changelog>
<changelog author="coolo@suse.com" date="1339588800">- update the package list</changelog>
<changelog author="coolo@suse.com" date="1339934400">- copy back some opensuse changes</changelog>
<changelog author="coolo@suse.com" date="1342526400">- small fixes to make it build</changelog>
<changelog author="coolo@suse.com" date="1342612800">- take the license from openSUSE branding (bnc#770007)</changelog>
<changelog author="tittiatcoke@gmail.com" date="1343390400">- Add the plymouth branding
- Update the grub2 theme to include also a branding for the
  terminal window (bnc#770107)</changelog>
<changelog author="coolo@suse.com" date="1346673600">- update from git to fix build for grub2 changes</changelog>
<changelog author="coolo@suse.com" date="1357646400">- update the list of branding packages</changelog>
<changelog author="coolo@suse.com" date="1358856000">- update the list again</changelog>
<changelog author="aj@suse.com" date="1370952000">- Update version number to 13.1
- Remove obsolete gnome-control-center-branding</changelog>
<changelog author="aj@suse.com" date="1370952001">- Follow package renaming:
  exo-branding-openSUSE -&gt; libexo-1-0-branding-openSUSE
- Fix grub2 branding
- Fix kdm branding</changelog>
<changelog author="coolo@suse.com" date="1375704000">- fix initrd-branding</changelog>
<changelog author="dvaleev@suse.com" date="1377172800">- Require gxboot-branding only on Intel architectures.
- Drop gimp-branding (gimp no longer provides brandings)
- Drop gnome-panel-branding (gnome-panel is deperecated)</changelog>
<changelog author="dvaleev@suse.com" date="1377172801">- really don't build gfxboot stuff on non intel architectures
- update to commit c2bc17a18e7e38bfe70be17165ff37f37384d4c7
  Remove gimp branding / New KDM Theme by Caig</changelog>

</package>
<package pkgid="93624d7f34583bc92f72568ae57a73bc99aadf858a9f849343aee26dedeef095" name="e2fsprogs" arch="i586">
    <version epoch="0" ver="1.42.8" rel="2.5.1"/>

<changelog author="jack@suse.cz" date="1311336000">- Fix typo in package summary</changelog>
<changelog author="jack@suse.cz" date="1318507200">- Added dumpe2fs.8 manpage fix</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="tabraham@novell.com" date="1326456000">- removed dumpe2fs-add-man-page-warning-about-mounted-fil.patch
  deprecated by this release
- refreshed e2fsprogs-1.41.1-splash_support.patch
- added several patches to fix warnings generated by the check_gcc_output
  and rpmlint
- update to 1.42
  * this release has support for file systems &gt;16TB. online resize
    requires kernel support which will hopefully be in kernel version
    3.2. offline support is not yet available for &gt;16TB, but will be
    coming
  * this release has support for clustered allocation, which reduces
    the number of block (now cluster) bitmaps by allocating and
    deallocating space in contiguous power-of-2 collections of blocks,
    which are called clustered. This is a filesystem level feature
    called 'bigalloc', which must be enabled when the filesystem is
    inititally formatted. It is not backwards compatible with older
    kernels.
  * added support for the Multi-Mount Protection (MMP) feature
  * The mke2fs and e2fsck programs now tries to use the punch hole command
    as a "discard" when operating on normal files.
  * The resize2fs program now has support for a new online resize ioctl
    that can support file systems &gt; 16TB, once it arrives in v3.x kernels.
  * Added e4defrag tool which uses the EXT4_IOC_MOVE_EXT ioctl.
  * Added support for journals larger than 2GB.
  * Added internationalization support for libcom_err error table strings.
  * Fixed various spelling mistakes found in various output strings found by
    I18N translators.
  * Update translations: French, Chinese, Germany, Indonesian, Swedish,
    Vietnamese, Polish, Dutch, Czech. (Addresses Debian Bugs: #520985,
    [#620659])
  * Updated/clarified man pages. (Addresses Debian Bugs: #639411, #642193,
    [#634883])
  * various bug fixes and enhancements (see RELEASE-NOTES)</changelog>
<changelog author="jengelh@medozas.de" date="1333627200">- SPARC: avoid retention of libquota.a
- Remove redundant tags/sections from specfile</changelog>
<changelog author="rschweikert@suse.com" date="1334145600">- place binaries and libraries into the /usr tree (UsrMerge project)</changelog>
<changelog author="pth@suse.de" date="1334318400">- Remove the obsolete german messages.</changelog>
<changelog author="pth@suse.de" date="1334318401">- Update to 1.42.2:
  * resize2fs uses much less CPU and is much faster for very large fs.
  * The seti and freei commands in debugfs can now take an optional length
    argument to set and clear a contiguous range of inodes.
  * E2fsck will now make explicit checks for the EOFBLOCKS_FL, since we
    plan to remove support for it from the kernel file system driver.
  * mke2fs can now use direct I/O via "mke2fs -D"
  * E2fsck was needlessly closing and re-opening the file system as a side
    effect of adding Multiple Mount Protection (MMP).  This isn't
    necessary for non-MMP file systems, so drop it.
  * E2fsck will now abort if there are memory allocation failures when
    the file system is initially opened and during the block group
    descriptor checks.
  * e2fsck will now report the incorrect and corrected checksum values
    for incorrect block groups.
  * e2fsck can now write log files containing the details of the problems
    that were found and fixed directly, via configuration parameters in
    /etc/e2fsck.conf.
  * The number of messages reported by e2fsck for a given problem type
    can be limited.
  * dumpe2fs, debugfs, and tune2fs now use rbtree bitmaps, which noticably
    reduces memory consumption for large file systems.
  * E2fsck now checks for extents with a zero length.
  * Fixed a number of bugs relating to discard.
  * E2fsck's CPU utilization in pass 5 has been optimized.
  * E2image will now skip copying uninitialized bitmap and inode table
    blocks.
  * Fixed mke2fs -S so it does not corrupt the first block group's
    information.
  * E2fsck will now check the new sysfs interface to determine if we are
    using the battery or AC mains.
- Add up-to-date german messages</changelog>
<changelog author="jack@suse.cz" date="1337774400">- Added dependency of e2fsprogs package on particular versions of libext2fs
  and libcom_err to avoid problems with missing symbols</changelog>
<changelog author="jack@suse.cz" date="1337774401">- Updated to 1.42.3
  - Fix a bug in the Unix I/O manager which could cause corruption of file
    systems with more than 16TB when e2fsprogs is compiled in 32-bit mode.
  - Improve the support for integrated quota files.
  - Fixed a regression introduced in 1.42.2 which would cause applications
    outside of e2fsprogs which did not pass the EXT2_FLAG_64BIT to crash.
  - Fix a bug which would cause mke2fs to fail creating the journal if
    /etc/mtab and /proc/mounts are missing.
  - Updated/fixed various man page.
  - Updated translations.</changelog>
<changelog author="coolo@suse.com" date="1339675200">- update to 1.42.4
  * Fix 64-bit block number bugs in e2fsck, dumpe2fs, and debugfs which
    could corrupt file systems
  * Fixed e2fsck's handling of how errors propagate from the journal to
    the file system superblock
  * Fixed a false positive complaint from e2fsck if all of the extents
    in the last extent block are uninitialized and located after the
    end of the file.
  * dumpe2fs will display the journal's error indicator in the
    superblock if it is set
  * Fixed a  bug which caused e2fsck to incorrectly use O_EXCLUSIVE in
    some corner cases.
  * Fix truncation of extent-mapped inodes in e2fsck and libext2fs
  * Fixed i_blocks accounting in bigalloc file systems.
  * Add support for btrfs's No_COW flag to lsattr and chattr
  * Debugfs interprets the date strings of the form "@ddd" as ddd
    seconds after the epoch
  * Updated/fixed various man pages  (Closes: #674453, #674694)</changelog>
<changelog author="idonmez@suse.com" date="1345809600">- Add an /etc/e2fsck.conf file with broken_system_clock=1 to fix
  first part of bnc#775268</changelog>
<changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
<changelog author="jack@suse.cz" date="1348574400">- update to 1.42.6
  * Fixed a potential seg fault in e2fsck when there is an I/O error while reading the superblock
  * Various resize2fs fixes
  * Various quota related fixes
  * Fixed filefrag so that it correctly reports the number of extents
  * Fixed filefrag so it will not crash with a segfault on files from a virtual file system such as /proc
  * Fixed a problem if e2fsck where if the root file system is mounted read-only, e2fsck would not clear an error indication in the journal superblock.
  * Fixed a bug in how e2fsck would uniquify directory entry names
  * Manpage updates
  ...
- removed e2fsprogs-1.42-voidreturn_value_declared.patch because it makes
  no longer any sence due to upstream changes</changelog>
<changelog author="fcrozat@suse.com" date="1360324800">- Install the correct source file as /etc/e2fsck.conf.</changelog>
<changelog author="jack@suse.cz" date="1361534400">- update to 1.42.7
  * Fix various off-line resizing bugs
  * New filefrag options to improve output formatting
  * mke2fs improvements for bigalloc filesystems
  * Fix e2fsck to properly detect corruption of internal extent tree nodes
  * Improve CPU efficiency of e2fsck
  * Various debugfs improvements
  ...
- refreshed e2fsprogs-1.41.1-splash_support.patch</changelog>
<changelog author="jack@suse.cz" date="1361793600">- Fix compilation warnings by patches:
  e2p-Fix-s-handling-in-parse_num_blocks2.patch
  libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
  libext2fs-Provide-prototype-for-ext2fs_symlink.patch
  resize-bigalloc_check-should-have-return-type-void.patch</changelog>
<changelog author="jack@suse.cz" date="1361880000">- Fix compilation for Fedora targets in Build Service</changelog>
<changelog author="jack@suse.cz" date="1372334400">- update to 1.42.8
  * e2fsck: detect and fix invalid extents at leaf block tails
  * e2fsck: allow checking ro root fs with external journal
  * fix offline resizing of fs with flex_bg &amp;&amp; !resize_inode
  * fix resize2fs to not leave bitmaps beyond fs end
  * fixed e2image for large (&gt;32-bit) filesystems
  * debugfs fixes
- Removed upstreamed patches:
    e2p-Fix-s-handling-in-parse_num_blocks2.patch
    resize-bigalloc_check-should-have-return-type-void.patch
    libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
    libext2fs-Provide-prototype-for-ext2fs_symlink.patch</changelog>
<changelog author="jack@suse.cz" date="1408017600">- e2fsck-Fix-last-mount-time-and-last-write-time-in-pr.patch: Fix bad mount
  time in preen mode.
- Set broken_system_clock to 0 so that time based checks work.
  (bnc#866283)</changelog>

</package>
<package pkgid="735833bce650cd81e551363dacf686d8b402f7add6f260b486b831732c734e25" name="e2fsprogs" arch="i586">
    <version epoch="0" ver="1.42.8" rel="2.8.1"/>

<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="tabraham@novell.com" date="1326456000">- removed dumpe2fs-add-man-page-warning-about-mounted-fil.patch
  deprecated by this release
- refreshed e2fsprogs-1.41.1-splash_support.patch
- added several patches to fix warnings generated by the check_gcc_output
  and rpmlint
- update to 1.42
  * this release has support for file systems &gt;16TB. online resize
    requires kernel support which will hopefully be in kernel version
    3.2. offline support is not yet available for &gt;16TB, but will be
    coming
  * this release has support for clustered allocation, which reduces
    the number of block (now cluster) bitmaps by allocating and
    deallocating space in contiguous power-of-2 collections of blocks,
    which are called clustered. This is a filesystem level feature
    called 'bigalloc', which must be enabled when the filesystem is
    inititally formatted. It is not backwards compatible with older
    kernels.
  * added support for the Multi-Mount Protection (MMP) feature
  * The mke2fs and e2fsck programs now tries to use the punch hole command
    as a "discard" when operating on normal files.
  * The resize2fs program now has support for a new online resize ioctl
    that can support file systems &gt; 16TB, once it arrives in v3.x kernels.
  * Added e4defrag tool which uses the EXT4_IOC_MOVE_EXT ioctl.
  * Added support for journals larger than 2GB.
  * Added internationalization support for libcom_err error table strings.
  * Fixed various spelling mistakes found in various output strings found by
    I18N translators.
  * Update translations: French, Chinese, Germany, Indonesian, Swedish,
    Vietnamese, Polish, Dutch, Czech. (Addresses Debian Bugs: #520985,
    [#620659])
  * Updated/clarified man pages. (Addresses Debian Bugs: #639411, #642193,
    [#634883])
  * various bug fixes and enhancements (see RELEASE-NOTES)</changelog>
<changelog author="jengelh@medozas.de" date="1333627200">- SPARC: avoid retention of libquota.a
- Remove redundant tags/sections from specfile</changelog>
<changelog author="rschweikert@suse.com" date="1334145600">- place binaries and libraries into the /usr tree (UsrMerge project)</changelog>
<changelog author="pth@suse.de" date="1334318400">- Remove the obsolete german messages.</changelog>
<changelog author="pth@suse.de" date="1334318401">- Update to 1.42.2:
  * resize2fs uses much less CPU and is much faster for very large fs.
  * The seti and freei commands in debugfs can now take an optional length
    argument to set and clear a contiguous range of inodes.
  * E2fsck will now make explicit checks for the EOFBLOCKS_FL, since we
    plan to remove support for it from the kernel file system driver.
  * mke2fs can now use direct I/O via "mke2fs -D"
  * E2fsck was needlessly closing and re-opening the file system as a side
    effect of adding Multiple Mount Protection (MMP).  This isn't
    necessary for non-MMP file systems, so drop it.
  * E2fsck will now abort if there are memory allocation failures when
    the file system is initially opened and during the block group
    descriptor checks.
  * e2fsck will now report the incorrect and corrected checksum values
    for incorrect block groups.
  * e2fsck can now write log files containing the details of the problems
    that were found and fixed directly, via configuration parameters in
    /etc/e2fsck.conf.
  * The number of messages reported by e2fsck for a given problem type
    can be limited.
  * dumpe2fs, debugfs, and tune2fs now use rbtree bitmaps, which noticably
    reduces memory consumption for large file systems.
  * E2fsck now checks for extents with a zero length.
  * Fixed a number of bugs relating to discard.
  * E2fsck's CPU utilization in pass 5 has been optimized.
  * E2image will now skip copying uninitialized bitmap and inode table
    blocks.
  * Fixed mke2fs -S so it does not corrupt the first block group's
    information.
  * E2fsck will now check the new sysfs interface to determine if we are
    using the battery or AC mains.
- Add up-to-date german messages</changelog>
<changelog author="jack@suse.cz" date="1337774400">- Added dependency of e2fsprogs package on particular versions of libext2fs
  and libcom_err to avoid problems with missing symbols</changelog>
<changelog author="jack@suse.cz" date="1337774401">- Updated to 1.42.3
  - Fix a bug in the Unix I/O manager which could cause corruption of file
    systems with more than 16TB when e2fsprogs is compiled in 32-bit mode.
  - Improve the support for integrated quota files.
  - Fixed a regression introduced in 1.42.2 which would cause applications
    outside of e2fsprogs which did not pass the EXT2_FLAG_64BIT to crash.
  - Fix a bug which would cause mke2fs to fail creating the journal if
    /etc/mtab and /proc/mounts are missing.
  - Updated/fixed various man page.
  - Updated translations.</changelog>
<changelog author="coolo@suse.com" date="1339675200">- update to 1.42.4
  * Fix 64-bit block number bugs in e2fsck, dumpe2fs, and debugfs which
    could corrupt file systems
  * Fixed e2fsck's handling of how errors propagate from the journal to
    the file system superblock
  * Fixed a false positive complaint from e2fsck if all of the extents
    in the last extent block are uninitialized and located after the
    end of the file.
  * dumpe2fs will display the journal's error indicator in the
    superblock if it is set
  * Fixed a  bug which caused e2fsck to incorrectly use O_EXCLUSIVE in
    some corner cases.
  * Fix truncation of extent-mapped inodes in e2fsck and libext2fs
  * Fixed i_blocks accounting in bigalloc file systems.
  * Add support for btrfs's No_COW flag to lsattr and chattr
  * Debugfs interprets the date strings of the form "@ddd" as ddd
    seconds after the epoch
  * Updated/fixed various man pages  (Closes: #674453, #674694)</changelog>
<changelog author="idonmez@suse.com" date="1345809600">- Add an /etc/e2fsck.conf file with broken_system_clock=1 to fix
  first part of bnc#775268</changelog>
<changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
<changelog author="jack@suse.cz" date="1348574400">- update to 1.42.6
  * Fixed a potential seg fault in e2fsck when there is an I/O error while reading the superblock
  * Various resize2fs fixes
  * Various quota related fixes
  * Fixed filefrag so that it correctly reports the number of extents
  * Fixed filefrag so it will not crash with a segfault on files from a virtual file system such as /proc
  * Fixed a problem if e2fsck where if the root file system is mounted read-only, e2fsck would not clear an error indication in the journal superblock.
  * Fixed a bug in how e2fsck would uniquify directory entry names
  * Manpage updates
  ...
- removed e2fsprogs-1.42-voidreturn_value_declared.patch because it makes
  no longer any sence due to upstream changes</changelog>
<changelog author="fcrozat@suse.com" date="1360324800">- Install the correct source file as /etc/e2fsck.conf.</changelog>
<changelog author="jack@suse.cz" date="1361534400">- update to 1.42.7
  * Fix various off-line resizing bugs
  * New filefrag options to improve output formatting
  * mke2fs improvements for bigalloc filesystems
  * Fix e2fsck to properly detect corruption of internal extent tree nodes
  * Improve CPU efficiency of e2fsck
  * Various debugfs improvements
  ...
- refreshed e2fsprogs-1.41.1-splash_support.patch</changelog>
<changelog author="jack@suse.cz" date="1361793600">- Fix compilation warnings by patches:
  e2p-Fix-s-handling-in-parse_num_blocks2.patch
  libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
  libext2fs-Provide-prototype-for-ext2fs_symlink.patch
  resize-bigalloc_check-should-have-return-type-void.patch</changelog>
<changelog author="jack@suse.cz" date="1361880000">- Fix compilation for Fedora targets in Build Service</changelog>
<changelog author="jack@suse.cz" date="1372334400">- update to 1.42.8
  * e2fsck: detect and fix invalid extents at leaf block tails
  * e2fsck: allow checking ro root fs with external journal
  * fix offline resizing of fs with flex_bg &amp;&amp; !resize_inode
  * fix resize2fs to not leave bitmaps beyond fs end
  * fixed e2image for large (&gt;32-bit) filesystems
  * debugfs fixes
- Removed upstreamed patches:
    e2p-Fix-s-handling-in-parse_num_blocks2.patch
    resize-bigalloc_check-should-have-return-type-void.patch
    libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
    libext2fs-Provide-prototype-for-ext2fs_symlink.patch</changelog>
<changelog author="jack@suse.cz" date="1408017600">- e2fsck-Fix-last-mount-time-and-last-write-time-in-pr.patch: Fix bad mount
  time in preen mode.
- Set broken_system_clock to 0 so that time based checks work.
  (bnc#866283)</changelog>
<changelog author="jack@suse.cz" date="1432641600">- libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch: libext2fs:
  avoid buffer overflow if s_first_meta_bg is too big (bsc#915402 CVE-2015-0247)</changelog>
<changelog author="jack@suse.cz" date="1432641601">- libext2fs-fix-potential-buffer-overflow-in-closefs.patch: libext2fs: fix
  potential buffer overflow in closefs() (bsc#918346 CVE-2015-1572)</changelog>

</package>
<package pkgid="02d558f732b37c35db88d75148074f0f65bd62fedb7e72b496682ad29f838b6d" name="e2fsprogs" arch="src">
    <version epoch="0" ver="1.42.8" rel="2.5.1"/>

<changelog author="jack@suse.cz" date="1311336000">- Fix typo in package summary</changelog>
<changelog author="jack@suse.cz" date="1318507200">- Added dumpe2fs.8 manpage fix</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="tabraham@novell.com" date="1326456000">- removed dumpe2fs-add-man-page-warning-about-mounted-fil.patch
  deprecated by this release
- refreshed e2fsprogs-1.41.1-splash_support.patch
- added several patches to fix warnings generated by the check_gcc_output
  and rpmlint
- update to 1.42
  * this release has support for file systems &gt;16TB. online resize
    requires kernel support which will hopefully be in kernel version
    3.2. offline support is not yet available for &gt;16TB, but will be
    coming
  * this release has support for clustered allocation, which reduces
    the number of block (now cluster) bitmaps by allocating and
    deallocating space in contiguous power-of-2 collections of blocks,
    which are called clustered. This is a filesystem level feature
    called 'bigalloc', which must be enabled when the filesystem is
    inititally formatted. It is not backwards compatible with older
    kernels.
  * added support for the Multi-Mount Protection (MMP) feature
  * The mke2fs and e2fsck programs now tries to use the punch hole command
    as a "discard" when operating on normal files.
  * The resize2fs program now has support for a new online resize ioctl
    that can support file systems &gt; 16TB, once it arrives in v3.x kernels.
  * Added e4defrag tool which uses the EXT4_IOC_MOVE_EXT ioctl.
  * Added support for journals larger than 2GB.
  * Added internationalization support for libcom_err error table strings.
  * Fixed various spelling mistakes found in various output strings found by
    I18N translators.
  * Update translations: French, Chinese, Germany, Indonesian, Swedish,
    Vietnamese, Polish, Dutch, Czech. (Addresses Debian Bugs: #520985,
    [#620659])
  * Updated/clarified man pages. (Addresses Debian Bugs: #639411, #642193,
    [#634883])
  * various bug fixes and enhancements (see RELEASE-NOTES)</changelog>
<changelog author="jengelh@medozas.de" date="1333627200">- SPARC: avoid retention of libquota.a
- Remove redundant tags/sections from specfile</changelog>
<changelog author="rschweikert@suse.com" date="1334145600">- place binaries and libraries into the /usr tree (UsrMerge project)</changelog>
<changelog author="pth@suse.de" date="1334318400">- Remove the obsolete german messages.</changelog>
<changelog author="pth@suse.de" date="1334318401">- Update to 1.42.2:
  * resize2fs uses much less CPU and is much faster for very large fs.
  * The seti and freei commands in debugfs can now take an optional length
    argument to set and clear a contiguous range of inodes.
  * E2fsck will now make explicit checks for the EOFBLOCKS_FL, since we
    plan to remove support for it from the kernel file system driver.
  * mke2fs can now use direct I/O via "mke2fs -D"
  * E2fsck was needlessly closing and re-opening the file system as a side
    effect of adding Multiple Mount Protection (MMP).  This isn't
    necessary for non-MMP file systems, so drop it.
  * E2fsck will now abort if there are memory allocation failures when
    the file system is initially opened and during the block group
    descriptor checks.
  * e2fsck will now report the incorrect and corrected checksum values
    for incorrect block groups.
  * e2fsck can now write log files containing the details of the problems
    that were found and fixed directly, via configuration parameters in
    /etc/e2fsck.conf.
  * The number of messages reported by e2fsck for a given problem type
    can be limited.
  * dumpe2fs, debugfs, and tune2fs now use rbtree bitmaps, which noticably
    reduces memory consumption for large file systems.
  * E2fsck now checks for extents with a zero length.
  * Fixed a number of bugs relating to discard.
  * E2fsck's CPU utilization in pass 5 has been optimized.
  * E2image will now skip copying uninitialized bitmap and inode table
    blocks.
  * Fixed mke2fs -S so it does not corrupt the first block group's
    information.
  * E2fsck will now check the new sysfs interface to determine if we are
    using the battery or AC mains.
- Add up-to-date german messages</changelog>
<changelog author="jack@suse.cz" date="1337774400">- Added dependency of e2fsprogs package on particular versions of libext2fs
  and libcom_err to avoid problems with missing symbols</changelog>
<changelog author="jack@suse.cz" date="1337774401">- Updated to 1.42.3
  - Fix a bug in the Unix I/O manager which could cause corruption of file
    systems with more than 16TB when e2fsprogs is compiled in 32-bit mode.
  - Improve the support for integrated quota files.
  - Fixed a regression introduced in 1.42.2 which would cause applications
    outside of e2fsprogs which did not pass the EXT2_FLAG_64BIT to crash.
  - Fix a bug which would cause mke2fs to fail creating the journal if
    /etc/mtab and /proc/mounts are missing.
  - Updated/fixed various man page.
  - Updated translations.</changelog>
<changelog author="coolo@suse.com" date="1339675200">- update to 1.42.4
  * Fix 64-bit block number bugs in e2fsck, dumpe2fs, and debugfs which
    could corrupt file systems
  * Fixed e2fsck's handling of how errors propagate from the journal to
    the file system superblock
  * Fixed a false positive complaint from e2fsck if all of the extents
    in the last extent block are uninitialized and located after the
    end of the file.
  * dumpe2fs will display the journal's error indicator in the
    superblock if it is set
  * Fixed a  bug which caused e2fsck to incorrectly use O_EXCLUSIVE in
    some corner cases.
  * Fix truncation of extent-mapped inodes in e2fsck and libext2fs
  * Fixed i_blocks accounting in bigalloc file systems.
  * Add support for btrfs's No_COW flag to lsattr and chattr
  * Debugfs interprets the date strings of the form "@ddd" as ddd
    seconds after the epoch
  * Updated/fixed various man pages  (Closes: #674453, #674694)</changelog>
<changelog author="idonmez@suse.com" date="1345809600">- Add an /etc/e2fsck.conf file with broken_system_clock=1 to fix
  first part of bnc#775268</changelog>
<changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
<changelog author="jack@suse.cz" date="1348574400">- update to 1.42.6
  * Fixed a potential seg fault in e2fsck when there is an I/O error while reading the superblock
  * Various resize2fs fixes
  * Various quota related fixes
  * Fixed filefrag so that it correctly reports the number of extents
  * Fixed filefrag so it will not crash with a segfault on files from a virtual file system such as /proc
  * Fixed a problem if e2fsck where if the root file system is mounted read-only, e2fsck would not clear an error indication in the journal superblock.
  * Fixed a bug in how e2fsck would uniquify directory entry names
  * Manpage updates
  ...
- removed e2fsprogs-1.42-voidreturn_value_declared.patch because it makes
  no longer any sence due to upstream changes</changelog>
<changelog author="fcrozat@suse.com" date="1360324800">- Install the correct source file as /etc/e2fsck.conf.</changelog>
<changelog author="jack@suse.cz" date="1361534400">- update to 1.42.7
  * Fix various off-line resizing bugs
  * New filefrag options to improve output formatting
  * mke2fs improvements for bigalloc filesystems
  * Fix e2fsck to properly detect corruption of internal extent tree nodes
  * Improve CPU efficiency of e2fsck
  * Various debugfs improvements
  ...
- refreshed e2fsprogs-1.41.1-splash_support.patch</changelog>
<changelog author="jack@suse.cz" date="1361793600">- Fix compilation warnings by patches:
  e2p-Fix-s-handling-in-parse_num_blocks2.patch
  libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
  libext2fs-Provide-prototype-for-ext2fs_symlink.patch
  resize-bigalloc_check-should-have-return-type-void.patch</changelog>
<changelog author="jack@suse.cz" date="1361880000">- Fix compilation for Fedora targets in Build Service</changelog>
<changelog author="jack@suse.cz" date="1372334400">- update to 1.42.8
  * e2fsck: detect and fix invalid extents at leaf block tails
  * e2fsck: allow checking ro root fs with external journal
  * fix offline resizing of fs with flex_bg &amp;&amp; !resize_inode
  * fix resize2fs to not leave bitmaps beyond fs end
  * fixed e2image for large (&gt;32-bit) filesystems
  * debugfs fixes
- Removed upstreamed patches:
    e2p-Fix-s-handling-in-parse_num_blocks2.patch
    resize-bigalloc_check-should-have-return-type-void.patch
    libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
    libext2fs-Provide-prototype-for-ext2fs_symlink.patch</changelog>
<changelog author="jack@suse.cz" date="1408017600">- e2fsck-Fix-last-mount-time-and-last-write-time-in-pr.patch: Fix bad mount
  time in preen mode.
- Set broken_system_clock to 0 so that time based checks work.
  (bnc#866283)</changelog>

</package>
<package pkgid="ea2eaf3a0711b569663678f6452b22825212c6dea1721bd2063c9c17f6af53d5" name="e2fsprogs" arch="src">
    <version epoch="0" ver="1.42.8" rel="2.8.1"/>

<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="tabraham@novell.com" date="1326456000">- removed dumpe2fs-add-man-page-warning-about-mounted-fil.patch
  deprecated by this release
- refreshed e2fsprogs-1.41.1-splash_support.patch
- added several patches to fix warnings generated by the check_gcc_output
  and rpmlint
- update to 1.42
  * this release has support for file systems &gt;16TB. online resize
    requires kernel support which will hopefully be in kernel version
    3.2. offline support is not yet available for &gt;16TB, but will be
    coming
  * this release has support for clustered allocation, which reduces
    the number of block (now cluster) bitmaps by allocating and
    deallocating space in contiguous power-of-2 collections of blocks,
    which are called clustered. This is a filesystem level feature
    called 'bigalloc', which must be enabled when the filesystem is
    inititally formatted. It is not backwards compatible with older
    kernels.
  * added support for the Multi-Mount Protection (MMP) feature
  * The mke2fs and e2fsck programs now tries to use the punch hole command
    as a "discard" when operating on normal files.
  * The resize2fs program now has support for a new online resize ioctl
    that can support file systems &gt; 16TB, once it arrives in v3.x kernels.
  * Added e4defrag tool which uses the EXT4_IOC_MOVE_EXT ioctl.
  * Added support for journals larger than 2GB.
  * Added internationalization support for libcom_err error table strings.
  * Fixed various spelling mistakes found in various output strings found by
    I18N translators.
  * Update translations: French, Chinese, Germany, Indonesian, Swedish,
    Vietnamese, Polish, Dutch, Czech. (Addresses Debian Bugs: #520985,
    [#620659])
  * Updated/clarified man pages. (Addresses Debian Bugs: #639411, #642193,
    [#634883])
  * various bug fixes and enhancements (see RELEASE-NOTES)</changelog>
<changelog author="jengelh@medozas.de" date="1333627200">- SPARC: avoid retention of libquota.a
- Remove redundant tags/sections from specfile</changelog>
<changelog author="rschweikert@suse.com" date="1334145600">- place binaries and libraries into the /usr tree (UsrMerge project)</changelog>
<changelog author="pth@suse.de" date="1334318400">- Remove the obsolete german messages.</changelog>
<changelog author="pth@suse.de" date="1334318401">- Update to 1.42.2:
  * resize2fs uses much less CPU and is much faster for very large fs.
  * The seti and freei commands in debugfs can now take an optional length
    argument to set and clear a contiguous range of inodes.
  * E2fsck will now make explicit checks for the EOFBLOCKS_FL, since we
    plan to remove support for it from the kernel file system driver.
  * mke2fs can now use direct I/O via "mke2fs -D"
  * E2fsck was needlessly closing and re-opening the file system as a side
    effect of adding Multiple Mount Protection (MMP).  This isn't
    necessary for non-MMP file systems, so drop it.
  * E2fsck will now abort if there are memory allocation failures when
    the file system is initially opened and during the block group
    descriptor checks.
  * e2fsck will now report the incorrect and corrected checksum values
    for incorrect block groups.
  * e2fsck can now write log files containing the details of the problems
    that were found and fixed directly, via configuration parameters in
    /etc/e2fsck.conf.
  * The number of messages reported by e2fsck for a given problem type
    can be limited.
  * dumpe2fs, debugfs, and tune2fs now use rbtree bitmaps, which noticably
    reduces memory consumption for large file systems.
  * E2fsck now checks for extents with a zero length.
  * Fixed a number of bugs relating to discard.
  * E2fsck's CPU utilization in pass 5 has been optimized.
  * E2image will now skip copying uninitialized bitmap and inode table
    blocks.
  * Fixed mke2fs -S so it does not corrupt the first block group's
    information.
  * E2fsck will now check the new sysfs interface to determine if we are
    using the battery or AC mains.
- Add up-to-date german messages</changelog>
<changelog author="jack@suse.cz" date="1337774400">- Added dependency of e2fsprogs package on particular versions of libext2fs
  and libcom_err to avoid problems with missing symbols</changelog>
<changelog author="jack@suse.cz" date="1337774401">- Updated to 1.42.3
  - Fix a bug in the Unix I/O manager which could cause corruption of file
    systems with more than 16TB when e2fsprogs is compiled in 32-bit mode.
  - Improve the support for integrated quota files.
  - Fixed a regression introduced in 1.42.2 which would cause applications
    outside of e2fsprogs which did not pass the EXT2_FLAG_64BIT to crash.
  - Fix a bug which would cause mke2fs to fail creating the journal if
    /etc/mtab and /proc/mounts are missing.
  - Updated/fixed various man page.
  - Updated translations.</changelog>
<changelog author="coolo@suse.com" date="1339675200">- update to 1.42.4
  * Fix 64-bit block number bugs in e2fsck, dumpe2fs, and debugfs which
    could corrupt file systems
  * Fixed e2fsck's handling of how errors propagate from the journal to
    the file system superblock
  * Fixed a false positive complaint from e2fsck if all of the extents
    in the last extent block are uninitialized and located after the
    end of the file.
  * dumpe2fs will display the journal's error indicator in the
    superblock if it is set
  * Fixed a  bug which caused e2fsck to incorrectly use O_EXCLUSIVE in
    some corner cases.
  * Fix truncation of extent-mapped inodes in e2fsck and libext2fs
  * Fixed i_blocks accounting in bigalloc file systems.
  * Add support for btrfs's No_COW flag to lsattr and chattr
  * Debugfs interprets the date strings of the form "@ddd" as ddd
    seconds after the epoch
  * Updated/fixed various man pages  (Closes: #674453, #674694)</changelog>
<changelog author="idonmez@suse.com" date="1345809600">- Add an /etc/e2fsck.conf file with broken_system_clock=1 to fix
  first part of bnc#775268</changelog>
<changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
<changelog author="jack@suse.cz" date="1348574400">- update to 1.42.6
  * Fixed a potential seg fault in e2fsck when there is an I/O error while reading the superblock
  * Various resize2fs fixes
  * Various quota related fixes
  * Fixed filefrag so that it correctly reports the number of extents
  * Fixed filefrag so it will not crash with a segfault on files from a virtual file system such as /proc
  * Fixed a problem if e2fsck where if the root file system is mounted read-only, e2fsck would not clear an error indication in the journal superblock.
  * Fixed a bug in how e2fsck would uniquify directory entry names
  * Manpage updates
  ...
- removed e2fsprogs-1.42-voidreturn_value_declared.patch because it makes
  no longer any sence due to upstream changes</changelog>
<changelog author="fcrozat@suse.com" date="1360324800">- Install the correct source file as /etc/e2fsck.conf.</changelog>
<changelog author="jack@suse.cz" date="1361534400">- update to 1.42.7
  * Fix various off-line resizing bugs
  * New filefrag options to improve output formatting
  * mke2fs improvements for bigalloc filesystems
  * Fix e2fsck to properly detect corruption of internal extent tree nodes
  * Improve CPU efficiency of e2fsck
  * Various debugfs improvements
  ...
- refreshed e2fsprogs-1.41.1-splash_support.patch</changelog>
<changelog author="jack@suse.cz" date="1361793600">- Fix compilation warnings by patches:
  e2p-Fix-s-handling-in-parse_num_blocks2.patch
  libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
  libext2fs-Provide-prototype-for-ext2fs_symlink.patch
  resize-bigalloc_check-should-have-return-type-void.patch</changelog>
<changelog author="jack@suse.cz" date="1361880000">- Fix compilation for Fedora targets in Build Service</changelog>
<changelog author="jack@suse.cz" date="1372334400">- update to 1.42.8
  * e2fsck: detect and fix invalid extents at leaf block tails
  * e2fsck: allow checking ro root fs with external journal
  * fix offline resizing of fs with flex_bg &amp;&amp; !resize_inode
  * fix resize2fs to not leave bitmaps beyond fs end
  * fixed e2image for large (&gt;32-bit) filesystems
  * debugfs fixes
- Removed upstreamed patches:
    e2p-Fix-s-handling-in-parse_num_blocks2.patch
    resize-bigalloc_check-should-have-return-type-void.patch
    libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
    libext2fs-Provide-prototype-for-ext2fs_symlink.patch</changelog>
<changelog author="jack@suse.cz" date="1408017600">- e2fsck-Fix-last-mount-time-and-last-write-time-in-pr.patch: Fix bad mount
  time in preen mode.
- Set broken_system_clock to 0 so that time based checks work.
  (bnc#866283)</changelog>
<changelog author="jack@suse.cz" date="1432641600">- libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch: libext2fs:
  avoid buffer overflow if s_first_meta_bg is too big (bsc#915402 CVE-2015-0247)</changelog>
<changelog author="jack@suse.cz" date="1432641601">- libext2fs-fix-potential-buffer-overflow-in-closefs.patch: libext2fs: fix
  potential buffer overflow in closefs() (bsc#918346 CVE-2015-1572)</changelog>

</package>
<package pkgid="0f0e8b2fbb9f4bf6fe292e3bbf0164adfaa3bcbfcf7ec23b34444d8ab2a73147" name="e2fsprogs" arch="x86_64">
    <version epoch="0" ver="1.42.8" rel="2.5.1"/>

<changelog author="jack@suse.cz" date="1311336000">- Fix typo in package summary</changelog>
<changelog author="jack@suse.cz" date="1318507200">- Added dumpe2fs.8 manpage fix</changelog>
<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="tabraham@novell.com" date="1326456000">- removed dumpe2fs-add-man-page-warning-about-mounted-fil.patch
  deprecated by this release
- refreshed e2fsprogs-1.41.1-splash_support.patch
- added several patches to fix warnings generated by the check_gcc_output
  and rpmlint
- update to 1.42
  * this release has support for file systems &gt;16TB. online resize
    requires kernel support which will hopefully be in kernel version
    3.2. offline support is not yet available for &gt;16TB, but will be
    coming
  * this release has support for clustered allocation, which reduces
    the number of block (now cluster) bitmaps by allocating and
    deallocating space in contiguous power-of-2 collections of blocks,
    which are called clustered. This is a filesystem level feature
    called 'bigalloc', which must be enabled when the filesystem is
    inititally formatted. It is not backwards compatible with older
    kernels.
  * added support for the Multi-Mount Protection (MMP) feature
  * The mke2fs and e2fsck programs now tries to use the punch hole command
    as a "discard" when operating on normal files.
  * The resize2fs program now has support for a new online resize ioctl
    that can support file systems &gt; 16TB, once it arrives in v3.x kernels.
  * Added e4defrag tool which uses the EXT4_IOC_MOVE_EXT ioctl.
  * Added support for journals larger than 2GB.
  * Added internationalization support for libcom_err error table strings.
  * Fixed various spelling mistakes found in various output strings found by
    I18N translators.
  * Update translations: French, Chinese, Germany, Indonesian, Swedish,
    Vietnamese, Polish, Dutch, Czech. (Addresses Debian Bugs: #520985,
    [#620659])
  * Updated/clarified man pages. (Addresses Debian Bugs: #639411, #642193,
    [#634883])
  * various bug fixes and enhancements (see RELEASE-NOTES)</changelog>
<changelog author="jengelh@medozas.de" date="1333627200">- SPARC: avoid retention of libquota.a
- Remove redundant tags/sections from specfile</changelog>
<changelog author="rschweikert@suse.com" date="1334145600">- place binaries and libraries into the /usr tree (UsrMerge project)</changelog>
<changelog author="pth@suse.de" date="1334318400">- Remove the obsolete german messages.</changelog>
<changelog author="pth@suse.de" date="1334318401">- Update to 1.42.2:
  * resize2fs uses much less CPU and is much faster for very large fs.
  * The seti and freei commands in debugfs can now take an optional length
    argument to set and clear a contiguous range of inodes.
  * E2fsck will now make explicit checks for the EOFBLOCKS_FL, since we
    plan to remove support for it from the kernel file system driver.
  * mke2fs can now use direct I/O via "mke2fs -D"
  * E2fsck was needlessly closing and re-opening the file system as a side
    effect of adding Multiple Mount Protection (MMP).  This isn't
    necessary for non-MMP file systems, so drop it.
  * E2fsck will now abort if there are memory allocation failures when
    the file system is initially opened and during the block group
    descriptor checks.
  * e2fsck will now report the incorrect and corrected checksum values
    for incorrect block groups.
  * e2fsck can now write log files containing the details of the problems
    that were found and fixed directly, via configuration parameters in
    /etc/e2fsck.conf.
  * The number of messages reported by e2fsck for a given problem type
    can be limited.
  * dumpe2fs, debugfs, and tune2fs now use rbtree bitmaps, which noticably
    reduces memory consumption for large file systems.
  * E2fsck now checks for extents with a zero length.
  * Fixed a number of bugs relating to discard.
  * E2fsck's CPU utilization in pass 5 has been optimized.
  * E2image will now skip copying uninitialized bitmap and inode table
    blocks.
  * Fixed mke2fs -S so it does not corrupt the first block group's
    information.
  * E2fsck will now check the new sysfs interface to determine if we are
    using the battery or AC mains.
- Add up-to-date german messages</changelog>
<changelog author="jack@suse.cz" date="1337774400">- Added dependency of e2fsprogs package on particular versions of libext2fs
  and libcom_err to avoid problems with missing symbols</changelog>
<changelog author="jack@suse.cz" date="1337774401">- Updated to 1.42.3
  - Fix a bug in the Unix I/O manager which could cause corruption of file
    systems with more than 16TB when e2fsprogs is compiled in 32-bit mode.
  - Improve the support for integrated quota files.
  - Fixed a regression introduced in 1.42.2 which would cause applications
    outside of e2fsprogs which did not pass the EXT2_FLAG_64BIT to crash.
  - Fix a bug which would cause mke2fs to fail creating the journal if
    /etc/mtab and /proc/mounts are missing.
  - Updated/fixed various man page.
  - Updated translations.</changelog>
<changelog author="coolo@suse.com" date="1339675200">- update to 1.42.4
  * Fix 64-bit block number bugs in e2fsck, dumpe2fs, and debugfs which
    could corrupt file systems
  * Fixed e2fsck's handling of how errors propagate from the journal to
    the file system superblock
  * Fixed a false positive complaint from e2fsck if all of the extents
    in the last extent block are uninitialized and located after the
    end of the file.
  * dumpe2fs will display the journal's error indicator in the
    superblock if it is set
  * Fixed a  bug which caused e2fsck to incorrectly use O_EXCLUSIVE in
    some corner cases.
  * Fix truncation of extent-mapped inodes in e2fsck and libext2fs
  * Fixed i_blocks accounting in bigalloc file systems.
  * Add support for btrfs's No_COW flag to lsattr and chattr
  * Debugfs interprets the date strings of the form "@ddd" as ddd
    seconds after the epoch
  * Updated/fixed various man pages  (Closes: #674453, #674694)</changelog>
<changelog author="idonmez@suse.com" date="1345809600">- Add an /etc/e2fsck.conf file with broken_system_clock=1 to fix
  first part of bnc#775268</changelog>
<changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
<changelog author="jack@suse.cz" date="1348574400">- update to 1.42.6
  * Fixed a potential seg fault in e2fsck when there is an I/O error while reading the superblock
  * Various resize2fs fixes
  * Various quota related fixes
  * Fixed filefrag so that it correctly reports the number of extents
  * Fixed filefrag so it will not crash with a segfault on files from a virtual file system such as /proc
  * Fixed a problem if e2fsck where if the root file system is mounted read-only, e2fsck would not clear an error indication in the journal superblock.
  * Fixed a bug in how e2fsck would uniquify directory entry names
  * Manpage updates
  ...
- removed e2fsprogs-1.42-voidreturn_value_declared.patch because it makes
  no longer any sence due to upstream changes</changelog>
<changelog author="fcrozat@suse.com" date="1360324800">- Install the correct source file as /etc/e2fsck.conf.</changelog>
<changelog author="jack@suse.cz" date="1361534400">- update to 1.42.7
  * Fix various off-line resizing bugs
  * New filefrag options to improve output formatting
  * mke2fs improvements for bigalloc filesystems
  * Fix e2fsck to properly detect corruption of internal extent tree nodes
  * Improve CPU efficiency of e2fsck
  * Various debugfs improvements
  ...
- refreshed e2fsprogs-1.41.1-splash_support.patch</changelog>
<changelog author="jack@suse.cz" date="1361793600">- Fix compilation warnings by patches:
  e2p-Fix-s-handling-in-parse_num_blocks2.patch
  libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
  libext2fs-Provide-prototype-for-ext2fs_symlink.patch
  resize-bigalloc_check-should-have-return-type-void.patch</changelog>
<changelog author="jack@suse.cz" date="1361880000">- Fix compilation for Fedora targets in Build Service</changelog>
<changelog author="jack@suse.cz" date="1372334400">- update to 1.42.8
  * e2fsck: detect and fix invalid extents at leaf block tails
  * e2fsck: allow checking ro root fs with external journal
  * fix offline resizing of fs with flex_bg &amp;&amp; !resize_inode
  * fix resize2fs to not leave bitmaps beyond fs end
  * fixed e2image for large (&gt;32-bit) filesystems
  * debugfs fixes
- Removed upstreamed patches:
    e2p-Fix-s-handling-in-parse_num_blocks2.patch
    resize-bigalloc_check-should-have-return-type-void.patch
    libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
    libext2fs-Provide-prototype-for-ext2fs_symlink.patch</changelog>
<changelog author="jack@suse.cz" date="1408017600">- e2fsck-Fix-last-mount-time-and-last-write-time-in-pr.patch: Fix bad mount
  time in preen mode.
- Set broken_system_clock to 0 so that time based checks work.
  (bnc#866283)</changelog>

</package>
<package pkgid="de68fede9640877e843244d379251ccf9cde7a326560ca934fa249ce7d3538cf" name="e2fsprogs" arch="x86_64">
    <version epoch="0" ver="1.42.8" rel="2.8.1"/>

<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="tabraham@novell.com" date="1326456000">- removed dumpe2fs-add-man-page-warning-about-mounted-fil.patch
  deprecated by this release
- refreshed e2fsprogs-1.41.1-splash_support.patch
- added several patches to fix warnings generated by the check_gcc_output
  and rpmlint
- update to 1.42
  * this release has support for file systems &gt;16TB. online resize
    requires kernel support which will hopefully be in kernel version
    3.2. offline support is not yet available for &gt;16TB, but will be
    coming
  * this release has support for clustered allocation, which reduces
    the number of block (now cluster) bitmaps by allocating and
    deallocating space in contiguous power-of-2 collections of blocks,
    which are called clustered. This is a filesystem level feature
    called 'bigalloc', which must be enabled when the filesystem is
    inititally formatted. It is not backwards compatible with older
    kernels.
  * added support for the Multi-Mount Protection (MMP) feature
  * The mke2fs and e2fsck programs now tries to use the punch hole command
    as a "discard" when operating on normal files.
  * The resize2fs program now has support for a new online resize ioctl
    that can support file systems &gt; 16TB, once it arrives in v3.x kernels.
  * Added e4defrag tool which uses the EXT4_IOC_MOVE_EXT ioctl.
  * Added support for journals larger than 2GB.
  * Added internationalization support for libcom_err error table strings.
  * Fixed various spelling mistakes found in various output strings found by
    I18N translators.
  * Update translations: French, Chinese, Germany, Indonesian, Swedish,
    Vietnamese, Polish, Dutch, Czech. (Addresses Debian Bugs: #520985,
    [#620659])
  * Updated/clarified man pages. (Addresses Debian Bugs: #639411, #642193,
    [#634883])
  * various bug fixes and enhancements (see RELEASE-NOTES)</changelog>
<changelog author="jengelh@medozas.de" date="1333627200">- SPARC: avoid retention of libquota.a
- Remove redundant tags/sections from specfile</changelog>
<changelog author="rschweikert@suse.com" date="1334145600">- place binaries and libraries into the /usr tree (UsrMerge project)</changelog>
<changelog author="pth@suse.de" date="1334318400">- Remove the obsolete german messages.</changelog>
<changelog author="pth@suse.de" date="1334318401">- Update to 1.42.2:
  * resize2fs uses much less CPU and is much faster for very large fs.
  * The seti and freei commands in debugfs can now take an optional length
    argument to set and clear a contiguous range of inodes.
  * E2fsck will now make explicit checks for the EOFBLOCKS_FL, since we
    plan to remove support for it from the kernel file system driver.
  * mke2fs can now use direct I/O via "mke2fs -D"
  * E2fsck was needlessly closing and re-opening the file system as a side
    effect of adding Multiple Mount Protection (MMP).  This isn't
    necessary for non-MMP file systems, so drop it.
  * E2fsck will now abort if there are memory allocation failures when
    the file system is initially opened and during the block group
    descriptor checks.
  * e2fsck will now report the incorrect and corrected checksum values
    for incorrect block groups.
  * e2fsck can now write log files containing the details of the problems
    that were found and fixed directly, via configuration parameters in
    /etc/e2fsck.conf.
  * The number of messages reported by e2fsck for a given problem type
    can be limited.
  * dumpe2fs, debugfs, and tune2fs now use rbtree bitmaps, which noticably
    reduces memory consumption for large file systems.
  * E2fsck now checks for extents with a zero length.
  * Fixed a number of bugs relating to discard.
  * E2fsck's CPU utilization in pass 5 has been optimized.
  * E2image will now skip copying uninitialized bitmap and inode table
    blocks.
  * Fixed mke2fs -S so it does not corrupt the first block group's
    information.
  * E2fsck will now check the new sysfs interface to determine if we are
    using the battery or AC mains.
- Add up-to-date german messages</changelog>
<changelog author="jack@suse.cz" date="1337774400">- Added dependency of e2fsprogs package on particular versions of libext2fs
  and libcom_err to avoid problems with missing symbols</changelog>
<changelog author="jack@suse.cz" date="1337774401">- Updated to 1.42.3
  - Fix a bug in the Unix I/O manager which could cause corruption of file
    systems with more than 16TB when e2fsprogs is compiled in 32-bit mode.
  - Improve the support for integrated quota files.
  - Fixed a regression introduced in 1.42.2 which would cause applications
    outside of e2fsprogs which did not pass the EXT2_FLAG_64BIT to crash.
  - Fix a bug which would cause mke2fs to fail creating the journal if
    /etc/mtab and /proc/mounts are missing.
  - Updated/fixed various man page.
  - Updated translations.</changelog>
<changelog author="coolo@suse.com" date="1339675200">- update to 1.42.4
  * Fix 64-bit block number bugs in e2fsck, dumpe2fs, and debugfs which
    could corrupt file systems
  * Fixed e2fsck's handling of how errors propagate from the journal to
    the file system superblock
  * Fixed a false positive complaint from e2fsck if all of the extents
    in the last extent block are uninitialized and located after the
    end of the file.
  * dumpe2fs will display the journal's error indicator in the
    superblock if it is set
  * Fixed a  bug which caused e2fsck to incorrectly use O_EXCLUSIVE in
    some corner cases.
  * Fix truncation of extent-mapped inodes in e2fsck and libext2fs
  * Fixed i_blocks accounting in bigalloc file systems.
  * Add support for btrfs's No_COW flag to lsattr and chattr
  * Debugfs interprets the date strings of the form "@ddd" as ddd
    seconds after the epoch
  * Updated/fixed various man pages  (Closes: #674453, #674694)</changelog>
<changelog author="idonmez@suse.com" date="1345809600">- Add an /etc/e2fsck.conf file with broken_system_clock=1 to fix
  first part of bnc#775268</changelog>
<changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
<changelog author="jack@suse.cz" date="1348574400">- update to 1.42.6
  * Fixed a potential seg fault in e2fsck when there is an I/O error while reading the superblock
  * Various resize2fs fixes
  * Various quota related fixes
  * Fixed filefrag so that it correctly reports the number of extents
  * Fixed filefrag so it will not crash with a segfault on files from a virtual file system such as /proc
  * Fixed a problem if e2fsck where if the root file system is mounted read-only, e2fsck would not clear an error indication in the journal superblock.
  * Fixed a bug in how e2fsck would uniquify directory entry names
  * Manpage updates
  ...
- removed e2fsprogs-1.42-voidreturn_value_declared.patch because it makes
  no longer any sence due to upstream changes</changelog>
<changelog author="fcrozat@suse.com" date="1360324800">- Install the correct source file as /etc/e2fsck.conf.</changelog>
<changelog author="jack@suse.cz" date="1361534400">- update to 1.42.7
  * Fix various off-line resizing bugs
  * New filefrag options to improve output formatting
  * mke2fs improvements for bigalloc filesystems
  * Fix e2fsck to properly detect corruption of internal extent tree nodes
  * Improve CPU efficiency of e2fsck
  * Various debugfs improvements
  ...
- refreshed e2fsprogs-1.41.1-splash_support.patch</changelog>
<changelog author="jack@suse.cz" date="1361793600">- Fix compilation warnings by patches:
  e2p-Fix-s-handling-in-parse_num_blocks2.patch
  libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
  libext2fs-Provide-prototype-for-ext2fs_symlink.patch
  resize-bigalloc_check-should-have-return-type-void.patch</changelog>
<changelog author="jack@suse.cz" date="1361880000">- Fix compilation for Fedora targets in Build Service</changelog>
<changelog author="jack@suse.cz" date="1372334400">- update to 1.42.8
  * e2fsck: detect and fix invalid extents at leaf block tails
  * e2fsck: allow checking ro root fs with external journal
  * fix offline resizing of fs with flex_bg &amp;&amp; !resize_inode
  * fix resize2fs to not leave bitmaps beyond fs end
  * fixed e2image for large (&gt;32-bit) filesystems
  * debugfs fixes
- Removed upstreamed patches:
    e2p-Fix-s-handling-in-parse_num_blocks2.patch
    resize-bigalloc_check-should-have-return-type-void.patch
    libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
    libext2fs-Provide-prototype-for-ext2fs_symlink.patch</changelog>
<changelog author="jack@suse.cz" date="1408017600">- e2fsck-Fix-last-mount-time-and-last-write-time-in-pr.patch: Fix bad mount
  time in preen mode.
- Set broken_system_clock to 0 so that time based checks work.
  (bnc#866283)</changelog>
<changelog author="jack@suse.cz" date="1432641600">- libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch: libext2fs:
  avoid buffer overflow if s_first_meta_bg is too big (bsc#915402 CVE-2015-0247)</changelog>
<changelog author="jack@suse.cz" date="1432641601">- libext2fs-fix-potential-buffer-overflow-in-closefs.patch: libext2fs: fix
  potential buffer overflow in closefs() (bsc#918346 CVE-2015-1572)</changelog>

</package>
<package pkgid="d3b1c1dff35946894d55762c6d320bd3953f131c6ef377d2ccca5c50aeeb45aa" name="e2fsprogs-devel" arch="i586">
    <version epoch="0" ver="1.42.8" rel="2.8.1"/>

<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="tabraham@novell.com" date="1326456000">- removed dumpe2fs-add-man-page-warning-about-mounted-fil.patch
  deprecated by this release
- refreshed e2fsprogs-1.41.1-splash_support.patch
- added several patches to fix warnings generated by the check_gcc_output
  and rpmlint
- update to 1.42
  * this release has support for file systems &gt;16TB. online resize
    requires kernel support which will hopefully be in kernel version
    3.2. offline support is not yet available for &gt;16TB, but will be
    coming
  * this release has support for clustered allocation, which reduces
    the number of block (now cluster) bitmaps by allocating and
    deallocating space in contiguous power-of-2 collections of blocks,
    which are called clustered. This is a filesystem level feature
    called 'bigalloc', which must be enabled when the filesystem is
    inititally formatted. It is not backwards compatible with older
    kernels.
  * added support for the Multi-Mount Protection (MMP) feature
  * The mke2fs and e2fsck programs now tries to use the punch hole command
    as a "discard" when operating on normal files.
  * The resize2fs program now has support for a new online resize ioctl
    that can support file systems &gt; 16TB, once it arrives in v3.x kernels.
  * Added e4defrag tool which uses the EXT4_IOC_MOVE_EXT ioctl.
  * Added support for journals larger than 2GB.
  * Added internationalization support for libcom_err error table strings.
  * Fixed various spelling mistakes found in various output strings found by
    I18N translators.
  * Update translations: French, Chinese, Germany, Indonesian, Swedish,
    Vietnamese, Polish, Dutch, Czech. (Addresses Debian Bugs: #520985,
    [#620659])
  * Updated/clarified man pages. (Addresses Debian Bugs: #639411, #642193,
    [#634883])
  * various bug fixes and enhancements (see RELEASE-NOTES)</changelog>
<changelog author="jengelh@medozas.de" date="1333627200">- SPARC: avoid retention of libquota.a
- Remove redundant tags/sections from specfile</changelog>
<changelog author="rschweikert@suse.com" date="1334145600">- place binaries and libraries into the /usr tree (UsrMerge project)</changelog>
<changelog author="pth@suse.de" date="1334318400">- Remove the obsolete german messages.</changelog>
<changelog author="pth@suse.de" date="1334318401">- Update to 1.42.2:
  * resize2fs uses much less CPU and is much faster for very large fs.
  * The seti and freei commands in debugfs can now take an optional length
    argument to set and clear a contiguous range of inodes.
  * E2fsck will now make explicit checks for the EOFBLOCKS_FL, since we
    plan to remove support for it from the kernel file system driver.
  * mke2fs can now use direct I/O via "mke2fs -D"
  * E2fsck was needlessly closing and re-opening the file system as a side
    effect of adding Multiple Mount Protection (MMP).  This isn't
    necessary for non-MMP file systems, so drop it.
  * E2fsck will now abort if there are memory allocation failures when
    the file system is initially opened and during the block group
    descriptor checks.
  * e2fsck will now report the incorrect and corrected checksum values
    for incorrect block groups.
  * e2fsck can now write log files containing the details of the problems
    that were found and fixed directly, via configuration parameters in
    /etc/e2fsck.conf.
  * The number of messages reported by e2fsck for a given problem type
    can be limited.
  * dumpe2fs, debugfs, and tune2fs now use rbtree bitmaps, which noticably
    reduces memory consumption for large file systems.
  * E2fsck now checks for extents with a zero length.
  * Fixed a number of bugs relating to discard.
  * E2fsck's CPU utilization in pass 5 has been optimized.
  * E2image will now skip copying uninitialized bitmap and inode table
    blocks.
  * Fixed mke2fs -S so it does not corrupt the first block group's
    information.
  * E2fsck will now check the new sysfs interface to determine if we are
    using the battery or AC mains.
- Add up-to-date german messages</changelog>
<changelog author="jack@suse.cz" date="1337774400">- Added dependency of e2fsprogs package on particular versions of libext2fs
  and libcom_err to avoid problems with missing symbols</changelog>
<changelog author="jack@suse.cz" date="1337774401">- Updated to 1.42.3
  - Fix a bug in the Unix I/O manager which could cause corruption of file
    systems with more than 16TB when e2fsprogs is compiled in 32-bit mode.
  - Improve the support for integrated quota files.
  - Fixed a regression introduced in 1.42.2 which would cause applications
    outside of e2fsprogs which did not pass the EXT2_FLAG_64BIT to crash.
  - Fix a bug which would cause mke2fs to fail creating the journal if
    /etc/mtab and /proc/mounts are missing.
  - Updated/fixed various man page.
  - Updated translations.</changelog>
<changelog author="coolo@suse.com" date="1339675200">- update to 1.42.4
  * Fix 64-bit block number bugs in e2fsck, dumpe2fs, and debugfs which
    could corrupt file systems
  * Fixed e2fsck's handling of how errors propagate from the journal to
    the file system superblock
  * Fixed a false positive complaint from e2fsck if all of the extents
    in the last extent block are uninitialized and located after the
    end of the file.
  * dumpe2fs will display the journal's error indicator in the
    superblock if it is set
  * Fixed a  bug which caused e2fsck to incorrectly use O_EXCLUSIVE in
    some corner cases.
  * Fix truncation of extent-mapped inodes in e2fsck and libext2fs
  * Fixed i_blocks accounting in bigalloc file systems.
  * Add support for btrfs's No_COW flag to lsattr and chattr
  * Debugfs interprets the date strings of the form "@ddd" as ddd
    seconds after the epoch
  * Updated/fixed various man pages  (Closes: #674453, #674694)</changelog>
<changelog author="idonmez@suse.com" date="1345809600">- Add an /etc/e2fsck.conf file with broken_system_clock=1 to fix
  first part of bnc#775268</changelog>
<changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
<changelog author="jack@suse.cz" date="1348574400">- update to 1.42.6
  * Fixed a potential seg fault in e2fsck when there is an I/O error while reading the superblock
  * Various resize2fs fixes
  * Various quota related fixes
  * Fixed filefrag so that it correctly reports the number of extents
  * Fixed filefrag so it will not crash with a segfault on files from a virtual file system such as /proc
  * Fixed a problem if e2fsck where if the root file system is mounted read-only, e2fsck would not clear an error indication in the journal superblock.
  * Fixed a bug in how e2fsck would uniquify directory entry names
  * Manpage updates
  ...
- removed e2fsprogs-1.42-voidreturn_value_declared.patch because it makes
  no longer any sence due to upstream changes</changelog>
<changelog author="fcrozat@suse.com" date="1360324800">- Install the correct source file as /etc/e2fsck.conf.</changelog>
<changelog author="jack@suse.cz" date="1361534400">- update to 1.42.7
  * Fix various off-line resizing bugs
  * New filefrag options to improve output formatting
  * mke2fs improvements for bigalloc filesystems
  * Fix e2fsck to properly detect corruption of internal extent tree nodes
  * Improve CPU efficiency of e2fsck
  * Various debugfs improvements
  ...
- refreshed e2fsprogs-1.41.1-splash_support.patch</changelog>
<changelog author="jack@suse.cz" date="1361793600">- Fix compilation warnings by patches:
  e2p-Fix-s-handling-in-parse_num_blocks2.patch
  libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
  libext2fs-Provide-prototype-for-ext2fs_symlink.patch
  resize-bigalloc_check-should-have-return-type-void.patch</changelog>
<changelog author="jack@suse.cz" date="1361880000">- Fix compilation for Fedora targets in Build Service</changelog>
<changelog author="jack@suse.cz" date="1372334400">- update to 1.42.8
  * e2fsck: detect and fix invalid extents at leaf block tails
  * e2fsck: allow checking ro root fs with external journal
  * fix offline resizing of fs with flex_bg &amp;&amp; !resize_inode
  * fix resize2fs to not leave bitmaps beyond fs end
  * fixed e2image for large (&gt;32-bit) filesystems
  * debugfs fixes
- Removed upstreamed patches:
    e2p-Fix-s-handling-in-parse_num_blocks2.patch
    resize-bigalloc_check-should-have-return-type-void.patch
    libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
    libext2fs-Provide-prototype-for-ext2fs_symlink.patch</changelog>
<changelog author="jack@suse.cz" date="1408017600">- e2fsck-Fix-last-mount-time-and-last-write-time-in-pr.patch: Fix bad mount
  time in preen mode.
- Set broken_system_clock to 0 so that time based checks work.
  (bnc#866283)</changelog>
<changelog author="jack@suse.cz" date="1432641600">- libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch: libext2fs:
  avoid buffer overflow if s_first_meta_bg is too big (bsc#915402 CVE-2015-0247)</changelog>
<changelog author="jack@suse.cz" date="1432641601">- libext2fs-fix-potential-buffer-overflow-in-closefs.patch: libext2fs: fix
  potential buffer overflow in closefs() (bsc#918346 CVE-2015-1572)</changelog>

</package>
<package pkgid="4efb86201ed692c93e0ed7b662d5a56a306997448fbacffc6108476f51b4c768" name="e2fsprogs-devel" arch="x86_64">
    <version epoch="0" ver="1.42.8" rel="2.8.1"/>

<changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
<changelog author="tabraham@novell.com" date="1326456000">- removed dumpe2fs-add-man-page-warning-about-mounted-fil.patch
  deprecated by this release
- refreshed e2fsprogs-1.41.1-splash_support.patch
- added several patches to fix warnings generated by the check_gcc_output
  and rpmlint
- update to 1.42
  * this release has support for file systems &gt;16TB. online resize
    requires kernel support which will hopefully be in kernel version
    3.2. offline support is not yet available for &gt;16TB, but will be
    coming
  * this release has support for clustered allocation, which reduces
    the number of block (now cluster) bitmaps by allocating and
    deallocating space in contiguous power-of-2 collections of blocks,
    which are called clustered. This is a filesystem level feature
    called 'bigalloc', which must be enabled when the filesystem is
    inititally formatted. It is not backwards compatible with older
    kernels.
  * added support for the Multi-Mount Protection (MMP) feature
  * The mke2fs and e2fsck programs now tries to use the punch hole command
    as a "discard" when operating on normal files.
  * The resize2fs program now has support for a new online resize ioctl
    that can support file systems &gt; 16TB, once it arrives in v3.x kernels.
  * Added e4defrag tool which uses the EXT4_IOC_MOVE_EXT ioctl.
  * Added support for journals larger than 2GB.
  * Added internationalization support for libcom_err error table strings.
  * Fixed various spelling mistakes found in various output strings found by
    I18N translators.
  * Update translations: French, Chinese, Germany, Indonesian, Swedish,
    Vietnamese, Polish, Dutch, Czech. (Addresses Debian Bugs: #520985,
    [#620659])
  * Updated/clarified man pages. (Addresses Debian Bugs: #639411, #642193,
    [#634883])
  * various bug fixes and enhancements (see RELEASE-NOTES)</changelog>
<changelog author="jengelh@medozas.de" date="1333627200">- SPARC: avoid retention of libquota.a
- Remove redundant tags/sections from specfile</changelog>
<changelog author="rschweikert@suse.com" date="1334145600">- place binaries and libraries into the /usr tree (UsrMerge project)</changelog>
<changelog author="pth@suse.de" date="1334318400">- Remove the obsolete german messages.</changelog>
<changelog author="pth@suse.de" date="1334318401">- Update to 1.42.2:
  * resize2fs uses much less CPU and is much faster for very large fs.
  * The seti and freei commands in debugfs can now take an optional length
    argument to set and clear a contiguous range of inodes.
  * E2fsck will now make explicit checks for the EOFBLOCKS_FL, since we
    plan to remove support for it from the kernel file system driver.
  * mke2fs can now use direct I/O via "mke2fs -D"
  * E2fsck was needlessly closing and re-opening the file system as a side
    effect of adding Multiple Mount Protection (MMP).  This isn't
    necessary for non-MMP file systems, so drop it.
  * E2fsck will now abort if there are memory allocation failures when
    the file system is initially opened and during the block group
    descriptor checks.
  * e2fsck will now report the incorrect and corrected checksum values
    for incorrect block groups.
  * e2fsck can now write log files containing the details of the problems
    that were found and fixed directly, via configuration parameters in
    /etc/e2fsck.conf.
  * The number of messages reported by e2fsck for a given problem type
    can be limited.
  * dumpe2fs, debugfs, and tune2fs now use rbtree bitmaps, which noticably
    reduces memory consumption for large file systems.
  * E2fsck now checks for extents with a zero length.
  * Fixed a number of bugs relating to discard.
  * E2fsck's CPU utilization in pass 5 has been optimized.
  * E2image will now skip copying uninitialized bitmap and inode table
    blocks.
  * Fixed mke2fs -S so it does not corrupt the first block group's
    information.
  * E2fsck will now check the new sysfs interface to determine if we are
    using the battery or AC mains.
- Add up-to-date german messages</changelog>
<changelog author="jack@suse.cz" date="1337774400">- Added dependency of e2fsprogs package on particular versions of libext2fs
  and libcom_err to avoid problems with missing symbols</changelog>
<changelog author="jack@suse.cz" date="1337774401">- Updated to 1.42.3
  - Fix a bug in the Unix I/O manager which could cause corruption of file
    systems with more than 16TB when e2fsprogs is compiled in 32-bit mode.
  - Improve the support for integrated quota files.
  - Fixed a regression introduced in 1.42.2 which would cause applications
    outside of e2fsprogs which did not pass the EXT2_FLAG_64BIT to crash.
  - Fix a bug which would cause mke2fs to fail creating the journal if
    /etc/mtab and /proc/mounts are missing.
  - Updated/fixed various man page.
  - Updated translations.</changelog>
<changelog author="coolo@suse.com" date="1339675200">- update to 1.42.4
  * Fix 64-bit block number bugs in e2fsck, dumpe2fs, and debugfs which
    could corrupt file systems
  * Fixed e2fsck's handling of how errors propagate from the journal to
    the file system superblock
  * Fixed a false positive complaint from e2fsck if all of the extents
    in the last extent block are uninitialized and located after the
    end of the file.
  * dumpe2fs will display the journal's error indicator in the
    superblock if it is set
  * Fixed a  bug which caused e2fsck to incorrectly use O_EXCLUSIVE in
    some corner cases.
  * Fix truncation of extent-mapped inodes in e2fsck and libext2fs
  * Fixed i_blocks accounting in bigalloc file systems.
  * Add support for btrfs's No_COW flag to lsattr and chattr
  * Debugfs interprets the date strings of the form "@ddd" as ddd
    seconds after the epoch
  * Updated/fixed various man pages  (Closes: #674453, #674694)</changelog>
<changelog author="idonmez@suse.com" date="1345809600">- Add an /etc/e2fsck.conf file with broken_system_clock=1 to fix
  first part of bnc#775268</changelog>
<changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
<changelog author="jack@suse.cz" date="1348574400">- update to 1.42.6
  * Fixed a potential seg fault in e2fsck when there is an I/O error while reading the superblock
  * Various resize2fs fixes
  * Various quota related fixes
  * Fixed filefrag so that it correctly reports the number of extents
  * Fixed filefrag so it will not crash with a segfault on files from a virtual file system such as /proc
  * Fixed a problem if e2fsck where if the root file system is mounted read-only, e2fsck would not clear an error indication in the journal superblock.
  * Fixed a bug in how e2fsck would uniquify directory entry names
  * Manpage updates
  ...
- removed e2fsprogs-1.42-voidreturn_value_declared.patch because it makes
  no longer any sence due to upstream changes</changelog>
<changelog author="fcrozat@suse.com" date="1360324800">- Install the correct source file as /etc/e2fsck.conf.</changelog>
<changelog author="jack@suse.cz" date="1361534400">- update to 1.42.7
  * Fix various off-line resizing bugs
  * New filefrag options to improve output formatting
  * mke2fs improvements for bigalloc filesystems
  * Fix e2fsck to properly detect corruption of internal extent tree nodes
  * Improve CPU efficiency of e2fsck
  * Various debugfs improvements
  ...
- refreshed e2fsprogs-1.41.1-splash_support.patch</changelog>
<changelog author="jack@suse.cz" date="1361793600">- Fix compilation warnings by patches:
  e2p-Fix-s-handling-in-parse_num_blocks2.patch
  libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
  libext2fs-Provide-prototype-for-ext2fs_symlink.patch
  resize-bigalloc_check-should-have-return-type-void.patch</changelog>
<changelog author="jack@suse.cz" date="1361880000">- Fix compilation for Fedora targets in Build Service</changelog>
<changelog author="jack@suse.cz" date="1372334400">- update to 1.42.8
  * e2fsck: detect and fix invalid extents at leaf block tails
  * e2fsck: allow checking ro root fs with external journal
  * fix offline resizing of fs with flex_bg &amp;&amp; !resize_inode
  * fix resize2fs to not leave bitmaps beyond fs end
  * fixed e2image for large (&gt;32-bit) filesystems
  * debugfs fixes
- Removed upstreamed patches:
    e2p-Fix-s-handling-in-parse_num_blocks2.patch
    resize-bigalloc_check-should-have-return-type-void.patch
    libext2fs-Fix-return-value-in-ext2fs_test_block_bitm.patch
    libext2fs-Provide-prototype-for-ext2fs_symlink.patch</changelog>
<changelog author="jack@suse.cz" date="1408017600">- e2fsck-Fix-last-mount-time-and-last-write-time-in-pr.patch: Fix bad mount
  time in preen mode.
- Set broken_system_clock to 0 so that time based checks work.
  (bnc#866283)</changelog>
<changelog author="jack@suse.cz" date="1432641600">- libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch: libext2fs:
  avoid buffer overflow if s_first_meta_bg is too big (bsc#915402 CVE-2015-0247)</changelog>
<changelog author="jack@suse.cz" date="1432641601">- libext2fs-fix-potential-buffer-overflow-in-closefs.patch: libext2fs: fix
  potential buffer overflow in closefs() (bsc#918346 CVE-2015-1572)</changelog>

</package>
<package pkgid="3d512674c44a728dd20d7fb7b8c1ca7c786d5a23d0c127c10c350d2ee0e0b108" name="ecryptfs-utils" arch="i586">
    <version epoch="0" ver="104" rel="3.3.1"/>

<changelog author="sbrabec@suse.cz" date="1245931200">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
<changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
<changelog author="meissner@suse.de" date="1268913600">- Updated to 83
  - lots of bugfixes
  - improvements</changelog>
<changelog author="aj@suse.de" date="1270900800">- Fix build with adding requires on mozilla-nss-devel and python-devel.
- Fix package list.</changelog>
<changelog author="meissner@suse.de" date="1303128000">- Updated to 87
  * src/utils/ecryptfs-setup-private: update the Private.* selinux
    contexts
  * src/utils/ecryptfs-setup-private:
  - add -p to mkdir, address noise for a non-error
  - must insert keys during testing phase, since we remove keys on
    unmount now, LP: #725862
  * src/utils/ecryptfs_rewrap_passphrase.c: confirm passphrases in
    interactive mode, LP: #667331
- Updated to 86
  * src/pam_ecryptfs/pam_ecryptfs.c:
  - check if this file exists and ask the user for the wrapping passphrase
    if it does
  - eliminate both ecryptfs_pam_wrapping_independent_set() and
    ecryptfs_pam_automount_set() and replace with a reusable
    file_exists_dotecryptfs() function
  * src/utils/mount.ecryptfs_private.c:
  - support multiple, user configurable private directories by way of
    a command line "alias" argument
  - this "alias" references a configuration file by the name of:
    $HOME/.ecryptfs/alias.conf, which is in an fstab(5) format,
    as well as $HOME/.ecryptfs/alias.sig, in the same format as
    Private.sig
  - if no argument specified, the utility operates in legacy mode,
    defaulting to "Private"
  - rename variables, s/dev/src/ and s/mnt/dest/
  - add a read_config() function
  - add an alias char* to replace the #defined ECRYPTFS_PRIVATE_DIR
  - this is half of the fix to LP: #615657
  * doc/manpage/mount.ecryptfs_private.1: document these changes
  * src/libecryptfs/main.c, src/utils/mount.ecryptfs_private.c:
  - allow umount.ecryptfs_private to succeed when the key is no
    longer in user keyring.
- Updated to 85
  * src/utils/ecryptfs-recover-private: clean sigs of invalid characters
  * src/utils/mount.ecryptfs_private.c:
  - fix bug LP: #313812, clear used keys on unmount
  - add ecryptfs_unlink_sigs to the mount opts, so that unmounts from
    umount.ecryptfs behave similarly
  - use ecryptfs_remove_auth_tok_from_keyring() on the sig and sig_fnek
  * src/utils/ecryptfs-migrate-home:
  - support user databases outside of /etc/passwd, LP: #627506
- Updated to 84
  * src/desktop/ecryptfs-record-passphrase: fix typo, LP: #524139
  * debian/rules, debian/control:
  - disable the gpg key module, as it's not yet functional
  - clean up unneeded build-deps
  - also, not using opencryptoki either
  * doc/manpage/ecryptfs.7: fix minor documentation bug, reported by
    email by Jon 'maddog' Hall
  * doc/manpage/ecryptfs-recover-private.1, doc/manpage/Makefile.am,
    po/POTFILES.in, src/utils/ecryptfs-recover-private,
    src/utils/Makefile.am: add a utility to simplify data recovery
    of an encrypted private directory from a Live ISO, LP: #689969</changelog>
<changelog author="meissner@suse.de" date="1313064000">- Updated to 90
  Fixed several security issues:
  * CVE-2011-1831 - Race condition when checking mountpoint during mount.
  * CVE-2011-1832 - Race condition when checking mountpoint during unmount.
  * CVE-2011-1833 - Race condition when checking source during mount.
  * CVE-2011-1834 - Improper mtab handling allowing corruption due to resource
    limits, signals, etc.
  * CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp
    directory.
  * CVE-2011-1836 - ecryptfs-recover-private mounts directly in /tmp
  * CVE-2011-1837 - Predictable lock counter name and associated races.
  New ecryptfs-find binary to find by inode.</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Put make call in the right spot
- Use %_smp_mflags for parallel build</changelog>
<changelog author="meissner@suse.de" date="1316520000">- Updated to 92
  * Fix umask issue introduced by last security update
  * some bugfixes</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.com" date="1332936000">- updated to 96
  - bugfixes
  - testsuite added
  - ecryptfs-verify utility added
  - write-read test utility
- mark /sbin/mount.eccryptfs_private as setuidable (bnc#745584 , bnc#740110)</changelog>
<changelog author="darin@darins.net" date="1333713600">- patch so ecryptfs-setup-swap executes boot.crypto</changelog>
<changelog author="meissner@suse.com" date="1340280000">- added security improvements to mount.ecryptfs_private
  and pam_ecryptfs (bnc#740110)</changelog>
<changelog author="meissner@suse.com" date="1341403200">- hook pam_ecryptfs into pam session and auth bnc#755475</changelog>
<changelog author="meissner@suse.com" date="1341921600">- point the desktop link to the right .desktop file
- build mount.ecryptfs_private with -pie/-fpie</changelog>
<changelog author="meissner@suse.com" date="1342008000">- also supply MS_NODEV to avoid exposing device files
  if someone got them on the encrypted media.</changelog>
<changelog author="darin@darins.net" date="1375704000">- update to 103
- move -pie/-fpie into separate patch
- update ecryptfs-setup-swap-SuSE.patch for systmd and fstab
  without UUID lables
- remove ecryptfs-utils.security.patch, fixed upstream
- add PreReq: permissions
- removed unpackaged doc</changelog>
<changelog author="darin@darins.net" date="1376568000">- fix %postun to not run pam-config on update (bnc#814098, bnc#834993)</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Drop ecryptfs-correct-desktop.patch and ensure
  ecryptfs-mount-private.desktop is properly generated and
  installed in a program specific location (ecryptfs-setup-private
  will take care of creating the right symlink) and not in
  /usr/share/applications by default.
- Add ecryptfs-mount-private.png (from Fedora)
- Create tmpfiles.d to ensure ecryptfs module is autoloaded at
  start.
- Fix category on ecryptfs-setup-private.desktop.</changelog>
<changelog author="darin@darins.net" date="1409832000">- update to 104
  - lots of bugfixes, apparently from static code checking</changelog>
<changelog author="meissner@suse.com" date="1453291200">- validate-mount-destination-fs-type.patch: A local user could have
  escalated privileges by mounting over special filesystems (bsc#962052
  CVE-2016-1572)</changelog>

</package>
<package pkgid="89e4562f9a037c04af85dcc6f3a388a4abeff87f4532ca592431f3fd6abdd8d9" name="ecryptfs-utils" arch="i586">
    <version epoch="0" ver="104" rel="3.6.3"/>

<changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
<changelog author="meissner@suse.de" date="1268913600">- Updated to 83
  - lots of bugfixes
  - improvements</changelog>
<changelog author="aj@suse.de" date="1270900800">- Fix build with adding requires on mozilla-nss-devel and python-devel.
- Fix package list.</changelog>
<changelog author="meissner@suse.de" date="1303128000">- Updated to 87
  * src/utils/ecryptfs-setup-private: update the Private.* selinux
    contexts
  * src/utils/ecryptfs-setup-private:
  - add -p to mkdir, address noise for a non-error
  - must insert keys during testing phase, since we remove keys on
    unmount now, LP: #725862
  * src/utils/ecryptfs_rewrap_passphrase.c: confirm passphrases in
    interactive mode, LP: #667331
- Updated to 86
  * src/pam_ecryptfs/pam_ecryptfs.c:
  - check if this file exists and ask the user for the wrapping passphrase
    if it does
  - eliminate both ecryptfs_pam_wrapping_independent_set() and
    ecryptfs_pam_automount_set() and replace with a reusable
    file_exists_dotecryptfs() function
  * src/utils/mount.ecryptfs_private.c:
  - support multiple, user configurable private directories by way of
    a command line "alias" argument
  - this "alias" references a configuration file by the name of:
    $HOME/.ecryptfs/alias.conf, which is in an fstab(5) format,
    as well as $HOME/.ecryptfs/alias.sig, in the same format as
    Private.sig
  - if no argument specified, the utility operates in legacy mode,
    defaulting to "Private"
  - rename variables, s/dev/src/ and s/mnt/dest/
  - add a read_config() function
  - add an alias char* to replace the #defined ECRYPTFS_PRIVATE_DIR
  - this is half of the fix to LP: #615657
  * doc/manpage/mount.ecryptfs_private.1: document these changes
  * src/libecryptfs/main.c, src/utils/mount.ecryptfs_private.c:
  - allow umount.ecryptfs_private to succeed when the key is no
    longer in user keyring.
- Updated to 85
  * src/utils/ecryptfs-recover-private: clean sigs of invalid characters
  * src/utils/mount.ecryptfs_private.c:
  - fix bug LP: #313812, clear used keys on unmount
  - add ecryptfs_unlink_sigs to the mount opts, so that unmounts from
    umount.ecryptfs behave similarly
  - use ecryptfs_remove_auth_tok_from_keyring() on the sig and sig_fnek
  * src/utils/ecryptfs-migrate-home:
  - support user databases outside of /etc/passwd, LP: #627506
- Updated to 84
  * src/desktop/ecryptfs-record-passphrase: fix typo, LP: #524139
  * debian/rules, debian/control:
  - disable the gpg key module, as it's not yet functional
  - clean up unneeded build-deps
  - also, not using opencryptoki either
  * doc/manpage/ecryptfs.7: fix minor documentation bug, reported by
    email by Jon 'maddog' Hall
  * doc/manpage/ecryptfs-recover-private.1, doc/manpage/Makefile.am,
    po/POTFILES.in, src/utils/ecryptfs-recover-private,
    src/utils/Makefile.am: add a utility to simplify data recovery
    of an encrypted private directory from a Live ISO, LP: #689969</changelog>
<changelog author="meissner@suse.de" date="1313064000">- Updated to 90
  Fixed several security issues:
  * CVE-2011-1831 - Race condition when checking mountpoint during mount.
  * CVE-2011-1832 - Race condition when checking mountpoint during unmount.
  * CVE-2011-1833 - Race condition when checking source during mount.
  * CVE-2011-1834 - Improper mtab handling allowing corruption due to resource
    limits, signals, etc.
  * CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp
    directory.
  * CVE-2011-1836 - ecryptfs-recover-private mounts directly in /tmp
  * CVE-2011-1837 - Predictable lock counter name and associated races.
  New ecryptfs-find binary to find by inode.</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Put make call in the right spot
- Use %_smp_mflags for parallel build</changelog>
<changelog author="meissner@suse.de" date="1316520000">- Updated to 92
  * Fix umask issue introduced by last security update
  * some bugfixes</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.com" date="1332936000">- updated to 96
  - bugfixes
  - testsuite added
  - ecryptfs-verify utility added
  - write-read test utility
- mark /sbin/mount.eccryptfs_private as setuidable (bnc#745584 , bnc#740110)</changelog>
<changelog author="darin@darins.net" date="1333713600">- patch so ecryptfs-setup-swap executes boot.crypto</changelog>
<changelog author="meissner@suse.com" date="1340280000">- added security improvements to mount.ecryptfs_private
  and pam_ecryptfs (bnc#740110)</changelog>
<changelog author="meissner@suse.com" date="1341403200">- hook pam_ecryptfs into pam session and auth bnc#755475</changelog>
<changelog author="meissner@suse.com" date="1341921600">- point the desktop link to the right .desktop file
- build mount.ecryptfs_private with -pie/-fpie</changelog>
<changelog author="meissner@suse.com" date="1342008000">- also supply MS_NODEV to avoid exposing device files
  if someone got them on the encrypted media.</changelog>
<changelog author="darin@darins.net" date="1375704000">- update to 103
- move -pie/-fpie into separate patch
- update ecryptfs-setup-swap-SuSE.patch for systmd and fstab
  without UUID lables
- remove ecryptfs-utils.security.patch, fixed upstream
- add PreReq: permissions
- removed unpackaged doc</changelog>
<changelog author="darin@darins.net" date="1376568000">- fix %postun to not run pam-config on update (bnc#814098, bnc#834993)</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Drop ecryptfs-correct-desktop.patch and ensure
  ecryptfs-mount-private.desktop is properly generated and
  installed in a program specific location (ecryptfs-setup-private
  will take care of creating the right symlink) and not in
  /usr/share/applications by default.
- Add ecryptfs-mount-private.png (from Fedora)
- Create tmpfiles.d to ensure ecryptfs module is autoloaded at
  start.
- Fix category on ecryptfs-setup-private.desktop.</changelog>
<changelog author="darin@darins.net" date="1409832000">- update to 104
  - lots of bugfixes, apparently from static code checking</changelog>
<changelog author="meissner@suse.com" date="1453291200">- validate-mount-destination-fs-type.patch: A local user could have
  escalated privileges by mounting over special filesystems (bsc#962052
  CVE-2016-1572)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="96c0ee798bc74a1d96f92cb2359b94e4f8b35ede61780dbeaf6a482625c8fc09" name="ecryptfs-utils" arch="src">
    <version epoch="0" ver="104" rel="3.3.1"/>

<changelog author="sbrabec@suse.cz" date="1245931200">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
<changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
<changelog author="meissner@suse.de" date="1268913600">- Updated to 83
  - lots of bugfixes
  - improvements</changelog>
<changelog author="aj@suse.de" date="1270900800">- Fix build with adding requires on mozilla-nss-devel and python-devel.
- Fix package list.</changelog>
<changelog author="meissner@suse.de" date="1303128000">- Updated to 87
  * src/utils/ecryptfs-setup-private: update the Private.* selinux
    contexts
  * src/utils/ecryptfs-setup-private:
  - add -p to mkdir, address noise for a non-error
  - must insert keys during testing phase, since we remove keys on
    unmount now, LP: #725862
  * src/utils/ecryptfs_rewrap_passphrase.c: confirm passphrases in
    interactive mode, LP: #667331
- Updated to 86
  * src/pam_ecryptfs/pam_ecryptfs.c:
  - check if this file exists and ask the user for the wrapping passphrase
    if it does
  - eliminate both ecryptfs_pam_wrapping_independent_set() and
    ecryptfs_pam_automount_set() and replace with a reusable
    file_exists_dotecryptfs() function
  * src/utils/mount.ecryptfs_private.c:
  - support multiple, user configurable private directories by way of
    a command line "alias" argument
  - this "alias" references a configuration file by the name of:
    $HOME/.ecryptfs/alias.conf, which is in an fstab(5) format,
    as well as $HOME/.ecryptfs/alias.sig, in the same format as
    Private.sig
  - if no argument specified, the utility operates in legacy mode,
    defaulting to "Private"
  - rename variables, s/dev/src/ and s/mnt/dest/
  - add a read_config() function
  - add an alias char* to replace the #defined ECRYPTFS_PRIVATE_DIR
  - this is half of the fix to LP: #615657
  * doc/manpage/mount.ecryptfs_private.1: document these changes
  * src/libecryptfs/main.c, src/utils/mount.ecryptfs_private.c:
  - allow umount.ecryptfs_private to succeed when the key is no
    longer in user keyring.
- Updated to 85
  * src/utils/ecryptfs-recover-private: clean sigs of invalid characters
  * src/utils/mount.ecryptfs_private.c:
  - fix bug LP: #313812, clear used keys on unmount
  - add ecryptfs_unlink_sigs to the mount opts, so that unmounts from
    umount.ecryptfs behave similarly
  - use ecryptfs_remove_auth_tok_from_keyring() on the sig and sig_fnek
  * src/utils/ecryptfs-migrate-home:
  - support user databases outside of /etc/passwd, LP: #627506
- Updated to 84
  * src/desktop/ecryptfs-record-passphrase: fix typo, LP: #524139
  * debian/rules, debian/control:
  - disable the gpg key module, as it's not yet functional
  - clean up unneeded build-deps
  - also, not using opencryptoki either
  * doc/manpage/ecryptfs.7: fix minor documentation bug, reported by
    email by Jon 'maddog' Hall
  * doc/manpage/ecryptfs-recover-private.1, doc/manpage/Makefile.am,
    po/POTFILES.in, src/utils/ecryptfs-recover-private,
    src/utils/Makefile.am: add a utility to simplify data recovery
    of an encrypted private directory from a Live ISO, LP: #689969</changelog>
<changelog author="meissner@suse.de" date="1313064000">- Updated to 90
  Fixed several security issues:
  * CVE-2011-1831 - Race condition when checking mountpoint during mount.
  * CVE-2011-1832 - Race condition when checking mountpoint during unmount.
  * CVE-2011-1833 - Race condition when checking source during mount.
  * CVE-2011-1834 - Improper mtab handling allowing corruption due to resource
    limits, signals, etc.
  * CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp
    directory.
  * CVE-2011-1836 - ecryptfs-recover-private mounts directly in /tmp
  * CVE-2011-1837 - Predictable lock counter name and associated races.
  New ecryptfs-find binary to find by inode.</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Put make call in the right spot
- Use %_smp_mflags for parallel build</changelog>
<changelog author="meissner@suse.de" date="1316520000">- Updated to 92
  * Fix umask issue introduced by last security update
  * some bugfixes</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.com" date="1332936000">- updated to 96
  - bugfixes
  - testsuite added
  - ecryptfs-verify utility added
  - write-read test utility
- mark /sbin/mount.eccryptfs_private as setuidable (bnc#745584 , bnc#740110)</changelog>
<changelog author="darin@darins.net" date="1333713600">- patch so ecryptfs-setup-swap executes boot.crypto</changelog>
<changelog author="meissner@suse.com" date="1340280000">- added security improvements to mount.ecryptfs_private
  and pam_ecryptfs (bnc#740110)</changelog>
<changelog author="meissner@suse.com" date="1341403200">- hook pam_ecryptfs into pam session and auth bnc#755475</changelog>
<changelog author="meissner@suse.com" date="1341921600">- point the desktop link to the right .desktop file
- build mount.ecryptfs_private with -pie/-fpie</changelog>
<changelog author="meissner@suse.com" date="1342008000">- also supply MS_NODEV to avoid exposing device files
  if someone got them on the encrypted media.</changelog>
<changelog author="darin@darins.net" date="1375704000">- update to 103
- move -pie/-fpie into separate patch
- update ecryptfs-setup-swap-SuSE.patch for systmd and fstab
  without UUID lables
- remove ecryptfs-utils.security.patch, fixed upstream
- add PreReq: permissions
- removed unpackaged doc</changelog>
<changelog author="darin@darins.net" date="1376568000">- fix %postun to not run pam-config on update (bnc#814098, bnc#834993)</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Drop ecryptfs-correct-desktop.patch and ensure
  ecryptfs-mount-private.desktop is properly generated and
  installed in a program specific location (ecryptfs-setup-private
  will take care of creating the right symlink) and not in
  /usr/share/applications by default.
- Add ecryptfs-mount-private.png (from Fedora)
- Create tmpfiles.d to ensure ecryptfs module is autoloaded at
  start.
- Fix category on ecryptfs-setup-private.desktop.</changelog>
<changelog author="darin@darins.net" date="1409832000">- update to 104
  - lots of bugfixes, apparently from static code checking</changelog>
<changelog author="meissner@suse.com" date="1453291200">- validate-mount-destination-fs-type.patch: A local user could have
  escalated privileges by mounting over special filesystems (bsc#962052
  CVE-2016-1572)</changelog>

</package>
<package pkgid="b9a024f10db18a1c15c4c9c23e4c1155a519854eb8964dce02688de6c24b86f9" name="ecryptfs-utils" arch="src">
    <version epoch="0" ver="104" rel="3.6.3"/>

<changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
<changelog author="meissner@suse.de" date="1268913600">- Updated to 83
  - lots of bugfixes
  - improvements</changelog>
<changelog author="aj@suse.de" date="1270900800">- Fix build with adding requires on mozilla-nss-devel and python-devel.
- Fix package list.</changelog>
<changelog author="meissner@suse.de" date="1303128000">- Updated to 87
  * src/utils/ecryptfs-setup-private: update the Private.* selinux
    contexts
  * src/utils/ecryptfs-setup-private:
  - add -p to mkdir, address noise for a non-error
  - must insert keys during testing phase, since we remove keys on
    unmount now, LP: #725862
  * src/utils/ecryptfs_rewrap_passphrase.c: confirm passphrases in
    interactive mode, LP: #667331
- Updated to 86
  * src/pam_ecryptfs/pam_ecryptfs.c:
  - check if this file exists and ask the user for the wrapping passphrase
    if it does
  - eliminate both ecryptfs_pam_wrapping_independent_set() and
    ecryptfs_pam_automount_set() and replace with a reusable
    file_exists_dotecryptfs() function
  * src/utils/mount.ecryptfs_private.c:
  - support multiple, user configurable private directories by way of
    a command line "alias" argument
  - this "alias" references a configuration file by the name of:
    $HOME/.ecryptfs/alias.conf, which is in an fstab(5) format,
    as well as $HOME/.ecryptfs/alias.sig, in the same format as
    Private.sig
  - if no argument specified, the utility operates in legacy mode,
    defaulting to "Private"
  - rename variables, s/dev/src/ and s/mnt/dest/
  - add a read_config() function
  - add an alias char* to replace the #defined ECRYPTFS_PRIVATE_DIR
  - this is half of the fix to LP: #615657
  * doc/manpage/mount.ecryptfs_private.1: document these changes
  * src/libecryptfs/main.c, src/utils/mount.ecryptfs_private.c:
  - allow umount.ecryptfs_private to succeed when the key is no
    longer in user keyring.
- Updated to 85
  * src/utils/ecryptfs-recover-private: clean sigs of invalid characters
  * src/utils/mount.ecryptfs_private.c:
  - fix bug LP: #313812, clear used keys on unmount
  - add ecryptfs_unlink_sigs to the mount opts, so that unmounts from
    umount.ecryptfs behave similarly
  - use ecryptfs_remove_auth_tok_from_keyring() on the sig and sig_fnek
  * src/utils/ecryptfs-migrate-home:
  - support user databases outside of /etc/passwd, LP: #627506
- Updated to 84
  * src/desktop/ecryptfs-record-passphrase: fix typo, LP: #524139
  * debian/rules, debian/control:
  - disable the gpg key module, as it's not yet functional
  - clean up unneeded build-deps
  - also, not using opencryptoki either
  * doc/manpage/ecryptfs.7: fix minor documentation bug, reported by
    email by Jon 'maddog' Hall
  * doc/manpage/ecryptfs-recover-private.1, doc/manpage/Makefile.am,
    po/POTFILES.in, src/utils/ecryptfs-recover-private,
    src/utils/Makefile.am: add a utility to simplify data recovery
    of an encrypted private directory from a Live ISO, LP: #689969</changelog>
<changelog author="meissner@suse.de" date="1313064000">- Updated to 90
  Fixed several security issues:
  * CVE-2011-1831 - Race condition when checking mountpoint during mount.
  * CVE-2011-1832 - Race condition when checking mountpoint during unmount.
  * CVE-2011-1833 - Race condition when checking source during mount.
  * CVE-2011-1834 - Improper mtab handling allowing corruption due to resource
    limits, signals, etc.
  * CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp
    directory.
  * CVE-2011-1836 - ecryptfs-recover-private mounts directly in /tmp
  * CVE-2011-1837 - Predictable lock counter name and associated races.
  New ecryptfs-find binary to find by inode.</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Put make call in the right spot
- Use %_smp_mflags for parallel build</changelog>
<changelog author="meissner@suse.de" date="1316520000">- Updated to 92
  * Fix umask issue introduced by last security update
  * some bugfixes</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.com" date="1332936000">- updated to 96
  - bugfixes
  - testsuite added
  - ecryptfs-verify utility added
  - write-read test utility
- mark /sbin/mount.eccryptfs_private as setuidable (bnc#745584 , bnc#740110)</changelog>
<changelog author="darin@darins.net" date="1333713600">- patch so ecryptfs-setup-swap executes boot.crypto</changelog>
<changelog author="meissner@suse.com" date="1340280000">- added security improvements to mount.ecryptfs_private
  and pam_ecryptfs (bnc#740110)</changelog>
<changelog author="meissner@suse.com" date="1341403200">- hook pam_ecryptfs into pam session and auth bnc#755475</changelog>
<changelog author="meissner@suse.com" date="1341921600">- point the desktop link to the right .desktop file
- build mount.ecryptfs_private with -pie/-fpie</changelog>
<changelog author="meissner@suse.com" date="1342008000">- also supply MS_NODEV to avoid exposing device files
  if someone got them on the encrypted media.</changelog>
<changelog author="darin@darins.net" date="1375704000">- update to 103
- move -pie/-fpie into separate patch
- update ecryptfs-setup-swap-SuSE.patch for systmd and fstab
  without UUID lables
- remove ecryptfs-utils.security.patch, fixed upstream
- add PreReq: permissions
- removed unpackaged doc</changelog>
<changelog author="darin@darins.net" date="1376568000">- fix %postun to not run pam-config on update (bnc#814098, bnc#834993)</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Drop ecryptfs-correct-desktop.patch and ensure
  ecryptfs-mount-private.desktop is properly generated and
  installed in a program specific location (ecryptfs-setup-private
  will take care of creating the right symlink) and not in
  /usr/share/applications by default.
- Add ecryptfs-mount-private.png (from Fedora)
- Create tmpfiles.d to ensure ecryptfs module is autoloaded at
  start.
- Fix category on ecryptfs-setup-private.desktop.</changelog>
<changelog author="darin@darins.net" date="1409832000">- update to 104
  - lots of bugfixes, apparently from static code checking</changelog>
<changelog author="meissner@suse.com" date="1453291200">- validate-mount-destination-fs-type.patch: A local user could have
  escalated privileges by mounting over special filesystems (bsc#962052
  CVE-2016-1572)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="bbec0b8fbd45d61749bd8af1a774d56e57b5551a1b9d050450b08eb1e19e2bf9" name="ecryptfs-utils" arch="x86_64">
    <version epoch="0" ver="104" rel="3.3.1"/>

<changelog author="sbrabec@suse.cz" date="1245931200">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
<changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
<changelog author="meissner@suse.de" date="1268913600">- Updated to 83
  - lots of bugfixes
  - improvements</changelog>
<changelog author="aj@suse.de" date="1270900800">- Fix build with adding requires on mozilla-nss-devel and python-devel.
- Fix package list.</changelog>
<changelog author="meissner@suse.de" date="1303128000">- Updated to 87
  * src/utils/ecryptfs-setup-private: update the Private.* selinux
    contexts
  * src/utils/ecryptfs-setup-private:
  - add -p to mkdir, address noise for a non-error
  - must insert keys during testing phase, since we remove keys on
    unmount now, LP: #725862
  * src/utils/ecryptfs_rewrap_passphrase.c: confirm passphrases in
    interactive mode, LP: #667331
- Updated to 86
  * src/pam_ecryptfs/pam_ecryptfs.c:
  - check if this file exists and ask the user for the wrapping passphrase
    if it does
  - eliminate both ecryptfs_pam_wrapping_independent_set() and
    ecryptfs_pam_automount_set() and replace with a reusable
    file_exists_dotecryptfs() function
  * src/utils/mount.ecryptfs_private.c:
  - support multiple, user configurable private directories by way of
    a command line "alias" argument
  - this "alias" references a configuration file by the name of:
    $HOME/.ecryptfs/alias.conf, which is in an fstab(5) format,
    as well as $HOME/.ecryptfs/alias.sig, in the same format as
    Private.sig
  - if no argument specified, the utility operates in legacy mode,
    defaulting to "Private"
  - rename variables, s/dev/src/ and s/mnt/dest/
  - add a read_config() function
  - add an alias char* to replace the #defined ECRYPTFS_PRIVATE_DIR
  - this is half of the fix to LP: #615657
  * doc/manpage/mount.ecryptfs_private.1: document these changes
  * src/libecryptfs/main.c, src/utils/mount.ecryptfs_private.c:
  - allow umount.ecryptfs_private to succeed when the key is no
    longer in user keyring.
- Updated to 85
  * src/utils/ecryptfs-recover-private: clean sigs of invalid characters
  * src/utils/mount.ecryptfs_private.c:
  - fix bug LP: #313812, clear used keys on unmount
  - add ecryptfs_unlink_sigs to the mount opts, so that unmounts from
    umount.ecryptfs behave similarly
  - use ecryptfs_remove_auth_tok_from_keyring() on the sig and sig_fnek
  * src/utils/ecryptfs-migrate-home:
  - support user databases outside of /etc/passwd, LP: #627506
- Updated to 84
  * src/desktop/ecryptfs-record-passphrase: fix typo, LP: #524139
  * debian/rules, debian/control:
  - disable the gpg key module, as it's not yet functional
  - clean up unneeded build-deps
  - also, not using opencryptoki either
  * doc/manpage/ecryptfs.7: fix minor documentation bug, reported by
    email by Jon 'maddog' Hall
  * doc/manpage/ecryptfs-recover-private.1, doc/manpage/Makefile.am,
    po/POTFILES.in, src/utils/ecryptfs-recover-private,
    src/utils/Makefile.am: add a utility to simplify data recovery
    of an encrypted private directory from a Live ISO, LP: #689969</changelog>
<changelog author="meissner@suse.de" date="1313064000">- Updated to 90
  Fixed several security issues:
  * CVE-2011-1831 - Race condition when checking mountpoint during mount.
  * CVE-2011-1832 - Race condition when checking mountpoint during unmount.
  * CVE-2011-1833 - Race condition when checking source during mount.
  * CVE-2011-1834 - Improper mtab handling allowing corruption due to resource
    limits, signals, etc.
  * CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp
    directory.
  * CVE-2011-1836 - ecryptfs-recover-private mounts directly in /tmp
  * CVE-2011-1837 - Predictable lock counter name and associated races.
  New ecryptfs-find binary to find by inode.</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Put make call in the right spot
- Use %_smp_mflags for parallel build</changelog>
<changelog author="meissner@suse.de" date="1316520000">- Updated to 92
  * Fix umask issue introduced by last security update
  * some bugfixes</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.com" date="1332936000">- updated to 96
  - bugfixes
  - testsuite added
  - ecryptfs-verify utility added
  - write-read test utility
- mark /sbin/mount.eccryptfs_private as setuidable (bnc#745584 , bnc#740110)</changelog>
<changelog author="darin@darins.net" date="1333713600">- patch so ecryptfs-setup-swap executes boot.crypto</changelog>
<changelog author="meissner@suse.com" date="1340280000">- added security improvements to mount.ecryptfs_private
  and pam_ecryptfs (bnc#740110)</changelog>
<changelog author="meissner@suse.com" date="1341403200">- hook pam_ecryptfs into pam session and auth bnc#755475</changelog>
<changelog author="meissner@suse.com" date="1341921600">- point the desktop link to the right .desktop file
- build mount.ecryptfs_private with -pie/-fpie</changelog>
<changelog author="meissner@suse.com" date="1342008000">- also supply MS_NODEV to avoid exposing device files
  if someone got them on the encrypted media.</changelog>
<changelog author="darin@darins.net" date="1375704000">- update to 103
- move -pie/-fpie into separate patch
- update ecryptfs-setup-swap-SuSE.patch for systmd and fstab
  without UUID lables
- remove ecryptfs-utils.security.patch, fixed upstream
- add PreReq: permissions
- removed unpackaged doc</changelog>
<changelog author="darin@darins.net" date="1376568000">- fix %postun to not run pam-config on update (bnc#814098, bnc#834993)</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Drop ecryptfs-correct-desktop.patch and ensure
  ecryptfs-mount-private.desktop is properly generated and
  installed in a program specific location (ecryptfs-setup-private
  will take care of creating the right symlink) and not in
  /usr/share/applications by default.
- Add ecryptfs-mount-private.png (from Fedora)
- Create tmpfiles.d to ensure ecryptfs module is autoloaded at
  start.
- Fix category on ecryptfs-setup-private.desktop.</changelog>
<changelog author="darin@darins.net" date="1409832000">- update to 104
  - lots of bugfixes, apparently from static code checking</changelog>
<changelog author="meissner@suse.com" date="1453291200">- validate-mount-destination-fs-type.patch: A local user could have
  escalated privileges by mounting over special filesystems (bsc#962052
  CVE-2016-1572)</changelog>

</package>
<package pkgid="7886d7c89883860fb0cea33ae44699aeeb0cf055bccbf414ce1f2b7842b3092c" name="ecryptfs-utils" arch="x86_64">
    <version epoch="0" ver="104" rel="3.6.3"/>

<changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
<changelog author="meissner@suse.de" date="1268913600">- Updated to 83
  - lots of bugfixes
  - improvements</changelog>
<changelog author="aj@suse.de" date="1270900800">- Fix build with adding requires on mozilla-nss-devel and python-devel.
- Fix package list.</changelog>
<changelog author="meissner@suse.de" date="1303128000">- Updated to 87
  * src/utils/ecryptfs-setup-private: update the Private.* selinux
    contexts
  * src/utils/ecryptfs-setup-private:
  - add -p to mkdir, address noise for a non-error
  - must insert keys during testing phase, since we remove keys on
    unmount now, LP: #725862
  * src/utils/ecryptfs_rewrap_passphrase.c: confirm passphrases in
    interactive mode, LP: #667331
- Updated to 86
  * src/pam_ecryptfs/pam_ecryptfs.c:
  - check if this file exists and ask the user for the wrapping passphrase
    if it does
  - eliminate both ecryptfs_pam_wrapping_independent_set() and
    ecryptfs_pam_automount_set() and replace with a reusable
    file_exists_dotecryptfs() function
  * src/utils/mount.ecryptfs_private.c:
  - support multiple, user configurable private directories by way of
    a command line "alias" argument
  - this "alias" references a configuration file by the name of:
    $HOME/.ecryptfs/alias.conf, which is in an fstab(5) format,
    as well as $HOME/.ecryptfs/alias.sig, in the same format as
    Private.sig
  - if no argument specified, the utility operates in legacy mode,
    defaulting to "Private"
  - rename variables, s/dev/src/ and s/mnt/dest/
  - add a read_config() function
  - add an alias char* to replace the #defined ECRYPTFS_PRIVATE_DIR
  - this is half of the fix to LP: #615657
  * doc/manpage/mount.ecryptfs_private.1: document these changes
  * src/libecryptfs/main.c, src/utils/mount.ecryptfs_private.c:
  - allow umount.ecryptfs_private to succeed when the key is no
    longer in user keyring.
- Updated to 85
  * src/utils/ecryptfs-recover-private: clean sigs of invalid characters
  * src/utils/mount.ecryptfs_private.c:
  - fix bug LP: #313812, clear used keys on unmount
  - add ecryptfs_unlink_sigs to the mount opts, so that unmounts from
    umount.ecryptfs behave similarly
  - use ecryptfs_remove_auth_tok_from_keyring() on the sig and sig_fnek
  * src/utils/ecryptfs-migrate-home:
  - support user databases outside of /etc/passwd, LP: #627506
- Updated to 84
  * src/desktop/ecryptfs-record-passphrase: fix typo, LP: #524139
  * debian/rules, debian/control:
  - disable the gpg key module, as it's not yet functional
  - clean up unneeded build-deps
  - also, not using opencryptoki either
  * doc/manpage/ecryptfs.7: fix minor documentation bug, reported by
    email by Jon 'maddog' Hall
  * doc/manpage/ecryptfs-recover-private.1, doc/manpage/Makefile.am,
    po/POTFILES.in, src/utils/ecryptfs-recover-private,
    src/utils/Makefile.am: add a utility to simplify data recovery
    of an encrypted private directory from a Live ISO, LP: #689969</changelog>
<changelog author="meissner@suse.de" date="1313064000">- Updated to 90
  Fixed several security issues:
  * CVE-2011-1831 - Race condition when checking mountpoint during mount.
  * CVE-2011-1832 - Race condition when checking mountpoint during unmount.
  * CVE-2011-1833 - Race condition when checking source during mount.
  * CVE-2011-1834 - Improper mtab handling allowing corruption due to resource
    limits, signals, etc.
  * CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp
    directory.
  * CVE-2011-1836 - ecryptfs-recover-private mounts directly in /tmp
  * CVE-2011-1837 - Predictable lock counter name and associated races.
  New ecryptfs-find binary to find by inode.</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Put make call in the right spot
- Use %_smp_mflags for parallel build</changelog>
<changelog author="meissner@suse.de" date="1316520000">- Updated to 92
  * Fix umask issue introduced by last security update
  * some bugfixes</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.com" date="1332936000">- updated to 96
  - bugfixes
  - testsuite added
  - ecryptfs-verify utility added
  - write-read test utility
- mark /sbin/mount.eccryptfs_private as setuidable (bnc#745584 , bnc#740110)</changelog>
<changelog author="darin@darins.net" date="1333713600">- patch so ecryptfs-setup-swap executes boot.crypto</changelog>
<changelog author="meissner@suse.com" date="1340280000">- added security improvements to mount.ecryptfs_private
  and pam_ecryptfs (bnc#740110)</changelog>
<changelog author="meissner@suse.com" date="1341403200">- hook pam_ecryptfs into pam session and auth bnc#755475</changelog>
<changelog author="meissner@suse.com" date="1341921600">- point the desktop link to the right .desktop file
- build mount.ecryptfs_private with -pie/-fpie</changelog>
<changelog author="meissner@suse.com" date="1342008000">- also supply MS_NODEV to avoid exposing device files
  if someone got them on the encrypted media.</changelog>
<changelog author="darin@darins.net" date="1375704000">- update to 103
- move -pie/-fpie into separate patch
- update ecryptfs-setup-swap-SuSE.patch for systmd and fstab
  without UUID lables
- remove ecryptfs-utils.security.patch, fixed upstream
- add PreReq: permissions
- removed unpackaged doc</changelog>
<changelog author="darin@darins.net" date="1376568000">- fix %postun to not run pam-config on update (bnc#814098, bnc#834993)</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Drop ecryptfs-correct-desktop.patch and ensure
  ecryptfs-mount-private.desktop is properly generated and
  installed in a program specific location (ecryptfs-setup-private
  will take care of creating the right symlink) and not in
  /usr/share/applications by default.
- Add ecryptfs-mount-private.png (from Fedora)
- Create tmpfiles.d to ensure ecryptfs module is autoloaded at
  start.
- Fix category on ecryptfs-setup-private.desktop.</changelog>
<changelog author="darin@darins.net" date="1409832000">- update to 104
  - lots of bugfixes, apparently from static code checking</changelog>
<changelog author="meissner@suse.com" date="1453291200">- validate-mount-destination-fs-type.patch: A local user could have
  escalated privileges by mounting over special filesystems (bsc#962052
  CVE-2016-1572)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="7a6f7e7762f3ca5f07312895c9fa2c3b86c03755b3b5ffde787d003855862450" name="ecryptfs-utils-32bit" arch="x86_64">
    <version epoch="0" ver="104" rel="3.3.1"/>

<changelog author="sbrabec@suse.cz" date="1245931200">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
<changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
<changelog author="meissner@suse.de" date="1268913600">- Updated to 83
  - lots of bugfixes
  - improvements</changelog>
<changelog author="aj@suse.de" date="1270900800">- Fix build with adding requires on mozilla-nss-devel and python-devel.
- Fix package list.</changelog>
<changelog author="meissner@suse.de" date="1303128000">- Updated to 87
  * src/utils/ecryptfs-setup-private: update the Private.* selinux
    contexts
  * src/utils/ecryptfs-setup-private:
  - add -p to mkdir, address noise for a non-error
  - must insert keys during testing phase, since we remove keys on
    unmount now, LP: #725862
  * src/utils/ecryptfs_rewrap_passphrase.c: confirm passphrases in
    interactive mode, LP: #667331
- Updated to 86
  * src/pam_ecryptfs/pam_ecryptfs.c:
  - check if this file exists and ask the user for the wrapping passphrase
    if it does
  - eliminate both ecryptfs_pam_wrapping_independent_set() and
    ecryptfs_pam_automount_set() and replace with a reusable
    file_exists_dotecryptfs() function
  * src/utils/mount.ecryptfs_private.c:
  - support multiple, user configurable private directories by way of
    a command line "alias" argument
  - this "alias" references a configuration file by the name of:
    $HOME/.ecryptfs/alias.conf, which is in an fstab(5) format,
    as well as $HOME/.ecryptfs/alias.sig, in the same format as
    Private.sig
  - if no argument specified, the utility operates in legacy mode,
    defaulting to "Private"
  - rename variables, s/dev/src/ and s/mnt/dest/
  - add a read_config() function
  - add an alias char* to replace the #defined ECRYPTFS_PRIVATE_DIR
  - this is half of the fix to LP: #615657
  * doc/manpage/mount.ecryptfs_private.1: document these changes
  * src/libecryptfs/main.c, src/utils/mount.ecryptfs_private.c:
  - allow umount.ecryptfs_private to succeed when the key is no
    longer in user keyring.
- Updated to 85
  * src/utils/ecryptfs-recover-private: clean sigs of invalid characters
  * src/utils/mount.ecryptfs_private.c:
  - fix bug LP: #313812, clear used keys on unmount
  - add ecryptfs_unlink_sigs to the mount opts, so that unmounts from
    umount.ecryptfs behave similarly
  - use ecryptfs_remove_auth_tok_from_keyring() on the sig and sig_fnek
  * src/utils/ecryptfs-migrate-home:
  - support user databases outside of /etc/passwd, LP: #627506
- Updated to 84
  * src/desktop/ecryptfs-record-passphrase: fix typo, LP: #524139
  * debian/rules, debian/control:
  - disable the gpg key module, as it's not yet functional
  - clean up unneeded build-deps
  - also, not using opencryptoki either
  * doc/manpage/ecryptfs.7: fix minor documentation bug, reported by
    email by Jon 'maddog' Hall
  * doc/manpage/ecryptfs-recover-private.1, doc/manpage/Makefile.am,
    po/POTFILES.in, src/utils/ecryptfs-recover-private,
    src/utils/Makefile.am: add a utility to simplify data recovery
    of an encrypted private directory from a Live ISO, LP: #689969</changelog>
<changelog author="meissner@suse.de" date="1313064000">- Updated to 90
  Fixed several security issues:
  * CVE-2011-1831 - Race condition when checking mountpoint during mount.
  * CVE-2011-1832 - Race condition when checking mountpoint during unmount.
  * CVE-2011-1833 - Race condition when checking source during mount.
  * CVE-2011-1834 - Improper mtab handling allowing corruption due to resource
    limits, signals, etc.
  * CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp
    directory.
  * CVE-2011-1836 - ecryptfs-recover-private mounts directly in /tmp
  * CVE-2011-1837 - Predictable lock counter name and associated races.
  New ecryptfs-find binary to find by inode.</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Put make call in the right spot
- Use %_smp_mflags for parallel build</changelog>
<changelog author="meissner@suse.de" date="1316520000">- Updated to 92
  * Fix umask issue introduced by last security update
  * some bugfixes</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.com" date="1332936000">- updated to 96
  - bugfixes
  - testsuite added
  - ecryptfs-verify utility added
  - write-read test utility
- mark /sbin/mount.eccryptfs_private as setuidable (bnc#745584 , bnc#740110)</changelog>
<changelog author="darin@darins.net" date="1333713600">- patch so ecryptfs-setup-swap executes boot.crypto</changelog>
<changelog author="meissner@suse.com" date="1340280000">- added security improvements to mount.ecryptfs_private
  and pam_ecryptfs (bnc#740110)</changelog>
<changelog author="meissner@suse.com" date="1341403200">- hook pam_ecryptfs into pam session and auth bnc#755475</changelog>
<changelog author="meissner@suse.com" date="1341921600">- point the desktop link to the right .desktop file
- build mount.ecryptfs_private with -pie/-fpie</changelog>
<changelog author="meissner@suse.com" date="1342008000">- also supply MS_NODEV to avoid exposing device files
  if someone got them on the encrypted media.</changelog>
<changelog author="darin@darins.net" date="1375704000">- update to 103
- move -pie/-fpie into separate patch
- update ecryptfs-setup-swap-SuSE.patch for systmd and fstab
  without UUID lables
- remove ecryptfs-utils.security.patch, fixed upstream
- add PreReq: permissions
- removed unpackaged doc</changelog>
<changelog author="darin@darins.net" date="1376568000">- fix %postun to not run pam-config on update (bnc#814098, bnc#834993)</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Drop ecryptfs-correct-desktop.patch and ensure
  ecryptfs-mount-private.desktop is properly generated and
  installed in a program specific location (ecryptfs-setup-private
  will take care of creating the right symlink) and not in
  /usr/share/applications by default.
- Add ecryptfs-mount-private.png (from Fedora)
- Create tmpfiles.d to ensure ecryptfs module is autoloaded at
  start.
- Fix category on ecryptfs-setup-private.desktop.</changelog>
<changelog author="darin@darins.net" date="1409832000">- update to 104
  - lots of bugfixes, apparently from static code checking</changelog>
<changelog author="meissner@suse.com" date="1453291200">- validate-mount-destination-fs-type.patch: A local user could have
  escalated privileges by mounting over special filesystems (bsc#962052
  CVE-2016-1572)</changelog>

</package>
<package pkgid="4eb8c951a73e457fcb7ce351fb3758782271debe00494c0d597132b21bc59e54" name="ecryptfs-utils-32bit" arch="x86_64">
    <version epoch="0" ver="104" rel="3.6.3"/>

<changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
<changelog author="meissner@suse.de" date="1268913600">- Updated to 83
  - lots of bugfixes
  - improvements</changelog>
<changelog author="aj@suse.de" date="1270900800">- Fix build with adding requires on mozilla-nss-devel and python-devel.
- Fix package list.</changelog>
<changelog author="meissner@suse.de" date="1303128000">- Updated to 87
  * src/utils/ecryptfs-setup-private: update the Private.* selinux
    contexts
  * src/utils/ecryptfs-setup-private:
  - add -p to mkdir, address noise for a non-error
  - must insert keys during testing phase, since we remove keys on
    unmount now, LP: #725862
  * src/utils/ecryptfs_rewrap_passphrase.c: confirm passphrases in
    interactive mode, LP: #667331
- Updated to 86
  * src/pam_ecryptfs/pam_ecryptfs.c:
  - check if this file exists and ask the user for the wrapping passphrase
    if it does
  - eliminate both ecryptfs_pam_wrapping_independent_set() and
    ecryptfs_pam_automount_set() and replace with a reusable
    file_exists_dotecryptfs() function
  * src/utils/mount.ecryptfs_private.c:
  - support multiple, user configurable private directories by way of
    a command line "alias" argument
  - this "alias" references a configuration file by the name of:
    $HOME/.ecryptfs/alias.conf, which is in an fstab(5) format,
    as well as $HOME/.ecryptfs/alias.sig, in the same format as
    Private.sig
  - if no argument specified, the utility operates in legacy mode,
    defaulting to "Private"
  - rename variables, s/dev/src/ and s/mnt/dest/
  - add a read_config() function
  - add an alias char* to replace the #defined ECRYPTFS_PRIVATE_DIR
  - this is half of the fix to LP: #615657
  * doc/manpage/mount.ecryptfs_private.1: document these changes
  * src/libecryptfs/main.c, src/utils/mount.ecryptfs_private.c:
  - allow umount.ecryptfs_private to succeed when the key is no
    longer in user keyring.
- Updated to 85
  * src/utils/ecryptfs-recover-private: clean sigs of invalid characters
  * src/utils/mount.ecryptfs_private.c:
  - fix bug LP: #313812, clear used keys on unmount
  - add ecryptfs_unlink_sigs to the mount opts, so that unmounts from
    umount.ecryptfs behave similarly
  - use ecryptfs_remove_auth_tok_from_keyring() on the sig and sig_fnek
  * src/utils/ecryptfs-migrate-home:
  - support user databases outside of /etc/passwd, LP: #627506
- Updated to 84
  * src/desktop/ecryptfs-record-passphrase: fix typo, LP: #524139
  * debian/rules, debian/control:
  - disable the gpg key module, as it's not yet functional
  - clean up unneeded build-deps
  - also, not using opencryptoki either
  * doc/manpage/ecryptfs.7: fix minor documentation bug, reported by
    email by Jon 'maddog' Hall
  * doc/manpage/ecryptfs-recover-private.1, doc/manpage/Makefile.am,
    po/POTFILES.in, src/utils/ecryptfs-recover-private,
    src/utils/Makefile.am: add a utility to simplify data recovery
    of an encrypted private directory from a Live ISO, LP: #689969</changelog>
<changelog author="meissner@suse.de" date="1313064000">- Updated to 90
  Fixed several security issues:
  * CVE-2011-1831 - Race condition when checking mountpoint during mount.
  * CVE-2011-1832 - Race condition when checking mountpoint during unmount.
  * CVE-2011-1833 - Race condition when checking source during mount.
  * CVE-2011-1834 - Improper mtab handling allowing corruption due to resource
    limits, signals, etc.
  * CVE-2011-1835 - Key poisoning in ecryptfs-setup-private due to insecure temp
    directory.
  * CVE-2011-1836 - ecryptfs-recover-private mounts directly in /tmp
  * CVE-2011-1837 - Predictable lock counter name and associated races.
  New ecryptfs-find binary to find by inode.</changelog>
<changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Put make call in the right spot
- Use %_smp_mflags for parallel build</changelog>
<changelog author="meissner@suse.de" date="1316520000">- Updated to 92
  * Fix umask issue introduced by last security update
  * some bugfixes</changelog>
<changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
<changelog author="meissner@suse.com" date="1332936000">- updated to 96
  - bugfixes
  - testsuite added
  - ecryptfs-verify utility added
  - write-read test utility
- mark /sbin/mount.eccryptfs_private as setuidable (bnc#745584 , bnc#740110)</changelog>
<changelog author="darin@darins.net" date="1333713600">- patch so ecryptfs-setup-swap executes boot.crypto</changelog>
<changelog author="meissner@suse.com" date="1340280000">- added security improvements to mount.ecryptfs_private
  and pam_ecryptfs (bnc#740110)</changelog>
<changelog author="meissner@suse.com" date="1341403200">- hook pam_ecryptfs into pam session and auth bnc#755475</changelog>
<changelog author="meissner@suse.com" date="1341921600">- point the desktop link to the right .desktop file
- build mount.ecryptfs_private with -pie/-fpie</changelog>
<changelog author="meissner@suse.com" date="1342008000">- also supply MS_NODEV to avoid exposing device files
  if someone got them on the encrypted media.</changelog>
<changelog author="darin@darins.net" date="1375704000">- update to 103
- move -pie/-fpie into separate patch
- update ecryptfs-setup-swap-SuSE.patch for systmd and fstab
  without UUID lables
- remove ecryptfs-utils.security.patch, fixed upstream
- add PreReq: permissions
- removed unpackaged doc</changelog>
<changelog author="darin@darins.net" date="1376568000">- fix %postun to not run pam-config on update (bnc#814098, bnc#834993)</changelog>
<changelog author="fcrozat@suse.com" date="1407499200">- Drop ecryptfs-correct-desktop.patch and ensure
  ecryptfs-mount-private.desktop is properly generated and
  installed in a program specific location (ecryptfs-setup-private
  will take care of creating the right symlink) and not in
  /usr/share/applications by default.
- Add ecryptfs-mount-private.png (from Fedora)
- Create tmpfiles.d to ensure ecryptfs module is autoloaded at
  start.
- Fix category on ecryptfs-setup-private.desktop.</changelog>
<changelog author="darin@darins.net" date="1409832000">- update to 104
  - lots of bugfixes, apparently from static code checking</changelog>
<changelog author="meissner@suse.com" date="1453291200">- validate-mount-destination-fs-type.patch: A local user could have
  escalated privileges by mounting over special filesystems (bsc#962052
  CVE-2016-1572)</changelog>
<changelog author="astieger@suse.com" date="1455969600">- re-release binaries to resolve incident number sequencing issue
  affecing subsequent tree builds (boo#967403)</changelog>

</package>
<package pkgid="d0e25d4892ab815ec355692d870cb655d43c7a26be5e3f96bb2efaeb52c6b2a9" name="eet" arch="i586">
    <version epoch="0" ver="1.7.8" rel="2.4.1"/>

<changelog author="sleep_walker@suse.cz" date="1347019200">- revert spec file change makeinstall --&gt; make_install</changelog>
<changelog author="sleep_walker@suse.cz" date="1347192000">- remove forgoten directory in setup macro</changelog>
<changelog author="simon@simotek.net" date="1350734400">- bump to 1.7.1</changelog>
<changelog author="sleep_walker@suse.cz" date="1352808000">- get rid of autoupdate entries in changes files
- correct license</changelog>
<changelog author="cfarrell@suse.com" date="1352808001">- license update: BSD-2-Clause
  SPDX format</changelog>
<changelog author="sleep_walker@suse.cz" date="1352980800">- remove autoreconf as it is not needed for release</changelog>
<changelog author="sleep_walker@suse.cz" date="1353585600">- improve description (from eet.spec.in)</changelog>
<changelog author="simon@simotek.net" date="1353672000">- bump to 1.7.2
- 1.7.2 is required to build and use the latest e17 alpha's</changelog>
<changelog author="sleep_walker@suse.cz" date="1353758400">- require the same version or higher for EFL libraries</changelog>
<changelog author="simon@simotek.net" date="1354968000">- Bump to 1.7.3
- 1.7.3 is a bugfix release to coincide with the beta release of efl</changelog>
<changelog author="sleep_walker@suse.cz" date="1355918400">- build and package documentation, separate examples</changelog>
<changelog author="sleep_walker@suse.cz" date="1355918401">- fix directory for HTML</changelog>
<changelog author="sleep_walker@suse.cz" date="1356091200">- update to 1.7.4
  Changes since Eet 1.7.3:
  * Fix memory leak when using OpenSSL for ciphering long data.
  * Fix possible buffer overflow in functions relying on
    EET_T_LAST</changelog>
<changelog author="sleep_walker@suse.cz" date="1356609600">- unify examples subpackage name</changelog>
<changelog author="sleep_walker@suse.cz" date="1356955200">- try to require libeina1 explicitly</changelog>
<changelog author="sleep_walker@suse.cz" date="1357300800">- update to 1.7.5
  no visible changes, just keeping version in sync</changelog>
<changelog author="simon@simotek.net" date="1365163200">- update to 1.7.6
  changelog:
  Aharon Hillel (1):
    eet: Backport 83010
  Carsten Haitzler (1):
    gnutls cflags fix (just to be nice the dirfd macro fixed too - but it
  Cedric BAIL (1):
    eet: backport r82743.
  Rafael Antognolli (3):
    Fix ChangeLog for 1.7.6 release.
    Bump stable efl to 1.7.6.
    Update changelog for 1.7.6 release.
  Tom Hacohen (1):
    Fix revision fetching when not using git.</changelog>
<changelog author="sleep_walker@suse.cz" date="1368619200">- bump to 1.7.7
  No changes, increasing version to keep in sync with latest release.</changelog>
<changelog author="simon@simotek.net" date="1375531200">- Bump to 1.7.8
  No changes, increasing version to keep in sync with latest release.</changelog>
<changelog author="sleep_walker@suse.cz" date="1404907200">- lz4.patch
  security fix for CVE-2014-4611</changelog>

</package>
<package pkgid="3453038226a960ef1ec2dce1d0a50290a02ed40e74780d7762673b1d5469064f" name="eet" arch="src">
    <version epoch="0" ver="1.7.8" rel="2.4.1"/>

<changelog author="sleep_walker@suse.cz" date="1347019200">- revert spec file change makeinstall --&gt; make_install</changelog>
<changelog author="sleep_walker@suse.cz" date="1347192000">- remove forgoten directory in setup macro</changelog>
<changelog author="simon@simotek.net" date="1350734400">- bump to 1.7.1</changelog>
<changelog author="sleep_walker@suse.cz" date="1352808000">- get rid of autoupdate entries in changes files
- correct license</changelog>
<changelog author="cfarrell@suse.com" date="1352808001">- license update: BSD-2-Clause
  SPDX format</changelog>
<changelog author="sleep_walker@suse.cz" date="1352980800">- remove autoreconf as it is not needed for release</changelog>
<changelog author="sleep_walker@suse.cz" date="1353585600">- improve description (from eet.spec.in)</changelog>
<changelog author="simon@simotek.net" date="1353672000">- bump to 1.7.2
- 1.7.2 is required to build and use the latest e17 alpha's</changelog>
<changelog author="sleep_walker@suse.cz" date="1353758400">- require the same version or higher for EFL libraries</changelog>
<changelog author="simon@simotek.net" date="1354968000">- Bump to 1.7.3
- 1.7.3 is a bugfix release to coincide with the beta release of efl</changelog>
<changelog author="sleep_walker@suse.cz" date="1355918400">- build and package documentation, separate examples</changelog>
<changelog author="sleep_walker@suse.cz" date="1355918401">- fix directory for HTML</changelog>
<changelog author="sleep_walker@suse.cz" date="1356091200">- update to 1.7.4
  Changes since Eet 1.7.3:
  * Fix memory leak when using OpenSSL for ciphering long data.
  * Fix possible buffer overflow in functions relying on
    EET_T_LAST</changelog>
<changelog author="sleep_walker@suse.cz" date="1356609600">- unify examples subpackage name</changelog>
<changelog author="sleep_walker@suse.cz" date="1356955200">- try to require libeina1 explicitly</changelog>
<changelog author="sleep_walker@suse.cz" date="1357300800">- update to 1.7.5
  no visible changes, just keeping version in sync</changelog>
<changelog author="simon@simotek.net" date="1365163200">- update to 1.7.6
  changelog:
  Aharon Hillel (1):
    eet: Backport 83010
  Carsten Haitzler (1):
    gnutls cflags fix (just to be nice the dirfd macro fixed too - but it
  Cedric BAIL (1):
    eet: backport r82743.
  Rafael Antognolli (3):
    Fix ChangeLog for 1.7.6 release.
    Bump stable efl to 1.7.6.
    Update changelog for 1.7.6 release.
  Tom Hacohen (1):
    Fix revision fetching when not using git.</changelog>
<changelog author="sleep_walker@suse.cz" date="1368619200">- bump to 1.7.7
  No changes, increasing version to keep in sync with latest release.</changelog>
<changelog author="simon@simotek.net" date="1375531200">- Bump to 1.7.8
  No changes, increasing version to keep in sync with latest release.</changelog>
<changelog author="sleep_walker@suse.cz" date="1404907200">- lz4.patch
  security fix for CVE-2014-4611</changelog>

</package>
<package pkgid="9b821bd5c278dafaeaf5b5cbd85b77c7b47efa405987a08d42c9b8ef1ee6d2a5" name="eet" arch="x86_64">
    <version epoch="0" ver="1.7.8" rel="2.4.1"/>

<changelog author="sleep_walker@suse.cz" date="1347019200">- revert spec file change makeinstall --&gt; make_install</changelog>
<changelog author="sleep_walker@suse.cz" date="1347192000">- remove forgoten directory in setup macro</changelog>
<changelog author="simon@simotek.net" date="1350734400">- bump to 1.7.1</changelog>
<changelog author="sleep_walker@suse.cz" date="1352808000">- get rid of autoupdate entries in changes files
- correct license</changelog>
<changelog author="cfarrell@suse.com" date="1352808001">- license update: BSD-2-Clause
  SPDX format</changelog>
<changelog author="sleep_walker@suse.cz" date="1352980800">- remove autoreconf as it is not needed for release</changelog>
<changelog author="sleep_walker@suse.cz" date="1353585600">- improve description (from eet.spec.in)</changelog>
<changelog author="simon@simotek.net" date="1353672000">- bump to 1.7.2
- 1.7.2 is required to build and use the latest e17 alpha's</changelog>
<changelog author="sleep_walker@suse.cz" date="1353758400">- require the same version or higher for EFL libraries</changelog>
<changelog author="simon@simotek.net" date="1354968000">- Bump to 1.7.3
- 1.7.3 is a bugfix release to coincide with the beta release of efl</changelog>
<changelog author="sleep_walker@suse.cz" date="1355918400">- build and package documentation, separate examples</changelog>
<changelog author="sleep_walker@suse.cz" date="1355918401">- fix directory for HTML</changelog>
<changelog author="sleep_walker@suse.cz" date="1356091200">- update to 1.7.4
  Changes since Eet 1.7.3:
  * Fix memory leak when using OpenSSL for ciphering long data.
  * Fix possible buffer overflow in functions relying on
    EET_T_LAST</changelog>
<changelog author="sleep_walker@suse.cz" date="1356609600">- unify examples subpackage name</changelog>
<changelog author="sleep_walker@suse.cz" date="1356955200">- try to require libeina1 explicitly</changelog>
<changelog author="sleep_walker@suse.cz" date="1357300800">- update to 1.7.5
  no visible changes, just keeping version in sync</changelog>
<changelog author="simon@simotek.net" date="1365163200">- update to 1.7.6
  changelog:
  Aharon Hillel (1):
    eet: Backport 83010
  Carsten Haitzler (1):
    gnutls cflags fix (just to be nice the dirfd macro fixed too - but it
  Cedric BAIL (1):
    eet: backport r82743.
  Rafael Antognolli (3):
    Fix ChangeLog for 1.7.6 release.
    Bump stable efl to 1.7.6.
    Update changelog for 1.7.6 release.
  Tom Hacohen (1):
    Fix revision fetching when not using git.</changelog>
<changelog author="sleep_walker@suse.cz" date="1368619200">- bump to 1.7.7
  No changes, increasing version to keep in sync with latest release.</changelog>
<changelog author="simon@simotek.net" date="1375531200">- Bump to 1.7.8
  No changes, increasing version to keep in sync with latest release.</changelog>
<changelog author="sleep_walker@suse.cz" date="1404907200">- lz4.patch
  security fix for CVE-2014-4611</changelog>

</package>
<package pkgid="75d1cf34ef1e46495c3fc2e5334971ed6b5a68d3883dad07888641f9f9728df0" name="eet-devel" arch="i586">
    <version epoch="0" ver="1.7.8" rel="2.4.1"/>

<changelog author="sleep_walker@suse.cz" date="1347019200">- revert spec file change makeinstall --&gt; make_install</changelog>
<changelog author="sleep_walker@suse.cz" date="1347192000">- remove forgoten directory in setup macro</changelog>
<changelog author="simon@simotek.net" date="1350734400">- bump to 1.7.1</changelog>
<changelog author="sleep_walker@suse.cz" date="1352808000">- get rid of autoupdate entries in changes files
- correct license</changelog>
<changelog author="cfarrell@suse.com" date="1352808001">- license update: BSD-2-Clause
  SPDX format</changelog>
<changelog author="sleep_walker@suse.cz" date="1352980800">- remove autoreconf as it is not needed for release</changelog>
<changelog author="sleep_walker@suse.cz" date="1353585600">- improve description (from eet.spec.in)</changelog>
<changelog author="simon@simotek.net" date="1353672000">- bump to 1.7.2
- 1.7.2 is required to build and use the latest e17 alpha's</changelog>
<changelog author="sleep_walker@suse.cz" date="1353758400">- require the same version or higher for EFL libraries</changelog>
<changelog author="simon@simotek.net" date="1354968000">- Bump to 1.7.3
- 1.7.3 is a bugfix release to coincide with the beta release of efl</changelog>
<changelog author="sleep_walker@suse.cz" date="1355918400">- build and package documentation, separate examples</changelog>
<changelog author="sleep_walker@suse.cz" date="1355918401">- fix directory for HTML</changelog>
<changelog author="sleep_walker@suse.cz" date="1356091200">- update to 1.7.4
  Changes since Eet 1.7.3:
  * Fix memory leak when using OpenSSL for ciphering long data.
  * Fix possible buffer overflow in functions relying on
    EET_T_LAST</changelog>
<changelog author="sleep_walker@suse.cz" date="1356609600">- unify examples subpackage name</changelog>
<changelog author="sleep_walker@suse.cz" date="1356955200">- try to require libeina1 explicitly</changelog>
<changelog author="sleep_walker@suse.cz" date="1357300800">- update to 1.7.5
  no visible changes, just keeping version in sync</changelog>
<changelog author="simon@simotek.net" date="1365163200">- update to 1.7.6
  changelog:
  Aharon Hillel (1):
    eet: Backport 83010
  Carsten Haitzler (1):
    gnutls cflags fix (just to be nice the dirfd macro fixed too - but it
  Cedric BAIL (1):
    eet: backport r82743.
  Rafael Antognolli (3):
    Fix ChangeLog for 1.7.6 release.
    Bump stable efl to 1.7.6.
    Update changelog for 1.7.6 release.
  Tom Hacohen (1):
    Fix revision fetching when not using git.</changelog>
<changelog author="sleep_walker@suse.cz" date="1368619200">- bump to 1.7.7
  No changes, increasing version to keep in sync with latest release.</changelog>
<changelog author="simon@simotek.net" date="1375531200">- Bump to 1.7.8
  No changes, increasing version to keep in sync with latest release.</changelog>
<changelog author="sleep_walker@suse.cz" date="1404907200">- lz4.patch
  security fix for CVE-2014-4611</changelog>

</package>
<package pkgid="dd15482f5f5608f17febb9ac2b3c1abe9b5fe41151935f08b5a1f7d00eed11b8" name="eet-devel" arch="x86_64">
    <version epoch="0" ver="1.7.8" rel="2.4.1"/>

<changelog author="sleep_walker@suse.cz" date="1347019200">- revert spec file change makeinstall --&gt; make_install</changelog>
<changelog author="sleep_walker@suse.cz" date="1347192000">- remove forgoten directory in setup macro</changelog>
<changelog author="simon@simotek.net" date="1350734400">- bump to 1.7.1</changelog>
<changelog author="sleep_walker@suse.cz" date="1352808000">- get rid of autoupdate entries in changes files
- correct license</changelog>
<changelog author="cfarrell@suse.com" date="1352808001">- license update: BSD-2-Clause